Privacy Notice pursuant to Art. 12 et seq. GDPR

I. Identity and contact details of the controller

Your contact as controller within the meaning of the European General Data Protection Regulation („GDPR”) and other national data protection laws of the member states as well as other provisions of data protection law is:

STORZ MEDICAL AG
Lohstampfestrasse 8
8274 Tägerwilen
Switzerland

(hereafter "we", "us" or "our")

 

II. Contact details of the data protection officer

Our data protection officer can be contacted at the following address:

STORZ MEDICAL AG
Lohstampfestrasse 8
8274 Tägerwilen
Switzerland
This email address is being protected from spambots. You need JavaScript enabled to view it.

 

III. Data processing on our website

1. Provision of the website and creation of log files

a. Legal basis

Legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f GDPR.

b. Purpose

The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose, your personal data must be stored for the duration of the session.

Your personal data are stored in log files to ensure the functionality of the website. Your personal data also help us to ensure that our IT systems are secure. Your personal data will not be processed in any other way.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In case your personal data are recorded for the purpose of providing the website, this happens as soon as the relevant session has ended.

If your personal data is stored in log files, they will be erased after 24 h at the latest. Logfiles of the mail server are erased after 30 days. If the log files are stored beyond this period, your personal data will be made anonymous so that it is no longer possible to assign them to a website visitor.

d. Objection and rectification option

The collection of your personal data for the provision of the website and the storage of your personal data in log files is mandatory for operating the website. Consequently, you cannot object to this data processing.

2. Technically necessary cookies

a. Legal basis

Legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of using technically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For these functions to work your browser has to be recognised even after a page change. Your personal data will not be processed in any other way.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens, in particular, as soon as the relevant session has ended.

d. Objection and rectification option

An overview of the technically necessary cookies used on our website can be found at the bottom of the page.

In case of permission Cookies are stored on your computer and transmitted from the computer to our website. You therefore have complete control over the use of cookies.

By adjusting the settings of your browser you can deactivate or restrict the transfer of cookies. Cookies which are already stored may be deleted by you at any time. This can also be done automatically. If you deactivate cookies for our website, you might not be able to use all functions of our website.

 

3. Creating a customer account

a. Legal basis

Legal basis for the processing of your personal data in the context of creating a customer account is Art. 6 (1) lit. b GDPR.

b. Purpose

Your customer account facilitates the way contracts are entered into between you and us and is also for customer care purposes. The processing of your personal data when creating your customer account is necessary in order to perform a contract between you and us or to implement pre-contractual measures and is also for customer care purposes.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens at the latest when you close your customer account.

d. Objection and rectification option

You can close your customer account at any time. In this case, your personal data will be erased unless statutory retention periods prevent erasure.

4. Contact form and email contact

a. Legal basis

Legal basis for the processing of your personal data transmitted in the course of contacting us is Art. 6 (1) lit. f GDPR. If you contact us to enter into a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.

b. Purpose

The processing of your personal data when contacting us only takes place to process your request.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data emailed to us, this is the case when your request has been processed and statutory retention periods do not prevent erasure.

d. Objection and rectification option

You can always object to the processing of your personal data in the context of contacting us for the future. In this case, however, we cannot process your request any further. All personal data stored in the context of contacting us will be erased, unless statutory retention periods prevent erasure.

5. Newsletter

a. Legal basis

Legal basis for the processing of your personal data in the context of sending the newsletter is your given consent, Art. 6 (1) lit. a GDPR.

b. Purpose

The collection of your personal data is for the purpose of sending you the newsletter. The purpose of processing your personal data in the context of sending you the newsletter is to send you updates, offers and, possibly, to promote sales by selling goods or services.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. Your personal data will be stored until you unsubscribe from our newsletter.

d. Objection and rectification option

You can withdraw your consent to receiving the newsletter at any time or use the unsubscribe link in each newsletter to object to receiving the newsletter for the future.

6. Comment and blog function

a. Legal basis

Legal basis for the processing of your personal data within the framework of the comment and blog function is Art. 6 (1) lit. f GDPR .

b. Purpose

The processing of your personal data within the context of the comment and blog function serves to enable transparent and individual communication between you and us. In addition, we process your personal data in order to be able to defend ourselves against third-party liability claims in the event of the publication of illegal comments or blog posts.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In our case this happens when the comment or blog post are deleted.

d. Objection and rectification option

You have the possibility at any time to object to the processing of your personal data within the comment and blog function for the future. In this case, however, we can no longer publish your comment or the blog post on our website.

