Privacy Policy

We look forward to your visit to our website www.maris-healthcare.de and your interest in our company.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our privacy practices comply with the legal regulations of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). This privacy policy is intended to fulfill the information obligations arising from the GDPR, as outlined in Articles 13 and 14, among others.

Controller

A controller within the meaning of Article 4(7) of the GDPR is the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

With regard to our website, the person responsible is:

MARIS Healthcare GmbH
Krankenhausstraße 24
66557 Illingen
Germany
Email: info@maris-healthcare.de
Tel .: + 49 (0) 6825-95392-00
Fax: +49 (0) 6825-95392-09

Contact details of the Data protection officer

We have appointed a data protection officer in accordance with Article 37 GDPR. You can reach our data protection officer using the following contact details:

TDSSG GmbH
Am Hagelsrech 14
66806 Ensdorf
Germany
Email: maris@team-datenschutz.de

Provision of the website and creation of Log files

Every time our website is accessed, our system automatically records data and information from the accessing device (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieving device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Report whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual site visitors cannot be identified.

Legal basis for the processing of personal data

Art. 6 Paragraph 1 Letter f GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of data processing

The temporary (automated) storage of data is necessary for the course of a website visit in order to enable delivery of the website. The storage and processing of personal data also takes place to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshoot problems. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. The data also serves us to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Special functions of the website

Our site offers you various functions, when you use them we collect, process and store personal data. Below we explain what happens to this data:

Order form

What personal data is collected and to what extent is it processed?

The data you enter into the form fields, such as address, name, first name, etc., will be processed by us to fulfill the purpose stated below.

Legal basis for the processing of personal data

Article 6 paragraph 1 letter b GDPR (performance of (pre-)contractual measures)

Purpose of data processing

The purpose of data processing is to process your order so that we can handle potential contractual relationships with you or carry out pre-contractual measures.

Duration of storage

The data will be deleted as soon as it is no longer needed for processing the order and there are no longer any legal retention obligations. This will generally be after 10 years (see Section 147 Paragraph 3 in conjunction with Paragraph 1 Nos. 1, 4 and 4a of the German Fiscal Code (AO), Section 14b Paragraph 1 of the German Value Added Tax Act (UStG)).

Possibility of objection and deletion

You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

Necessity of providing personal data

The information provided in the order form is neither contractually nor legally required, but it is necessary for the conclusion of a contract. If you do not complete the required fields, or do not complete them fully, your order cannot be processed.

Contact form(s)

What personal data is collected and to what extent is it processed?

We will process the data you enter in our contact forms, which you have entered in the input mask of the contact form, to fulfil the purpose stated below.

Legal basis for the processing of personal data

Article 6 paragraph 1 letter a GDPR (consent by clear affirmative action or behavior)

Purpose of data processing

We will only use the data recorded via our contact form or forms to process the specific contact request received through the contact form.

Duration of storage

Once your request has been processed, the data collected will be deleted immediately unless there are statutory retention periods.

Possibility of revocation and deletion

The options for revocation and deletion are governed by the general provisions on the right of revocation and the right to erasure under data protection law as described below in this privacy policy.

Necessity of providing personal data

The use of the contact forms is voluntary and neither contractually nor legally required. You are not obligated to contact us via the contact form; you can also use the other contact options listed on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information in the contact form, you will either be unable to submit the request, or we will unfortunately be unable to process it.

Webinar registration/appointment booking form(s)

What personal data is collected and to what extent is it processed?

We will process the data you enter in our webinar booking form to fulfill the purpose stated below.

Legal basis for the processing of personal data

Article 6 paragraph 1 letter b GDPR (performance of (pre-)contractual measures)

Purpose of data processing

The data collected via our appointment booking form will only be used for processing appointment requests received through the appointment booking form.

Duration of storage

Your appointment booking will be deleted immediately 12 months after the appointment date, unless legal retention obligations apply. We reserve the right to delete your booking without giving reasons and without prior or subsequent notification.

Possibility of objection and deletion

You can find information about your rights and how to exercise them in the lower section of this privacy policy.

Necessity of providing personal data

While using our appointment booking form is neither contractually nor legally required, it is necessary if you wish to book an appointment with us online. You must provide certain mandatory information for online booking. If you do not complete all mandatory information, your appointment booking cannot be accepted or processed.

