Please note: This Privacy Policy was translated from the German for your convenience. The German version is binding.
Thank you for visiting the website of Climedo Health GmbH (hereinafter referred to as “Climedo”). The protection of your data is particularly important to us, which is why we always comply with the applicable legal regulations for the protection of personal data and data security. Our employees have also been extensively trained and are committed to confidentiality and compliance with all data protection regulations. The following data protection declaration explains exactly how your data is collected and for what purpose it is processed by us.
The following company is exclusively responsible for data processing within the meaning of Art. 4 DS-GVO:
Climedo Health GmbH
Schellingstraße 109a
80798 Munich.
If you have any questions regarding data protection or would like information about the collection, processing or use of your personal data, or if you wish to correct or delete your personal data, please contact the above-mentioned contact address or the following email address: datenschutz@climedo.de.
You can contact our data protection officer, Bitkom Servicegesellschaft mbH via email at : datenschutz@bitkom-consult.de.
Personal data within the meaning of GDPR is all information with which a natural person can be or becomes identifiable. This includes in particular your name and e-mail address which you voluntarily provide to us on our website (e.g. when contacting us via our form or requesting a demo version).
Personal data also includes information about the use of our website. We collect information about how you visit our website. This includes, for example, information about the scope of data and from where you visit our website, as well as which pages you call up. We process this information through so-called LogFiles and cookies. We use your personal data for the following purposes:
We process so-called access data (in particular the IP address) on our website for statistical evaluations for the purpose of operating, security and technical optimisation of our website. This enables us to present our website more effectively and in a more interesting way.
We collect and store this access data when you access our website in a log file (so-called log file). This includes the name of the web page called up, the file called up, the date and time of the call, the amount of data transferred and notification of the successful call up, the browser type together with version, the operating system, the so-called referrer URL (the previously visited page) as well as the requesting provider and your IP address. In principle, you can also visit and call up our website without providing personal data – with the exception of IP addresses, which we make anonymous. From the data in this log file, including the IP address, no personal reference can be established for us, unless you yourself have provided more detailed information about your person in one of the embedded forms. Log data is deleted regularly, but after two months at the latest.
The legal basis for this data processing is our legitimate interest in the sense of Art. 6 para. 1 letter f) GDPR.
If you send us enquiries via the Climedo chat function, your details from the form, including the contact details provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. For the chat function we use the chat service “Messages” of the provider HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. HubSpot is certified under the EU – U.S. Privacy Shield. When you use the chat function, the following data is transmitted to HubSpot:
If you create a user account for the use of the application, your personal data will be processed in order to provide the application and enable you to use it. To create an account, we need your name and e-mail address. We ask you to provide only your business e-mail address. Without this information no user account can be created. If you delete your user account or if it is deleted for other reasons, your data will be deleted, provided that there are no legal retention periods that prevent deletion.
The legal basis for this data processing is the execution of the contract in accordance with Art. 6 Paragraph 1 Sentence 1 lit. b) DS-GVO.
If you contact us – e.g. via contact form or e-mail – your personal data will be stored and processed by us. If you contact us by e-mail, we will process your name, your contact data including your e-mail address, as well as any other information you have provided. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration and are not passed on to third parties without your consent.
The legal basis for this data processing is Art. 6 Para. 1 Sentence 1 lit. b) GDPR, insofar as it is carried out to fulfil a contract or pre-contractual measures, as well as Art. 6 Para. 1 Sentence 1 lit. f) GDPR, as the processing of these enquiries is in the interests of both parties. Your data will only be stored for as long as necessary for the above-mentioned purpose and will be deleted after the processing purpose has ceased (and taking into account the statutory retention periods).
If you use our contact form, your details from the form, including the contact data provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. For the contact form we use the contact form service of the provider HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. HubSpot is certified under the EU – U.S. Privacy Shield. When you use the contact form function, the following data is transmitted to HubSpot:
If we process your personal data for direct marketing purposes, you have the right to object to the processing of your personal data for these purposes at any time. This includes profiling, insofar as it relates to direct marketing. You can unsubscribe from our newsletters at any time in your e-mails by clicking on the link (“Unsubscribe”) at the end of each newsletter. We use the provider HubSpot. https://mailchimp.com/legal/privacy/ for sending newsletters. The HubSpot privacy policy can be found here: https://legal.hubspot.com/de/privacy-policy.
We use Gmail as our e-mail provider. We use it to receive and send all e-mails in the course of communicating with customers and conducting business. All data that you provide to us, as well as your email and IP address and other data that is absolutely necessary for sending and receiving mail, reaches us via Gmail and is stored on Google’s servers in the European Economic Area. The address of Google is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4.
The privacy policy for Google products such as Gmail can be found here: https://policies.google.com/technologies/retention?hl=en
We operate a company profile on the LinkedIn portal, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. We use the LinkedIn profile to introduce our company and get in touch with potential employees.
