Política de privacidad (inglesa)

This statement summarises how corpuls handles personal data and information.
Our detailed privacy policy can be found below this summarises.

1. Validity and contact information

Unless otherwise stated, this privacy statement applies to all websites provided by GS Elektromedizinische Geräte G. Stemple GmbH and their partner companies (hereafter referred to as ‘corpuls’). These websites are also included in this privacy statement under the term ‘services’. 

We know that it is very important to you that your personal data is handled carefully. As a manufacturer of medical devices, we take the protection of your personal data very seriously and comply with the legal requirements of the German Data Protection Act (BDSG), the EU General Data Protection Regulation (GDPR) and the German Telemedia Act (TMG) when gathering, processing and using personal data via our services.

Data Controller
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Data Protection Officer
Address
Data Protection
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Email
If you would like exercise your legal rights or have general questions, please contact our Data Protection Officer at dtnschtzcrplscm.

2. What data do we gather and process?

Contact data 
Data about you that you provide as part of registering or in a contact form.

Usage data
Data that you provide when visiting our websites (e.g. log files, cookies)

Comments
Social media

3. How do we use the data we gather?

Statistics
Analysis of website visits and figures

Advertising
Sending newsletters

We do not sell your profile data to marketing companies. We use the information you provide for the purpose for which you approached us. 

We use and analyse usage data (website visits and figures) in order to tailor the services you use to your needs, improve our services and the user interface, offer a consistent, reliable user experience and develop new features. 

As data controllers, we pass on a range of personal data when processing data. We have ensured the security of your data by concluding agreements on how data is processed. Our data processors are split into the following categories:

  •  Service providers
    This includes sending newsletters and customer surveys 
  • Hosters
    Operating services and maintaining hardware and software 
We only send data to authorities and third parties in accordance with legal requirements or a legal title. Information can be provided to authorities on the grounds of legal requirements regarding security or criminal prosecution. Third parties will only receive information if this is allowed by law. This would be the case in the event of copyright infringements.

4. When you visit our sites

Cookies
We use cookies, including those provided by Google Analytics.

We use cookies to improve the usability of our websites. Cookies are files stored on your computer by websites that you visit. Cookies store information such as your preferred language or other personal website settings. If you visit the same website again, your browser sends the stored cookie information back to the site. This enables the site to show you information that has been personalised to you. 

Cookies also gather statistical data about website usage and enable this to be analysed to improve the service. Users can adjust how cookies are used. Most browsers have an option that restricts the storage of cookies or completely blocks them. However, it is important to note that the usability and functionality of the website will be limited without cookies.

We use Google Analytics for the evaluation of website views, provided you have agreed in the privacy settings (in the so-called "cookie banner") that external components may be used. Google Analytics is a web analysis service provided by Google Inc. (‘Google’). Google uses cookies.

Privacy policy

Last updated 31/10/2019

Validity and contact information

Unless otherwise stated, this privacy policy applies to all websites provided by GS Elektromedizinische Geräte G. Stemple GmbH and their partner companies (hereafter referred to as ‘corpuls’). These websites are also included in this privacy policy under the term ‘services’. 

Data Controller
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Data Protection Officer
Address
Data Protection
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Email
If you would like to exercise your legal rights or have general questions, please contact our Data Protection Officer at datenschutz@corpuls.com.

Terminology

The term ‘data’ in this privacy policy refers to all data that you enter when using our services, regardless of whether this is filling in a contact form, registering on our sites or involves data entered on a website operated by us; this is all data. 

A ‘data subject’ is a specific or specifiable natural person whose personal data is gathered, processed or used. (Article 4(1) of the GDPR, Section 3(1) of the new Federal Data Protection Act.)

‘Personal data’ is all information that concerns a data subject. (Article 4(1) of the GDPR, Section 3(1) of the new Federal Data Protection Act.)

The ‘data controller’ is corpuls, who establishes how and for what purpose the personal data is processed. (Article 4(7) of the GDPR, Section 3(7) of the new Federal Data Protection Act.)

The ‘data processor’ is a natural or legal person, authority, institution or other organisation who processes personal data on behalf of corpuls. (Article 4(8) of the GDPR, Section 3(8) of the new Federal Data Protection Act.)

The ‘data protection officer’ is a person named by corpuls who is responsible for promoting compliance with current data protection regulations. (Article 37 of the GDPR, Sections 4(f) and (g) of the new Federal Data Protection Act.)