7. Blog reading recommendation (sender)

a. Legal basis

Legal basis for the processing of your personal data in the conteyt of the blog reading recommendation is Art. 6 (1) lit. f GDPR.

b. Purpose

The SWL Blog operated by us is a specialist literature blog on the subject of extracorporeal shock wave lithotripsy, which is aimed at a professional medical audience. The processing of your personal data in the context of the blog reading recommendation serves to recommend one of our scientific articles to a professional colleague known to you.

c. Duration of storage

Your personal data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected. When processing your personal data in the context of the blog reading recommendation, this happens after the recommendation has been sent.

d. Objection and rectification option

You can object to the processing of your personal data within the scope of the blog reasing recommendation at any time for the future.

8. Blog reading recommendation (recipient)

a. Legal basis

Legal basis for the processing of your personal data in the conteyt of the blog reading recommendation is Art. 6 (1) lit. f GDPR.

b. Source

The source from which your personal data originated, within the meaning of Art. 14 (2) lit. f GDPR, is the sender of the blog reading recommendation known to you personally.

c. Purpose

The SWL Blog operated by us is a specialist literature blog on the subject of extracorporeal shock wave lithotripsy, which is aimed at a professional medical audience. The processing of your personal data in the context of the blog reading recommendation is to enable one of your professional colleagues to recommend a scientific article to you that may be of your interest.

d. Duration of storage

Your personal data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected. When processing your personal data in the context of the blog reading recommendation, this happens after the sender of the blog recommendation has sent it to you.

e. Objection and rectification option

You can object to the processing of your personal data within the scope of the blog reasing recommendation at any time for the future.

9. Chat feature

a. Legal basis

Legal basis for the processing of your personal data transmitted in the course of contacting us via chat is Art. 6 (1) lit. f GDPR. If you contact us via chat to enter into a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.

b. Purpose

The processing of your personal data when contacting us via chat only takes place to process your request.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data sending to us, this is the case when your request has been processed and statutory retention periods do not prevent erasure.

d. Objection and rectification option

You have the possibility at any time to object to the processing of your personal data within the contact via chat for the future. In this case, however, we cannot process your request via chat any further. All personal data stored in the context of contacting us via chat will be erased, unless statutory retention periods prevent erasure.

10. Webinar

a. Legal basis

Legal basis for the processing of your personal data in the context of our online webinar is Art. 6 (1) lit. b GDPR.

b. Purpose

The processing of your personal data within the scope of the webinars serves the implementation of online presentation by one of our lecturers and the possibility to enable individual and group-based communication between you and us in the course of our online presentations.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In our case this happens after 30 days at the latest.

d. Objection and rectification option

You have the possibility at any time to object to the processing of your personal data within the webinar for the future. In this case you can no longer participate in the online webinar.

11. Doctor/Treatment Center Search

a. Legal basis

Legal basis for the processing of your personal data in the context of the doctor/treatment center search is your given consent pursuant to Art. 6 (1) lit. a GDPR.

b. Purpose

The purpose of processing your personal data in the context of the doctor/treatment center search is to provide interested users of our website with the locations of doctors or treatment centers.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected. Your personal data will therefore be stored until you withdraw your consent.

d. Objection and rectification option

You can withdraw your consent to the publication of your contact data in the doctor/treatment center search at any time.

12. Google Maps and Google Fonts

a. Legal basis

Legal basis for the processing of your personal data in the context of the integration of Google Maps and Google Fonts is Art. 6 (1) lit. f GDPR.

b. Purpose

The processing of your personal data in the context of the integration of Google Maps and Google Fonts helps you to find our locations more easily and us to display fonts uniformly on our website.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

d. Objection and rectification option

If you do not want your personal data to be collected by Google Fonts, you can make adjustments to the settings of your browser (e.g. by installing plug-ins or add-ons) to prevent your personal data from being transmitted to Google's servers. If your browser does not support Google Fonts, the Google servers are not accessed and the text on our website is displayed in the default font of your system.

13. Matomo

a. Legal basis

Legal basis for the processing of your personal data in the context of using “Matomo” is Art. 6 (1) lit. f GDPR.

b. Purpose

The processing of your personal data enables us to optimise the user-friendliness of our website and promote sales by selling goods or services.

c. Duration of storage

Your personal data will be erased as soon as they are no longer needed to achieve the purpose for which they were processed. If any further processing takes place, your personal data will be anonymised, so that they can no longer be matched to you.

d. Objection and rectification option

You can object to the processing of your personal data in the context of the use of “Matomo” at any time for the future. In order to do so, you must click on the opt-out checkbox at the bottom of the page.

