Privacy policy

This is a courtesy translation. Only the German version is legally binding.

1. Subject of this privacy policy

We are pleased about your interest in our website www.for-medic.de, our company and the services we offer. We are aware that protecting your privacy when using our website is important to you.

Compliance with the statutory data protection regulations is therefore a matter of course for us. It is also important to us that you, as a customer, always know when, how and which of your data is collected, stored and used.

Below we inform you about the collection and other processing of personal data, such as storage, retrieval, modification and disclosure, when using our website. By personal data we mean all data that can be related to you personally, such as your name, address, email address and user behaviour.

Where we process personal data in the course of your use of our website, or where we use commissioned service providers for individual functions, offers or services of our website involving data processing, we inform you in detail below about the respective processes. In particular, we state which data is processed, the intended storage period or at least the criteria for determining it, and the relevant legal basis for the respective processing.

2. Controller responsible for processing your data on this website

The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the member states and other data protection provisions is:

Formedic GmbH
Chorbuschstraße 32 a
50765 Cologne, Germany
Phone: +49 178 5003124
Email: info@for-medic.de

Management:
Dr. Deniz Cansun-Labenski
Markus Stobbe

3. Contact details of our data protection officer

You can reach the data protection officer of Formedic GmbH at info@for-medic.de or at our postal address with the addition “the data protection officer”.

4. Collection and use of your data

4.1 Visiting the website

When you use the website for information purposes only, or otherwise transmit information to us, we only collect the personal access data in so-called server log files that your browser transmits to our server. The following data is collected in the server log files:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes

This data is evaluated exclusively to ensure trouble-free operation of the website with regard to stability and security and to improve our offer, and is then discarded. The legal basis for the data processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection mentioned above.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

Both the collection of data to provide the website and the storage of data in log files are strictly necessary for the operation of our website. Consequently, the user has no right to object.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session has ended.

We currently do not use cookies or analysis services (see section 4.5).

4.2 Contact by email or via the contact form

If you send us a request via the contact form, we process the data you provide – name, email address, preferred date and time, type of appointment, location where applicable, and your message – in order to answer your request and arrange the appointment with you. The same applies to information you send us by email.

Name, email address, preferred date, time and type of appointment are required; the message is voluntary. We reply by email or, if requested, by telephone.

The legal basis for the processing is Art. 6(1)(1)(b) GDPR where your request is aimed at a contract or pre-contractual measures, otherwise Art. 6(1)(1)(f) GDPR; the legitimate interest lies in answering your enquiry.

We delete the data arising in this context once your enquiry has been dealt with, or restrict processing if statutory retention obligations apply.

4.3 Applying for an advertised position

If you apply for a job advertised online on our website, the personal data you voluntarily submit will be used exclusively for the purpose of filling the advertised position and reviewing and processing your application in this context.

After completion of the application process for the specific advertised position, this data is blocked for further use and deleted after expiry of any statutory retention obligations. The legal basis for the processing is Art. 88 GDPR in conjunction with § 26(1) BDSG (German Federal Data Protection Act).

4.4 Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6(1)(1)(a) GDPR,
• disclosure in accordance with Art. 6(1)(1)(f) GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
• there is a legal obligation for disclosure in accordance with Art. 6(1)(1)(c) GDPR, and
• this is legally permissible and necessary in accordance with Art. 6(1)(1)(b) GDPR for the performance of contractual relationships with you.

4.5 Cookies and storage in your browser

This website currently does not set any cookies and does not use analysis or tracking services. Fonts and scripts are loaded from our own server; no data is transferred to third parties in the process.

Should we use optional services in future (e.g. statistics or embedded content such as maps or videos), we will first obtain your consent via a cookie notice (§ 25(1) TDDDG, Art. 6(1)(1)(a) GDPR). Your choice is then stored in your browser’s local storage; this storage is technically necessary (§ 25(2) no. 2 TDDDG) and you will be asked again after twelve months. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer. We will name the respective services in this privacy policy.

