Privacy Statement – Storz Medical

Obligations to provide information in accordance with Article 12 et seq. EU-GDPR

I. Scope of data protection notice

This data protection notice applies to the following websites of STORZ MEDICAL AG:

storzmedical.com
eswt.info
emtt.info
ed-therapy.info
tps-neuro.com
mystorzmedical.com
e-dialogue.ch
smag-service.com
eifu-storzmedical.com

II. Name and contact details of the data controller

Your contact, as the controller within the meaning of the EU General Data Protection Regulation (EU-GDPR) and other national data protection laws of EU Member States and other provisions of data protection law:

STORZ MEDICAL AG
Lohstampfestrasse 8
8274 Tägerwilen
Switzerland

This email address is being protected from spambots. You need JavaScript enabled to view it.

(hereinafter referred to as »we«, »us«, or »our«)

III. Contact details of the data protection officer

Our data protection officer can be contacted as follows:

STORZ MEDICAL AG
Lohstampfestrasse 8
8274 Tägerwilen
Switzerland

This email address is being protected from spambots. You need JavaScript enabled to view it.

IV. General provisions on data processing by our websites

a. Scope

In principle, we process your personal data only to the extent that this is required for us to provide a properly functioning website and our content and services.

b. Legal basis

To the extent that we obtain consent from you to process your personal data, the legal basis for processing is Art. 6(1)(a) EU-GDPR.

If your personal data is processed for performance of a contract with you or in the course of preparing a contractual relationship, the legal basis for processing is Art. 6(1)(b) EU-GDPR.

To the extent that processing of personal data is required to fulfil our legal obligations, the legal basis for processing is Art. 6(1)(c) EU-GDPR.

If your personal data are processed to safeguard our legitimate interests or those of a third party, whereby these interests do not override your interests, fundamental rights and freedoms, the legal basis for processing is Art. 6(1)(f) EU-GDPR.

c. Retention period

Your personal data will be erased as soon as the purpose of retention no longer exists or, if you have the right of withdrawal, you withdraw your consent. Data may also be stored if this has been stipulated by the EU or national legislator in EU regulations, laws or other provisions to which we are subject. In this case, however, your personal data will be rendered inaccessible.

d. External links

If we provide links to external websites, this data protection notice does not apply to processing of personal data by the controller of the linked website. We therefore recommend that you read the data protection information on the external website that you have visited. To the extent that this linking requires a legal basis for the resulting processing of your personal data, you are deemed to give your consent under Art. 6(1)(a) EU-GDPR by clicking on the link.

Normally, the following personal data are processed as a result of your clicking on the link (hyperlink):

IP address
screen resolution
browser used
bandwidth
language settings

V. Data processing on all of our websites

1. General principles

a. Provision of the website and creation of logfiles

(1) Description and scope

As part of providing our website, we process your personal data to enable the smooth delivery of our website on your PC or mobile device. To do this, some of your personal data must be stored for the duration of a session.

We also store your personal data in logfiles in order to ensure the functionality of our website and the security of our IT systems. Your personal data is not otherwise processed in logfiles.

The following personal data are processed for the provision of the website and to create logfiles:

IP address
access date
access time
previously visited website
browser used
operating system used

(2) Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

(3) Purpose

The purpose of data processing is to provide the website, ensure functionality of the website, and ensure security of the IT systems used for this.

The purpose also includes our legitimate interest.

(4) Retention period

Your personal data are stored in logfiles for 24 hours. Your personal data are otherwise stored only for the duration of the session as part of the provision of our website.

(5) Option to object to processing and request destruction of data

The processing of your personal data and storage of your personal data in logfiles is necessary for the provision of the website, to ensure the website functionality and to safeguard the IT systems used. Therefore, it is not possible to object to processing.

b. Essential cookies

(1) Description and scope

We process your personal data with the use of essential cookies because many functions and services of our website that make it easier or even possible in the first place to use our website do not function properly without cookies (known as essential cookies).

We store some of your personal data using these essential cookies, but they are only used for these functions and services. Your personal data is not otherwise processed.

A list of the essential cookies that we use, their purposes, retention period and other information can be found at the end of this data protection notice.

The use of essential cookies involves processing of the following personal data:

IP address
language settings of your browser
browser used

(2) Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

(3) Purpose

The purpose of data processing is the provision of the functions and services of our website.

