Privacy statement

Last updated 31/10/2019

Unless otherwise stated, this privacy policy applies to all websites provided by GS Elektromedizinische Geräte G. Stemple GmbH and their partner companies (hereafter referred to as ‘corpuls’). These websites are also included in this privacy policy under the term ‘services’. 

Data Controller
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Data Protection Officer
Address
Data Protection
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Email
If you would like to exercise your legal rights or have general questions, please contact our Data Protection Officer at datenschutz@corpuls.com.

Data subject categories
Website visitors
You visit one of our websites or interact with us on social media because you are interested in our products and our company. 

What data do we gather and process?
Contact data Contact information about you that you provide as part of registering or in a contact form.

Usage data
If you use one of our services, usage data is always gathered. This is defined by protocols on our servers. The following data is gathered:

• Date and time you accessed our website
• IP address from which the access was initiated
• Browser type or other device data linked to your access of the site
• Previously visited websites if you have accessed our service via a link

Cookies
Cookies are a form of user data that we have detailed in an extra section.

How do we use the data we gather?
We process and use your data in order to render and improve our services, adapt them to your needs and inform you of the latest news regarding the service.

Contact data
Contact information: We use this information to contact you after your enquiry or to assign your enquiry appropriately. We may contact you by post, telephone or email, depending on your stated preference. Brochures etc. are therefore sent out by post whereas questions on current campaigns are answered by email or telephone.

Usage data
Usage data: This is used to analyse reactions to current campaigns, e.g. more people clicked on our product pages during this period. It is also analysed to assess whether visitors from social networks come to our sites, how long people stay on different pages, where our visitors come from in the world and what bounce rate they have.

Cookies
See the separate section on cookies

What is the lawful basis for this?
Consent of the data subject
Article 6(1)(a) of the GDPR serves as the lawful basis for processing where we have gathered consent for a specific processing purpose.

Legal obligation
If we are subject to a legal obligation under which we have to process personal data, the lawful basis for this is Article 6(1)(c) of the GDPR.

Legitimate interest
The lawful basis for processing may also be Article 6(1)(f) of the GDPR. This is the lawful basis for processing not covered by any of the previously mentioned legal bases, where the processing is required in order to safeguard our legitimate interest or that of a third party provided this is not outweighed by the interests, rights and freedoms of the data subject. We are specifically permitted to carry out this type of processing because it is mentioned in European legislation.

Processing personal data for the purposes of your application
We kindly ask you to send your application via the application form provided on our website. The extent of processing your personal data in this case depends on the application documents provided. In addition, with your consent, your application data will be kept in our pool of applicants. Legal basis for the processing of your personal data: Data processing for employment purposes in accordance with Article 88 of the GDPR combined with § 26 BDSG (German Data Protection Act).

Fulfillment of a contract or execution of pre-contractual measures
Article 6(1)(b) of the GDPR serves as the legal basis for processing operations agreed in a contract or necessary to initiate a contract (including our e-learning portal).

Cookies are files stored on your computer by websites that you visit.

Cookies store information such as your preferred language or other personal website settings. If you visit the same website again, your browser sends the stored cookie information back to the site. This enables the site to show you information that has been personalised to you.
We use this widely available technology for several reasons:

• To make the websites easier and more user-friendly.
• To gather and analyse statistical data on website usage, so that we can analyse and improve usage of our services. 

Vimeo
The website corpuls.world uses plug-ins provided by the video-sharing website Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA in order to display videos. Every time you visit a page on corpuls.world that includes a plug-in of this kind, this creates a direct connection between your browser and a Vimeo server. However, this only happens if you have agreed via the privacy settings (in the so-called "cookie banner") that external components may be used or if you activate the integration of a Vimeo video individually by clicking on a video placeholder. The content of the plug-in is sent directly from Vimeo to your browser and embedded on the page. Via this connection, Vimeo receives the information that your browser has accessed the relevant page on our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is sent directly from your browser to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly associate the visit to our website with your Vimeo account. Interacting with the Vimeo plug-ins (e.g. clicking the Start button of a video) also results in this information being sent directly to a Vimeo server and stored there. The data processing operations described are performed in line with Article 6(1)(f) of the GDPR on the basis of the legitimate interest of Vimeo to carry out market research and to design the service in line with demand. If you do not want Vimeo to directly associate data collected via our website with your Vimeo account, you need to log out of Vimeo before visiting our site. For information on the purpose and scope of the data collection and further processing and use of the data by Vimeo, as well as your associated rights and settings options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy
Vimeo, Inc. is based in the USA and certified for the US-EU data protection convention, the ‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list
This processing is carried out in line with Article 6(1)(f) of the GDPR on the basis of the legitimate interest of Vimeo in conducting statistical analysis of user behaviour for optimisation and marketing purposes.
For videos from Vimeo that are embedded in our services, the tracking tool Google Analytics from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland is automatically integrated. This is Vimeo’s own tracking system to which we have no access and which cannot be influenced from our side. Google Analytics uses ‘cookies’ for tracking; these are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie relating to your use of this website is generally sent to a Google server and stored there, and may also be sent to a Google LLC. server in the USA.

YouTube
The website corpuls.world uses YouTube embedding functions to display and play back videos from the provider ‘YouTube’, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Extended data protection mode is used for this, which, as per the provider’s specifications, only initiates the storage of user information once the video(s) is/are played back. In general, embedding is only done if you have consented to the use of external privacy components via the privacy settings (in the so-called "cookie banner") or if you are activating the embedding of a YouTube video individually by clicking on a video placeholder. If the playback of any embedded YouTube videos is initiated, the provider ‘YouTube’ uses cookies to collect information about the user’s behaviour. According to information from ‘YouTube’, this is used for the following purposes amongst others: to record video statistics, to improve user-friendliness and to prevent misuse. If you are logged in to Google, your data will be associated directly with your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before clicking the button. Google stores your data (even for users that are not logged in) as a usage profile and analyses it. Analysis of this kind is carried out in line with Article 6(1)(f) of the GDPR on the basis of the legitimate interest of Google in integrating personalised advertising, conducting market research and/or designing its website in line with demand. You are entitled to object to the creation of this user profile and can do so by contacting YouTube. The use of YouTube can also involve personal data being sent to a Google LLC. server in the USA. Regardless of whether any embedded videos are played back, a connection to the Google network is established every time this website is accessed, which can trigger further data processing operations over which we have no influence.
Further information on data privacy at ‘YouTube’ can be found in the provider’s data privacy policy at: https://policies.google.com/privacy

Google Analytics, Google Fonts, Google Maps

Google Analytics:
The website corpuls.world uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’), provided you have agreed in the privacy settings (in the so-called "cookie banner") that external components may be used. Google Analytics uses ‘Cookies’, text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie relating to your use of this website (including the truncated IP address) is generally sent to a Google server and stored there, this can also be sent to a Google LLC. server in the USA.
Our services only use Google Analytics with the extension ‘_anonymizeIp()’, which guarantees that the IP address is anonymised by way of truncation and prevents individuals from being directly identified. The use of the extension means your IP address is truncated in advance by Google within European Union member states or in other countries that are parties to the Agreement on the European Economic Area. In exceptional cases, the full IP address will be sent to a Google LLC. server in the US and truncated there. In exceptional cases like this, this processing is carried out in line with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. Google will use this information on our behalf to analyse your use of the website, compile reports on website activity, and provide us with further services associated with the use of the website and the internet. The IP address sent by your browser when using Google Analytics will not be linked to any other data held by Google.
The retention period of data stored by Google Analytics has been limited to 14 months.
You can prevent the storage of cookies set by Google Analytics by setting your browser software accordingly.
In addition, you have the option to prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively you have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website. Please note that this opt-out cookie is only valid for 365 days, refers only to this browser and may be deleted if you delete cookies in your browser.

Google Fonts:
The website my.corpuls.world uses ‘Web Fonts’ provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’) for the uniform display of fonts. When accessing a page, your browser loads the required Web Fonts in your browser cache, in order to display text and fonts correctly. In order to do this, the browser you are using must establish a connection with Google’s servers, which can also involve personal data being sent to a Google LLC. server in the USA. Google is informed that our website was accessed via you IP address in the process. Google Web Fonts are used in the interest of ensuring that our website has a uniform and appealing appearance. This represents a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If your browser does not support Web Fonts, your computer will use a standard font.
For the eventuality that personal data is sent to Google LLC. in the USA, Google LLC. has obtained certification for the US-EU data protection convention, the ‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/ 

Google Maps:
The website corpuls.world uses Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google Maps is a web service for displaying interactive maps, in order to provide a visual representation of geographical information. This service is used to show you our location and to make any potential journeys to the site easier. Google Maps embedding is generally only done if you have agreed on the privacy settings (in the so-called "cookie banner"), that external components may be used, or if you enable embedding of a single Google Map by clicking on a map placeholder. As soon as a Google Map is embedded, information about your use of our website (e.g. your IP address) is sent to Google servers and stored there; this can also involve data being sent to a Google LLC. server in the USA. This is done regardless of whether you are logged in via a user account provided by Google or you do not have an account. If you are logged in to Google, your data is directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before clicking the button. Google stores your data (even for users that are not logged in) as a use profile and analyses this. Data is collected, stored and analysed in line with Article 6(1)(f) of the GDPR on the basis of Google’s legitimate interest in integrating personalised advertising, conducting market research and/or designing Google websites in line with demand. You are entitled to object to the creation of this user profile and can do so by contacting Google.
For the eventuality that personal data is sent to Google LLC. in the USA, Google LLC. has obtained certification for the US-EU data protection convention, the ‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list
If you do not consent to your data being sent to Google in future, within the context of using Google Maps, you also have the option of fully deactivating the Google Maps web service by switching off the use of JavaScript in your browser. It will then no longer be possible to use Google Maps and therefore also the map display function on this website.
You can view Google’s terms of service at https://policies.google.com/terms?hl=en&gl=ZZ; the additional terms of service for Google Maps can be found at https://www.google.com/help/terms_maps/.
You can also find detailed information on data privacy in connection with the use of Google Maps on Google’s website (‘Google Privacy Policy’): https://policies.google.com/privacy?hl=en-US

We protect your personal data against unauthorised access, use or dissemination. Your personal data is therefore securely encrypted when transferred to our server by our website using TLS (Transport Layer Security). We also store your personal data in a controlled, secure server environment that prevents unauthorised access and dissemination.

Our sites are not intended to be used by minors and should not be used by them. ‘Minors’ refers to persons under the age of thirteen (or higher, depending on the laws where you live). We do not knowingly gather personal data about minors. If we become aware that we have gathered personal data concerning a minor, we erase this data. If you believe that this is the case, please contact us.

We only process and store personal data as long as necessary in order to fulfil the purpose for which it was stored or unless this is required by law. In general, the purpose for which personal data is processed ends when your contract finishes or when the legal retention period expires.

To exercise your rights, please contact our Data Protection Officer at the following address.

Data Protection Officer
Address
Data Protection
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Email
If you would like exercise your legal rights or have general questions, please contact our Data Protection Officer at datenschutz@corpuls.com.

If our websites include links to other providers’ sites, we have no influence over the gathering, processing or use of data by these providers after you have clicked on the link. We can therefore take no responsibility in this regard.

We reserve the right to update this privacy policy if necessary in order to accommodate any changes made to the content of our websites or any changes in the law.

corpuls.world: Contact form
The following confirms the personal data gathered on the site, and the purpose:

• First name, last name
  To enable accurate communication with the person on the site or in a newsletter
• Organisation: to enable the request to be correctly allocated to a customer service / regional partner.
• Address (street, post code / town, country): for enquiries that need an answer by post (e.g. requesting brochures), we ask for your postal address
• Telephone, fax: Depending on the enquiry, we will contact you by telephone or fax.
• Email: For enquiries that can be answered by email, we will use this way to contact you.

Authorised for access:

• All enquiries via the contact form are received by a central point at corpuls and passed on to the correct department or person within the company, depending on the enquiry.
• External third parties with potential access to personal data
  We have a data processing agreement with All-Inkl.com (hosting partner)

Corpuls.world: online application
The following confirms the personal data gathered on the site, and the purpose:

• First, last name
  So that we can address you correctly during the application process.
• Telephone: So that we can contact you with any questions regarding your application.
• Email address: The preferred method of contact for processing your application for a vacancy with our company.
• Application documents: The application dossier compiled by you for the assessment of your application.
• Your message to us: Your personal statement for your application.

Authorised for access:

• All online applications are received by the HR department at corpuls and processed according to the relevant application process.
• External third parties with potential access to personal data
  We have a data processing agreement with All-Inkl.com (hosting partner)

corpuls Academy: Avendoo E-Learning
The following confirms the personal data gathered on the site, and the purpose:

• Access data (username, password)
  Required to log on to the site. Employees are provided with usernames (with verification keys, if required). The system is not accessible by the public.
• Gender, title, first name, last name
  To ensure that details appear correctly on certificates for completed e-learning courses.
• Email
  Required for messages about available e-learning courses as well as reminders and certificates.
• Company address
  To ensure that details appear correctly on certificates for completed e-learning courses.

Authorised for access:

• corpuls E-Learning-Team / Application Support
  To process any enquiries on problems or usage of the system.
• External third parties with potential access to personal data
  We have a data processing contract with HostEurope (hosting partner) and Magh & Boppert (development partner).

my.corpuls
The following confirms the personal data gathered on the site, and the purpose:

• Access data (email address and password)
  Required to log on to the site. A valid email address is required as registration can only be completed using an activation link sent by email.
• Title, first name, last name
  To enable accurate communication with the person on the site or in a newsletter
• Address (lines 1 and 2 of address, town / city, state / county, post code, country)
  Allocation
• Type of company, company, position
  These fields are intended for future target group-oriented newsletters (if the ‘receive newsletter’ checkbox has been ticked). This information needs to be provided for sales partners and to enable the ‘forecasts of projects’ functionality so that they can be correctly allocated. The intention is also to carry out a usage analysis in the future regarding which roles use the site most so that we can offer products and services more tailored to the users.

Authorised for access:

• Recipients of personal data
  Sales / Marketing employees at corpuls
• External third parties with potential access to personal data
  We have a data processing contract with Vodafone Cloud and Hosting Services (hosting partner) and Leuck.EU (development partner)

Customer and Support Web
The following confirms the personal data gathered on the site, and the purpose:

• Username and password
  If you wish to access the site, we will send you access data upon request in the form of a username and password

Authorised for access:

• Recipients of personal data
  Sales / Marketing and Customer Service employees at corpuls
• External third parties with potential access to personal data
  We have a data processing contract with 1&1 (hosting partner).

corpuls.mission CONFERENCE

• Login data
  A valid email address is recommended.
  

• First and last name
  To identify the user to other users.
  

• Operating system, browser name and version, screen resolution
  For the correct display of content on the respective platforms
  

• Presence
  To visualize the accessibility of a participant for other participants exclusively within the same mission.
  

• User-generated contents
  Since corpuls.mission serves as a platform for the exchange of data and communication of users, user generated information is stored. This can include: Text messages, pictures, videos, voice messages and files. The responsibility for the exchanged content lies with the creator. corpuls has no influence on the type and content of the data. These are only stored visibly for participants of the same mission and are made accessible to other persons through exports according to the wishes of the individual customer. They are not viewed by corpuls without the consent of the customer. Picture and sound data streamed in calls is not stored. For this purpose only meta data is collected. This serves the traceability of a mission for its participants.
  

• Patient data and medical data
  Data acquired by the corpuls3 is stored together with a recorded D-ECG in corpuls.mission CONFERENCE. The acquired data is determined by the corpuls3 and can be found in its user manual.

Queries via email, telephone or fax
Should you have any queries, you can call us or send us a fax or email. When doing so, please include a valid email address so that we can answer your query. If you write us an email or a fax, we will store any data you send including any contact details specified there for the purposes of processing your query and for any follow-up questions. We will not pass on this data without your consent.
Should storage no longer be necessary, we will delete any personal data we have collected. Should there be a statutory storage requirement, we will restrict processing. The legal basis for data processing for the purposes of making contact is provided by Art. 6 (1)(1)(f) of the GDPR.

Further contact details are available on request.