How, why and how much personal data is gathered and used

Data subject categories
Website visitors
You visit one of our websites or interact with us on social media because you are interested in our products and our company. 

What data do we gather and process?
Contact data Contact information about you that you provide as part of registering or in a contact form.

Usage data
If you use one of our services, usage data is always gathered. This is defined by protocols on our servers. The following data is gathered:

  • Date and time you accessed our website
  • IP address from which the access was initiated
  • Browser type or other device data linked to your access of the site
  • Previously visited websites if you have accessed our service via a link


Cookies
Cookies are a form of user data that we have detailed in an extra section.

How do we use the data we gather?
We process and use your data in order to render and improve our services, adapt them to your needs and inform you of the latest news regarding the service.

Contact data
Contact information: We use this information to contact you after your enquiry or to assign your enquiry appropriately. We may contact you by post, telephone or email, depending on your stated preference. Brochures etc. are therefore sent out by post whereas questions on current campaigns are answered by email or telephone.

Usage data
Usage data: This is used to analyse reactions to current campaigns, e.g. more people clicked on our product pages during this period. It is also analysed to assess whether visitors from social networks come to our sites, how long people stay on different pages, where our visitors come from in the world and what bounce rate they have.

Cookies
See the separate section on cookies

What is the lawful basis for this?
Consent of the data subject
Article 6(1)(a) of the GDPR serves as the lawful basis for processing where we have gathered consent for a specific processing purpose.

Legal obligation
If we are subject to a legal obligation under which we have to process personal data, the lawful basis for this is Article 6(1)(c) of the GDPR.

Legitimate interest
The lawful basis for processing may also be Article 6(1)(f) of the GDPR. This is the lawful basis for processing not covered by any of the previously mentioned legal bases, where the processing is required in order to safeguard our legitimate interest or that of a third party provided this is not outweighed by the interests, rights and freedoms of the data subject. We are specifically permitted to carry out this type of processing because it is mentioned in European legislation.

Processing personal data for the purposes of your application
We kindly ask you to send your application via the application form provided on our website. The extent of processing your personal data in this case depends on the application documents provided. In addition, with your consent, your application data will be kept in our pool of applicants. Legal basis for the processing of your personal data: Data processing for employment purposes in accordance with Article 88 of the GDPR combined with § 26 BDSG (German Data Protection Act).

Fulfillment of a contract or execution of pre-contractual measures
Article 6(1)(b) of the GDPR serves as the legal basis for processing operations agreed in a contract or necessary to initiate a contract (including our e-learning portal).

Social networks & cookies

Cookies are files stored on your computer by websites that you visit.

Cookies store information such as your preferred language or other personal website settings. If you visit the same website again, your browser sends the stored cookie information back to the site. This enables the site to show you information that has been personalised to you.
We use this widely available technology for several reasons:

  • To make the websites easier and more user-friendly.
  • To gather and analyse statistical data on website usage, so that we can analyse and improve usage of our services. 

Vimeo
The website corpuls.world uses plug-ins provided by the video-sharing website Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA in order to display videos. Every time you visit a page on corpuls.world that includes a plug-in of this kind, this creates a direct connection between your browser and a Vimeo server. However, this only happens if you have agreed via the privacy settings (in the so-called "cookie banner") that external components may be used or if you activate the integration of a Vimeo video individually by clicking on a video placeholder. The content of the plug-in is sent directly from Vimeo to your browser and embedded on the page. Via this connection, Vimeo receives the information that your browser has accessed the relevant page on our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is sent directly from your browser to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly associate the visit to our website with your Vimeo account. Interacting with the Vimeo plug-ins (e.g. clicking the Start button of a video) also results in this information being sent directly to a Vimeo server and stored there. The data processing operations described are performed in line with Article 6(1)(f) of the GDPR on the basis of the legitimate interest of Vimeo to carry out market research and to design the service in line with demand. If you do not want Vimeo to directly associate data collected via our website with your Vimeo account, you need to log out of Vimeo before visiting our site. For information on the purpose and scope of the data collection and further processing and use of the data by Vimeo, as well as your associated rights and settings options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy
Vimeo, Inc. is based in the USA and certified for the US-EU data protection convention, the ‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list
This processing is carried out in line with Article 6(1)(f) of the GDPR on the basis of the legitimate interest of Vimeo in conducting statistical analysis of user behaviour for optimisation and marketing purposes.
For videos from Vimeo that are embedded in our services, the tracking tool Google Analytics from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland is automatically integrated. This is Vimeo’s own tracking system to which we have no access and which cannot be influenced from our side. Google Analytics uses ‘cookies’ for tracking; these are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie relating to your use of this website is generally sent to a Google server and stored there, and may also be sent to a Google LLC. server in the USA.