Statistical evaluation of visits to this website – web tracker

We collect, process and store the following data when you access this website or individual files on the website: IP address, website from which the file was accessed, name of the file, date and time of retrieval, amount of data transferred and notification of success of retrieval (so-called web log). We use this access data exclusively in non-personalized form to continually improve our Internet offering and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

Google

We use the Google service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

We use Google to load additional Google services onto the website. The service is used to provide additional Google services, such as the data processing required to provide streams and fonts and relevant Google search content. It is technically required in order to be able to exchange the information already available to Google about the site visitor between Google services and to be able to provide the site visitor with individual content tailored to their Google account.

For processing purposes, the service or we collect the following data: background data stored in the Google user account or other Google services about the website visitor, background data for providing Google services such as streaming data or advertising data, data about the website user's use of Google search, information about the device used, the IP address and the user's browser, and other data from Google services for providing Google services related to our website.

If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing the services provided by Google. This may also involve data transfer to the Google services Google APIs, DoubleClick, Google Cloud, Google Ads, and Google Fonts, in accordance with the Google Privacy Policy. You can find information about Google's certification under the EU-US Data Privacy Framework at [link to Google's certification policy]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also offers an opt-out option.

Google Ads

We use the Google Ads service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

Google Ads is an advertising system that allows us to place advertisements on external websites to inform our customers about our services. Based on parameters we have set, Google Ads displays ads on external websites that are individually tailored to our target audience and lead to our website. If a visitor clicks on a Google Ads ad, they are taken to our website. To measure the success and revenue of our Google Ads campaigns, Google Ads tracks the effectiveness of the advertising campaign each time our website is accessed. Our website processes the data provided by Google Ads to analyze and improve our advertising efforts and to calculate any applicable revenue.

For processing purposes, the service or we collect the following data: data on the advertising interests of website visitors, interactions of website visitors with advertising in relation to our website, data about the access of our website by website visitors who previously clicked on Google Ads advertising and arrived at our website, data on the device used, the IP address and the browser of the user and further data from Google services for the provision and refinement of Google advertising in relation to our website.

If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using Google Ads on our website, Google may transmit and process information from other Google services to provide background services for improving and personalizing Google advertising. This may also involve data processing by other Google services such as Google APIs, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Platform, and Google Fonts, in accordance with Google's privacy policy and under Google's own data protection responsibility. You can find information about Google's certification under the EU-US Data Privacy Framework at [link to certification]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also offers an opt-out option.

Google Tag Manager

We use the Google Tag Manager service of Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

Google Tag Manager provides a technical platform for executing and centrally managing other web tools and web tracking programs using so-called "tags." In this context, Google Tag Manager stores cookies on your computer and, if web tracking tools are executed via Google Tag Manager, analyzes your browsing behavior (so-called "tracking"). The data generated by the "tags" is aggregated, stored, and processed by Google Tag Manager under a unified user interface. All integrated "tags" are listed separately in this privacy policy. When using our website with Google Tag Manager "tags" enabled, data, including your IP address and user activity, is transmitted to Google servers. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager before transmission through IP anonymization of the source code. Tag Manager allows for the linking and evaluation of metrics from various service providers (Google and third-party providers) based on its tag management capabilities. Google Tag Manager helps us compile reports on website activity and control the web tools on our website.

For processing purposes, the service or we collect the following data: cookies, web tracking data, outgoing or incoming links, information generated during the integration and activation of JavaScript code on the website from Google Tag Manager and the web tools triggered by Google Tag Manager.

You can obtain certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://policies.google.com/privacy also offers an opt-out option.

Google Analytics

We use the Google Analytics service of the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

Google Analytics is a web tracker that analyzes the behavior of website visitors and their interactions with our website, providing us with evaluations and forecasts about the content and products on our website and their popularity (so-called tracking). We have integrated Google Analytics so that the service can compile an analysis of the browsing behavior of website users. For this purpose, Google collects the page interactions of website visitors with our website and, if applicable, existing information resulting from the reading of cookies or other storage technologies, and prepares this data for us statistically. Google Analytics uses data processing technologies that enable the tracking of individual website visitors and their interaction with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to fill data gaps and create comprehensive statistics about the content of our website using machine learning technologies, modeled statistics, and forecasting functions. If Google Analytics is activated on our website, the data collected by Google Analytics is transferred to servers of Google Ireland Limited. As part of order processing, personal data may also be transferred to the servers of our parent company, Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. We use Google Analytics for analysis to continuously optimize our website and improve its availability. This is a so-called audience measurement.

