Privacy Policy

 

These privacy notices apply to data processing by:
AraMed GmbH
Westhafenplatz 1
D-60327 Frankfurt a.M.

Phone: + 49 69/4005536-00 
Fax: + 49 69 4005536-99 
info@aramed.de 

Contact details of the data protection officer:
PROLIANCE GmbH / datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich

Email: datenschutzbeauftragter@datenschutzexperte.de 

 

1. Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

When you visit our website www.aramed.de, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file.

The following information is collected without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access is made (Referrer URL), the browser used and possibly the operating system of your computer and the name of your access provider

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection setup of the website
  • Ensuring comfortable use of our website
  • Evaluation of system security and stability
  • Evaluation for further administrative purposes

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. 
You will receive further explanations under the sections 4 and 5 of this privacy policy.

Cookie Consent with Usercentrics

This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Rosental 4, 80331 München, Germany, website:
https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).

Whenever you visit our website, the following personal data will be transferred to Usercentrics:

  • Your declaration(s) of consent or your revocation of your declaration(s) of consent 
  • Your IP address
  • Information about your browser
  • Information about your device
  • The date and time you visited our website
  • Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6 Sect. 1 Sentence 1 lit. c GDPR.

2. Transfer of Data

Your personal data will not be transferred to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
There is an obligation to do so, and this is legally permissible and required according to Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you.

3. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device, do not contain viruses, Trojans, or other malware.

The cookie stores information, which is related to the specific device used. However, this does not mean that we immediately become aware of your identity.

On one hand, the use of cookies serves to make the use of our offer more pleasant for you. For instance, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific defined period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings you have made, so you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see No. 4). These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties according to Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer, or a message always appears before a new cookie is created. However, the complete deactivation of cookies can lead to you not being able to use all functions of our website.

4. Analysis Tools

The tracking measures listed below and used by us are carried out based on Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are considered legitimate in the sense of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics

For the purpose of customizing and continually optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google"). In this context, pseudonymized usage profiles are created and cookies (see Section 4) are used. The information generated by the cookie about your use of this website such as:

  • Browser type/version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer (IP address)
  • Time of the server request

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services related to website use and internet use for the purposes of market research and to tailor these internet pages to needs. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking).

You can prevent the installation of the cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all features of this website to the full extent.

In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), and the processing of this data by Google, by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on this link:

Deactivate Google Analytics

An opt-out cookie will be set, which will prevent the future collection of your data when visiting this website. The opt-out cookie is valid only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

For more information on privacy in connection with Google Analytics, see the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=en).

b) Google Remarketing
We use the remarketing feature of Google Analytics to target our advertising campaigns – including Google Ads campaigns – at visitors to our website. Based on your previous visits to our website, relevant advertisements are presented to you when you visit other websites in the Google Display Network. The DoubleClick cookie enables Google to display targeted advertising to us and other third parties, which corresponds to interests determined based on your previous visits to our website and/or other websites. This advertising can be displayed on websites of Google and/or other operators of the Google advertising network. We also use the Google Analytics advertising functions to analyze the effectiveness of our own advertising campaigns. If you have agreed in your Google account that your web and app browser history will be linked by Google with your Google account and that information from your Google account will be used to personalize ads, Google uses data from you along with Google Analytics data to create audience lists for cross-device remarketing. Google Analytics first collects Google-authenticated IDs from you as a user on our website that are linked to your Google account. Subsequently, Google Analytics temporarily links these IDs with Google Analytics data to optimize our audiences. Please click here to get an overview of privacy at Google. https://support.google.com/analytics/answer/6004245 

c) Google Conversion Tracking 
We use an online advertising program of Google Inc. on our website with Google AdWords, which also uses conversion tracking. With this tool, Google Ads places a cookie on your end device when you come to our website via a Google advertisement.

The cookie is no longer valid after 30 days. It does not serve for personal traceability. If you visit our website as a user and the cookie is still working, it will be recognizable to us and Google that you clicked on the relevant advertisement and were redirected to our page. Each Google Ads customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Ads customers.