14. Vimeo

a. Legal basis

Legal basis for the processing of your personal data, which are processed through the integration of Vimeo, is Art. 6 (1) lit. f GDPR.

b. Purpose

The processing of your personal data by Vimeo serves to provide an appealing, uniform presentation of video content on our website, independent of your terminal device.

c. Duration of storage

We use Vimeo only with data protection friendly presets. This ensures that no further information about visits to our website is stored beyond the integration. Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case at the latest at the end of your visit to our website.

d. Objection and rectification option

The processing of your personal data, which are processed for the integration of Vimeo, is mandatory. Consequently, there is no possibility for you to object to this processing.

15. Data protection requests pursuant to Art. 12 et seq. GDPR

a. Legal basis

Legal basis for the processing of your personal data in the context of processing your data protection request ("data protection request") is Art. 6 (1) lit. c in connection with Art. 12 et seq. GDPR. Legal basis for the subsequent documentation of the legally compliant processing of a data protection request is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of processing your data protection request is to answer your data protection enquiry. The subsequent documentation of the legally compliant processing of the respective data protection request is to fulfil the obligation of accountability required by law, Art. 5 (2) GDPR.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case at the latest when the respective incident becomes statute-barred.

d. Objection and rectification option

You can object to the processing of your personal data for the future at any time in the context of the processing of data protection requests. In this case, however, we will not be able to process your data protection request any further.

The documentation of the processing of the respective data protection request is mandatory by law. Consequently, you cannot object to this data processing.

16. Defending and enforcing legal claims

a. Legal basis

Legal basis for the processing of your personal data in the context of defending and enforcing legal claims is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of defending and enforcing legal claims is the defence of unjustified claims and the legal enforcement of claims and rights.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

d. Objection and rectification option

The processing of your personal data in the context of defending and enforcing legal claims is absolutely necessary for the defence and enforcement thereof. Consequently, you cannot object to this processing.

 

IV. Further data processing other than on our website

1. Facebook Insights (Facebook Fanpage)

a. Joint controllership

We operate our Facebook fan page together with Facebook Ireland Ltd. (hereinafter “Facebook”). For this purpose, we have concluded an agreement with Facebook governing which of us fulfils which obligations pursuant to the GDPR.

You can read the main provisions of this agreement here: https://www.facebook.com/legal/terms/page_controller_addendum

You can find further information on the processing of your personal data by Facebook at: https://www.facebook.com/legal/terms/information_about_page_insights_data

b. Legal basis

Legal basis for the processing of your personal data in the context of the operation of our Facebook fan page is Art. 6 (1) lit. f GDPR.

c. Purpose

The processing of your personal data as part of the operation of our Facebook fan page enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to gather information about the attractiveness of our Facebook fan page. This helps us to make our Facebook fan page more needs-based and user-friendly.

d. Source

The personal data related to you, which are processed as part of the operation of our Facebook fan page, are provided to us by Facebook as statistics.

e. Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purposes previously mentioned. You can find more information about this at: https://www.facebook.com/policy.php

f. Objection and rectification option

If you do not want your personal data to be collected as part of the operation of our Facebook fan page, you have the option at any time to object to the processing of your personal data in this context for the future. In this case, we will forward your objection request to Facebook.

2. Instagram account

i. Joint controllership

We operate our Instagram account together with Facebook. For this purpose, we will conclude an agreement with Facebook governing which of us fulfils which obligations pursuant to the GDPR.

You can find further information on the processing of your personal data by Facebook at: https://www.facebook.com/help/instagram/519522125107875

ii. Legal basis

Legal basis for the processing of your personal data in the context of the operation of our Instagram account is Art. 6 (1) lit. f GDPR.

iii. Purpose

The processing of your personal data as part of the operation of our Instagram account enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to gather information about the attractiveness of our Instagram account. This helps us to make our Instagram account more needs-based and user-friendly.

iv. Source

The personal data related to you, which are processed as part of the operation of our Instagram account, are provided to us by Facebook as statistics.

v. Duration of storage

Your personal data will be deleted by Facebook as soon as it is no longer required for the purposes previously mentioned. You can find more information about this at: https://www.facebook.com/help/instagram/519522125107875

vi. Objection and rectification option

If you do not want your personal data to be processed as part of the operation of our Instagram account, you have the option at any time to object to the processing of your personal data in this context for the future. In this case, we will forward your objection request to Facebook.