For processing purposes, the service or we collect the following data: data on the interactions of website visitors with the website's content, data on the handling of the services presented on our website, data from external Google services if they interact with our website, such as advertising data or data on behavior in relation to advertising, data on the general geographical origin, the browser used, operating system, and other information about the end device used.

Google Analytics will store the data relevant for providing web tracking for as long as necessary to fulfill the booked web service. Data collection and storage are anonymized. If individual interactions of website visitors allow for subsequent identification of specific individuals, we will delete the collected data once the purpose has been fulfilled. The data will be deleted at the latest when it is no longer subject to any legal retention obligations. As a rule, we will delete this data after 12 months at the latest. You can find information about our certification under the EU-US Data Privacy Framework at [link to certification information]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://tools.google.com/dlpage/gaoptout?hl=de also offers an opt-out option.

Gstatic

We use the Gstatic service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and pre-load required catalog files. In particular, the service loads background data for Google Fonts and Google Maps.

As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. You can find their certification under the EU-US Data Privacy Framework at [link to certification]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also offers an opt-out option.

Matomo (local)

We use the Matomo (local) service on our website from the company InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, email: privacy@matomo.org, Website: http://matomo.org/Personal data is transmitted exclusively to servers located in the European Union.

The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.

Matomo is hosted on our own server infrastructure and configured by us to prevent data transfer to Matomo, InnoCraft Ltd., or any other third parties. The collection of statistical data serves to monitor the functionality and user-friendliness of our website and to optimize it by analyzing anonymized user flows. This allows us to identify which content is relevant to our website visitors and users and to expand our offerings accordingly. We can also create anonymous user profiles and extract general statistical information from the collected data. The data collected in this context will not be combined with other personal data without your explicit consent.

For processing purposes, the service or we collect the following data: parts of your IP address in anonymized form, user activities (e.g., referrer links, time spent on certain URLs, clickstream, shopping cart or order IDs), data about your browser settings, browser provider, browser version, screen resolution and the operating system used.

Data collection by our local Matomo instance is also configured to be privacy-friendly. Collected IP addresses are anonymized before collection and processing. We have also activated the "Do Not Track" preference in Matomo. This ensures that a "Do Not Track" request from your browser when you visit our website is respected by Matomo and, regardless of our other measures, the website user is not tracked. You can prevent tracking by Matomo at any time by activating the "Do Not Track" setting in your browser.

With regard to the processing of your data, you have the right to object as set out in Article 21. Further information can be found at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://matomo.org/faq/general/faq_18254/.

Youtube

We use the YouTube service on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

Videos from the YouTube platform are integrated into our site via the YouTube service. This integration allows us to show you videos directly on our website. This allows site visitors to view information about our services without having to visit the YouTube platform.

For processing purposes, the service or we collect the following data: data on displaying the stream, data on clicked videos, created playlists, ratings and comments, information on the device used, the user's IP address and browser, and further data from Google services for providing the video in accordance with the Google Privacy Policy.

If YouTube is active on our website and a video is played, our website establishes a connection to the servers of Google Ireland Limited and transmits the data required to display the stream or video. As part of the order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision regarding the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_enThe service provider is certified under the DPF, so the usual level of data protection under the GDPR applies to the data transfer. When YouTube videos are displayed on our website, YouTube may transmit and process information from other Google services to provide background services for the video, such as streaming data. This may also involve data transfer to the Google services Google Fonts, Google APIs, Google Video, and DoubleClick. You can find the certification under the EU-US Data Privacy Framework at [link to certification]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also offers an opt-out option.

Integration of external web services and processing of data outside the EU

On our website we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. Processing of data outside the EU may be possible. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser. This may lead to functional restrictions on the websites you visit.

