Privacy policy

1 · Controller

The controller within the meaning of the GDPR is:

WF-Medical GmbH
Uhlandstraße 7
75050 Gemmingen-Stebbach
Germany

Phone: +49 7267 2069890
Email: info@wf-medical.de

Represented by the Managing Directors Werner Böhringer and Felix Dieffenbacher.

2 · General principle

We process personal data only to the extent necessary to provide a functional website, to handle your inquiries, or on the basis of your consent. This website does not embed any external fonts, maps, videos or social media services. All content, images and files are loaded from our own server.

We use Google Analytics for audience measurement. This service is loaded only after you have given your explicit consent; until you have consented, no cookie is set, no script is retrieved from Google and no connection to Google is established. Details and how to withdraw your consent are set out in section 5.

3 · Accessing the website and server log files

When you access this website, your browser transmits technically necessary data, which our hosting provider stores in what are known as server log files. The following data are recorded:

• IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• amount of data transferred and notification of successful retrieval
• browser type and version used, and the operating system
• previously visited page (referrer URL), if transmitted

Purpose and legal basis: The processing serves to deliver the website, to ensure system security and stability, and to analyze the situation in the event of an attack. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and trouble-free operation of this website. These data are not combined with data from other sources.

Retention period: Log files are deleted after seven days at the latest, unless they are needed to investigate a specific security incident.

4 · Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Processing takes place in data centers within the Federal Republic of Germany.

STRATO AG processes the data generated when the website is accessed (in particular the server log files listed in section 3) exclusively on our behalf and is bound by our instructions. We have concluded a data processing agreement with STRATO AG as our processor pursuant to Art. 28 GDPR.

Purpose and legal basis: We use a hosting provider in order to make this website available securely, quickly and reliably. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the proper operation of this website. Further information on data protection at STRATO AG is available at www.strato.de/datenschutz/.

5 · Cookies and audience measurement with Google Analytics

To understand which content on this website is in demand and where visitors get stuck, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ireland”).

Only with your consent: When you first visit this website, a notice with two equally prominent buttons appears. Google Analytics is loaded only once you click “Accept” there. If you select “No thanks” or make no choice, no data whatsoever is transmitted to Google; the website remains fully available to you without any restrictions. Technically, this is implemented using Google Consent Mode v2, which is set to “denied” by default before any data is collected.

Data processed: pages viewed and time of access, length of visit, buttons clicked, downloads and forms submitted, approximate location at city or region level, device, operating system and browser used, screen resolution, and the previously visited page. Your IP address is truncated by Google and not stored; the data are not combined with other data.

Cookies: Once you have given your consent, Google Analytics sets the cookies _ga and _ga_<measurement ID> with a lifetime of up to 24 months. They contain a randomly generated identifier that allows repeated visits from the same browser to be counted as one visit. In addition, we store your consent decision itself in your browser’s local storage (entry wf-einwilligung) so that we do not have to ask you again every time you visit. This entry contains only your choice and its date and is technically necessary to give effect to your decision.

Not activated: Google Signals and cross-device recognition, advertising features and personalized advertising, and the sharing of data with Google advertising products. We evaluate the data for statistical purposes only.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and, for storing information on and accessing information from your terminal equipment, § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).

Retention period: Usage data are automatically deleted by Google after 14 months. The cookies mentioned above expire after 24 months at the latest. You will be asked for your consent decision again after twelve months.

Recipients and transfers to third countries: We have concluded a data processing agreement with Google Ireland pursuant to Art. 28 GDPR. A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission determined an adequate level of data protection in its decision of 10 July 2023 (Art. 45 GDPR); in addition, standard contractual clauses pursuant to Art. 46(2)(c) GDPR have been agreed. Your consent also covers this transfer (Art. 49(1)(a) GDPR). Despite these safeguards, access to the data by US authorities cannot be entirely ruled out.

Withdrawal (at any time and without disadvantage): You may withdraw your consent at any time with effect for the future. Withdrawing consent is as easy as giving it: the button below reopens the notice. If you select “No thanks”, the cookies set by Google are deleted immediately.

Change cookie settings

Independently of this, you can prevent data collection by installing the browser add-on provided by Google: tools.google.com/dlpage/gaoptout. Google’s privacy policy is available at policies.google.com/privacy.

6 · Contact requests and forms

On our Contact page, we provide an inquiry form. In it, you select what your inquiry is about: a product demo, the partner program for specialist dealers, or another inquiry; depending on your selection, the form asks for different information. When you use the form, we process the data you enter.