The purpose also includes our legitimate interest.

(4) Retention period

Generally for the duration of the session in question, unless stated otherwise in the detailed information in the list of essential cookies that we use.

(5) Option to object to processing and request destruction of data

Essential cookies are stored on your PC or mobile device and transmitted from there to our website. Therefore, you have full control over the use of essential cookies.

You can disable or limit the transmission of cookies by changing your browser settings. Cookies that are already stored may be deleted at any time. This can also take place automatically. If cookies for our website are disabled, you may not be able to make full use of all of the website’s functions.

c. Non-essential cookies

To the extent that non-essential cookies are used as part of the functions and services of our website, you will find a list of these cookies, their purposes, retention period and other information at the end of this data protection notice.

d. Vimeo videos

(1) Description and scope

We embed Vimeo videos on our website to display video content. This enables us to display content that we want to present in an engaging and consistent way on our website, regardless of the user’s end-device. Vimeo is a service of Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA.

The embedding of Vimeo videos involves processing of the following personal data:

IP address
browser used
screen resolution.

Other personal data may be processed by Vimeo when a video is played. Information about this can be found at:

https://vimeo.com/privacy

(2) Legal basis

Consent, Art. 6(1)(a) EU-GDPR.

(3) Purpose

The purpose of data processing is the embedding of video content in an engaging and consistent way that is independent of the end-device.

(4) Retention period

We process your personal data only until the end of your visit to the website (extended data protection mode). We do not have any influence on the erasure of your personal data by Vimeo. Further information can be found at:

https://vimeo.com/privacy

(5) Option to object to processing and request destruction of data

You have the option to withdraw your consent to processing at any time. You can do this in particular by ending use and/or reloading the website. You can also disable the use of cookies via the settings.

e. OpenStreetMap

(1) Description and scope

We embed OpenStreetMap on our website to display map content. This enables us to display content that we want to present in an engaging and consistent way on our website, regardless of the user’s end-device. OpenStreetMap is a service of Openstreetmap Foundation, Cowley Road, Cambridge, CB4 0WS, United Kingdom,

The embedding of OpenStreetMap involves processing of the following personal data:

IP address
screen resolution
language settings

(2) Legal basis

Consent, Art. 6(1)(a) EU-GDPR.

(3) Purpose

The purpose of processing is to display map content.

(4) Retention period

We process your personal data only until the end of your visit to the website (extended data protection mode). Further information can be found at:

https://sosm.ch/de/

(5) Option to object to processing and request destruction of data

You have the option to withdraw your consent to processing at any time. You can do this in particular by ending use and/or reloading the website.

2. Communication

a. Contact form and email contact

(1) Description and scope

The contact form and email contact involve processing of the following personal data:

last name
first name
email address
contents
other stated contact details such as practice/institution, address and/or telephone number.

(2) Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

(3) Purpose

The purpose of data processing is to handle your query.

(4) Retention period

Your personal data are stored until the purpose no longer exists. This is generally the case once your query had been handled, unless any longer retention periods apply.

(5) Option to object to processing and request destruction of data

You have the option to object at any time to future processing of your personal data within the scope of making contact. If you do this, however, we cannot continue to handle your query. In this case, all personal data that are stored in the course of making contact are erased, unless statutory retention periods prevent them from being erased. Your personal data are then rendered inaccessible until the end of the statutory retention periods.

3. Marketing and E-commerce

a. Direct marketing

(1) Description and scope

We process your personal data as part of direct marketing campaigns, if we are permitted to advertise to you without your consent within the narrow scope of application of special laws. Furthermore, we process your personal data if you have consented to contact for advertising purposes.

Direct marketing involves processing of the following personal data:

form of address
first name
last name
postal address
email address
telephone number

(2) Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR (post).

Consent, Art. 6(1)(a) EU-GDPR (post, email, telephone).

(3) Purpose

The purpose of data processing is to carry out direct marketing campaigns and to send offers and additional information.

(4) Retention period

Your personal data is stored until you object to processing. Information about this can be found in the advertising material in question.