We use the following external web services:

AddToAny

We use the AddToAny service from AddToAny, 4520 Irving Street Suite 2, 94122 San Francisco, CA 94122, United States, website: https://www.addtoany.com/The data is also transferred to a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during this transfer, as it cannot be ruled out that authorities in the third country, for example, may gain access to the collected data.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

AddToAny is a service that facilitates sharing of web pages. This is enabled by buttons that, when hovered over or clicked, display a list of bookmarking and sharing services. The service also allows us to display follow buttons.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://www.addtoany.com/privacy.

Flipbookpdf

We use the Flipbookpdf service from GLOBOSOFT SRL, VIA CARLO BERNARI 87, 00139 Rome, Italy, on our website. Personal data is only transferred to servers within the European Union.

The legal basis for the processing of personal data is, in accordance with Art. 6 para. 1 lit. b GDPR, the contract already concluded or yet to be concluded between you and us.

Using FlipbookPDF, we can provide you with our PDFs as an online magazine.

You will find out what rights you have with regard to processing at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://www.flipbookpdf.net/privacy-policy.html.

Google Cloud APIs

We use the Google Cloud APIs service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

We use Google APIs to load additional Google services onto the website. Google APIs are a collection of interfaces for communication between the various Google services used on your website. The service is used in particular to display Google Fonts and to provide the Google Maps map.

For processing purposes, the service or we collect the following data: IP address

If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing the services provided by Google. This may also involve data transfer to the Google services Google Cloud, Google Maps, Google Ads, and Google Fonts, in accordance with Google's privacy policy, under Google's data protection responsibility. You can find information about Google's certification under the EU-US Data Privacy Framework at [link to certification]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also offers an opt-out option.

Google Fonts

We use the Google Fonts service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

We use the Google Fonts service to integrate attractive fonts on our site so that we can show you a visually better version of our website. The service may also be used on our website if other Google services are loaded onto our website that require Google Fonts to function. This is the case, for example, if our website uses Google services that require Google Fonts to function.

For processing purposes, the service or we collect the following data: font data, IP address of the website visitor, statistics on font usage, and other data from Google services related to our website.

If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing the services provided by Google. This may also involve data transfer to the Google services Google APIs, Google Cloud, and Google Ads in accordance with the Google Privacy Policy. You can find information about Google's certification under the EU-US Data Privacy Framework at [link to Google's certification]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also offers an opt-out option.

Google reCaptcha

We use the Google reCaptcha service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-germany@google.com, Website: http://www.google.com/. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). Der The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

If Google reCaptcha is activated on our website, the data collected by Google reCaptcha will be transferred to servers of the company Google Ireland Limited. As part of the order processing, personal data may also be transferred to the servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. Based on specific characteristics and an analysis of page behavior, the service recognizes whether the entries made are automated entries by a program (so-called bot) or by a human. The service has three different levels. The service either automatically recognizes that the entry was not made automatically by a bot or it allows the user to select a Captcha checkbox. A third option is to display small image or language / text tasks that the site visitor must solve. Google reCaptcha is a Captcha service that is used on our website for security reasons to prevent bots (robot programs) from interacting with our website. Google reCaptcha verifies on our behalf that only humans and not bots can use our website. This allows us to protect our website's special features (e.g., contact forms or other input options such as the login area) from unauthorized access.

For processing purposes, the service or we collect the following data: user behavior (e.g. mouse gestures or input behavior), IP address, browser data, computer information.

If you wish to use the input options on our website that are protected by Google reCAPTCHA, you must allow the use of Google reCAPTCHA and, if necessary, solve the corresponding CAPTCHAs. If you do not complete the CAPTCHA or do not allow the use of Google reCAPTCHA, you will not be able to use the form protected by the CAPTCHA. Alternatively, you can always use our other contact options (e.g., mail or email). You can find our certification under the EU-US Data Privacy Framework at [link to certification information]. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active recall.

You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider offers https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also offers an opt-out option.

Legal text snippet and modules

We use the legal text snippet service and modules from Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, Website: https://www.website-check.de/Personal data is transmitted exclusively to servers located in the European Union.

The legal basis for the processing is Article 6(1)(c) GDPR. The use of this service helps us to comply with our legal obligations.