Conversion statistics for Ads customers are created with the data obtained from conversion cookies. As customers of Google Ads, we learn the total number of users who responded to our ad and were then redirected to a webpage tagged with a conversion tracking tag. We do not receive any information in this process that could personally identify you as a user. If you reject the tracking procedure, the cookie of Google Conversion Tracking can be deactivated via your internet browser. If necessary, use the help function of the browser for further information. You can find out more about Google's privacy policy at https://policies.google.com/privacy?gl=en 


d) Klaviyo
We use the services of Klaviyo, Inc ("Klaviyo"), 125 Summer Street, Boston MA, 02111, USA, for the analysis of user behavior in our online shop for our own advertising and market research purposes. Klaviyo also uses cookies and can link your behavior in our webshop with your personal data, provided you have subscribed to our newsletter, created a customer account, or have gone through an order process in our webshop. Klaviyo's privacy policy can be found at https://www.klaviyo.com/legal/privacy/privacy-notice 

When using the services offered by Klaviyo, personal data is transferred to Klaviyo and processed by Klaviyo:

  • Contact details and demographic data, purchase history and details about the consumer's handling of marketing communication;
  • Details about the end devices used to access our website (such as the IP address and the type of operating system and web browser);
  • Dates and times of visiting and using our website;
  • Information about how our website is used (such as the content displayed on our customers' websites and how users navigate between the websites, as well as the date and time of access);
  • Details about how individuals interact with our emails (for example, whether the email is opened and which links in the email are clicked on);
  • URLs that refer visitors to our website.

In order to offer its service, Klaviyo may pass on such personal data to its partner companies. If this is the case, Klaviyo concludes an agreement with these that contains data protection provisions that offer at least as high a level of protection as the provisions of the data protection agreement that Klaviyo has concluded with us. A list of the companies associated with Klaviyo can be found here: https://www.klaviyo.com/legal/subprocessors. 

Klaviyo retains personal data until we instruct Klaviyo to delete them, which does not happen later than 180 days after the date we asked Klaviyo to use the data.

To protect your data in the USA, we have concluded a data processing order ("Data-Protection-Addendum") with Klaviyo based on the standard contractual clauses of the European Commission in order to enable the transmission of your personal data to Klaviyo. This data processing contract can be viewed at the following internet address if interested: https://www.klaviyo.com/privacy/dpa. 

Klaviyo Inc. is a company based in the USA. The transmission to as well as the processing and/or storage of personal data by Klaviyo is based on the standard contractual clauses of the European Commission. You can find these provisions in the contract agreement that we have concluded with Klaviyo: https://www.klaviyo.com/privacy/dpa. 

5. Rights of the Data Subject

You have the right:

  • In accordance with Art. 15 GDPR, to request information about your personal data processed by us. Specifically, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data, if not collected from us, and the existence of automated decision-making including profiling and possibly meaningful information about their details;
  • In accordance with Art. 16 GDPR, to immediately demand the correction of incorrect or completion of your personal data stored by us;
  • In accordance with Art. 17 GDPR, to demand the deletion of your personal data stored with us, unless the processing is necessary for exercising the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise, or defense of legal claims;
  • In accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need them for the assertion, exercise, or defense of legal claims, or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller;
  • In accordance with Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future and in accordance with Art. 77 GDPR, to complain to a supervisory authority. As a general rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

6. Right to Object

If your personal data are processed based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this arising from your particular situation, or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you would like to exercise your right to revoke or object, a simple email to info@aramed.de is sufficient.

7. Data Security

During your visit to our website, we use the widespread SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. This is typically a 256-bit encryption. If your browser does not support 256-bit encryption, we instead resort to 128-bit v3 technology. You can recognize whether a single page of our internet presence is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. Furthermore, we employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or against unauthorized access by third parties. Our security measures are continually improved in accordance with technological development.

