ESWT Shock Wave Therapy ESWT Stosswellentherapie ESWT Therapy

Disclosure Obligations Pursuant to Art. 12, 13 et seq. EU-GDPR

I. Name and Address of Controller

Your contact partner as controller within the meaning of the European General Data Protection Regulation (EU-GDPR) and other national data protection laws of the member states and other provisions of data protection law is:

STORZ MEDICAL AG
Lohstampfestrasse 8
8274 T├Ągerwilen
Schweiz

(hereafter "we", "is" or "our")

II. Address of Data Protection Officer

Our data protection officer can be contacted at the following address:

STORZ MEDICAL AG
Lohstampfestrasse 8
8274 T├Ągerwilen
Schweiz
This email address is being protected from spambots. You need JavaScript enabled to view it.

III. Data Processing on our Website

1. Provision of the Website and Creation of Log Files

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose, your personal data must be stored for the duration of the session.

Your personal data are stored in log files to ensure the functionality of the website. Your personal data also help us to optimise the website and to ensure that our IT systems are secure. Your personal data will not be processed in any other way.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In case your personal data are recorded for the purpose of providing the website, this happens as soon as the relevant session has ended.

If your personal data is stored in log files, they will be erased after 24 hours at the latest. Logfiles of the mail server are erased after 30 days. If the log files are stored beyond this period, your personal data will be made anonymous so that it is no longer possible to assign them to a website visitor.

iv. Objection and Rectification Option

The collection of your personal data for the provision of the website and the storage of your personal data in log files is mandatory for operating the website. Consequently, you cannot object to this data processing.

2. Use of Technically Necessary Cookies

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The purpose of using technically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For these functions to work your web browser has to be recognised even after a page change. Your personal data will not be processed in any other way.

iii. Duration of Storage

The data are erased as soon as the are no longer necessary to achieve the purposes for which they were collected; this happens, in particular, as soon as the relevant session has ended.

iv. Objection and Rectification Option

Cookies are stored on your computer and transmitted from the computer to our website. You therefore have complete control over the use of cookies.

By adjusting the settings of your internet browser you can deactivate or restrict the transfer of cookies. Cookies which are already stored may be deleted by you at any time. This can also be done automatically. If you deactivate cookies for our website, you might not be able to use all functions of our website.

3. Creating a Customer Account

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of creating a customer account is Art. 6 (1) lit. b EU-GDPR.

ii. Purpose of the Data Processing

Your customer account facilitates the way contracts are entered into between you and us and is also for customer care purposes. The processing of your personal data when creating your customer account is necessary in order to perform a contract between you and us or to implement pre-contractual measures and is also for customer care purposes.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected; this happens at the latest when you close your customer account.

iv. Objection and Rectification Option

You can close your customer account at any time. In this case, your personal data will be erased unless statutory retention periods prevent deletion.

4. Contact Form and Contacting us by Email

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data transmitted in the course of contacting us is Art. 6 (1) lit. f EU-GDPR. If you contact us to enter into a contract, Art. 6 (1) lit. b EU-GDPR is an additional legal basis for the processing of your personal data.

ii. Purpose of the Data Processing

The processing of your personal data when contacting us only takes place to process your request.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected. For the personal data emailed to us, this is the case when your request has been processed and statutory retention periods do not prevent erasure.

iv. Objection and Rectification Option

You can always object to the processing of your personal data in the context of contacting us for the future. In this case, however, we cannot process your request any further. All personal data stored in the context of contacting us will be erased, unless statutory retention periods prevent erasure.

5. Newsletter

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of sending the newsletter is your given consent, Art. 6 (1) lit. a EU-GDPR.

ii. Purpose of the Data Processing

The collection of your personal data is for the purpose of sending you the newsletter. The purpose of processing your personal data in the context of sending you the newsletter is to send you updates, offers and, possibly, to promote sales by selling goods or services.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected. Your personal data will be stored until you unsubscribe from our newsletter.

iv. Objection and Rectification Option

You can withdraw your consent to receiving the newsletter at any time or use the unsubscribe link in each newsletter to object to receiving the newsletter for the future.

6. Comment and Blog Functionality

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of the comment and blog functionality is Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The processing of your personal data in the context of the comment and blog functionality is to enable a transparent and individual communication between you and us. We process your personal data in order to be able to defend ourselves against liability claims by third parties, if we publish an unlawful comment.

iii. Duration of Storage

Your personal data will be erased as soon as they are no longer necessary to achieve the purposes for which they were collected. In our case, this happens when the blog post is deleted.

iv. Objection and Rectification Option

You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. In this case, however, we will no longer be able to keep your comment published on our website.