(5) Option to object to processing and request destruction of data

You can object at any time to future processing of your personal data as part of direct marketing campaigns.

b. Web analysis by Matomo (formerly PIWIK)

(1) Description and scope

We use the open-source software tool Matomo (formerly PIWIK) to analyse your web surfing behaviour within the scope of web analysis. When individual pages of our website are accessed, the following data are stored:

two bytes of the IP address of the accessing system
the web page being accessed
the website from which you were sent to the accessed web page (referrer)
the sub-pages that were accessed from the accessed website
duration of stay on the website
frequency of accessing the website

The software that performs analysis runs exclusively on servers of our website. Users’ personal data are only stored there; data is not transmitted to third parties.

(2) Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

(3) Purpose

The purpose of data processing is to analyse your web surfing behaviour. The analysis of the gathered data enables us to compile information about the use of individual components of our website. This helps us to constantly improve our website and its user-friendliness.

(4) Retention period

The data are erased as soon as they are no longer needed for our recording purposes. In our case, this is 24 months after visiting the website.

(5) Option to object to processing and request destruction of data

You can object at any time to future processing of your personal data as part of web analysis.

You can disable or limit the storage of cookies by changing your web browser settings. Previously saved cookies may be deleted at any time. This can also take place automatically. If cookies for our website are disabled, it is possible that not all of the website’s functions can be used fully any more.

Other information about processing of your personal data by Matomo is available at:

https://matomo.org/docs/privacy/

c. Google Tag Manager

(1) Description and scope

We use Google Tag Manager to simplify the management and provision of tracking codes (known as tags) on our website. It enables us to manage tracking and analysis tags. It also improves our website performance and ensures a better overview of our implementation of marketing tags. Google Tag Manager is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland.

The use of Google Tag Manager involves processing of the following personal data:

IP address
technical connection data such as date and time
device data.

(2) Legal basis

Consent, Section 25, para. 1 TDDDG (German Telecommunications and Digital Services Data Protection Act in conjunction with Art. 6(1)(a) EU-GDPR.

(3) Purpose

The purpose of data processing is to simplify the management and provision of tracking codes on our website and to manage tracking and analysis tags.

(4) Retention period

We process your personal data only until the end of your visit to the website (extended data protection mode). We do not have any influence on the erasure of your personal data by Google. Further information can be found at:

https://policies.google.com/privacy?hl=en&gl=en#inforetaining

(5) Option to object to processing and request destruction of data

d. Google Ads and Google Ads Remarketing

(1) Description and scope

We place Google Ads cookies on our website, which enable us to monitor your behaviour on our website using a cookie ID, to display personalised advertising to you and to measure the effectiveness of advertising campaigns run by us. Google Ads Remarketing allows us to advertise to you again on third-party websites after visiting our website.

The cookie ID enables us to trace that you reached our website after clicking on a Google Ads web advertisement. We also recognise you as a visitor to our website. Using the data collected in this way, Google provides us with a purely statistical analysis of our advertising activities. Google Ads is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland.

The use of the Google Ads cookie ID involves processing of the following personal data:

products that were placed in the basket
which ads were clicked on
actions that were carried out after clicking on an ad
visits to our own website.

(2) Legal basis

Consent, Art. 6(1)(a) EU-GDPR.

(3) Purpose

The purpose is to make it possible to statistically analyse the Google Ads commissioned by us.

(4) Retention period

https://policies.google.com/privacy?hl=en&gl=en#inforetaining

(5) Option to object to processing and request destruction of data

e. Google Conversions Tracking

(1) Description and scope

Within the scope of web analysis, we use Google Enhanced Conversions to analyse your web surfing behaviour on our website in more detail, to offer you personalised advertising using the information collected in this way via Google Ads, and to measure the effectiveness of our Google advertising activities. Google Enhanced Tracking is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland.

Google Enhanced Conversions involves processing of the following personal data:

IP address
browser used
referrer website
website visits
product views
form entries
date and time of access.

(2) Legal basis

Consent, Art. 6(1)(a) EU-GDPR.

(3) Purpose

The purpose of data processing is to analyse your web surfing behaviour on our website and to measure and optimise our Google advertising campaigns.

(4) Retention period

https://policies.google.com/privacy?hl=en&gl=en#inforetaining

(5) Option to object to processing and request destruction of data

f. Meta Pixel and Conversion API

(1) Description and scope

Within the scope of web analysis, we use Meta Pixel and Conversion API to analyse your web surfing behaviour on our website, to offer you personalised advertising using the information collected in this way via Facebook and Instagram, and to measure the effectiveness of our Meta advertisements. Meta Pixel and Conversion API are services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We process the following personal data within the scope of using Meta Pixel and Conversion API:

IP address
browser used
referrer website
website visits
product views and completed purchases
form entries
date and time of access
mouse and keyboard behaviour.