You have the opportunity to contact us via our LinkedIn profile. The available profile data (e.g. job title, company name, industry, education, work experience, skills, contact information, photo) and the content of the message will be processed by us to process your request. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR, provided that the communication serves the purpose of fulfilling the contract or implementing pre-contractual measures. In other cases the data processing is based on Art. 6 para. 1 sentence 1 lit. f) GDPR. We have a legitimate interest in contacting our users via our LinkedIn profile and answering enquiries.
You can also share our contributions, add a “Like” or comment on them. The information about the interaction as well as the profile data will be processed by us. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We have a legitimate interest in understanding the response to our contributions and communicating with users.
In addition, we contact LinkedIn users directly if the information in their profile has aroused our interest. In doing so, we process the available profile data. The legal basis is Art. 6 para.1 p. 1 lit. f) GDPR. We have a legitimate interest in contacting other users via LinkedIn. When visiting our LinkedIn profile, personal data may be processed by LinkedIn. We have no influence on this data processing. The purpose and scope of LinkedIn’s data processing, as well as the relevant rights and settings to protect the privacy of users, can be found in the LinkedIn privacy policy (https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy).
Furthermore, when you visit our website, so-called “cookies” are stored in the cache of your browser on various pages in order to make visiting our website attractive and to enable the use of certain functions. The so-called “cookies” are small text files which your browser can store on your computer. We use both “session cookies” and so-called persistent cookies. We also use various tracking technologies to collect and store information when you visit our website. Below you will find information on how we use cookies and such tracking tools, and how they can be deactivated.Cookie Management
You can set your browser according to your wishes so that you are informed about the setting of cookies, decide from case to case whether to accept them, or accept or reject cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your PC has already been connected to a website before (permanent cookies) or to save last viewed offers (session cookies). You also have the option of setting the browser so that it does not save cookies in the first place or so that the cookies are deleted (automatically or manually) at the end of the Internet session. For details, please refer to the instructions for your browser or use the following (external) links: Mozilla Firefox; Internet Explorer; Google Chrome, Opera, Safari or Adobe (Flash Cookies). We would like to point out, however, that some areas of the website may then not function or no longer function properly. In addition, we would like to point out the websites, available at http://www.youronlinechoices.com/de/ or http://meine-cookies.org/cookies_verwalten/praeferenzmanager-beta.html, where further information about the technologies we use can be obtained and where tracking services can be individually issued and deactivated.
1. Managing cookies
You can set your browser according to your wishes so that you are informed about the setting of cookies, decide from case to case whether to accept them, or accept or reject cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your PC has already been connected to a website before (permanent cookies) or to save last viewed offers (session cookies). You also have the option of setting the browser so that it does not save cookies in the first place or so that the cookies are deleted (automatically or manually) at the end of the Internet session. For details, please refer to the instructions for your browser or use the following (external) links: Mozilla Firefox; Internet Explorer; Google Chrome, Opera, Safari or Adobe (Flash Cookies). We would like to point out, however, that some areas of the website may then not function or no longer function properly. In addition, we would like to point out the websites, available at http://www.youronlinechoices.com/de/ or http://meine-cookies.org/cookies_verwalten/praeferenzmanager-beta.html, where further information about the technologies we use can be obtained and where tracking services can be individually issued and deactivated.
2. Google Analytics
We use on our website Google Analytics, a web analysis service of Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4. Ireland), a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View CA 94043, USA), hereinafter “Google”. By using Google Analytics, so-called “cookies” are set, which enable us to analyse the use of our website and our offers in order to provide you with an optimised version of our content. Because the protection of your data is particularly important to us, we have used Google Analytics with the help of the configuration parameter “anonymizelp” – so your IP address is only recorded anonymously. This means that at no time is it possible for us to draw any conclusions about your person.
Furthermore, you can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a) GDPR.
3. Google Tag Manager
The “Google Tag Manager” service is used on this website. The Tag Manager is a tool for managing so-called tags, which are used for tracking in online marketing. The Tag Manager itself does not process any personal data, as it is purely used to manage other services – such as Google Analytics.
You can find more information about the Tag Manager here: https://www.google.com/intl/de/tagmanager/use-policy.html
4. Google Ads
The “Google Ads” service is used on this website. The operator of the service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The service has the purpose of so-called “conversion tracking”, i.e. you can see what happened after you clicked on one of our ads. Cookies are set for this purpose, which have a limited validity.
With the help of Google Ads, the following data is collected and processed:
The legal basis for the processing is your consent pursuant to Art. 6 (1) lit.a GDPR. If you do not want Google Ads to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.
Personal data will be kept for as long as it is necessary to fulfill the purpose of processing. Data will be deleted as soon as they are no longer required to achieve the purpose.
Data may be transferred to the following recipients in addition to Google Ireland Limited as part of the processing:
In the context of processing by Google Ads, data may be transmitted to the United States of America. The security of the transmission is secured by so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to the level of the GDPR. If the standard contractual clauses are not sufficient to establish an appropriate level of security, consent is obtained from the user in advance as part of the consent management system “Usercentrics” in accordance with Article 49 (1) of GDPR.
