Website Privacy Policy and Information for Data Subjects pursuant to Articles 13 and 14 of the EU General Data Protection Regulation
Protecting your privacy is our top priority. We therefore act in accordance with the applicable data protection laws and security regulations. Below, we inform you about which data we collect, how it is processed and used, and to which third parties it may be disclosed.
1. General Information
1.1 Information about the Controller
Company: Medi-Globe GmbH
Legal representatives: Tushar Jain Bahadur, Michael Hub, Dr. Markus Schönberger, Enda Scott
Address: Medi-Globe-Str. 1-5 · 83101 Rohrdorf · Germany
Contact details of the Data Protection Officer: datenschutz@medi-globe.de
2. General Information on Data Processing
Data concerned:
Personal data is only collected if you provide it to us voluntarily. No additional personal data is collected. Any processing of your personal data beyond the scope of statutory permissions will only take place on the basis of your express consent.
Purpose of processing:
Performance of the contract
Categories of recipients:
- Public authorities where overriding legal provisions apply
- External service providers or other contractors
- Other external bodies, provided that the data subject has given their consent or the transfer is permitted on the basis of an overriding interest
Transfers to third countries:
In the context of contract performance, processors located outside the European Union may also be used
Duration of data storage:
The duration of data storage is based on the statutory retention obligations and is generally up to 10 years.
3. Data Protection Information for the Use of This Website
3.1 Use of Our Own Cookies Required to Display the Website
This website uses its own “cookies” to store settings required to display the website (“cookies” are data records sent by the web server to the user’s browser and stored there for later retrieval). Our own cookies do not store any personal data. You can generally prevent the use of cookies by disabling the storage of cookies in your browser.
3.2 Usage Data
When you access our website, your internet browser transmits data to our web server for technical reasons. The following data is recorded during an active connection for communication between your internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- Complete IP address of the requesting device
- Amount of data transferred
For reasons of technical security, particularly to prevent attempted attacks on our web server, we store this data temporarily. This data does not allow us to draw any conclusions about individual persons. After no more than fifteen days, the data is anonymised by shortening the IP address at domain level so that it is no longer possible to associate it with an individual user. The anonymised data is also processed for statistical purposes. It is not compared with other data sets or disclosed to third parties, including in extracts.
(Source of wording: Bavarian State Office for Data Protection Supervision)
3.3 Server Log Files
The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
This data is not combined with data from other sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically error-free presentation and optimisation of its website. For this purpose, server log files must be collected.
3.4 Real Cookie Banner
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the associated consent. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal bases for processing personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the associated consent.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide the personal data, we will not be able to manage your consent.
3.5 Contact Form and Other Enquiries (by Email, Telephone or Fax)
If you submit an enquiry to us via the contact form, the information you provide in the enquiry form, including the contact details entered there, will be stored by us for the purpose of processing your enquiry and in case of any follow-up questions. We will not disclose this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR), provided that such consent has been requested.
The data you enter in the contact form will remain with us until you ask us to delete it, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.
3.6 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables us to analyse your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These cookies are small text files stored on your device that collect certain information. This information also includes your IP address, although Google shortens it by removing the final digits to prevent it from being directly associated with an individual.
The information is transmitted to and further processed on Google servers. This may also involve transfers to Google LLC, based in the USA.
Google uses the information collected to evaluate the use of the website. Reports on website activity are compiled in order to provide additional services related to the use of the website and the internet. The data collected through the use of Google Analytics 4 is stored for a period of two months and subsequently deleted.
All processing described above, particularly the placement of cookies on the device used, only takes place with your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google. (Data Privacy Framework)
Further legal information regarding Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites
3.7 Demographic Characteristics
Google Analytics 4 uses the special “demographic characteristics” function, which can generate statistics containing information about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This enables target groups for marketing activities to be identified. However, the data collected cannot be attributed to a specific individual and is deleted after being stored for a period of two months.
3.8 Google Signals
As an extension of Google Analytics 4, this website uses Google Signals to generate cross-device reports. If you have enabled personalised advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models relating to cross-device conversions. We only receive statistics from Google. If you wish to stop cross-device analysis, you can deactivate the “Personalised advertising” function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
3.9 User IDs
As an extension of Google Analytics 4, this website uses the “User IDs” function. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, created an account on this website and logged in to this account on different devices, your activities, including conversions, can be analysed across devices.
Data transfers to the USA are based on the EU-US Data Privacy Framework.
4. Data Protection Information on Other Data Processing Procedures
4.1 Handling of Business Cards
When business cards are provided or exchanged, you share personal data with us, such as your telephone number and email address. We use this information exclusively to remain in contact with you. We may also provide you with further information about our services. If you do not purchase any products or services from our range, we will delete your contact details after five years.