3. YouTube channel

i. Joint controllership

We operate our YouTube channel together with Google Ireland Ltd. (hereinafter “Google”). For this purpose, we will conclude an agreement with Google governing which of us fulfils which obligations pursuant to the GDPR.

You can find further information on the processing of your personal data by Google at: https://policies.google.com/privacy?hl=de&gl=de#infocollect

ii. Legal basis

Legal basis for the processing of your personal data in the context of the operation of our YouTube channel is Art. 6 (1) lit. f GDPR.

iii. Purpose

The processing of your personal data as part of the operation of our YouTube channel enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to gather information about the attractiveness of our YouTube channel. This helps us to make our YouTube channel more needs-based and user-friendly.

iv. Source

The personal data related to you, which are processed as part of the operation of our YouTube channel, are provided to us by Google as statistics.

v. Duration of storage

Your personal data will be deleted by Google as soon as it is no longer required for the purposes previously mentioned. You can find more information about this at: https://policies.google.com/privacy?hl=de&gl=de#inforetaining

vi. Objection and rectification option

If you do not want your personal data to be processed by Google as part of the operation of our YouTube channel, you have the option at any time to object to the processing of your personal data in this context for the future. In this case, we will forward your objection request to Google.

4. LinkedIn page

i. Joint controllership

We operate our LinkedIn page together with LinkedIn Ireland Unlimited Company (hereinafter “LinkedIn”). For this purpose, we have concluded an agreement with LinkedIn governing which of us fulfils which obligations pursuant to the GDPR.

You can read the main provisions of this agreement here: https://legal.linkedin.com/pages-joint-controller-addendum

You can find further information on the processing of your personal data by LinkedIn at: https://de.linkedin.com/legal/privacy-policy?

ii. Legal basis

Legal basis for the processing of your personal data in the context of the operation of our LinkedIn page is Art. 6 (1) lit. f GDPR.

iii. Purpose

The processing of your personal data as part of the operation of our LinkedIn page enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to gather information about the attractiveness of our LinkedIn page. This helps us to make our LinkedIn page more needs-based and user-friendly.

iv. Source

The personal data related to you, which are processed as part of the operation of our LinkedIn page, are provided to us by LinkedIn as statistics.

v. Duration of storage

Your personal data will be deleted by LinkedIn as soon as it is no longer required for the purposes previously mentioned. You can find more information about this at: https://de.linkedin.com/legal/privacy-policy?

vi. Objection and rectification option

If you do not want your personal data to be processed as part of the operation of our LinkedIn page, you have the option at any time to object to the processing of your personal data in this context for the future. In this case, we will forward your objection request to LinkedIn.

5. Supplier questionnaire, supplier registration and ongoing business relationship

a. Legal basis

Legal basis for the processing of your personal data as well as the personal data of the contact persons of your company in the context of the supplier questionnaire, supplier registration and the ongoing business relationship is Art. 6 (1) lit. b GDPR or Art. 6 (1) lit. f GDPR.

If you or the contact persons of your company have given your consent, Art. 6 (1) lit. a GDPR is an additional legal basis for the processing of your personal data as well as the personal data of the contact persons of your company.

b. Purpose

The purpose of processing your personal data as well as the personal data of the contact persons of your company in the context of the supplier questionnaire, the supplier registration and the ongoing business relationship is the award, execution and settlement of the respective contract as well as the processing of your personal data for future awards of contract or tenders.

c. Source

If we have not received your personal data directly from you, the contact person of your company has provided us with your personal data in the context of the supplier questionnaire.

d. Duration of storage

Your personal data as well as the personal data of the contact persons of your company will be erased as soon as they are no longer necessary to achieve the purposes for which they were collected.

In the case of awards of contract, execution and settlement of the respective contract, this happens when the contract on which the work was based has been fulfiled and all claims arising from the contractual relationship are statute-barred or statutory retention periods do not prevent erasure.

In the case of processing your personal data for future awards of contract or tenders, this is the case if your company is permanentely no longer interested in future awards of contract or tenders.

e. Objection and rectification option

The processing of your personal data is absolutely necessary for the awards of contract, execution and settlement of the respective contract. Consequently, you cannot object to this data processing.

You can withdraw your consent at any time for the future or object to the processing of your personal data in the context of future awards of contracts or tenders.