5. Facebook Pixel
A Facebook Pixel is used on our website. This service is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland. The Facebook remarketing tag establishes a direct connection with the Facebook servers when the website is visited. Facebook thereby receives information about the pages you have visited on our website. Facebook then matches this information with your Facebook user account. During your next Facebook visit, you will then be shown personalized, interest-based advertisements (“Facebook Ads”). With the help of Facebook Pixel, the following data is collected and processed:
The legal basis for processing is your consent pursuant to Art. 6 (1) lit. of GDPR. If you do not want the aforementioned data to be collected and processed via Facebook, you can refuse your consent or revoke it at any time with effect for the future.
Personal data is kept for as long as it is needed to fulfill the purpose of processing. The data will be deleted as soon as they are no longer required to achieve the purpose.
The data may be transferred to the following recipient in addition to Facebook Ireland Limited as part of the processing:
Facebook Inc.
6. Microsoft Ads
The service “Microsoft Ads” is used on this website. The service is operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Ads is a conversion and tracking service. Microsoft sets cookies on users’ devices that analyze user behavior on our website. This assumes that you as a user have reached our website through a Microsoft Ads advertisement. This only provides us with information on the total number of users who have clicked on such an ad. No IP addresses are stored in this process, and no personal information about the identity of our users is disclosed.
As part of the use of Microsoft Ads, the following data is collected and processed:
The legal basis for the processing is your consent pursuant to Art. 6 (1) lit. GDPR. If you do not want the aforementioned data to be collected and processed via the Microsoft Ads service, you can refuse your consent or revoke it at any time with effect for the future.
The personal data will be kept for as long as it is necessary to fulfill the purpose of the processing. The data will be deleted as soon as they are no longer required to achieve the purpose.
In the context of processing via Microsoft Ads, data may be transferred to the United States of America. The security of the transfer is secured via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an appropriate level of security, consent will be obtained from the user in advance as part of the Usercentrics consent management system in accordance with Article 49 (1) of GDPR.
7. Hotjar
We use Hotjar software (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe) to enhance the user experience on our website. Hotjar enables us to measure and evaluate user behavior (mouse movements, clicks, scroll height, etc.) on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there. The following information is collected by the Tracking Code:
Device-dependent data
Log Data
Hotjar will use this information to evaluate your use of our website. Hotjar also uses the services of third party companies, such as Google Analytics and Optimizely, to provide services. These third parties may store information that your browser sends during your visit to the website (for example cookies or IP requests). For more information on how Google Analytics and Optimizely store and use data, please see their respective privacy policies. If you continue to use this website, you consent to the processing of data by Hotjar and its third party providers as described above in their privacy policies.
Hotjar uses cookies with different durations.
You can prevent Hotjar from collecting the data by clicking on this link and following the instructions: https://www.hotjar.com/policies/do-not-track/.
8. LinkedIn (LinkedIn Ireland Unlimited Company)
Climedo Health uses the retargeting tool and conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. For this purpose, the so-called “LinkedIn Insight Tag” is integrated on our website, which enables LinkedIn to collect statistical data about visitors and the use of our website and to provide us with aggregated statistics on this basis. In addition, with the help of the service, users are shown interest-specific and relevant offers and recommendations after they have found out about certain information and offers on the website. The corresponding information is stored in a “cookie”. Further information on data processing can be found in the privacy policy of LinkedIn.
In this context, the following data is generally collected and processed:
The legal basis for the processing is your consent pursuant to Art. 6 (1) lit. a DS-GVO. If you do not want the aforementioned data to be collected and processed via LinkedIn, you can refuse your consent or revoke it at any time with future effect.
The personal data will be kept for as long as it is necessary to fulfill the purpose of the processing. The data will be deleted as soon as they are no longer required to achieve the purpose.
Within the scope of processing via LinkedIn, data may be transferred to the United States of America as well as to Singapore. The security of the transfer is ensured via so-called standard contractual clauses. These ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an appropriate level of security, consent will be obtained from you in advance as part of the consent management system “Usercentrics” in accordance with Article 49 (1) a DS-GVO.
LinkedIn conversion tracking
LinkedIn conversion tracking (LinkedIn Insight Tag) is a behavioral analytics and targeting service that matches data collected from LinkendIn’s advertising network with transactions made through this application. The LinkedIn Insight Tag tracks conversions attributable to advertisements on LinkedIn and enables targeting of groups of users based on their previous access to this application.
Users can opt-out of behavioral targeting by adjusting their device or LinkedIn account settings accordingly.
Personal data processed: Device information; usage data; trackers.
Processing Location: United States – Privacy Policy.
LinkedIn Website Retargeting
LinkedIn Website Retargeting is a remarketing and behavioral targeting service from LinkedIn Corporation that connects activity occurring through this application to the LinkedIn advertising network.
Personal Data Processed: Usage data; trackers.
Processing location: United States – Privacy policy – Opt Out.
LinkedIn Ads
LinkedIn Ads is an advertising service provided by LinkedIn Ireland Unlimited Company.
Personal data processed: Usage data; trackers.
Processing location: Ireland – Privacy policy – