Legal & Privacy Policy
1. CONTACT OPTIONS
This privacy policy applies to data processing by:
MedAgentstvo UG
Landsbergerstr. 23
82205 Gilching

Phone: +49 89 69 31 46 870
Fax: +49 89 69 31 46 879
E-mail: office@med-agentstvo.de
Website: https://med-agentstvo.de
If you have any questions about data protection, you can contact us at the email address provided above.

2. Legal basis for data processing
The processing of personal data can be based on various legal bases. If we need your data to fulfill a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b GDPR.
If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1. p. 1 lit. a GDPR.
We carry out some data processing on the basis of our legitimate interest, whereby a balancing of your interests worthy of protection and our legitimate interests is always carried out. The legal basis for this is Art. 6 para. p. 1 lit. f GDPR.
Insofar as the processing is necessary for the fulfillment of a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 p. 1 lit. c GDPR.
Below is the explanation how we process personal data within our website.

2.1. Data processing when accessing the website
When you visit our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (an address of concrete page)
  • Access status/HTTP status code
  • Data volume transferred in each case
  • Website from which the request comes
  • Browser type together with version
  • Operating system and its interface
  • Language and version of the browser software
  • Name of the accessed web page
  • Message about successful retrieval
The data will be processed by us for the following purposes:
  • Ensuring a smooth connection of the website,
  • Ensuring a comfortable use of our website,
  • Evaluation of system security and stability, and
  • for other administrative purposes.
The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR; insofar as an absolutely necessary access to information stored in the user’s terminal equipment takes place, also Section 25 para. 2 no. 2 TTDSG. Our legitimate interest follows from the purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

2.2. Contact via e-mail or contact form
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name telephone number, and content of your request, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR.
Insofar as we request information via our contact form that is not required for contacting us, we have always marked this as optional. This information is used to specify your request and to improve the processing of your request.
The disclosure of information is made on a voluntary basis and with your consent, Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as this involves information on communication channels (for example, e-mail address, telephone number), you also consent to us contacting you in this way to answer your request. You can revoke this consent at any time for the future.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Which means your request has been fully processed and no further communication with you is necessary or desired by you.

3. Applications
You can apply to our company electronically. Please note that unencrypted e-mails will not be transmitted with access protection.
Your information will be used for processing your application and deciding on the establishment of an certain relationship. The legal basis is Section 26 (1) in conjunction with Abs. 8 p. 2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purposes also constitute the legitimate interest in the processing.
Insofar as an client relationship arises between you and us, we may, in accordance with Section 26 (1) of the German Federal Data Protection Act (BDSG), further process the personal data already received from you for the purposes of the relationship if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representative body resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).
Your application data will not be processed beyond the described use.
Your personal data will be deleted after completion of the application process at the latest after 6 months , provided that no other legitimate interests on our part oppose deletion or no consent for longer storage was given. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the German General Equal Treatment Act (AGG).

4. Use of cookies
Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This prevents you, for example, from having to re-enter required form data each time you use the site. The information stored in cookies can also be used to recognize preferences and to tailor content according to areas of interest.
There are different types of cookies: session cookies are sets of data that are only temporarily held in memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.
First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. For example, these cookies are used by marketing companies.
The legal basis for possible processing of personal data using cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.
Insofar as we use cookies or similar technologies to access a terminal device used by you within the meaning of Section 2 (2) No. 6 TTDSG by storing or reading out information there regardless of personal reference, we will obtain your purpose-related, voluntary and informed consent in accordance with Section 25 (1) TTDSG beforehand.
Insofar as consent under the GDPR and the TTDSG can be bundled, we will obtain it uniformly.
No consent under the TTDSG is required to access information in your terminal device that is already stored there and was sent to us by its active transmission, this concerns the public IP address of the terminal device, the address of the website accessed, the user agent string with browser and operating system incl. version and the language set.
Furthermore, no consent is required under the TTDSG if the cookie or similar technology is used to ensure the execution of the transmission of a message via a public telecommunications network (Section 25 (2) No. 1 TTDSG) or to the extent that the setting of the cookie and thus the storage of information in your terminal equipment or access to information already stored in your terminal equipment is absolutely necessary for the provision of a telemedia service expressly requested by you (Section 25 (2) No. 2 TTDSG).
We use cookies to ensure the proper operation of the website, to provide basic functionality, to measure reach and – with your consent – to tailor our services to preferred areas of interest.
You can delete cookies already stored on your terminal device at any time. If you wish to prevent cookies from being stored, you can do so via the settings in your internet browser. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.
When calling up our website, all users of our website are also informed by an info banner about our use of cookies and referred to this data protection notice. As a user, you will also be asked for your consent to the use of certain cookies, in particular for the personalization of services and for marketing measures.

