WEBSITE PRIVACY POLICY
I. Name and address of the person responsible
II. Personal data protection officer contact information
III. General information about data processing
IV. Launching the website and preparing log files
V. Use of cookies
VI. Bulletin
VII. Compliance Helpline
VIII. Google Maps
IX. Social media links
X. Your Rights
I. Name and address of the person responsible
Responsible in accordance with the European General Data Protection Regulation:
INSPITAL Medical Techlology GmbH (hereinafter: “we,” or “us”)
Within the body of INSPITAL Medical Techlology GmbH
Kaiserswerther Str. 83B Ratingen North Rhine- Westphalia 40878 Germany
Phone: + +49 (2102) 939 46 94
Email: info@inspital.com
Website: https://www.inspital.com
II. Personal data protection officer contact information
You can reach the personal data protection officer from the following information:
Data Protection Officer
Within the body of INSPITAL Medical Techlology GmbH
Kaiserswerther Str. 83B Ratingen North Rhine- Westphalia 40878 Germany
Email: info@inspital.com
III. General information about data processing
The protection of your personal data is very important to us. First of all, we provide this by having a functional and comfortable website. We want to ensure that you can use our content and offers on this website.
In addition, we only process your data as permitted by law. For more information, follow the explanations below.
IV. Launching the website and preparing log files
Our system automatically collects data and information from your computer system whenever our website is accessed. We collect the following data:
• (1) Information about browser type and version used
• (2) Your operating system
• (3) your IP address
• (4) Access date and time
• (5) Websites that the user's system accesses via our website
• (6) Names or URL of accessed data
• (7) Amount of data transferred
• (8) Http status codes (eg “Request received successfully” or “Requested data not found”), Http methods (eg “GET” or “POST”) and Http versions (eg “HTTP/2.0“) or “HTTP/1.1”). This data is saved in your system's log files.
It is not possible to record the above-mentioned data together with the data of other persons.
We use this data to protect our information technology system. In this context, the data is not used for marketing purposes. The legal basis for the temporary storage of data and log files is article 6 (1) f of the General Data Protection Regulation (hereinafter referred to as "GDPR").
The data is stored until it is necessary to achieve the purpose for which it was collected. The data is stored for as long as it is necessary for the website to be put into service, the requirement disappears when the relevant session ends. Your IP address is then automatically deleted or anonymized, so it is not possible to identify you personally. If the data is stored in log files, this will happen after seven days at the latest. Any other collected data is saved alongside these files without being used to identify you.
We assign a data processor for the hosting of our website, which adheres to our instructions and GDPR and will not pass on your data to third parties without legal basis
V. Use of cookies
Cookies called "Cookies" are used on our website. These are text files stored by your internet browser on your computer system. If you access our website, cookies may be stored in your operating system. It contains a special string of characters that identifies your browser the next time you log into the website.
The following sections are numbered. 1. Mandatory or necessary cookies 2. Functionality cookies 3. Purpose or marketing-oriented cookies. We will explain in detail what types of cookies we use and what data we always process here.
In summary, regardless of the type and purpose of the cookie, the saving time is as follows, unless the different deletion processes in the following descriptions are stated otherwise:
You have unlimited control over the use of cookies. These are saved on your computer and the data is transmitted from there to our system. Most browsers are set by default to accept cookies, a change to browser settings can disable or restrict the transmission of cookies. Saved cookies can be deleted at any time. You can also do it by adjusting your browser accordingly.
When the cookies on our website are disabled, you may not be able to fully use all the functions of our website.
The legal basis for data processing is art. 6 para. 1 lit. a GDPR for all cookies.
1. Mandatory or necessary cookies
Mandatory or necessary cookies. These are cookies that are necessary for online services to function properly. Cookies used to enable the execution of online services, to record previous actions (eg, the text that appears when you return to a page in a session), to secure the online service, and to control the online service (eg: fraud prevention). Without these cookies, the online service will not work properly, that is, İnspital Medikal Teknoloji will not be able to provide the necessary service.
The processing of personal data through the use of technically mandatory cookies is legally based on article 6 para. 1 lit. f GDPR. The data collected with technical mandatory cookies is not used to create user profiles.
If you refuse the use of these cookies or configure your browser accordingly, our website will not recognize your browser again and certain content will not be able to be performed again or data (eg input mask feature) will be lost.
The mandatory cookies we use are temporary (session-cookies) cookies that are automatically deleted at the end of the session.
2. Functionality cookies
These are the types of cookies that are not necessary for the execution of the online services, but which facilitate the use of the online service by saving certain selected options and providing enhanced functions. For example, it is used in website settings or to save language selection or other online (eg fonts) options. These cookies and other technologies can be used to operate desired functions such as video viewing.
Functional cookies also collect information about how online services are used, which pages are accessed most often, which browser or operating system is used, which page users access online services, whether a product or link is viewed or used, and what error notifications occur. This information; It helps us to improve online services, find out the number of visitors, identify user patterns, fix problems within the online service and make the use of the online service simpler.
Some analytics and performance cookies provided by third party sources are used in association with the Services.
• Adobe Analytics is the internet analysis service provided by Adobe. Adobe Analytics is used to collect information about your use of online services. The generated data is transmitted to the Adobe Server in America and saved there. You can find other information on the Adobe website . .
Based on the statistics obtained, we can improve our offer and make it more attractive to you, the users. Apart from the consent you have given here within the framework of cookie consent management, our legitimate interest is legally based on art. 6 para. 1 lit. f GDPR.
The limited cookie is valid for one week. Unanonymized log data on our servers is automatically deleted after seven days.
3. Purpose or marketing driven cookies
These cookies collect information about your surfing habits and online routine, the different browsers and devices you use, to display advertisements that may be of interest to you on online services and other visited pages. Your surfing routine and activities on the other site can be used to obtain information in order to show ads that will be relevant to you (often interest-based advertising). It is also used to limit the display frequency of advertisements and to detect the effectiveness of advertising campaigns. Online services record information you visit (including pages visited and links clicked) and may share this information with advertising companies and ad networks. These cookies are usually placed by third party sources. The data collected with functional cookies (such as analytics and performance cookies) can be partially used for advertising purposes.
VI. Bulletin
You can subscribe to our free newsletter. For this, we process the following data:
• Surname
• Name
• Company
Your data takes place with your consent by ticking the appropriate box during the registration process. The legal basis is article 6 para. 1 a GDPR. After registration, you will receive an email asking you to confirm your registration. This confirmation is required so that no one can register with foreign email addresses.
The processing of the data is necessary to transmit the ordered newsletter. Legal basis: Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.
There is no data transmission to third parties regarding data processing for the transmission of newsletters. The data will only be used for newsletter sending. For the sending of newsletters, we discard the data processor in accordance with Art. 28 GDPR and in accordance with GDPR in accordance with Art. 4 (10) GDPR without a “third party”.
You can unsubscribe from the newsletter at any time. Each newsletter includes a link to the unsubscribe form. Thus, together we ensure the revocation of your consent to the storage of your data. You can also send your cancellation request to the above-mentioned contact information at any time.
We delete your data when it no longer needs to be collected. Your e-mail address will remain registered as long as you subscribe to the newsletter.
Newsletter records are kept to prove that there is a registration process in accordance with legal requirements. This includes the registration of registration and confirmation times and the IP address you have used. We usually delete personal data collected in line with the registration process after a period of seven days.
VII. Compliance Helpline
1. For what purposes is the compliance line operated?
In accordance with Section 301(4) of the Sarbanes-Oxley Act (SOX), the establishment of a whistleblower system is mandatory. The German Corporate Governance Code (clause 4.1.3) recommends the establishment of whistleblower systems. Regardless of these legal requirements, whistleblower systems are generally considered appropriate components of effective compliance management systems (CMS) as they provide a protected space for employees and third parties to provide information about compliance violations. The compliance line is one such whistleblower system.
2. On what legal basis do we process your data?
• Use the data for the detection of compliance violations and criminal offenses (eg prevention of corruption) GDPR article 6 paragraph 1 letter d) and f) or BDSG article 4 paragraph 1 sentence 1 No. We operate on 3 basis.
