Dataprotection

 Status 24.03.2025

 

Who we are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

RUDOLF Medical GmbH + Co KG

Zollerstrasse 1

78567 Fridingen

Germany

+49 7463 99560

sales@rudolf-med.com

www.rudolf-med.com

 

Contacting the data protection officer

The data protection officer of the controller is

DataCo GmbH

Sandstrasse 33

80335 Munich

Germany

+49 89 7400 45840
www.dataguard.de

 

On this page we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We will only collect, use or share your personal data where we have a legitimate purpose and legal basis for doing so.

 

What do we mean by legal basis?

 

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)-You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how you can withdraw your consent, please refer to the subsections "Exercising your rights" in the following sections of this Privacy Policy.

 

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) -We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data to because we have asked you to do so or you have taken certain steps yourself before entering into this contract.

 

Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) -We must use your data to comply with the law.

 

Vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) - The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

 

Public task (Art. 6 para. 1 sentence 1 lit. e GDPR) - The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task defined by law, e.g. for a statutory function.

 

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) -The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not prevail.

Please note that if your data is processed to fulfill a contract or legal obligation and you do not provide the requested data, we may not be able to provide you with our website services.

 

Data sharing and international transfer

As explained in this Privacy Policy, we use various service providers to help us provide our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them.

We have concluded agreements with all service providers to whom we pass on your data, obliging them to protect your data.

If your personal data is transferred outside the EU, we will ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" standard of data protection according to the European Commission, or by using another safeguard, such as an enhanced contractual arrangement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely on either the SCC or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have in place with our service providers by emailing at the email address provided in this Privacy Policy.

 

Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

 

1. the right to information (Art. 15 GDPR)

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:

Processing purposes
Categories of personal data
Recipients or categories of recipients
Planned storage duration or the criteria for determining this duration
the existence of the rights to rectification, erasure, restriction or objection
Right to lodge a complaint with the competent supervisory authority
If applicable, origin of the data (if collected from a third party)
If applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects
Possible transfer of personal data to a third country or international organization

2. right to rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

 

3. right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:

• You contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data.
• In the event of unlawful processing, you object to the erasure of the personal data and instead request the restriction of the use of the personal data.
• We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims, or
• after you have lodged an objection to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

4. right to erasure ("right to be forgotten") (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand the immediate deletion of your personal data:

• Your data are no longer necessary for the processing purposes for which they were originally collected.
• you withdraw your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.
• Your personal data is being processed unlawfully.
• The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
• The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

Please note that the above reasons do not apply if the processing is necessary:

• To exercise the right to freedom of expression and information;
• For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
• For reasons of public interest in the area of public health.
• For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes.
• for the assertion, exercise or defense of legal claims.

 

5. right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

 

6. right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

 

7. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of the competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

 

Provision of the website and creation of log files

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used
• The user's operating system
• Date and time of access
• Websites from which the user's system accesses our website

This data is stored in the log files of our system.

This data is not stored together with other personal data of the user.

 

2. purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

 

3. legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

 

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after no more than seven days. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

 

5. exercise your rights

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

 

E-mail contact

 

1. description and scope of data processing

It is possible to contact us via the email address provided on our website. In this case, the user's personal data transmitted with the email will be stored.

The data is used exclusively for processing the conversation.

 

2. purpose of data processing

In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.

 

3. legal basis for data processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to respond to your request sent by email in the best possible way.

If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

 

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

 

5. exercise your rights

If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

 

Contact form

 

1. description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is stored at the time the message is sent:

• Email address
• Surname
• First name
• Address
• Salutation
• IP address of the calling computer
• Date and time

2. purpose of data processing

The processing of personal data from the input mask of the contact form or via the e-mail address provided serves us solely to process the contact.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

3. legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to provide you with the best possible response to the inquiry you send us via the contact form. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

 

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

 

5. exercise your rights

If the user contacts us via the input mask in the contact form, they can object to the storage of their personal data at any time in the following manner:

The revocation of consent and the objection to storage can be made by telephone or by e-mail to sales@rudolf-med.com.

All personal data stored in the course of contacting us will be deleted in this case.