YouTube
The website corpuls.world uses YouTube embedding functions to display and play back videos from the provider ‘YouTube’, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Extended data protection mode is used for this, which, as per the provider’s specifications, only initiates the storage of user information once the video(s) is/are played back. In general, embedding is only done if you have consented to the use of external privacy components via the privacy settings (in the so-called "cookie banner") or if you are activating the embedding of a YouTube video individually by clicking on a video placeholder. If the playback of any embedded YouTube videos is initiated, the provider ‘YouTube’ uses cookies to collect information about the user’s behaviour. According to information from ‘YouTube’, this is used for the following purposes amongst others: to record video statistics, to improve user-friendliness and to prevent misuse. If you are logged in to Google, your data will be associated directly with your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before clicking the button. Google stores your data (even for users that are not logged in) as a usage profile and analyses it. Analysis of this kind is carried out in line with Article 6(1)(f) of the GDPR on the basis of the legitimate interest of Google in integrating personalised advertising, conducting market research and/or designing its website in line with demand. You are entitled to object to the creation of this user profile and can do so by contacting YouTube. The use of YouTube can also involve personal data being sent to a Google LLC. server in the USA. Regardless of whether any embedded videos are played back, a connection to the Google network is established every time this website is accessed, which can trigger further data processing operations over which we have no influence.
Further information on data privacy at ‘YouTube’ can be found in the provider’s data privacy policy at: https://policies.google.com/privacy

Google Analytics, Google Fonts, Google Maps

Google Analytics:
The website corpuls.world uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’), provided you have agreed in the privacy settings (in the so-called "cookie banner") that external components may be used. Google Analytics uses ‘Cookies’, text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie relating to your use of this website (including the truncated IP address) is generally sent to a Google server and stored there, this can also be sent to a Google LLC. server in the USA.
Our services only use Google Analytics with the extension ‘_anonymizeIp()’, which guarantees that the IP address is anonymised by way of truncation and prevents individuals from being directly identified. The use of the extension means your IP address is truncated in advance by Google within European Union member states or in other countries that are parties to the Agreement on the European Economic Area. In exceptional cases, the full IP address will be sent to a Google LLC. server in the US and truncated there. In exceptional cases like this, this processing is carried out in line with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. Google will use this information on our behalf to analyse your use of the website, compile reports on website activity, and provide us with further services associated with the use of the website and the internet. The IP address sent by your browser when using Google Analytics will not be linked to any other data held by Google.
The retention period of data stored by Google Analytics has been limited to 14 months.
You can prevent the storage of cookies set by Google Analytics by setting your browser software accordingly.
In addition, you have the option to prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively you have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website. Please note that this opt-out cookie is only valid for 365 days, refers only to this browser and may be deleted if you delete cookies in your browser.

Further information on Google (Universal) Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

Google Fonts:
The website my.corpuls.world uses ‘Web Fonts’ provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’) for the uniform display of fonts. When accessing a page, your browser loads the required Web Fonts in your browser cache, in order to display text and fonts correctly. In order to do this, the browser you are using must establish a connection with Google’s servers, which can also involve personal data being sent to a Google LLC. server in the USA. Google is informed that our website was accessed via you IP address in the process. Google Web Fonts are used in the interest of ensuring that our website has a uniform and appealing appearance. This represents a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If your browser does not support Web Fonts, your computer will use a standard font.
For the eventuality that personal data is sent to Google LLC. in the USA, Google LLC. has obtained certification for the US-EU data protection convention, the ‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/ 