• Therefore, we pursue our legitimate interests in enforcing the compliance line and the employment relationship and investigating criminal offences. BDSG article 26.
• The collection, processing and use of employee data by informant systems is permitted under the conditions of article 88 paragraph 1 GDPR and article 26 paragraph 1 sentence 2 of the BDSG.
3. Who is involved in the processing of my data?
• İnspital Medikal Teknoloji GmbH, Kaiserswerther Str. 83B, 40878 Ratingen, Germany
If necessary, data is transferred to:
• Internal departments such as administration, legal and compliance
• Criminal prosecution and administrative bodies, courts and lawyers.
• In order to investigate your request, information may be transmitted to other İnspital GROUP companies, technical and legal experts or translators for the above-mentioned purposes, including your personal data
4. Is the data transferred to a third country?
The data is shared with the İnspital Medical Technology service provider. İnspital Medikal Teknoloji has taken measures to ensure the protection of your data.
5. What data should or can be specified and what happens with them?
The information provided is at the discretion of the informant. Therefore, it is not possible to identify categories of personal data independently of each case.
VIII. Google Maps
We use Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA Google Maps on this page so that you can view interactive maps directly on the website. This allows you to use the map function conveniently.
We have integrated these maps according to data protection. Thus, no data about you as a user is transferred to Google unless you activate the maps. By activating the map, you consent to the data processing. Legally, it is article 6 para. 1 clause a GDPR.
When you visit the website, Google receives the information that you have accessed the relevant subpage of our website. In this way, the following data is transmitted:
• IP address
• Access date and time
• Time zone difference with Greenwich Mean Time (GMT)
• The content of the request (a specific page)
• Access code/ HTTP-response status codes
• The amount of data transferred per
• The website where the request came from
• Browser
• Operating system and surface
• Language and version of the scanner software
This happens regardless of whether Google provides a signed-in user account or not. If you're signed in to Google, your data is directly matched to your account. If you don't want your profile to match with Google, you must log out first. Google stores your data as user profiles and uses them for advertising, market research and/or tailored website design.
This type of evaluation is made specifically (even for users who are not logged in) to provide needs-based advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the creation of the user profile if necessary, but you must contact Google for this.
You can find more information about the purpose and scope of data collection and its processing by the browser plug-in in the data protection declaration of the service provider. You can also find more information on adjusting the settings to protect your respective rights and privacy here: http://www.google.de/intl/de/policies/privacy .
IX. Social media links
We do not put social media plug-ins on our website. The icons that appear are only links to the specified providers. You can reach İnspital Medikal Teknoloji YouTube channel, Twitter and LinkedIn pages with these links. When you click on these links, the relevant site operator processes your personal data. Visiting our website may depend on your profile if you have created a profile there and are logged in.
For more details, please refer to our respective data protection statement on the social media page and the information provided by the platform operator. (YouTube: https://policies.google.com/privacy?hl=en ;Twitter: https://help.twitter.com/en/twitter-for-websites-ads-info-and-privacy )
X. Your Rights
Below we would like to summarize your rights under the General Data Protection Regulation.
1. The right to revoke the data protection declaration of consent (article 7 paragraph 3 of the GDPR)
You have the right to withdraw the consent declaration at any time. Withdrawing the consent declaration does not prejudice the compliance with the legal order due to the declaration of consent until the cancellation of the data transaction. You will be informed about this before giving your consent.
2. Right of access (information) (GDPR article 15, BDSG article 34)
You have the right to request that we confirm whether we are processing personal data about you in accordance with Article 15 GDPR. In this case, you have the right to be informed about this personal data and the following information:
• for what purpose we process this data;
• categories of personal data we process;
• to whom this personal data has been or will be shown, especially when transmitted to recipients in these third countries or international organisations;
• the planned period for recording personal data, if possible, or, if this is not possible, the criteria determining this period;
• the right to rectification or erasure of personal data concerning you, or the right to restrict data processing or object to data processing by us;
• the right to lodge a complaint with the supervisory authority;
• all available information about the source of the data, if personal data is not collected from you;
• Whether data processing takes place by automated means, including profiling pursuant to article 22 paragraphs 1 and 4 of the GDPR – if it does – meaningful information about the logic involved and the significance and anticipated consequences of such processing of your data.