8. Login via DocCheck®

For this website, we enable you to log in with your DocCheck user data. DocCheck is a service of DocCheck Medical Services GmbH, Vogelsanger Straße 66, 50823 Cologne ("DocCheck"). The verification of username and password is carried out directly on DocCheck's servers, and we have no ability to read your username or password, for example.

We do not receive any personal data about you as a DocCheck user unless you have explicitly consented to data transfer (e.g., with "DocCheck Personal").

If you, as a DocCheck user, agree to data transfer during login, the following personal data are processed

  • Professional group
  • Salutation (gender)
  • First and last name
  • Email address
  • Address

This personal data is merged with our own data by Teva and used for the above-mentioned purposes.

When using DocCheck, the agreements between you and DocCheck apply, with respect to data protection the DocCheck privacy statement can be found at:

https://more.doccheck.com/en/privacy 

9. Hosting

This website is hosted by an external service provider (host). The personal data collected on this website are stored on the host's servers. This data primarily consists of IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its performance obligations and to follow our instructions regarding this data.

We use the following host:
DigitalOcean, LLC.
101 Avenue of the Americas, 10th Floor
New York, NY 10013

Conclusion of a contract for order processing
To ensure data protection-compliant processing, we have concluded a contract for order processing with our host.

Order processing
We have concluded a contract for order processing (OPC) with the aforementioned provider. This is a contract required by data protection law that ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

10. General Notes and Mandatory Information

Data Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data from access by third parties is not possible.

Storage Duration

Unless a more specific storage period has been mentioned within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you make a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur once these reasons no longer apply.

General Notes on the Legal Basis for Data Processing on This Website

If you have consented to the processing of your personal data, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data are processed according to Art. 9 para. 1 GDPR. If you have consented to the storage of cookies or to access to information on your terminal device (e.g., via device fingerprinting), data processing also takes place on the basis of § 25 para. 1 TTDSG. The consent can be revoked at any time. If your data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data, if they are necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing can also be based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Information on the legal bases applicable in each individual case is provided in the following sections of this privacy policy.

Note on Data Transfer to the USA and Other Third Countries

We use, among other things, tools from companies based in the USA or other data protection-wise not secure third countries. When these tools are active, your personal data may be transferred to these third countries and processed there. We note that in these countries, a data protection level comparable to that in the EU cannot be guaranteed. For example, US companies are obliged to release personal data to security authorities without you as the data subject being able to take legal action against it. It cannot therefore be ruled out that US authorities (e.g., intelligence services) process, evaluate, and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Specific Cases and to Direct Advertising (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims (objection under Art. 21 para. 1 GDPR).

If your personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection under Art. 21 para. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the case of violations of the GDPR, the persons affected have a right of complaint to a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged infringement. The right of complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive the data that we process automatically based on your consent or in fulfillment of a contract, or to have it transferred to yourself or a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as a site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Right to Information, Deletion, and Correction

Under the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if necessary, a right to correct or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection under Art. 21 para. 1 GDPR, a balance must be struck between your and our interests. As long as it is not yet clear whose interests outweigh, you have the right to demand the restriction of the processing of your personal data.
  • If you have restricted the processing of your personal data, this data may only be processed - apart from its storage - with your consent or for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of significant public interest of the European Union or a Member State.

Objection to Advertising Emails
The use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

These data will not be combined with data from other sources.
The collection of these data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this, the server log files must be recorded.

Inquiry by Email, Phone or Fax
If you contact us by email, phone, or fax, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of handling your request. We do not pass on these data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this was requested.

The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Plugins and Tools

Google Web Fonts (local Hosting)
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google's servers.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=en. 

11. Current Status and Changes to This Privacy Policy

This Privacy Policy is currently valid and has been updated as of July 2023.

Due to the ongoing development of our website and the services offered there, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed and printed at any time on the website under /privacy.

Data protection authorities require a data processing agreement for the permissible use of Google Analytics. A corresponding template is offered by Google at http://www.google.com/analytics/terms/de.pdf

Source: Translated from https://www.e-recht24.de