Google Maps:
The website corpuls.world uses Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google Maps is a web service for displaying interactive maps, in order to provide a visual representation of geographical information. This service is used to show you our location and to make any potential journeys to the site easier. Google Maps embedding is generally only done if you have agreed on the privacy settings (in the so-called "cookie banner"), that external components may be used, or if you enable embedding of a single Google Map by clicking on a map placeholder. As soon as a Google Map is embedded, information about your use of our website (e.g. your IP address) is sent to Google servers and stored there; this can also involve data being sent to a Google LLC. server in the USA. This is done regardless of whether you are logged in via a user account provided by Google or you do not have an account. If you are logged in to Google, your data is directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before clicking the button. Google stores your data (even for users that are not logged in) as a use profile and analyses this. Data is collected, stored and analysed in line with Article 6(1)(f) of the GDPR on the basis of Google’s legitimate interest in integrating personalised advertising, conducting market research and/or designing Google websites in line with demand. You are entitled to object to the creation of this user profile and can do so by contacting Google.
For the eventuality that personal data is sent to Google LLC. in the USA, Google LLC. has obtained certification for the US-EU data protection convention, the ‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list
If you do not consent to your data being sent to Google in future, within the context of using Google Maps, you also have the option of fully deactivating the Google Maps web service by switching off the use of JavaScript in your browser. It will then no longer be possible to use Google Maps and therefore also the map display function on this website.
You can view Google’s terms of service at https://policies.google.com/terms?hl=en&gl=ZZ; the additional terms of service for Google Maps can be found at https://www.google.com/help/terms_maps/.
You can also find detailed information on data privacy in connection with the use of Google Maps on Google’s website (‘Google Privacy Policy’): https://policies.google.com/privacy?hl=en-US

Security of your personal data

We protect your personal data against unauthorised access, use or dissemination. Your personal data is therefore securely encrypted when transferred to our server by our website using TLS (Transport Layer Security). We also store your personal data in a controlled, secure server environment that prevents unauthorised access and dissemination.

Protection of minors

Our sites are not intended to be used by minors and should not be used by them. ‘Minors’ refers to persons under the age of thirteen (or higher, depending on the laws where you live). We do not knowingly gather personal data about minors. If we become aware that we have gathered personal data concerning a minor, we erase this data. If you believe that this is the case, please contact us.

Storage period

We only process and store personal data as long as necessary in order to fulfil the purpose for which it was stored or unless this is required by law. In general, the purpose for which personal data is processed ends when your contract finishes or when the legal retention period expires.

Your rights

a) Right of access by the data subject (Article 15 of the GDPR)
You have the right to obtain information and confirmation from us about stored personal data concerning you.

b) Right to rectification (Article 16 of the GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. You also have the right, taking into account the purposes of the processing, to have incomplete personal data completed, including by means of providing a supplementary statement.

c) Right to erasure (Article 17 of the GDPR)
You have the right to obtain the erasure of personal data concerning you without undue delay. Exceptions to this are detailed in Article 17(3) of the GDPR:
  • Exercising the right of freedom of expression and information
  • Compliance with a legal obligation
  • Processing for archiving, research or statistical purposes
  • Establishing, exercising or defending legal claims.

d) Right to restriction of processing (Article 18 of the GDPR)
You have the right to obtain restriction of processing where one of the following applies:
  • You are contesting the accuracy of the personal data.
  • You are opposing the erasure of the personal data and are instead requesting the restriction of the use of your personal data.
  • You have objected to processing and it has not yet been established whether our legitimate interests outweigh yours.

e) Right to data portability (Article 20 of the GDPR)
You have the right to receive personal data concerning you in a structured, commonly used and machine-readable format.

f) Right to object (Article 21 of the GDPR)
You have the right to object at any time to processing of personal data concerning you.

g) Automated decision-making, including profiling (Article 22 of the GDPR)
We do not carry out automated decision-making or profiling.

h) Right to withdraw consent (Article 7(3) of the GDPR)
You have the right to withdraw your consent at any time to processing of personal data. The legality of the processing of your personal data carried out on the basis of your consent until you revoke it is not affected by this.

i) Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)
You have the right to lodge a complaint with a supervisory authority in the member state of your residence, place of work or place of the alleged infringement if you consider that the processing of personal data infringes the GDPR.

Exercising your rights

To exercise your rights, please contact our Data Protection Officer at the following address.

Data Protection Officer
Address
Data Protection
corpuls | GS Elektromedizinische Geräte G. Stemple GmbH
Hauswiesenstraße 26
86916 Kaufering

Email
If you would like exercise your legal rights or have general questions, please contact our Data Protection Officer at datenschutz@corpuls.com.

If our websites include links to other providers’ sites, we have no influence over the gathering, processing or use of data by these providers after you have clicked on the link. We can therefore take no responsibility in this regard.

Changes to our privacy policy

We reserve the right to update this privacy policy if necessary in order to accommodate any changes made to the content of our websites or any changes in the law.