7. Doctor/Treatment Center Search

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of the doctor/treatment center search is your given consent pursuant to Art. 6 (1) lit. a EU-GDPR.

ii. Purpose of the Data Processing

The purpose of processing your personal data in the context of the doctor/treatment center search is to provide interested users of our website with the locations of doctors or treatment centers.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected. Your personal data will therefore be stored until you withdraw your consent.

iv. Objection and Rectification Option

You can withdraw your consent to the publication of your contact data in the doctor/treatment center search at any time.

8. Google Maps and Google Fonts

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data is Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The processing of your personal data in the context of the use of Google Maps and Google Fonts helps us to design and present our website in an adequate and uniform manner.

iii. Duration of Storage

Your personal data will be erased as soon as they are no longer needed for the aforementioned purposes.

iv. Objection and Rectification Option

If you do not want your personal data to be processed in the context of the use of Google Maps and Google Fonts, you can adjust the settings of your internet browser (e.g. by installing plugins or add-ons).

9. Google Analytics

i. Scope of Processing

This website uses Google Analytics, the web analysis service of Google. Google Analytics uses so-called "cookies", text suggestion files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie concerning your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will be abbreviated beforehand by Google within member states of the European Union or in other states which are signatories to the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transferred to a Google server in the USA and abbreviated there. Google will use this information on behalf of the operator of this website to analyze your use of the website, compile reports on website activities and provide the website operator with additional services associated with the use of the website and the internet. The IP address transmitted in Google Analytics from your browser will not be combined with other Google data.

ii. Legal Basis for the Data Processing

The legal basis for the processing of your personal data is Art. 6 (1) lit. f GDPR.

iii. Purpose of the Data Processing

The processing of your personal data enables us to analyse your browsing habits. By analysing the data obtained we are able to compile information about the use of the individual components of our website. This process helps us to constantly improve our website and make it more user-friendly. These purposes also form the basis of our legitimate interest in the processing of your personal data pursuant to Art. 6 (1) lit. f GDPR. By anonymizing your IP address, your interest in the protection of personal data is sufficiently taken into account.

iv. Duration of Storage

Your personal data will be erased as soon as they are no longer needed for our aforementioned purposes. In our case this happens after 14 months.

v. Objection and Rectification Option

Users of this website who do not wish their data to be captured by Google Analytics may install the browser add-on to deactivate Google Analytics. This add-on tells the Google Analytics JavaScript (ga.js, analytics.js and dc.js) which is running on websites not to allow information to be sent to Google Analytics.

If you wish to deactivate Google Analytics, visit this site and install the add-on to deactivate Google Analytics for your browser. More detailed information about how to install and uninstall the add-on can be found in the relevant help resources for your browser.

Browser and operating system updates may result in the deactivation add-on no longer working as envisaged. Further information about managing add-ons for Chrome can be found here. If you do not use Chrome, ask your browser's manufacturer directly whether add-ons work properly in the browser version that you use.

The latest versions of Internet Explorer occasionally load the add-on to deactivate Google Analytics after data has been sent to Google Analytics. If you use Internet Explorer, therefore, cookies are installed on your computer by the add-on. These cookies ensure that any kind of data that is captured is immediately erased by the server collecting it. Make sure that third party cookies are not deactivated for Internet Explorer. If you erase your cookies, these cookies will be put back again within a short time by the add-on to ensure that your Google Analytics browser add-on continues to work fully.

The browser add-on to deactivate Google Analytics does not prevent data from being sent to the website or to other web analytics services.

For more detailed information concerning the terms and conditions of use and data protection, see

http://www.google.com/analytics/terms/de.html or https://support.google.com/analytics/answer/6004245?hl=de.

IP anonymization is activated on this website.

10. Google Ads

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of the web analysis tool Google Ads is Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The processing of your personal data in the context of the use of Google Ads by Google enables us to analyse the way you use our website. On the basis of the data captured, we are able to compile information about the use of individual areas of our website. This helps us to constantly improve our website and its user-friendliness.

iii. Duration of Storage

Your personal data will be erased as soon as they are no longer needed for our aforementioned purposes.

iv. Objection and Rectification Option

Cookies are stored on your computer and transmitted from the computer to our website. You therefore have complete control over the use of cookies. By adjusting the settings of your internet browser you can deactivate or restrict the transfer of cookies. Cookies which are already stored may be deleted by you at any time. This can also be done automatically. If you deactivate cookies for our website, you might not be able to use all functions of our website.