(2) Legal basis

Consent, Art. 6(1)(a) EU-GDPR.

(3) Purpose

The purpose of data processing is to analyse your web surfing behaviour on our website and to measure and optimise our Meta advertising campaigns.

(4) Retention period

We process your personal data only until the end of your visit to the website. We do not have any influence on the erasure of your personal data by Meta Platforms Ireland Limited. Further information can be found at:

https://www.facebook.com/about/privacy

(5) Option to object to processing and request destruction of data

4. Data protection and the law

a. Exercising your data subject rights under Article 12 et seq. EU-GDPR

(1) Description and scope

We process your personal data within the scope of data subject rights. In this regard, we process the contact details you provided only for the purpose of handling and answering your message and for the onward documentation of lawful processing within the scope of our duty of accountability.

The handling of data subject rights involves processing of the following personal data:

first name
last name
postal address
email address
telephone book.

(2) Legal basis

Legal obligation, Art. 6(1)(c) in conjunction with Art. 12 et seq. EU-GDPR.

Legitimate interest for onward documentation, Art. 6(1)(f) EU-GDPR.

(3) Purpose

Lawful processing of your data subject rights under data protection law.

(4) Retention period

3 years after completion of handling the process in question.

(5) Option to object to processing and request destruction of data

You have the option to object at any time to future processing of your personal data within the scope of handling your data subject rights. If you do this, however, we cannot continue to handle your data subject rights under data protection law.

It is strictly necessary to document the lawful processing of any handling of your data subject rights. It is therefore not possible to withdraw consent to this.

b. Defence and enforcement of rights

(1) Description and scope

We process your personal data whenever you exercise legal claims against us or we exercise claims and rights against you.

(2) Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

(3) Purpose

The purpose of data processing is to defend unjustified claims and to legally enforce and exercise claims and rights.

This also includes our legitimate interest.

(4) Retention period

Your personal data are stored until the purpose no longer exists. This is generally the time at which a decision on a matter becomes final and absolute.

(5) Option to object to processing and request destruction of data

The processing of your personal data as part of defence and enforcement of rights is strictly necessary for the defence and enforcement of rights. It is therefore not possible to withdraw consent to this.

VI. Other data processing on our portals »mystorzmedical.com«, »tps-neuro.com« and »e-dialogue.ch«

1. Customer account registration

a. Description and scope

We offer you the option on our website to create a customer account once registration is complete. This makes it easier for you to use the services that we offer.

Registration and opening a customer account involves the processing of the following personal data:

last name
first name
email address
business address (practice/institution)
telephone number

b. Legal basis

Performance of a contract, Art. 6(1)(b) EU-GDPR.

c. Purpose

The purpose of data processing is to provide your customer account and the provision of any other additional content and services as the case may be.

d. Retention period

Your personal data will be stored for the duration of provision of your customer account.

e. Option to object to processing and request destruction of data

You have the option to delete your customer account at any time. In this case, your personal data are erased, unless statutory retention periods preclude deletion.

2. Newsletter

a. Description and scope

The following personal data are processed in order to deliver our newsletter:

first name
last name
email address.

b. Legal basis

Consent, Art. 6(1)(a) EU-GDPR.

c. Purpose

The purpose of data processing is to deliver our newsletter.

d. Retention period

The duration for which your personal data are stored depends on the continued existence of your consent.

e. Option to object to processing and request destruction of data

You have the option to withdraw your consent to processing at any time. You can do this by unsubscribing from our newsletter. In this case, your personal data will be erased, which means we can no longer include you in the delivery of our newsletter.

VII. Further data processing on the website »storzmedical.com«

1. Comment and blog functionality

a. Description and scope

We process your personal data to provide the comment and blog functionality. In order to defend against any third-party liability claims, your personal data may also be processed if unlawful comments are posted.