Information on other services

corpuls.world: Contact form
The following confirms the personal data gathered on the site, and the purpose:

  • First name, last name
    To enable accurate communication with the person on the site or in a newsletter
  • Organisation: to enable the request to be correctly allocated to a customer service / regional partner.
  • Address (street, post code / town, country): for enquiries that need an answer by post (e.g. requesting brochures), we ask for your postal address
  • Telephone, fax: Depending on the enquiry, we will contact you by telephone or fax.
  • Email: For enquiries that can be answered by email, we will use this way to contact you.

Authorised for access:

  • All enquiries via the contact form are received by a central point at corpuls and passed on to the correct department or person within the company, depending on the enquiry.
  • External third parties with potential access to personal data
    We have a data processing agreement with All-Inkl.com (hosting partner)


Corpuls.world: online application
The following confirms the personal data gathered on the site, and the purpose:

  • First, last name
    So that we can address you correctly during the application process.
  • Telephone: So that we can contact you with any questions regarding your application.
  • Email address: The preferred method of contact for processing your application for a vacancy with our company.
  • Application documents: The application dossier compiled by you for the assessment of your application.
  • Your message to us: Your personal statement for your application.

Authorised for access:

  • All online applications are received by the HR department at corpuls and processed according to the relevant application process.
  • External third parties with potential access to personal data
    We have a data processing agreement with All-Inkl.com (hosting partner)


corpuls Academy: Avendoo E-Learning
The following confirms the personal data gathered on the site, and the purpose:

  • Access data (username, password)
    Required to log on to the site. Employees are provided with usernames (with verification keys, if required). The system is not accessible by the public.
  • Gender, title, first name, last name
    To ensure that details appear correctly on certificates for completed e-learning courses.
  • Email
    Required for messages about available e-learning courses as well as reminders and certificates.
  • Company address
    To ensure that details appear correctly on certificates for completed e-learning courses.

Authorised for access:

  • corpuls E-Learning-Team / Application Support
    To process any enquiries on problems or usage of the system.
  • External third parties with potential access to personal data
    We have a data processing contract with HostEurope (hosting partner) and Magh & Boppert (development partner).


my.corpuls
The following confirms the personal data gathered on the site, and the purpose:

  • Access data (email address and password)
    Required to log on to the site. A valid email address is required as registration can only be completed using an activation link sent by email.
  • Title, first name, last name
    To enable accurate communication with the person on the site or in a newsletter
  • Address (lines 1 and 2 of address, town / city, state / county, post code, country)
    Allocation
  • Type of company, company, position
    These fields are intended for future target group-oriented newsletters (if the ‘receive newsletter’ checkbox has been ticked). This information needs to be provided for sales partners and to enable the ‘forecasts of projects’ functionality so that they can be correctly allocated. The intention is also to carry out a usage analysis in the future regarding which roles use the site most so that we can offer products and services more tailored to the users.

Authorised for access:

  • Recipients of personal data
    Sales / Marketing employees at corpuls
  • External third parties with potential access to personal data
    We have a data processing contract with Vodafone Cloud and Hosting Services (hosting partner) and Leuck.EU (development partner)


Customer and Support Web
The following confirms the personal data gathered on the site, and the purpose:

  • Username and password
    If you wish to access the site, we will send you access data upon request in the form of a username and password

Authorised for access:

  • Recipients of personal data
    Sales / Marketing and Customer Service employees at corpuls
  • External third parties with potential access to personal data
    We have a data processing contract with 1&1 (hosting partner).


Queries via email, telephone or fax
Should you have any queries, you can call us or send us a fax or email. When doing so, please include a valid email address so that we can answer your query. If you write us an email or a fax, we will store any data you send including any contact details specified there for the purposes of processing your query and for any follow-up questions. We will not pass on this data without your consent.
Should storage no longer be necessary, we will delete any personal data we have collected. Should there be a statutory storage requirement, we will restrict processing. The legal basis for data processing for the purposes of making contact is provided by Art. 6 (1)(1)(f) of the GDPR.

Further contact details are available on request.

Configuración de privacidad

Este sitio web utiliza componentes externos, como fuentes web, mapas, videos o herramientas de análisis que se pueden utilizar para recopilar datos sobre su comportamiento. Los componentes externos también establecen cookies. El consentimiento para usar los componentes se puede revocar en cualquier momento. Para obtener más información, consulte nuestra política de privacidad.