11. Vimeo

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of the use of Vimeo is Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The processing of your personal data by the video tool Vimeo is to present videos in an uniform manner independently from the device you use.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected.

iv. Objection and Rectification Option

If you do not wish your personal data to be processed in the context of the use of Vimeo, you can adjust the settings of your Internet browser (e.g. by installing plug-ins or add-ons).

In addition, you have complete control over the use of cookies. By adjusting the settings of your internet browser you can deactivate or restrict the transfer of cookies. Cookies which are already stored may be deleted by you at any time. This can also be done automatically. If you deactivate cookies for our website, you might not be able to use all functions of our website.

12. Data Protection Requests Pursuant to Art. 12 et seq. EU-GDPR

i. Legal Basis for the Data Processing

The legal basis for processing of your personal data in the context of processing your data protection request ("data protection request") is Art. 6 (1) lit. c ICW Art. 12 et seq. EU-GDPR. The legal basis for the subsequent documentation of the legally compliant processing of a data protection request is Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The purpose of processing your personal data in the context of processing your data protection request is to answer your data protection enquiry. The subsequent documentation of the legally compliant processing of the respective data protection request is to fulfil the legally required accountability, Art. 5 (2) EU-GDPR.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected. In the case of the processing of data protection requests, this is the case three years after the respective process has ended.

iv. Objection and Rectification Option

You can object to the processing of your personal data for the future at any time in the context of the processing of data protection requests. In this case, however, we will not be able to process your data protection request any further.

The documentation of the legally compliant processing of the respective data protection request is mandatory. Consequently, you cannot object to this data processing.

13. Defending and Enforcing Legal Claims

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data in the context of defending and enforcing legal claims is Art. 9 (2) lit. f or Art. 6 (1) lit. f EU-GDPR.

ii. Purpose of the Data Processing

The purpose of processing your personal data in the context of defending and enforcing legal claims is the defense of unjustified claims and the legal enforcement of claims and rights.

iii. Duration of Storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected.

iv. Objection and Rectification Option

The processing of your personal data in the context of defending and enforcing legal claims is absolutely necessary for the defense and enforcement thereof. Consequently, you cannot object to this.

 

IV. Further data processing besides our website

1. Facebook Insights (Facebook Fanpage)

i. Joint responsibility

We run our Facebook fanpage together with Facebook Ireland Ltd. (hereinafter "Facebook"). For this purpose, we have concluded an agreement with Facebook on who of us fulfils which obligations pursuant to the regulations of the EU-GDPR.

The essential content of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum.

Information on the processing of your personal data by Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data

ii. Legal Basis for the Data Processing

The legal basis for the processing of your personal data is Art. 6 (1) lit. f EU-GDPR.

iii. Purpose of the Data Processing

The processing of your personal data by Facebook Insights enables us to analyse your usage behavior. By evaluating the data captured, we are able to collect information on the usabiltiy of our Facebook fanpage. This helps us to make our Facebook fanpage more adequate and user-friendly.

iv. Origin

The personal data that is captured through the use of our Facebook fanpage is made available to us by Facebook.

v. Duration of Storage

Your personal data will be erased as soon as they are no longer needed for the aforementioned purposes.

vi. Objection and Rectification Option

If you do not want your data to be collected by Facebook Insights in the context of Facebook Insights, you can object to the processing of your personal data at any time for the future. In this case, we will forward your objection request to Facebook.

2. Supplier Questionnaire, Storing of Supplier data and Ongoing Business Relationship

i. Legal Basis for the Data Processing

The legal basis for the processing of your personal data as well as the personal data of the contact persons of your company in the context of the supplier questionnaire, the storing of supplier data and ongoing business relationship is Art. 6 (1) lit. b EU-GDPR or Art. 6 (1) lit. f EU-GDPR.

If you or the contact persons of your company have given your consent, Art. 6 (1) lit. a EU-GDPR is an additional legal basis for the processing of your personal data as well as the personal data of the contact persons of your company.

ii. Purpose of the Data Processing

The purpose of processing your personal data as well as the personal data of the contact persons of your company in the context of the supplier questionnaire, the storing of supplier data and ongoing business relationship is the award, performance and settlement of the respective contract as well as the processing of your personal data for future awards of contract or tenders.

iii. Origin

If we have not received your personal data directly from you, the contact person of your company has provided us with your personal data in the context of the supplier questionnaire.

iv. Duration of Storage

Your personal data as well as the personal data of the contact persons of your company will be erased as soon as they are no longer necessary to achieve the purposes for which they were collected.