You have the right to access, deletion or rectification at any time.
4.2 Specific Information on the Application Process
Data concerned:
Application information
Purpose of processing:
Conducting the application process
Categories of recipients:
- Public authorities where overriding legal provisions apply
- External service providers or other contractors, including those providing data processing and hosting services
- Other external bodies, provided that the data subject has given their consent or the transfer is permitted on the basis of an overriding interest
Transfers to third countries:
In the context of contract performance, processors located outside the European Union may also be used, including email providers.
Duration of data storage:
Application data is generally deleted six months after notification of the decision, unless consent has been given to store the data for a longer period, for example as part of inclusion in the applicant pool. In this case, the data will be deleted 12 months after inclusion in the applicant pool.
4.3 Specific Information on the Processing of Customer/Prospective Customer Data
Data concerned:
Data provided for the performance of the contract; where applicable, additional data processed on the basis of your express consent
Purpose of processing:
Performance of the contract, including quotations, orders, sales, invoicing and quality assurance
Categories of recipients:
- Public authorities where overriding legal provisions apply
- External service providers or other contractors, including those providing data processing and hosting services, shipping, transport and logistics services, the printing and distribution of information, and call centre services
- Other external bodies, provided that the data subject has given their consent or the transfer is permitted on the basis of an overriding interest, including for credit checks in the case of purchases on account, the electronic distribution of information and quality assurance purposes
Transfers to third countries:
In the context of contract performance, processors located outside the European Union may also be used, including email providers.
Duration of data storage:
The duration of data storage is based on the statutory retention obligations and is generally 10 years.
4.4 Specific Information on the Processing of Employee Data
Data concerned:
Data provided for the performance of the contract; where applicable, additional data processed on the basis of your express consent
Purpose of processing:
Performance of the contract within the scope of the employment relationship
Categories of recipients:
- Public authorities where overriding legal provisions apply, including tax authorities, social insurance providers, employers’ liability insurance associations, integration offices, and traffic and criminal justice authorities
- External service providers or other contractors, including those providing data processing and hosting services, payroll accounting, insurance services and vehicle use services
- Other external bodies, provided that the data subject has given their consent or the transfer is permitted on the basis of an overriding interest, including for social counselling and insurance services
Transfers to third countries:
In the context of contract performance, processors located outside the European Union may also be used, including email providers
Duration of data storage:
The duration of data storage is based on the statutory retention obligations and is generally a maximum of 10 years
4.5 Specific Information on the Processing of Supplier Data
Data concerned:
Data provided for the performance of the contract; where applicable, additional data processed on the basis of your express consent
Purpose of processing:
Performance of the contract, including enquiries, purchasing and quality assurance
Categories of Recipients:
- Public authorities where overriding legal provisions apply, including tax authorities and customs authorities
- External service providers or other contractors, including those providing data processing and hosting services, accounting and payment processing
- Other external bodies, provided that the data subject has given their consent or the transfer is permitted on the basis of an overriding interest
Transfers to third countries:
In the context of contract performance, processors located outside the European Union may also be used, including email providers.
Duration of data storage:
The duration of data storage is based on the statutory retention obligations and is generally 10 years.
4.6 Specific Information on the Use of Video Conferencing/Webinar Software
Data concerned:
Data provided when using video conferencing software or webinar software (particularly first name, surname and email address; optional: audio transmission; optional: video transmission; optional: questions submitted when using chat functions); processing, to the extent technically necessary, of data from your system to establish a connection with the provider of the conferencing software
Purpose of processing:
Conducting video conferences or webinars.
Categories of recipients:
- Public authorities where overriding legal provisions apply, including tax authorities, social insurance providers, employers’ liability insurance associations, integration offices, and traffic and criminal justice authorities
- External service providers or other contractors, including those providing data processing and hosting services, payroll accounting, insurance services and vehicle use services
- Other external bodies, provided that the data subject has given their consent or the transfer is permitted on the basis of an overriding interest, including for social counselling and insurance services
Transfers to third countries:
Processors located outside the European Union are used (in this case: the United States of America); appropriate Standard Contractual Clauses have been concluded with the service provider.
Duration of data storage:
Video conferences are only recorded with the participants’ prior documented consent. Technical data is deleted when it is no longer required. In all other respects, the duration of data storage is based on the statutory retention obligations and is generally 10 years.
5. Further Information and Contact Details
You may also exercise your rights to access, rectification or deletion, restriction of processing, objection to processing and data portability at any time. Here you can find information on how to contact us by email or letter. You also have the right to lodge a complaint with the competent data protection supervisory authority.
Last updated: 27 May 2025