Data Privacy Statement

We, pfm medical ag (hereinafter referred to as “pfm medical”; for further information on pfm medical, please click here), are happy to welcome you as a visitor to our website patient-awareness.com. To us, data protection and data security during your utilisation of our website are of great significance. We therefore wish to seize this opportunity to provide you with information on which of your personal data we collect when you visit our website and for which purposes such data will be used.

As amendments of the law or changes to our company-internal processes may require an adjustment of this Data Privacy Statement, we request you to read this Data Privacy Statement at regular intervals. The Data Privacy Statement may be retrieved, stored and printed out under Data Privacy Statement at any time.

The person/entity responsible within the meaning of the EU General Data Protection Regulation and other national data protection laws of the member states or other data privacy provisions is:

pfm medical ag
Wankelstrasse 60
50996 Cologne, Germany
T +49 2236 9641-0
e-mail: info[at]pfmmedical.com
Website: www.pfmmedical.com

This Data Privacy Statement shall apply to the website/Internet offer of the Patient Awareness Campaign by pfmmedical, which can be retrieved under the domain www.patient-awareness.com (hereinafter referred to as “our website”).

The external data protection officer of the person/entity responsible is:

Dr. Karsten Kinast, LL.M., barrister-at-law
KINAST Rechtsanwaltsgesellschaft mbH
Hohenzollernring 54
50672 Cologne, Germany
Tel.: +49 221 222183-0
e-mail: mail[at]kinast.eu
Website: http://www.kinast.eu

Personal data is any information that relates to an identified or identifiable private individual. For instance, this includes information such as your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or your user behaviour. Information that does not allow us to establish any relation with you as a person (or that only allows us to do through disproportionate expenditure), for instance due to anonymisation of the respective information, does not represent personal data. The processing of personal data (such as collection, retrieval, utilisation, storage or transmission) shall always require a legal basis or your personal consent. Processed personal data will be deleted as soon as the purpose of processing has been achieved and legally stipulated storage periods do not have to be complied with anymore.

Where we process your personal data to make certain offers/services available to you, we inform you hereafter on the specific processing activities, the scope and purpose of data processing, the legal basis of the data processing activities and the respective storage period.

a.    Kind and scope of data processing
Whenever our website is retrieved and used, we collect the personal data transmitted to our server automatically by your browser. This information is stored temporarily in a so-called log file. If you use our website, we will collect the following data that we require technically to display our website to you and to ensure its stability and security:

• IP address of the retrieving computer
• Date and time of retrieval
• Name and URL of the file retrieved
• Website from which our own website has been accessed (Referrer URL)
• The browser used and, where applicable, the operating system of your computer and the name of your access provider

b.    Legal basis
For the data processing activities mentioned above, the legal basis is Article 6 Subsection 1 Letter f of the EU General Data Protection Regulation. Processing of the data mentioned above is necessary to make a website available and hence serves to protect a legitimate interest of our company.

c.    Storage period
The aforementioned data shall be deleted as soon as they are no longer necessary to display the website. The collection of the data for provision of the website and the storage of the data in log files is indispensable for the operation of the web page. As a consequence, there is no possibility for the user to raise objections. More far-reaching storage may result, in the individual case, if stipulated accordingly under the law.

a.    Kind and scope of data processing
On our website, we offer you the opportunity to get in touch with us via a provided contact form. During the process, by which you send us your enquiry via the contact form, this Data Privacy Statement will be referred to in order to obtain your consent. If you make use of the contact form, the following of your personal data as provided by you will be processed:

• Email address 
• Salutation
• First and last name
• Country

In this context, the indication of your email address as well as the salutation and name serve the purpose of allocating your enquiry and sending you a personal response. The country serve the purpose of allocating your enquiry to the correct contact person. When you use the contact form, your aforementioned data may be passed on to our subsidiaries or sales partners if this is necessary to answer your enquiry. Beyond this, your personal data will not be passed on to third parties.

b.    Legal basis
The data processing activities for the establishment of contact as described above (cf. § 4 2. a.) are based on the following declaration of consent, which you provide voluntarily in accordance with Article 6 Subsection 1 Letter a of the EU General Data Protection Regulation:

"By entering my data and confirming the “Send” button, I declare that I agree with the processing of my email address, salutation, first name, last name and country for the purpose of getting a response to my contact enquiry. I may revoke my consent to the collection/recording of the personal data collected during my utilisation of the contact form at any time."

c.    Storage period
As soon as the question asked by you and the respective circumstances have been finally clarified, the personal data processed via the contact form will be deleted. More far-reaching storage may result, in the individual case, if stipulated accordingly under the law.

a.    Kind and scope of data processing
When you register for our Newsletter, we process your personal data as listed below. 