 

Application by e-mail and application form

There is an application form on our website that can be used for electronic applications. If an applicant makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are

• Surname
• First name
• Phone / cell phone number
• Email address
• Salary expectations
• Information on education and schooling
• Curriculum vitae

Alternatively, you can also send us your application by e-mail. In this case, we will record your e-mail address and the data you provide in the e-mail.

Your data will not be passed on to third parties. The data will be used exclusively for processing your application.

 

2. purpose of data processing

The processing of personal data from the application form is solely for the purpose of processing your application. If you contact us by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is used to prevent misuse of the application form and to ensure the security of our information technology systems.

 

3. legal basis for data processing

The legal basis for the processing of your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b Alt. 1 GDPR and § 26 para. 1 sentence 1 BDSG.

 

4. duration of storage

After completion of the application process, the data will be stored for up to 2 months. Your data will be deleted after 2 months at the latest. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

 

Company appearances

Instagram:

Instagram, Part of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland

On our company page, we provide information and offer Instagram users the opportunity to communicate.

If you carry out an action on our Instagram corporate presence (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

However, since we generally or largely have no influence on the processing of your personal data by Instagram, we cannot make any binding statements about the purpose and scope of the processing of your data.

We use our corporate presence in social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence for:

- Products, job advertisements

The publications on the company's website may contain the following content:

• Information about products
• Information about services
• Advertising
• Customer contact

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The data generated by the company website is not stored in our own systems.

For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the "Your rights" section of this privacy policy. To do so, send us an informal email to sales@rudolf-med.com. You can find more information on the processing of your personal data by Instagram and the corresponding objection options here:

Instagram: https://help.instagram.com/519522125107875

YouTube:

YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, United States

On our company page, we provide information and offer YouTube users the opportunity to communicate.

If you perform an action on our corporate YouTube presence (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

However, as we generally or largely have no influence on the processing of your personal data by YouTube, we cannot make any binding statements about the purpose and scope of the processing of your data.

We use our corporate presence in social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence for
Products, job advertisements

The publications on the company's website may contain the following content:

• Information about products
• Information about services
• Advertising
• Customer contact

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest here is to respond to your inquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the "Your rights" section of this privacy policy. To do so, please send us an informal email to sales@rudolf-med.com. You can find more information on the processing of your personal data by YouTube and the corresponding objection options here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=en

 

Use of company presences in professional networks

 

1. scope of data processing

The company website is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:

• LinkedIn

On our website we provide information and offer users the opportunity to communicate.

The company website is used for applications, information/PR and active sourcing.

We have no information on the processing of your personal data by the companies jointly responsible for the company's website. Further information can be found in the privacy policy of:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

 

If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

 

2. legal basis for data processing

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in doing so is to respond to your inquiry in the best possible way or to be able to provide the requested information.

If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

 

3. purpose of data processing

Our company website serves to inform users about our services. Every user is free to publish personal data through activities.

 

4. duration of storage

The data generated by the company website is not stored in our own systems.

 

5. exercise your rights

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the "Your rights" section of this privacy policy. To do so, please send us an informal email to the email address stated in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

 

Hosting

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

Bett Ingenieure GmbH, Neckarstrasse 55 73728 Esslingen am Neckar. Further information can be found in the provider's privacy policy: https://bett-ingenieure.de/datenschutz/

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

• Information about the browser type and version used
• The user's operating system
• Date and time of access
• Websites from which the user's system accesses our website

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions.

The website server is geographically located in Germany.

Registration

1. description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the registration process:

• Email address
• Last name
• First name
• Address

2. purpose of data processing

User registration is required for the provision of certain content and services on our website. User registration is required in particular for the following purpose:

Registration is used for identification purposes so that customers can be clearly identified. After successful registration, users can call up further details on products, such as current stock quantities and additional information that may be required for international approvals. Registered users also have access to an extensive download area.

 

3. legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. f GDPR. We have a legitimate interest in processing your registration data in order to provide you with the desired content and services.

If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b GDPR.

 

4. duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

With regard to the registration data, your data will therefore be stored for as long as your account is active.

 

5. exercise your rights

As a user, you have the option of canceling your registration at any time. You can change the data stored about you at any time.

You can request deletion in the following ways:

To delete the user account, please contact customer service at sales@rudolf-med.com.

If the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

This privacy policy was created with the support of DataGuard.