6. Referral to our sales partners

a. Legal basis

Legal basis for the processing of your personal data in the context of the referral to our sales partners is Art. 6 (1) lit. b GDPR.

b. Purpose

The purpose of the processing of your personal data in the context of the referral to our sales partners is to get in touch with you as requested in order to initiate, conclude and execute contracts between you and our sales partners.

c. Duration of storage

The personal data are erased as soon as they are no longer necessary to achieve the purposes for which they were collected. In the case of the referall to our sales partners this happens on our part after referring your personal data to our sales partners.

d. Objection and rectification option

You can at any time object to the processing of your personal data for the future in the context of referring your personal data to our sales partners. In this case, however, we cannot forward your request to be contacted by our sales partners.

 

V. Categories of recipients

Within our company, the offices and departments that receive personal data are those that need them to fulfil the aforementioned purposes. In some cases we work together with different service providers and therefore transfer your personal data to other trusted recipients. These can include:

- Banks
- IT service providers
- Lawyers and courts
- Sales partners

 

VI. Data transfers to third countries

As part of the processing of your personal data, we may transfer your personal data to trustworthy service providers in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA).

We only work with service providers who provide us with the appropriate safeguards for the security of your personal data and can guarantee that your personal data will be processed in accordance with the strict European data protection standards. A copy of these appropriate safeguards can be inspected at our premises.

If we transfer personal data to third countries, we do so on the basis of a so-called “adequacy decision” of the European Commission or, in the absence of such a decision, on the basis of so-called “standard data protection clauses”, which have also been adopted by the European Commission.

 

VII. Your rights

You have the following rights against us:

1. Right of access

You have the right to access as to whether or not and, if so, what your personal data of you are being processed by us. Is this the case, we will additionally give you access to the following:

(1) the purpose of the processing;
(2) the categories of data;
(3) the recipients of your personal data;
(4) the envisaged period of storage or the criteria used to determine the envisaged period of storage;
(5) any other rights you have;
(6) where we have not obtained the personal data from you: Any available information as to their source;
(7) if available: the existence of automated decision-making and any information about the logic involved, as well as the significance and the envisaged consequences of the processing.

2. Right to rectification

You have the right to rectification and/or completion of the personal data that is being processed by us, if it is inaccurate or incomplete.

3. Right to restriction of processing

You have the right to restriction of processing of your personal data, provided that

(1) we verify the accuracy of your personal data being processed by us;
(2) the processing of your personal data is unlawful;
(3) you need the personal data being processed by us for the purpose of prosecution when we no longer need your personal data for the purpose of processing;
(4) you have objected to the processing of your personal data and we are in the process of verifying your objection.

4. Right to erasure

You have the right to erasure of your personal data, provided that

(1) we no longer need your personal data for its original purpose;
(2) you withdraw your consent and there is no other legal ground for processing your personal data;
(3) you object to the processing of your personal data and, unless it is about direct marketing, there are no overriding grounds for further processing;
(4) the processing of your personal data is unlawful;
(5) the erasure of your personal data is required by law;
(6) your personal data have been collected in relation to the offer of information society services when you were a minor.

5. Right to notification

If you have asserted your right to rectification, erasure of data or restriction of processing, we will communicate any rectification, erasure of data or restriction of processing to any recipients of your personal data.

6. Right to data portability

You have the right to receive your personal data processed by us on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format as well as to transmit them to another controller. If it is technically feasible, you have the right to have them directly transmitted from us to another controller.

7. Right to object

You have the right to object to the processing of your personal data on particular grounds. If this is the case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.

If your personal data is being processed for the purpose of direct marketing, you have the right to object at any time.

8. Right to withdraw

You have the right to withdraw your consent given to us at any time. The withdrawal of the consent does not affect the lawfulness of the processing carried out based on the consent before your withdrawal.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, if you believe that the processing of your personal data by us violates the provisions of the GDPR.

 

VIII. Overview of the cookies used

In the operation of this website we use different cookies, as described above. The following table lists the cookies that are used on this website:

Provider Cookie name Description Duration of storage
No tracking cookies are currently used on our website.

 

If you have any questions, please do not hesitate to contact our This email address is being protected from spambots. You need JavaScript enabled to view it. at any time.

Logo of STORZ MEDICAL AG
STORZ MEDICAL AG
Lohstampfestrasse 8
8274 Tägerwilen/Switzerland
Tel. +41 (0)71 677 45 45
Fax +41 (0)71 677 45 05
E-Mail: dialogue@storzmedical.com
Imprint
Privacy Policy
Disclaimer
Sitemap
facebookgooglepinterestinstagram