Privacy Statement

Thank you for visiting our website. We take the protection of your personal data very seriously and we want you to feel safe when visiting our website. We protect your privacy and your personal data. We process your personal data according to the content of this privacy policy in compliance with the applicable data protection provisions of the General Data Protection Regulation (GDPR) or the national provisions of the German Federal Data Protection Act (FDPA).

• Controller’s name and contact information
• Data protection officer’s contact details
• What is personal data?
• Purposes of data processing
• Legal basis for data processing
• Using our website for information purposes
• Using our website for additional services
• Contacting us
• Newsletter
• Security
• Cookies
• Web analytics
• Social media
• Additional functions and contents
• Recipients and data transfer
• Data transfer to third countries
• Erasure of your data
• Your rights
• Information on the use/handling of your data – customers and suppliers

As the operator of the website https://www.schwarzercardiotek.com, Schwarzer Cardiotek GmbH, Im Zukunftspark 3, 74076 Heilbronn is the controller within the meaning of the GDPR.

You can contact our data protection officer at any time regarding any data protection concerns at datenschutz@schwarzercardiotek.com.

“Personal data” is all information relating to an identified or identifiable natural person. A natural person is deemed directly or indirectly identifiable if they can be identified by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features expressing that natural person’s physical, physiological, genetic, psychological, economic, cultural or social identity.

The scope and nature of the collection, processing and use of your data differs depending on whether you visit our website merely to retrieve generally available information or to avail of additional services. In principle, we process your personal data within the scope of our entrepreneurial activities for pre-contractual or contractual purposes. Furthermore, the exercise of our legitimate interest or compliance with legal requirements may also be the substantive purpose for our data processing. Please find below information about the respective specific purposes of data processing in the following areas.

We process your personal data in line with the following legal bases:

• For the fulfilment of pre-contractual or contractual obligations (Art. 6(1)(b) GDPR)
• Due to your consent (Article 6(1)(a) GDPR)
• Within the context of a balancing of interests (Art. 6(1)(f) GDPR)
• Due to legal requirements (Art. 6(1)(c) GDPR)

In addition, depending on the type and scope of processing, further legal bases may exist according to country-specific provisions. We will inform you about the specific legal basis of the data processing in our respective processing operations.

It is generally not necessary for you to provide personal data for a purely informational use of our website. Rather, in this case, when you call up our web pages, we only record the data that your internet browser automatically transmits to us, such as:

• Referrer (previously visited website);
• Requested webpage or file;
• Browser type and version;
• Operating system used;
• Type of device used;
• Time of access;
• IP address in anonymised form;
• other similar data and information which serve to avert danger in the event of attacks on our information technology systems.

This is usually done through the use of log files. The purpose of the processing is to ensure our website’s functionality and compatibility for technically unproblematic use, including troubleshooting, as well as protection against technical attacks and misuse. The legal basis for this processing is our legitimate interest under Article 6(1)(b) GDPR. Our legitimate interest lies in our website’s proper operation. Log file data is deleted when it is no longer necessary for the purpose of processing.

Where you avail of additional services of our company via our website, it may be necessary for you to provide personal data for this purpose. The personal data required for the provision of the service is specified in the respective input mask or application. You can enter further information voluntarily. You can tell which information is required and which is voluntary by the fact that the mandatory information is marked with an asterisk (*) or with the indication “mandatory field”. Your data will be processed solely for the purpose of providing the service you requested. The description of the specific services will contain the legal basis for the processing of your personal data as well as information on when your personal data will be deleted.

Contact form
You can contact us through a contact form on our website. The personal data that you provide by contacting us via a contact form is only processed for the purpose of processing your contact via the contact form. Data is only transferred to third parties where this is necessary for the purpose of processing your contact. The legal basis for this processing is Article 6(1)(b) GDPR. Your personal data will be erased when it is no longer required to fulfil the purpose of your contact. Please note that your messages may have to be stored within the framework of statutory retention obligations. The legal basis in this case is Art. 6(1)(c) GDPR.

Contact by email
Our website indicates email contact options. Please note that unencrypted communication via e-mail is not secure. The reading, copying, alteration or erasure by unauthorised persons of data thus transmitted cannot be excluded. The personal data that you provide as a result of contacting us via an email enquiry will only be processed for the purpose of handling your email enquiry. Data is only transferred to third parties where this is necessary for the purpose of processing this contact. The legal basis for this processing is Article 6(1)(b) GDPR. Your personal data will be erased when it is no longer required to fulfil the purpose of your contact. Please note that your messages may have to be stored within the framework of statutory retention obligations. The legal basis in this case is Art. 6(1)(c) GDPR.

We currently do not provide a newsletter.

We have applied technical and organizational measures to protect our website and other systems against the loss, destruction, access, modification or dissemination of your data by unauthorized persons. In particular, your personal data provided in the contact form will be transmitted in encrypted form. We use the TLS 1.3 (Transport Layer Security) coding system for this.

We use functional cookies to track visitor preferences and to optimise our webpages’ design. Cookies are small text files which are set on your computer when you visit our website. You can delete the cookies at any time if you wish. However, this may result in your losing access to individual functions. Please consult your browser’s help function for information about deleting cookies. You can find more information about the individual cookies and their purpose in our privacy settings.