• Salutation 
• First and last name
• City
• Country 
• Email address

In this context, your email address as well as the salutation and name serve the purpose of personalising the newsletter for you. The city and country serve the purpose of providing you specific regiona information if available.

b.    Legal basis
Data is processed either on the basis of your consent pursuant to Art. 6 (1) a) GDPR or to protect our legitimate interest pursuant to Art. 6 (1) f) GDPR. If we negotiate or conclude a contract, the data is processed in accordance with Art. 6 (1) (b) GDPR. 

c.    Storage period
Your data will be deleted as soon as the purpose of the processing has been achieved and provided that there is no further legal retention period. When contracts are terminated, your data is usually deleted within 3 years after the end of the contract, unless we are obliged to store it for a longer period in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have expressly consented to us continuing to contact you.

Individual processes and services are carried out by carefully selected and commissioned service providers. The service providers commissioned by us are: CleverReach GmbH & Co. KG.
Service providers are obliged by us to comply with data protection and security requirements. 
Apart from that we shall only transfer your personal data to third parties if:

• you have provided your explicit consent pursuant to Article 6 Subsection 1 Letter a of the EU General Data Protection Regulation
• this is legally admissible and necessary for the performance of a contractual relationship with you according to Article 6 Subsection 1 Letter b of the EU General Data Protection Regulation
• there is a statutory obligation to transfer the data pursuant to Article 6 Subsection 1 Letter c of the EU General Data Protection Regulation 
• the data transfer is necessary, pursuant to Article 6 Subsection 1 Letter f of the EU General Data Protection Regulation, for the protection of legitimate company interests, and for the assertion, exercise or defence of legal claims, and if there is no reason to assume that you have an overriding interest, which is worthy of protection, in the non-transfer of your data.

a.    Kind and scope of data processing

We make use of cookies on our website. Cookies are small files transmitted by us to the browser of your terminal device and stored there in the framework of your visit to our web pages. Without the use of technically necessary cookies, some functions of our website cannot be offered. By contrast, other cookies may enable us to conduct various analyses. For instance, cookies are able to recognise the browser used by you and transmit various information to us on the occasion of your renewed visit to our website. By means of cookies, we are able, among other things, to design our website in a more user-friendly and effective manner for you, e.g. by tracking your utilisation of our website and identifying your preferred settings (such as country and language settings). Where third parties process information via cookies, they collect this information directly from your browser. Cookies do not inflict any damage on your terminal device. They are not able to execute programs nor do they contain viruses.

We only use technically necessary cookies on our website, the types and functions of which are explained hereafter.

To change the saved cookie settings, please click here.

b.    Legal basis 

On the grounds of the purposes of use described above (cf. § 6. a.), the legal basis for the processing of personal data including the use of cookies is Article 6 Subsection 1 Letter f of the EU General Data Protection Regulation.

c.    Storage period

As soon as the data transmitted to us via the cookies are no longer necessary to achieve the aforementioned purposes, this information will be deleted. More far-reaching storage may result, in the individual case, if stipulated accordingly under the law.

d.    Configuration of the cookie settings
When you access our website, a pop-up window will appear, giving you the opportunity to adjust the cookie settings. You can accept all cookies or reject non-functional cookies and save them.

These settings will be saved. You can adjust them at any time by clicking on the following link: https://www.patient-awareness.com/?showOptIn=1

e.    Configuration of the browser settings
Most browsers have default settings that accept cookies on a standardised basis. You are nevertheless able to configure your respective browser in such a manner that it will only accept certain cookies or cease accepting any cookies whatsoever. However, we advise you that you may no longer be able to use all the functions of our website if cookies on our website have been deactivated due to your browser settings. You are also able to delete cookies via your browser settings, which have already been stored in your browser, or to have their storage periods displayed to you. Furthermore, there is a possibility to configure your browser settings in such a way that you receive notification from the browser before cookies are stored. As the various browsers may differ in regards to their respective modes of operation, we request you to use the Help menu of your browser when it comes to the possibilities of configuration.
If you wish to receive a comprehensive overview of each and every third-party access to your Internet browser, we recommend you to install a plug-in designed specifically for this purpose.

We currently use no tracking and analysis tools.

1.    Facebook

A button for sharing our page content in Facebook is used on this website. When clicking the button the Facebook website (provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; hereinafter referred to as “Facebook”) will open in a new window. 

Before clicking this button there is no connection to Facebook.

When clicking the button and opening the Facebook-Website, Facebook will be informed that our website has been visited with your IP address. 

You can log into your Facebook Account there and then share the page content. If you click on the button while you are already logged into your Facebook account, you enable Facebook to allocate your visit to our website to you personally or to your user account. Please bear in mind that we have no knowledge of the contents of the transmitted data and their utilisation by Facebook.

Information on the data that is subsequently collected by Facebook can be found here: https://www.facebook.com/privacy/explanation

2.    LinkedIn

A button for sharing our page content in LinkedIn is used on this website. When clicking the button the LinkedIn website (provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; hereinafter referred to as "LinkedIn") will open in a new window. 