The embedding of the comment and blog functionality involves the processing of the following personal data:

name
content of the comment
email address.

b. Legal basis

Consent, Art. 6(1)(a) EU-GDPR.

c. Purpose

The purpose of data processing is to provide the comment and blog function and to defend against third-party liability claims in the event that unlawful comments are posted.

d. Retention period

The duration for which your personal data are stored depends on the continued existence of your consent.

e. Option to withdraw consent and request destruction of data

You have the option to withdraw your consent to processing at any time. In this case, your personal data are erased, unless statutory retention periods preclude deletion. The comment and blog functionality then ceases to be available to you.

VIII. Other data processing alongside our website

1. Facebook Page

a. Description and scope

We process your personal data as part of running our Facebook Page, in order to contact and interact with users of and visitors to the social network »Facebook«. We also occasionally publish information about our company and associated offers.

If you contact us directly through our Facebook Page (e.g. through Messenger), the data you have shared will only be processed for the purpose of recording and answering your customer/interested party query.

We are also able to generate statistics about visits to our Facebook Page. This information is collected by Meta (»Facebook Insights«) and enables us to design the marketing of our activities in a more effective and targeted way.

With regard to Facebook Insights data, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are the joint controllers for the purpose of data processing. To this end, we have concluded an agreement with Meta Platforms Ireland Limited regarding who handles which obligations under the EU-GDPR.

The essential content of this agreement is available to view at:

https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/legal/terms/page_controller_addendum

Details of what data Meta uses for analytics in connection with our Facebook Page and what information Meta provides for the purpose of data processing in connection with the Facebook Insights functionality can be found here:

https://de-de.facebook.com/legal/terms/information_about_page_insights_data

Other information about processing of your personal data by Meta Platforms Ireland Limited is available at:

https://www.facebook.com/about/privacy and https://de-de.facebook.com/legal/terms/information_about_page_insights_data

b. Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

c. Purpose

The purpose of data processing is to analyse your visitor behaviour on our Facebook Page and to design our Facebook Page according to your interests and to handle enquiries.

d. Retention period

Information concerning how long your personal data are stored for by Meta Platforms Ireland Limited is available at:

https://www.facebook.com/about/privacy

e. Option to object to processing and request destruction of data

If you do not wish for your personal data to be collected as part of the running of our Facebook Page, you have the option at any time to object to future processing of your personal data as part of the running of our Facebook Page. In this case, we will forward your objection request to Meta Platforms Ireland Limited.

2. Instagram channel

a. Description and scope

We process your personal data as part of running our Instagram channel, in order to contact and interact with users of and visitors to the social network »Instagram«. We post information about our company on this channel.

If you contact us directly through our Instagram channel (e.g. Via a direct message), the data you have shared will only be processed for the purpose of recording and answering your customer/interested party query.

We are also able to generate statistics about visits to our Instagram channel. This information is collected by Meta (»Instagram Insights«) and enables us to design the marketing of our activities in a more effective and targeted way.

With regard to Instagram Insights data, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are the joint controllers for the purpose of data processing. To this end, we have concluded an agreement with Meta Platforms Ireland Limited regarding who handles which obligations under the EU-GDPR.

The essential content of this agreement is available to view at:

https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/legal/terms/page_controller_addendum

Details of what data Meta uses for analytics in connection with our Instagram channel and what information Meta provides for the purpose of data processing in connection with the Instagram Insights functionality can be found here:

https://de-de.facebook.com/legal/terms/information_about_page_insights_data

Other information about processing of your personal data by Meta Platforms Ireland Limited is available at:

https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/legal/terms/information_about_page_insights_data

b. Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

c. Purpose

The purpose of data processing is to analyse the success of our Instagram channel and to design our Instagram channel according to your interests and to handle enquiries.

d. Retention period

Information concerning how long your personal data are stored for by Meta Platforms Ireland Limited is available at:

https://privacycenter.instagram.com/policy/

e. Option to object to processing and request destruction of data

If you do not wish for your personal data to be collected as part of the running of our Instagram account, you have the option at any time to object to future processing of your personal data as part of the running of our Instagram channel. In this case, we will forward your objection request to Meta Platforms Ireland Limited.

3. LinkedIn page

a. Description and scope

We process your personal data as part of running our LinkedIn page, in order to contact and interact with users of and visitors to the professional social network »LinkedIn«. We post information about our company on this page.

If you contact us directly through our LinkedIn page (e.g. via a message), the data you have shared will only be processed for the purpose of recording and answering your query.

We are also able to generate statistics about visits to our LinkedIn page. This information is collected by LinkedIn (»Page Insights«) and enables us to design the marketing of our activities in a more effective and targeted way.