4.6 Recipients of your data

We use carefully selected service providers to operate this website and for our communication. Where they process personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Art. 28 GDPR. The service providers are bound by our instructions and may not use the data for their own purposes unless otherwise stated below.

a) Hosting, domain and technical provision by STRATO

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (hereinafter “STRATO”); our domain for-medic.de is also registered there. On our behalf, STRATO processes all data arising when this website is visited (in particular the server log files mentioned in section 4.1), as well as the data you submit via our contact form. The servers are located in Germany. We have concluded a data processing agreement with STRATO in accordance with Art. 28 GDPR.

The legal basis is Art. 6(1)(1)(f) GDPR; our legitimate interest lies in the secure, reliable and efficient provision of our website. Where you request an appointment via the contact form, the processing is also based on Art. 6(1)(1)(b) GDPR.

Your details from the contact form are not stored in a database on the website but are sent by email to our mailbox.

b) Email communication

Our email communication, including receiving and replying to your enquiries from the contact form, takes place via Microsoft 365, offered by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Processing by the parent company Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA, cannot be ruled out. The legal basis is Art. 6(1)(1)(b) or (f) GDPR; our legitimate interest lies in efficient and secure communication.

c) Data transfers to third countries

Microsoft or its sub-processors are based wholly or partly in the USA. A transfer of personal data to the USA can therefore not be ruled out. Where the company is certified under the EU-US Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). Otherwise, it is based on the EU standard contractual clauses pursuant to Implementing Decision (EU) 2021/914 (Art. 46(2)(c) GDPR). You can request a copy of the respective safeguards from us using the contact details above.

4.7 Data security

We use the necessary technical and organisational security measures to protect personal data that arises or is collected, in particular against manipulation, loss or unauthorised access. In particular, as you can see from the encryption symbol in your browser bar, communication with our server is encrypted. Our security measures are continuously reviewed and, where necessary, adapted in line with technological developments.

4.8 Your rights

Provided the legal requirements are met, you have the right at any time:

• to request information about your personal data processed by us (cf. Art. 15 GDPR);
• to request without delay the correction of inaccurate or completion of your personal data stored by us (cf. Art. 16 GDPR);
• to request the erasure of your personal data stored by us, unless statutory exceptions apply (cf. Art. 17 GDPR);
• to request the restriction of processing of your personal data (blocking) if the relevant legal requirements are met (cf. Art. 18 GDPR);
• to notification in connection with the correction or erasure of personal data or the restriction of processing (cf. Art. 19 GDPR);
• to request the transfer of your personal data (cf. Art. 20 GDPR).

5. Right to object (Art. 21 GDPR)

You have a right to object on a case-by-case basis as well as a right to object to the processing of data for advertising purposes.

a) Right to withdraw consent under data protection law

You can withdraw consent to the processing of your personal data at any time vis-à-vis the controller. Please note that the withdrawal only takes effect for the future. The lawfulness of processing carried out on the basis of consent until withdrawal is not affected.

b) Right to object on a case-by-case basis

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(e) GDPR or Art. 6(1)(1)(f) GDPR; this also applies to profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

c) Right to object to the processing of data for advertising purposes

In individual cases, we process your personal data for direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to processing for direct advertising purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and should be sent by email, if possible with the subject “Objection”, to:

Formedic GmbH
Chorbuschstraße 32 a
50765 Cologne, Germany
info@for-medic.de

5.1 Right to lodge a complaint with a supervisory authority

Furthermore, in accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority about the processing of your personal data. As a rule, you can contact the supervisory authority of our headquarters for this purpose. This is

Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Postfach 20 04 44
40102 Düsseldorf, Germany
Phone: +49 211 38424-0
Fax: +49 211 38424-10
Email: poststelle@ldi.nrw.de
https://www.ldi.nrw.de

6. Data security

We endeavour to store your personal data using all technical and organisational means in such a way that it is not accessible to third parties. When communicating by email, we cannot guarantee complete data security, so we recommend sending confidential information by post.