Before clicking this button there is no connection to LinkedIn.

When clicking the button and opening the LinkedIn Website, LinkedIn will be informed that our website has been visited with your IP address. 

You can log into your LinkedIn Account there and then share the page content. If you click on the button while you are already logged into your LinkedIn account, you enable LinkedIn to allocate your visit to our website to you personally or to your user account. Please bear in mind that we have no knowledge of the contents of the transmitted data and their utilisation by LinkedIn.

Information on the data that is subsequently collected by LinkedIn. can be found here: https://www.linkedin.com/legal/privacy-policy?

1.    General

Our website includes so-called hyperlinks to the websites of other providers. In the event of activation of such hyperlinks, you will be forwarded directly from our website to the websites of other providers. You will notice that process, among other things, through the change of URLs. We are not able to assume any responsibility for the confidential treatment of your data on these third-party websites, as we do not exert any influence on these companies’ adherence the applicable data protection regulations. As for the treatment of your personal data by these companies, please gather information directly on their websites.

2.    YouTube

For instance, our website also includes hyperlinks to YouTube. If you click on that hyperlink, you will leave our website and be forwarded directly to the website of YouTube. You will notice that process, among other things, through the change of URLs. We are not able to assume any responsibility for the confidential treatment of your data on the website of YouTube, as we do not exert any influence on this company’s adherence to applicable data protection regulations. For information on the data collected/recorded by YouTube and their processing, please refer to the Data Privacy Statement of the social network at: https://policies.google.com/privacy?hl=en&gl=en.

For you as a person concerned by the processing of personal data, the following rights result under the EU General Data Protection Regulation:

• Pursuant to Article 15 of the EU General Data Protection Regulation, you are entitled to demand information on your personal data processed by us. In particular, you are entitled to demand information from us on the purposes of data processing, the categories of personal data, the categories of recipients to which your data have been disclosed or are disclosed, the scheduled storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data unless they have been collected from us, the transmission to third countries or international organisations, and on the existence of an automated decision-making process including profiling and, where applicable, meaningful information on the details of such processes.
• Pursuant to Article 16 of the EU General Data Protection Regulation, you are entitled to demand the correction of any incorrect personal data stored by us or the completion of any incomplete personal data stored by us – in relation to you as a person – without delay.
• Pursuant to Article 17 of the EU General Data Protection Regulation, you are entitled to demand the deletion of any of your personal data stored by us as far as the data processing is not required to exercise the right of free speech and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
• Pursuant to Article 18 of the EU General Data Protection Regulation, you are entitled to demand restriction of the processing of your personal data as far as you dispute the correctness of the data, as far as the processing is unlawful, or as far as we no longer require the data, and if you refuse deletion of the data because you require them to assert, exercise or defend legal claims. You are also entitled to the right under Article 18 of the EU General Data Protection Regulation if you have raised an objection to the data processing activities pursuant to Article 21 of the EU General Data Protection Regulation.
• Pursuant to Article 20 of the EU General Data Protection Regulation, you are entitled to demand from us that you receive the personal data, which you have made available to us, in a structured, well-established and machine-readable format, or you may demand transmission of the data to another responsible person/entity.
• Pursuant to Article 7 Subsection 3 of the EU General Data Protection Regulation, you are entitled to revoke your provided consent in a notification transmitted to us at any time. The consequence thereof will be that we will not be allowed to continue the data processing activities conducted on the basis of that consent in the future.
• Pursuant to Article 77 of the EU Data Protection Regulation, you are entitled to lodge a complaint with a supervisory authority. As a rule, you may submit your complaint to the supervisory authority in charge of your usual place of domicile, your place of work or the registered office of our company.
   

Where your personal data is processed on the grounds of legitimate interests pursuant to Article 6 Subsection 1 Sentence 1 Letter f of the EU General Data Protection Regulation, you are entitled pursuant to Article 21 of the EU General Data Protection Regulation to raise an objection against the processing of your personal data, provided reasons are in place for such an objection that result from your particular situation, or provided the objection is raised against direct advertising activities. In the event of direct advertising activities, you have a general right to object, which is implemented by us without reference to/indication of a particular situation.
 

We undertake to protect your privacy and to treat your personal data in confidence. To avoid manipulation, loss or abuse of your data stored by us, we take comprehensive technical and organisational safety precautions that are being reviewed at regular intervals and adjusted to technological progress. Among other things, this includes the use of recognised encryption procedures (SSL or TLS). However, we advise you that, due to the structure of the Internet, it is possible that the rules of data protection and the aforementioned safeguarding measures may not be observed by other persons or institutions acting outside our area of responsibility. In particular, information transmitted without encryption – for instance in the event of transmission by e-mail – may also be read by third parties. We do not have any technological influence on such occurrences. It lies within the user’s scope of responsibility to protect the data made available by him/her from abuse through encryption or otherwise.

As of June 2022