With regard to Page Insights data, we and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are the joint controllers for the purpose of data processing. To this end, we have concluded an agreement with LinkedIn Ireland Unlimited Company regarding who handles which obligations under the EU-GDPR.

The essential content of this agreement is available to view at:

https://legal.linkedin.com/pages-joint-controller-addendum

Details of what data LinkedIn uses for analytics in connection with our LinkedIn page and what information LinkedIn provides for the purpose of data processing in connection with the Page Insights functionality can be found here:

https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=de

Other information about processing of your personal data by LinkedIn Ireland Unlimited Company is available at:

https://de.linkedin.com/legal/privacy-policy

b. Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

c. Purpose

The purpose of data processing is to analyse the success of our LinkedIn page and to design our LinkedIn page according to your interests and to handle enquiries.

d. Retention period

Information concerning how long your personal data are stored for by LinkedIn Ireland Unlimited Company is available at:

https://www.linkedin.com/legal/privacy-policy

e. Option to object to processing and request destruction of data

If you do not wish for your personal data to be processed by LinkedIn, you have the option at any time to object to future processing of your personal data as part of the running of our LinkedIn page.

Other information about processing of your personal data by LinkedIn is available at:

https://de.linkedin.com/legal/privacy-policy

4. YouTube channel

a. Description and scope

We manage a YouTube channel, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As the owner of YouTube, Google Ireland Limited collects and processes personal data within the scope described in its privacy policy.

Information about processing of your personal data by Google Ireland Limited is available at:

https://policies.google.com/privacy?hl=en&gl=en

If you contact us directly through our YouTube channel (e.g. via a message or a comment), the data you have shared will only be processed for the purpose of recording and answering your query.

We are also able to generate statistics about visits to our YouTube channel. This information is collected by YouTube through the »Analytics« service and enables us to design the marketing of our activities in a more effective and targeted way.

Details of what data YouTube uses for analytics in connection with our YouTube channel and what information YouTube provides for the purpose of data processing in connection with the Analytics functionality can be found here:

https://support.google.com/youtube/answer/9002587?hl=en

b. Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

c. Purpose

The purpose of data processing is to analyse your behaviour when visiting our YouTube channel, to analyse the success of the videos we have uploaded and to handle enquiries.

d. Retention period

Information concerning how long your personal data are stored for by Google Ireland Limited is available at:

https://policies.google.com/privacy?hl=en&gl=en#inforetaining

e. Option to object to processing and request destruction of data

If you do not wish for your personal data to be processed by Google Ireland Limited, you have the option at any time to object to future processing of your personal data as part of the running of our YouTube channel. In this case, we will forward your objection request to Google Ireland Limited.

5. Service provider and supplier system, running of calls for tender

a. Description and scope

Within the scope of repeat instructions for services, the procurement of products and the running of calls for tender, we manage a database in which we process not only the company name, but also the names and business contact details of relevant contact partners, in particular. We process the following personal data in our database:

last name
first name
practice/clinic name
business telephone number
business email address
business address.

b. Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

c. Purpose

The purpose of data processing is the internal provision of suitable suppliers and service providers including their contact partners for future instructions, purchases and running of calls for tender.

d. Retention period

Your personal data are stored until the purpose no longer exists. This is generally the case when a future instruction or a future purchase will no longer go ahead or the contact partner in question is no longer available as the contact partner.

e. Option to object to processing and request destruction of data

You can object at any time to future processing of your personal data as part of the service provider and supplier system.

6. Transmission of your data to our sales partners for conclusion of business

a. Description and scope

To the extent that you contact us in preparation for conclusion of a contract, we transmit the personal data that you provide to our sales partners:

last name
first name
business email address
business telephone number
business address.

Our sales partners look after the preparation, conclusion and execution of the contract.

b. Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.

c. Purpose

The purpose of data processing is to establish contact, according to your preferences, for the preparation, conclusion and execution of contracts between you and our sales partners.

d. Retention period

Your personal data are stored until the purpose no longer exists. This is the case once your data have been transmitted to our sales partners.

e. Option to object to processing and request destruction of data

You have the option to object at any time to future processing of your personal data within the scope of transmission to our sales partners. In this case, however, we are unable to forward your request for establishing contact to our sales partners.