If personal data is transferred to a third country or an international organisation, you have the right to be informed of the appropriate guarantees that ensure compliance by these recipients with the GDPR provisions.
3. Right to rectification (article 16 GDPR, article 35 BDSG)
You can request that we immediately correct inaccurate data concerning you. You also have the right -with an additional statement--to request the completion of incomplete personal data, taking into account the purposes of the processing.
4. The right to erasure, in other words the “Right to be forgotten” (GDPR article 17, BDSG article 35)
You have the right to request that we delete the data immediately if one of the following grounds applies:
• Data held for collection or other processing purposes is no longer necessary.
• You withdraw the consent on which the processing activity is based and there are no other legal grounds for data processing activity.
• You object to the processing of data in accordance with article 21 paragraph 1 of the GDPR, revealing your particular situation, and there is no other legal basis for this processing.
• You object to data processing for direct advertising pursuant to art. 21 clause 2 GDPR.
• The data has been processed illegally.
• Deletion of data is necessary to fulfill a legal obligation under European Union or German Law.
• The data has been collected in relation to the provision of social information services in accordance with article 8 paragraph 1 GDPR.
When we make your data public and we are obliged to delete it, we notify the responsible parties that you have requested the deletion of the data, taking reasonable precautions, taking into account the current technology and application costs.
When we make your data public and we are obliged to delete it, we will inform the responsible parties that you have requested the deletion of the data, taking reasonable precautions, taking into account the current technology and application costs..
5. Right to restrict processing (article 18 GDPR)
In accordance with article 18 GDPR, we agree to the restriction of processing in the following cases. In the following cases:
• Until you object to the accuracy of your personal data and allow us to confirm the accuracy of the personal data.
• if the processing is illegal and you object to the deletion of your data and instead request the restriction of the use of the data;
• we no longer need the personal data, but we need it for the purposes of you making legal claims, in which case the exercise or defense of claims; or
• You object to the processing by citing special circumstances pursuant to article 21 paragraph 1 GDPR, until it can be verified whether our legitimate grounds outweigh your interests.
We can only save this data if processing is restricted. Any further processing is then permitted only with your consent or on the grounds of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or in an important public interest of the Union or one of the Member States.
You can revoke your consent given in this context at any time.
6. Notification obligation (GDPR article 19)
We are obliged to notify any recipient to whom your personal data has been disclosed, of any personal data correction or deletion or restriction of processing. This does not apply only where it is not possible to provide or takes a disproportionate effort.
We will inform you about the buyers when you request.
7. Right to data portability (GDPR article 20)
You have the right to receive the relevant personal data you have provided to us in a structured, commonly used and machine-readable format. Our right to transmit this data to third sources:
• The processing is based on your consent or a contract, and
• If the processing activity takes place by automatic means
Thus, if technically feasible, you can request the transmission of personal data directly to third parties. This right does not adversely affect the rights and freedoms of others.
8. Automated individual decision making, including profiling (GDPR art. 22)
On our website, your data is not only the subject of decisions regarding automated processing (e.g. profiling).
9. Right to object (GDPR article 21)
When we process your data on the grounds of a legitimate interest (Article 6 para. 1 lit. f GDPR), you have the right to object on grounds relating to your particular situation. This also applies to profiling based on these provisions. In this case, we will not process your personal data unless compelling legitimate grounds are shown. These grounds must outweigh your interests, rights and freedoms, or the processing, exercise or defense of legal claims.
If your data is processed for direct marketing purposes, you can object to the processing of this data. To the extent that it relates to direct marketing, this also applies to profiling.
After your objection, personal data is no longer processed for these purposes.
Simply send an informal message to the contact details provided on page 1.
10.Right to lodge a complaint with a supervisory authority (article 77 GDPR)
If you believe that the processing of your relevant data violates the General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of business or where the alleged violation occurred. If you evaluate the violation, it will not prejudice any other administrative or judicial solution.
Web Site User Clarification Text