General information
Details of the responsible body
Company: medondo AG
Adresse: Schiffgraben 19, 30159 Hannover
Contact details of the data protection officer: dirk.haertling@medondo.com
General data processing information
Personal data is only collected if you provide it to us voluntarily. No other personal data is collected. Any processing of your personal data that goes beyond the scope of the statutory permissions will only take place on the basis of your express consent.
Purpose of processing: (usually) contract initiation or execution.
Categories of recipients: Public authorities in the event of overriding legal provisions. External service providers or other contractors. Other external bodies if the data subject has given their consent or transmission is permitted for reasons of overriding interest.
Third country transfers: Processors outside the European Union may also be used in the course of contract performance.
Duration of data storage: The duration of data storage depends on the statutory retention obligations and is generally 10 years.
Specific information about the website
Data collection on this website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice of this website.
Usage data
When you visit our website, you transmit data to our web server via your Internet browser (for technical reasons). The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
- Date and time of the request
- Name of the requested data
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- Complete IP address of the requesting computer Volume of data transferred
For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short time. It is not possible for us to identify individual persons from this data. After 30 days at the latest, the data is anonymized by shortening the IP address at domain level so that it is no longer possible to establish a link to the individual user. The data is also processed in anonymized form for statistical purposes; it is not compared with other databases or passed on to third parties, even in excerpts.
External hosting
This website is hosted by an external service provider (host: Profihost AG). Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
Conclusion of a contract for order processing
In order to guarantee data protection-compliant processing, we have concluded an order processing contract with our hoster.
Use of a newsletter
When you register for our newsletter, you provide us with your e-mail address and optionally other data. We use this information exclusively to send you the newsletter. The data you enter when registering for the newsletter will remain with us until you unsubscribe from our newsletter. You can unsubscribe at any time using the link provided in the newsletter or by sending us a corresponding message. By unsubscribing, you object to the use of your e-mail address.
Use of own "cookies" required for the website display
This website uses its own "cookies" to store settings required for the website display ("cookies" are data records that are sent from the web server to the user's browser and stored there for later retrieval). No personal data is stored in our own "cookies". You can generally prevent the use of cookies by prohibiting the storage of cookies in your browser.
Use of various tools:
- Zur bedarfsgerechten Gestaltung unseres Internetauftritts verwenden wir das Tool Matomo. Dabei handelt es sich um einen sogenannten Webanalysedienst. Um die Nutzung unserer Webseite zu erfassen und zu analysieren, werden Nutzungsinformationen an unseren Server übertragen und zu Analysezwecken gespeichert. Ihre IP-Adresse wird bei diesem Vorgang nur gekürzt weiterverarbeitet und dadurch anonymisiert. Wenn Sie die Verarbeitung zu Analysezwecken verhindern möchten, können Sie per Mausklick über folgenden Link jederzeit widersprechen:
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
In diesem Fall wird in Ihrem Browser ein sog. Opt-Out-Cookie ohne Nutzungsdaten abgelegt, der zur Folge hat, dass Matomo keinerlei Sitzungsdaten erhebt. - This website uses the web analysis service of HubSpot Inc ("HubSpot") on the basis of the consent of website visitors. HubSpot uses so-called "cookies", i.e. text files that are stored on your computer and that enable an analysis of your use of the website, which also makes it possible for us to see which of our pages have been visited. The information generated by the cookie about your use of this website is usually also transmitted to a Google server in the USA and stored there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
- We use the function for embedding YouTube videos from Google Ireland Limited ("Google") on our website on the basis of consent. The function displays videos stored on YouTube in an iFrame on the website. The "Extended data protection mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA.
- This website uses Facebook Pixel, a web analysis service of Meta Platforms Inc ("Meta"), based on the consent of website visitors. Facebook Pixel uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually also transmitted to a Meta server in the USA and stored there. With the help of Facebook Pixel cookies, your user data is matched with your Facebook account data and later used for advertisements. The data collected is anonymous to us and cannot be viewed.
- This website uses Google Ads Conversion Tracking, a web analysis service of Google Ireland Limited ("Google"), based on the consent of website visitors. Google Ads Conversion Tracking uses "cookies", which are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.
- This website uses LinkedIn Ads, a web analysis service of LinkedIn Inc ("LinkedIn"), based on the consent of website visitors. LinkedIn Ads uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually also transmitted to a LinkedIn server in the USA and stored there. With the help of this technology, visitors to this website can be shown personalized advertisements on LinkedIn.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are
- IP address of the client: The address of the visitor.
- Date and time: When the request was made.
- Requested URL/resource: The specific element requested by the visitor.
- HTTP-Statuscode: Der Status der Anfrage (z. B. 200 für “OK”).
- Size of the object to be transferred: The size of the requested data.
- Referrer: The website from which the visitor came.
- Browser: The web browser used by the visitor.
- Request line: The complete request from the client, including the method (e.g. GET, POST).
This data is not merged with other data sources.
This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - the server log files must be recorded for this purpose.
Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the inquiries addressed to us.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Further information and contacts
In addition, you can assert your rights to information, rectification or erasure or to restriction of processing or the exercise of your right to object to processing as well as the right to data portability at any time. You can contact us by e-mail or letter here. You also have the right to contact the data protection supervisory authority if you have a complaint.
The State Commissioner for Data Protection of Lower Saxony:
P.O. Box 221, 3002 Hanover
Prinzenstraße 5, 30259 Hanover
E-mail: poststelle@lfd.niedersachsen.de
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6 para. 1 lit. E or F GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).
Rights of data subjects
You have the following rights under the General Data Protection Regulation:
If your personal data is processed, you have the right to receive information about the personal data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of the processing and object to the processing (Art. 17, 18, 21 GDPR).
If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
If you make use of the aforementioned rights, the controller will check whether the legal requirements for this are met. You also have the right to lodge a complaint with the State Commissioner for Data Protection of Lower Saxony.
Production and use of photo and/or video recordings
Purpose of the processing
The photos and/or videos are used exclusively for the public relations work of medondo AG.
Legal bases of the processing
The processing of photos and/or videos (collection, storage and transfer to third parties, see under "Duration of storage of personal data") is based on the express consent of the person(s) with custody or the person(s) concerned, thus in accordance with Art. 6 para. 1 letter a GDPR. The publication of selected image files in (print) publications of the organizer as well as on their homepage/social media or similar is necessary for the public relations work of the organizer and thus serves to safeguard the legitimate interests of the participants, Art. 6 para. 1 letter f GDPR.
Categories of recipients of the personal data
The photos and/or videos will not be passed on to third parties. For public relations purposes, they may be posted on medondo AG's websites and used for medondo AG's social media channels.
Duration of storage of personal data
Photos and/or videos taken for the purposes of medondo AG's public relations work will be stored for an indefinite period of time, subject to revocation of the consent of the person(s) concerned.
Right to withdraw consent
Consent to the processing of photos and/or videos can be revoked at any time for the future. The legality of the data processing carried out on the basis of the consent until the revocation is not affected by this.