The service is used to reload the content of our legal texts onto our website. The latest legal texts are reloaded via the integration on our site. This integration can also be used to reload other technical modules relating to the legal texts or legally required elements.

You will find out what rights you have with regard to processing at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://www.website-check.de/datenschutzerklaerung/.

Website Check Seal

We use the Website-Check seal service on our website, provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: https://www.website-check.de/Personal data is transmitted exclusively to servers located in the European Union.

The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.

The script from Website-Check GmbH is used for the technical integration of the Website-Check seal. With this seal, we want to demonstrate that we take data protection very seriously. Data is transmitted to Website-Check GmbH for the purpose of delivering and displaying the seal on our website.

With regard to the processing of your data, you have the right to object as set out in Article 21. Further information can be found at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://www.website-check.de/datenschutzerklaerung/.

Information about the use of cookies

What personal data is collected and to what extent is it processed?

We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. Cookies are small text files that your browser can store on your device. These text files contain a unique string of characters that identifies your browser when you return to our website. The process of storing a cookie file is also known as "setting a cookie." Cookies can be set by the website itself as well as by external web services. Our website and external web services set cookies to maintain the full functionality of our website, improve user-friendliness, or to pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as unique or randomly generated IDs, so that we can offer more personalized services. Details are listed in the table below.

Legal basis for the processing of personal data

Insofar as cookies are processed based on consent pursuant to Art. 6 para. 1 lit. a GDPR, this consent also applies as consent within the meaning of Section 25 para. 1 TTDSG for the setting of the cookie on the user's terminal device. Insofar as another legal basis is specified under the GDPR (e.g., for the performance of a contract or for compliance with legal obligations), the storage or setting of cookies is based on an exception pursuant to Section 25 para. 2 TTDSG. This exception applies "if the sole purpose of storing information on the end user's terminal device or the sole purpose of accessing information already stored on the end user's terminal device is to carry out the transmission of a message over a public telecommunications network" or "if storing information on the end user's terminal device or accessing information already stored on the end user's terminal device is strictly necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user." The applicable legal basis is shown in the cookie table listed later in this section.

Purpose of data processing

The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g. an individual or random ID, so that we can offer more personalized services. Details are listed in the table below.

Duration of storage

Our cookies are stored until you delete them in your browser or, if it is a session cookie, until the session expires. Details are listed in the table below.

Opposition and removal possibility

You can configure your browser to generally prevent the setting of cookies. You can then decide whether to accept cookies on a case-by-case basis or accept cookies by default. Cookies can be used for various purposes, such as recognizing that your device has already connected to our website (persistent cookies) or saving recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent prior to its revocation remains unaffected.

Data security and data protection, communication via email

Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties. With unencrypted communication via email, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or by post for information with a high level of secrecy.

Information about the use of cookies

What personal data is collected and to what extent is it processed?

We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. Cookies are small text files that your browser can store on your device. These text files contain a unique string of characters that identifies your browser when you return to our website. The process of storing a cookie file is also known as "setting a cookie." Cookies can be set by the website itself as well as by external web services. Our website and external web services set cookies to maintain the full functionality of our website, improve user-friendliness, or to pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as unique or randomly generated IDs, so that we can offer more personalized services. Details are listed in the table below.

Legal basis for the processing of personal data

Insofar as cookies are processed based on consent pursuant to Art. 6 para. 1 lit. a GDPR, this consent also applies as consent within the meaning of Section 25 para. 1 TTDSG for the setting of the cookie on the user's terminal device. Insofar as another legal basis is specified under the GDPR (e.g., for the performance of a contract or for compliance with legal obligations), the storage or setting of cookies is based on an exception pursuant to Section 25 para. 2 TTDSG. This exception applies "if the sole purpose of storing information on the end user's terminal device or the sole purpose of accessing information already stored on the end user's terminal device is to carry out the transmission of a message over a public telecommunications network" or "if storing information on the end user's terminal device or accessing information already stored on the end user's terminal device is strictly necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user." The applicable legal basis is shown in the cookie table listed later in this section.

Purpose of data processing

The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g. an individual or random ID, so that we can offer more personalized services. Details are listed in the table below.