Data processed: type of inquiry, name, email address, telephone number if applicable, institution or company, profession, ZIP code, country, type of business, sales territory, customer groups and the content of your message, in each case to the extent that you provide this information. The date and time of receipt are also stored.

Purpose and legal basis: The data are used exclusively to handle your inquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your inquiry is aimed at the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries. Where you have consented to the processing, Art. 6(1)(a) GDPR is an additional legal basis; you may withdraw any consent given at any time with effect for the future.

Recipients: Your inquiry is delivered by email to our business address. In order to handle your inquiry, it may be necessary to pass your contact details on to the specialist dealer responsible for your region; this is done only to the extent necessary for handling your inquiry and provided you have not objected. You may object to such disclosure at any time; no particular form is required.

Retention period: We store your inquiry until the matter has been concluded and no further questions are to be expected. If a business relationship is established, the statutory retention periods under commercial and tax law apply (generally six or ten years).

Spam protection: Our forms contain a field that is invisible to you (a “honeypot”), which is filled in only by automated programs. No additional personal data are collected and no third-party services are involved.

7 · Contact by email or telephone

If you contact us by email or telephone, we process the data you provide in order to deal with your request. The legal basis and retention period are as set out in section 6.

8 · Job applications

If you apply for an advertised position or send us a speculative application, we process the data you provide to us: usually your name, contact details, résumé, certificates and references, and your cover letter. You send your application from your own email program to info@wf-medical.de; no application data are collected on this website.

Purpose and legal basis: We process your application data exclusively to carry out the application process and to decide whether to establish an employment relationship. The legal basis is § 26(1) sentence 1 BDSG (German Federal Data Protection Act) in conjunction with Art. 88 GDPR, as well as Art. 6(1)(b) GDPR (steps prior to entering into a contract). Where you voluntarily provide us with special categories of personal data (such as information on a severe disability), processing is based on Art. 9(2)(b) GDPR.

Recipients: Only those persons in our company who are involved in the selection decision have access to your application. It is not passed on to third parties.

Retention period: If no employment relationship is established, we delete your application documents no later than six months after the application process has been concluded. This period takes into account the time limit for bringing an action under § 61 b(1) ArbGG (German Labor Courts Act) and possible claims under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG). If you would like us to keep your documents beyond this period for future vacancies, we will add you to our applicant pool with your explicit consent (Art. 6(1)(a) GDPR); you may withdraw this consent at any time with effect for the future. If an employment relationship is established, we transfer the data to your personnel file.

Provision of data: You are under no statutory or contractual obligation to provide your application data. Without them, however, we are unable to process your application.

Please note: unencrypted emails can be read by others in transit. If you would prefer a different method of transmission, please get in touch with us.

9 · Downloads

The files offered on this website (product datasheets) are delivered directly from our server. No registration is required. The information on server log files in section 3 applies; if you have consented to audience measurement, clicks on a download are also counted for statistical purposes (section 5).

10 · No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

11 · Transfers of data to third countries

In the course of operating this website, personal data are transferred to countries outside the European Union solely in connection with the audience measurement described in section 5, and even then only if you have given your prior consent. Such transfers are based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework, supplementary standard contractual clauses and your consent pursuant to Art. 49(1)(a) GDPR. Without your consent, no data leave the European Economic Area. Form submissions, hosting and the delivery of all content take place exclusively within the EU.

12 · Data security

This website is delivered via an encrypted TLS connection (HTTPS). You can recognize this by the padlock symbol in your browser’s address bar. In addition, we take appropriate technical and organizational measures to protect your data against loss, destruction, manipulation and unauthorized access.

13 · Your rights

With regard to the personal data concerning you, you have the following rights vis-à-vis us:

• Access to the data we process (Art. 15 GDPR)
• Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• Erasure of your data stored by us (Art. 17 GDPR)
• Restriction of processing, where the statutory requirements are met (Art. 18 GDPR)
• Data portability in a structured, commonly used and machine-readable format (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to info@wf-medical.de is sufficient.

14 · Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

15 · Changes to this privacy policy

We will amend this privacy policy as soon as changes to this website or to the legal framework make this necessary. The version available on this page at the relevant time applies.

Date of this privacy policy: see footer. This policy describes the functionality of this website with consent-based audience measurement and no other external services. If the website is later extended to include map services, embedded videos, an application form, a newsletter or advertising features (such as Google Ads), this policy must be supplemented accordingly and the consent notice extended to cover the respective purpose.