General

In the following privacy policy, we inform you transparently in accordance with Art. 13 GDPR about the nature, scope, and purpose of the personal data collected and processed from you on this website.

Responsibility for Data Processing

MESA Medizintechnik GmbH Thomas Bitsch Schärflmühlweg 4 83671 Benediktbeuern
(hereinafter: “We”) as the operator of the website are the controller pursuant to Art. 4 Para. 7 EU General Data Protection Regulation (GDPR). If you have any questions, you can contact bitsch@mesamed.de.

Data Protection Officer

Thomas Bitsch has been appointed as Data Protection Officer. If you have any questions, you can contact bitsch@mesamed.de.

Hosting

We host the content of our website with the following provider: Wepro Internetmarketing Axel Pollmann The provider is Wepro Internetmarketing Axel Pollmann – Bonifatiusstr. 15 83671 Benediktbeuern. Further details can be found in the privacy policy of the host at: https://wepro.net.

The use of a host is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible. If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this service processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Your Rights as a Data Subject

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

As a data subject, you have the following rights vis-à-vis us regarding your personal data.

• A right of access to the categories of data processed, the processing purposes, the storage duration, as well as any recipients. (Art. 15 GDPR)
• A right to rectification or erasure of inaccurate or incomplete data. (Art. 16/17 GDPR)
• A right to restriction of processing, insofar as erasure is not possible or is disputed. (Art. 18 GDPR)
• A right to object to processing, insofar as the data processing was based on a legitimate interest. (Art. 21 Para. 1 GDPR)
• A right to revoke consent given at any time with effect for the future. (Art. 7 Para. 3 GDPR)
• A right to data portability in a common format. (Art. 20 GDPR)
• You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). A list of data protection authorities with information and contact details can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

Data Protection Measures

We secure our website and other systems – and thus also your data – through technical and organizational measures against loss, destruction, access, alteration, or dissemination by unauthorized persons. In particular, your personal data is transmitted in encrypted form across the Internet. For this purpose, we use the TLS (Transport Layer Security) encryption system. However, the transmission of information via the Internet is never completely secure, which is why we cannot guarantee the security of data transmitted by our website 100%.

Types, Purpose and Storage Duration of Data, Legal Bases

Server Log Files

Each time our website is accessed, the following general information is automatically transmitted from your browser to our server (so-called server log files): IP address, product and version information about the browser used and the operating system, the website from which your access took place (so-called referrer), date and time of the request and, where applicable, your internet service provider. In addition, the status and the amount of data transferred as part of this request are recorded.
Die IP-Adresse Ihres Computers wird dabei nur für die Zeit Ihrer Nutzung der Website gespeichert und im Anschluss daran unverzüglich gelöscht oder durch Kürzung teilweise unkenntlich gemacht. Die übrigen Daten werden für eine begrenzte Zeitdauer (maximal 7 Tage) gespeichert. Die Rechtsgrundlage für die Nutzung der Server-Log-Dateien ist Art. 6 Abs. 1 S. 1 Buchstabe f) DSGVO (Berechtigtes Interesse an der Datenverarbei-tung). Das berechtigte Interesse ergibt sich aus der Notwendigkeit für den Betrieb unserer Website, insbesondere um Fehler der Website festzustellen und zu beseitigen, um die Auslastung der Website festzustellen und um Anpassungen oder Verbesserungen vorzunehmen und die Sicherheit des Systems zu gewährleisten.

Contact Form

Our website offers the option to contact us directly. By submitting the form, you agree to the processing and storage of the data you entered (in particular your email address). We process the data you transmit to us solely until the respective purpose of your inquiry is achieved, but for a maximum of up to 7 days after the purpose has been fulfilled. You may object to this processing at any time with effect for the future. For this purpose, please use our contact details: info@mesamed.de. The legal basis for using the data transmitted to us via the contact form is Art. 6 Para. 1 Sentence 1 lit. b GDPR (performance of a pre-contractual measure).

Cookies

We use so-called “cookies” on our website to improve user-friendliness. Put very simply, a cookie is a small text file that stores data about visited websites. Cookies store a kind of “user profile”, i.e., things like your preferred language and other page settings required by our website to offer you certain services. This file is saved on your computer by our website and helps recognize you when you visit our website again. Through cookies, we also receive information about your preferred activities on our website, allowing us to align our website with your individual interests and speed up the processing of your requests.
You can manually delete cookies at any time in your browser’s security settings. However, you can also prevent the storage of cookies from the outset by configuring your browser settings accordingly. Please note, however, that you may then not be able to use all functions of our website to their full extent. If you wish to accept only our own cookies and not those of our data processors, you can prevent the storage of these cookies by selecting the setting “Block third-party cookies”.
The legal basis for the use of cookies is generally Art. 6 Para. 1 Sentence 1 lit. f GDPR (Legitimate interest in data processing). The legitimate interest arises from our need to offer you a user-friendly website. Deviating from this, more specific legal bases may apply to the types of cookies listed individually below.
Specifically, our website uses the following types of cookies:

Transient Cookies

Transient cookies are automatically deleted when you close the browser.
• Session cookies: These contain an identification number with which various requests from your browser can be assigned to a session. This allows your computer to be recognized when you return to our website. Session cookies are automatically deleted when you close the browser. We use this type of cookie to provide essential functions of this website, such as protection against spam via inquiry forms. In addition, we use session cookies to recognize how many subpages of the website you access and how long you stay on the pages. An assignment to you as a person or the creation of a user profile over a period longer than a browser session is not possible. The legal basis for this is Art. 6 Para. 1 Sentence 1 lit. f GDPR (Legitimate interest in data processing). The legitimate interest arises from our need to offer you a user-friendly website, as well as our need for an anonymous evaluation of user behavior on our website for user-oriented improvement of our online offerings.

Persistent Cookies

Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie.
• Cookie notice banner: To inform you transparently about our use of cookies, a notice banner is displayed at the bottom of the browser window. If you dismiss this banner with a click, we store this in a cookie. As a result, the banner remains hidden on your next visit to our homepage. This cookie is automatically deleted after one year.

Data Processing

Disclosure of Data, Data Processing on Behalf
In principle, we do not disclose your personal data to third parties unless
1. You have consented to the disclosure of data, or
2. We are, on the basis of
a) legal provisions, or
b) official or judicial orders, entitled or obliged to disclose data. This may involve providing information for the purposes of criminal prosecution, hazard prevention, or the enforcement of intellectual property rights.
Under certain circumstances, we also transfer your data to external service providers (data processors) in order to simplify our own data processing. In this case, this data processor is contractually obligated in accordance with Art. 28 GDPR, which means in particular that the data processor must provide sufficient guarantees that appropriate technical and organizational measures are carried out in such a way that the processing meets the requirements of the GDPR and ensures the protection of your rights as a data subject. Despite commissioning data processors, we remain the controller responsible for processing your data within the meaning of data protection laws.
Data Transfer to Third Countries Outside the EU
All information that we receive from or about you is generally processed on servers within the European Union. A transfer of your data to or processing of your data in third countries takes place without your express consent only if this is provided for by law and an adequate level of data protection is ensured in the third country.

Third-Party Services

We do not use any third-party services on our website.