Duration of storage

Our cookies are stored until you delete them in your browser or, if it is a session cookie, until the session expires. Details are listed in the table below.

Opposition and removal possibility

You can configure your browser to generally prevent the setting of cookies. You can then decide whether to accept cookies on a case-by-case basis or accept cookies by default. Cookies can be used for various purposes, such as recognizing that your device has already connected to our website (persistent cookies) or saving recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent prior to its revocation remains unaffected.

Data security and data protection, communication via email

Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties. With unencrypted communication via email, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or by post for information with a high level of secrecy.

Right to information and requests for correction – deletion & restriction of data – revocation of consent – ​​right to object

Right to information

You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have a right to information about the information specified in Art. 15 Para. 1 GDPR, provided that the rights and freedoms of other people are not impaired (see Art. 15 Para. 4 GDPR). We would also be happy to provide you with a copy of the data.

Right to rectification

In accordance with Art. 16 GDPR, you have the right to have any incorrect personal data we have stored (such as address, name, etc.) corrected at any time. You can also request that the data we have stored be completed at any time. A corresponding adjustment will be made immediately.

Right to delete

In accordance with Article 17 Paragraph 1 GDPR, you have the right to have us delete the personal data collected about you if

• the data is either no longer needed;
• due to the revocation of your consent, the legal basis for processing no longer exists without replacement;
• you have objected to the processing and there are no legitimate reasons for the processing;
• your data is processed unlawfully;
• a legal obligation requires this or a survey has taken place in accordance with Art. 8 Para. 1 GDPR.

According to Art. 17 Para. 3 GDPR, the right does not exist if

• the processing is necessary to exercise the right to freedom of expression and information;
• your data has been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data is necessary to assert, exercise or defend legal claims.

Right to demand processing restrictions

According to Article 18 Para. 1 GDPR, you have the right in individual cases to request that the processing of your personal data be restricted.

This is the case if

• the accuracy of your personal data is disputed;
• the processing is unlawful and you do not agree to its deletion;
• the data is no longer needed for the processing purpose, but the data collected is used to assert, exercise or defend legal claims;
• an objection has been lodged against the processing in accordance with Article 21 Para. 1 GDPR and it is still unclear which interests predominate.

Right to withdraw

If you have given us express consent to process your personal data (Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR), you can revoke this at any time. Please note that this does not affect the lawfulness of processing based on consent until its revocation.

Right to objection

In accordance with Article 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Article 6 (1) (f) (within the context of a legitimate interest). You only have this right if special circumstances speak against storage and processing.

How do you exercise your rights?

You can exercise your rights at any time by contacting the contact details below:

MARIS Healthcare GmbH
Krankenhausstraße 24
66557 Illingen
Germany
Email: info@maris-healthcare.de
Tel .: + 49 (0) 6825-95392-00
Fax: +49 (0) 6825-95392-09

Right to data portability

In accordance with Article 20 of the GDPR, you have the right to have your personal data transmitted. We provide the data in a structured, common and machine-readable format. The data can be sent either to you or to a person responsible for you.

Upon request, we will provide you with the following data in accordance with Article 20 (1) GDPR:

• Data that was collected based on express consent in accordance with Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR;
• Data that we have received from you in accordance with Article 6 Paragraph 1 Letter b of the GDPR within the framework of existing contracts;
• Data that has been processed as part of an automated process.

We will transfer the personal data directly to a person responsible for your request, as long as this is technically feasible. Please note that we are not allowed to transfer data that interferes with the freedoms and rights of other people in accordance with Article 20 (4) GDPR.

Right to lodge a complaint with the supervisory authority in accordance with Article 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our site, you can of course seek legal clarification of the issue at any time. You also have every other legal option available to you. Regardless of this, you have the option of contacting a supervisory authority in accordance with Article 77 (1) GDPR. You have the right to complain in accordance with Article 77 of the GDPR in the EU member state of your place of residence, your place of work and/or the place of the alleged violation, which means you can choose the supervisory authority to which you should contact from the locations mentioned above. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your submission, including the possibility of a legal remedy in accordance with Article 78 GDPR.

Created by:

© DURY LEGAL Lawyers – www.dury.de

© Website Check GmbH – www.website-check.de