IX. Recipient categories

Within our company, personal data is received by those persons and departments that use them for the above-mentioned purposes. In addition, we sometimes use various service providers and send your personal data to other trusted recipients. This include, but are not limited to:

printers
lettershops
scan service
banking institutions
IT service providers
cooperation partners
lawyers, tax advisers and courts.

X. Transmission to third countries

Within the scope of processing your personal data, we may transmit your personal data to trusted service providers in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA).

In doing this, we only work with service providers that give us suitable guarantees for the security of your personal data and are able to guarantee that your personal data will be processed according to strict EU data protection standards. A copy of these suitable guarantees is available to view on our premises.

Whenever we transmit personal data to third countries, this is done on the basis of an ‘adequacy decision’ of the European Commission, or if such a decision does not exist, on the basis of ‘standard data protection clauses’ that are also issued by the European Commission in addition to the agreement of any further assurances on the protection of your personal data.

XI. Your rights

You have the following rights in respect of us:

1. Right of access

You have a right of access to information about whether we process your personal data and what personal data is concerned. In this case, we also provide you with information about

the purpose of processing
the data categories
the recipients of your personal data
the planned retention period or criteria for the planned retention period
your other rights
to the extent that your personal data was not shared with us by you: all available information about their origin
if available: the existence of automated decision making and information about the logic involved, the scope and the intended outcome of processing.

2. Right to rectification

You have a right of rectification and/or completion, to the extent that your personal data processed by us are inaccurate or incomplete.

3. Right to restriction of processing

You have a right to restriction of processing, to the extent that

we check the accuracy of your personal data that have been processed by us
the processing of your personal data is unlawful
you require your personal data that have been processed by us after the purpose ceases to exist in order to exercise your rights
you have filed an objection to the processing of your personal data and we are reviewing this objection.

4. Right to erasure

You have a right to erasure, to the extent that

we no longer require your personal data for their original purpose of use
you withdraw your consent and there is no further legal basis for processing your personal data
you file an objection to the processing of your personal data and - unless it concerns direct marketing - there are no reasons of a higher priority for continued processing
the processing of your personal data is unlawful
the erasure of your personal data is required by law
your personal data as a minor were collected for information society services.

5. Right to notification

To the extent that you have exercised your right to rectification, erasure or restriction of processing, we will notify all recipients of your personal data of this rectification, erasure or restriction of processing.

6. Right to data portability

You have a right to receive your personal data processed by us on the basis of consent or for performance of a contract in a structured, commonly used and machine-readable format and to transmit them to another controller. You also have the right to have these data transmitted to another controller directly by us, to the extent that this is technically feasible.

7. Right to object

Where particular reasons exist, you have the right to object to processing of your personal data. In this case, we cease to process your personal data, unless we are able to demonstrate compelling legitimate grounds for the processing.

If your personal data are processed for the purpose of direct marketing, you have the right to object at any time.

8. Right to withdraw consent

You have the right to withdraw the consent that you gave to us at any time. This does not affect the lawfulness of processing on the basis of consent up to the time of withdrawing consent.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority, if you believe that the processing of your personal data by us breaches the EU-GDPR.

XII. Cookies overview

Provider	Cookie name	Detailed description	Retention period
Storz Medical	Session cookie	Session cookie for the language filter	Duration of the session
Google	Google Tag Manager	Enables the management and activation of analysis and marketing tags. Does not store any personal data itself.	3 months
	Google Ads (Tag)	Enables measurement of the performance of our ads and the display of relevant advertising.
	Google Remarketing (Tag)	Used to show targeted advertising to website visitors later.
	Google Conversion Tracking (Tag)	Measures what actions are taken after clicking on an ad link on our website.

Meta	Meta Pixel	Enables the analysis of use of our website and the display of targeted advertising on Facebook and Instagram.	3 months

If you have any questions, please contact our This email address is being protected from spambots. You need JavaScript enabled to view it.at any time.

Privacy Policy

I. Scope of data protection notice

II. Name and contact details of the data controller

III. Contact details of the data protection officer

IV. General provisions on data processing by our websites

V. Data processing on all of our websites

VI. Other data processing on our portals »mystorzmedical.com«, »tps-neuro.com« and »e-dialogue.ch«

VII. Further data processing on the website »storzmedical.com«

VIII. Other data processing alongside our website

IX. Recipient categories