In the case of awards of contract, performance and settlement of the respective contract, this happens when the contract on which the work was based has been fulfiled and all claims arising from the contractual relationship are statute-barred or statutory retention periods do not prevent erasure.

In the case of processing your personal data for future awards of contract or tenders, this is the case if your company is permanentely no longer interested in future awards of contract or tenders.

v. Objection and Rectification Option

The processing of your personal data is absolutely necessary for the awards of contract, performance and settlement of the respective contract. Consequently, you cannot object to this data processing.

You can withdraw your consent at any time for the future or object to the processing of your personal data in the context of future awards of contracts or tenders for the future.

3. Relaying to our Sales Partners

i. Legal Basis for the Data Processing

Legal basis for the processing of your personal data in the context of the relaying to our sales partners is Art. 6 (1) lit. b EU-GDPR.

ii. Purpose of the Data Processing

The purpose of the processing of your personal data in the context of relaying personal data to our sales partners is to get in touch with you as requested to initiate, conclude and perform contracts between you and our sales partners.

iii. Duration of Storage

The peronal data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected. In the case of relaying personal data to our sales partners this happens on our part after relaying your personal data to our sales partners.

iv. Objection and Rectification Option

You can at any time object to the processing of your personal data for the future in the context of relaying personal data to our sales partners. In this case, however, we cannot forward your request to be contacted by our sales partners.

 

IV. Categories of Recipients

Within our company, those bodies and departments receive personal data that they need to fulfil the aforementioned purposes. In some cases we use various types of service providers and transfer your personal data to other trusted recipients. These can include:

- Banks
- IT service provider
- Lawyers and courts
- Sales partners

 

V. Transfer of Personal Data to a Third Country

As part of the processing of your personal data, we may transfer your personal data to trustworthy and specially selected service providers in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA). We only work with service providers who provide us with the appropriate guarantees for the security of your personal data and can guarantee that your personal data will be processed in accordance with the strict European data protection standards.

We cannot rule out that we may transfer data to some service providers in the USA. These are certified in accordance with the "EU-U.S. and Swiss-U.S. Privacy Shield Framework".

Further information on the "EU-U.S. and Swiss-U.S. Privacy Shield Framework" can be found at https://www.privacyshield.gov.

 

VII. Your Rights

You have the following rights against us:

i. Right of Access

You have the right to access as to whether or not and, if so, what your personal data of you are being processed by us. Is this the case, we will additionally give you access to the following:

(1) the purpose of the processing;
(2) the categories of data;
(3) the recipients of your personal data;
(4) the envisaged period of storgage or the criteria used to determine the envisaged period of storage;
(5) any other rights you have;
(6) where we have not optained the personal data from you: Any available information as to their source;
(7) if available: the existence of automated decision-making and any information about the logic involved, as well as the significance and the envisaged consequences of the processing.

ii. Right to Rectification

You have the right to rectification and/or completion of the personal data that is being processed by us, if it is inaccurate or incomplete.

iii. Right to Ristriction of Processing

You have the right to ristricition of processing of your personal data, provided that

(1) we verify the accuracy of your personal data being processed by us;
(2) the processing of your personal data is unlawful;
(3) you need the personal data being processed by us for the purpose of prosecution when we no longer need your personal data for the purpose of processing;
(4) you have objected to the processing of your personal data and we are in the process of verifying your objection.

iv. Right to Erasure

You have the right to erasure of your personal data, provided that

(1) we no longer need your personal data for its original purpose;
(2) you withdraw your consent and there is no other legal ground for processing your personal data;
(3) you object to the processing of your personal data and, unless it is about direct marketing, there are no overriding grounds for further processing;
(4) the processing of your personal data is unlawful;
(5) the erasure of your personal data is required by law;
(6) your personal data have been collected in relation to the offer of information society services when you were a minor.

v. Right to Notification

If you have asserted your right to rectification, erasure of data or restriction of processing, we will communicate any rectification, erasure of data or restriction of processing to any recipients of your personal data.

vi. Right to Data Portibility

You have the right to receive your personal data processed by us on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format as well as to transmit them to another controller. If it is technically feasable, you have the right to have them directly transmitted from us to another controller.

vii. Right to Object

You have the right to object to the processing of your personal data on particular grounds. If this is the case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.

If your personal data is being processed for the purpose of direct marketing, you have the right to object at any time.

viii. Right of Withdrawal

You have the right to withdraw your consent given to us at any time. The withdrawal of the consent does not affect the lawfulness of the processing carried out based on the consent before your withdrawal.

ix. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of your personal data by us infringes the regulations of the EU-GDPR.

If you have any questions, please do not hesitate to contact our data protection officer at any time.