Change settings:

We do not use any tools for web analytics.

We do not maintain publicly accessible profiles on social networks.

Where we use additional functions and content (e.g. map or font services) on our website by means of which we or the service provider process your personal data, we will inform you about this in this location.

Google Fonts
“Google Fonts” external fonts are used on our website. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland. The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is ensuring our website’s functionality. In the process, your browser also passes on personal data to Google LLC. in the US. You can find more information about Google’s data processing here: https://www.google.com/policies/privacy/

Google Static
Our website uses a service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (subsequently referred to as gstatic). The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is ensuring our website’s functionality. In the process, your browser also passes on personal data to Google LLC. in the US. You can find more information about Google’s data processing here: https://www.google.com/policies/privacy/

You can prevent the collection and processing of your data by gstatic by deactivating the execution of script code in your browser or installing a script blocker in your browser.

Google Apis
Our website uses a service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (subsequently  referred to as Google-Apis). The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is ensuring our website’s functionality. In the process, your browser also passes on personal data to Google LLC. in the US. You can find more information about Google’s data processing here: https://www.google.com/policies/privacy/

You can prevent the collection and processing of your data by Google Apis by deactivating the execution of script code in your browser or installing a script blocker in your browser.

Google Maps
This website uses Google Maps, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to display an interactive map. The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is ensuring our website’s functionality. In the process, your browser also passes on personal data to Google LLC. in the US. More information about data processing by Google can be found here: https://www.google.com/policies/privacy/

You can prevent the collection and processing of your data by Google Maps by deactivating the execution of script code in your browser or installing a script blocker in your browser.

jQuery
We use the jQuery service of JSFoundation, Inc., Attn: Privacy Office, 1 Letterman Drive, San Francisco, CA 94129, USA (hereinafter referred to as “jQuery”) on our website. The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is to ensure our website’s appealing and rapid functionality.
In the process, your browser also passes on personal data to jQuery in the US. You can prevent the collection and processing of your data by jQuery by deactivating the execution of script code in your browser or installing a script blocker in your browser. More information about data processing by jQuery can be found here: https://js.foundation/about/governance/privacy-policy

jsDelivr
On our homepage, we use a content delivery network service (CDN) “jsDelivr” from Prospect One.io, Krolewska 65a, Krakow, Malopolskie 30-081, Poland. The CDN enables shorter and more stable loading times of data and information even with higher accesses. Your IP address, among other things, will be transmitted to jsDelivr for this purpose. The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is ensuring our website’s functionality. You can prevent the collection and processing of your data by jsDelivr by deactivating the execution of script code in your browser or installing a script blocker in your browser. You can find more information on jsDelivr in the jsDelivr privacy policy at:   https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net

We have integrated certain data processing operations within our company. These can be performed centrally by our individual divisions, e.g. for processing inquiries. External contractors and service providers (e.g. logistics companies or IT service providers) may also be used to carry out our tasks and fulfil our contracts. Data may also be passed on to recipients to whom we are obligated or entitled to disclose data due to contractual or legal obligations or due to your consent.

Data will only be transferred to third countries (countries outside the EU and the European Economic Area EEA) where this is necessary for the execution of a contract/order/business relationship, including its initiation, or if it is permissible due to our legitimate interest or your consent, and only in compliance with the data protection requirements stipulated for this purpose.

Services from companies based in the US are integrated into our website. As part of the use of these services, personal data may be transmitted to the respective service providers’ US servers. Please note that the US is not a secure third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take sufficient legal action against this. The processing, evaluation and permanent storage of your data located on US servers by the US authorities (e.g., intelligence agencies) for surveillance purposes cannot be completely excluded. We have no influence on these processing activities.

We only process your personal data for as long as is necessary to fulfil the respective purpose or until a legal basis for the processing (e.g. withdrawal of consent to data processing) no longer exists. In doing so, we will observe the existing statutory retention and storage periods.

You have the right to:

• to receive information at no cost about the your personal data we have stored (right to information);
• obtain confirmation as to whether we are processing personal data concerning you (right to confirmation);
• request us to erase personal data concerning you without undue delay, provided that its processing is no longer necessary and the GDPR additional erasure requirements are also satisfied (right to erasure);
• request the immediate rectification and completion of inaccurate personal data concerning you (right to rectification);
• request the restriction of the processing of your personal data (right to restriction of processing);
• to receive the personal data concerning you in a structured, commonly used and machine-readable format (right to data portability)
• object to the processing of your personal data (right to object)
• You have the right not to be subject to a decision based exclusively on automated processing – including profiling – which produces legal effects concerning you or similarly affects you significantly (right to individual decision-making).
• prospectively withdraw your consent to the processing of your personal data at any time.
• lodge a complaint with a supervisory authority responsible for data protection if you believe that the processing of personal data concerning you violates the GDPR (right to lodge a complaint with a supervisory authority).

Please contact our data protection officer for further information about your rights.

We reserve the right to make changes to our privacy policy at any time in order to ensure that it always conforms to current legal requirements. This also applies where the privacy policy has to be adapted due to new or revised offers or services, for example new services. The new privacy policy will then take effect the next time you visit our website.

Information on the use/handling of your data under Art. 13 GDPR