5. Tilda
Tilda is a content management platform that uses for websites developing and managing. This website stored on the Tilda's servers and is managing by software provided by Tilda. Tilda is an offer of the provider Tilda Publishing Ltd., Regus Pembroke House, 28 - 32, D02 NT28 Dublin
IRELAND, hereinafter referred to as “Tilda”.
Through the “Tilda” function, we inform our website visitors about the use of cookies on our website and enable them to make a decision about their use.
If the visitor gives his/her consent to the use of cookies, the following data is automatically logged:
– The IP number of the user
– Date and time of consent
– User agent of the end user’s browser
– The URL of the provider
– An anonymous, random and encrypted key.
The encrypted key and the cookie status are stored by means of a cookie on the end user’s device in order to establish the corresponding cookie status during future page visits. This cookie is automatically deleted after 12 months.
The legal basis for the storage of the data is Art. 6 para. 1 p. 1 (f) GDPR, Section 25 (2) No. 2 TTDSG, as Usercentrics is used to fulfill requirements under the TTDSG.
The installation of the cookie as well as its storage, and thus his cookie consent, can be prevented or terminated by the user at any time by settings of his browser.

6. Google fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. We have opted for the offline variant, in which the Google Fonts are stored locally on our web server. The management of the fonts is then possible – using CSS – as with any other font family. A transmission of the IP address and other data to Google does not take place.
The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings with regard to efficiency and cost-saving considerations. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR, Section 25 para. 2 No. 2 TTDSG. If your browser does not support web fonts, a standard font from your computer will be used.

7. Google Analytics
Insofar as you have given your consent, Google Analytics, a web analytics service provided by Google LLC, is used on this website. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by means of the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
We use the User ID feature. User ID allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyze user behavior across devices.
In the event that IP anonymization is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. In addition, we receive information about the functionality of our site (for example, to detect navigation problems).
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Receiver
Recipients of the data are/could be
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Storage duration
The information sent by us and linked to cookies is automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

Legal basis
The legal basis for this data processing is your consent pursuant to Art.6 para. 1 p. 1 lit. a GDPR, Section 25 para. 1 TTDSG. Your voluntary consent can be withdrawn at any time with effect for the future.

Withdrawal
You can withdraw your consent at any time with effect for the future by accessing the cookie settings HERE and changing your selection there. The legality of the processing carried out on the basis of the consent until the withdrawal remains unaffected.
Alternatively, you can prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to refuse all cookies, you may experience limitations in functionality on this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by
  1. Not giving your consent to the setting of the cookie or
  2. downloading and installing the browser add-on to disable Google Analytics.
For more information on Google Analytics’ terms of use and Google’s privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/
and at https://policies.google.com/?hl=de

8. Data transmission
A transfer of your data to third parties will not take place except in the cases mentioned, unless we are legally obliged to do so, or the data transfer is necessary for the implementation of the contractual relationship or you have previously expressly consented to the transfer of your data.
External service providers and partner companies, such as IT service providers, only receive your data to the extent that this is necessary. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. As far as our service providers come into contact with your personal data, we ensure within the framework of order processing pursuant to Art. 28 GDPR that they comply with the provisions of data protection laws in the same manner. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.
We value processing your data within the EU / EEA. However, we may use service providers that process data outside the EU / EEA in some cases. If this happens, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient prior to the transfer of your personal data.

9. Data security
We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

10. Your rights
You have the following rights with respect to personal data concerning you. To exercise your above rights, please contact us by e-mail at office@med-agentstvo.de.

10.1. General rights
We will gladly provide you with information as to whether personal data relating to you is being processed. If this is the case, you have a right to get access to the information listed in detail in Art. 15 GDPR. In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal conditions.
b) Rights in the processing of data according to the legitimate interest
Pursuant to Article 21 (1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Article 6 (1) sentence 1 lit. e GDPR (data processing in the public interest) or on the basis of Article 6 (1) sentence 1 lit. f GDPR (data processing for the protection of a legitimate interest). In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

10.2. Right of complaint
The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA).
Promenade 18
91522 Ansbach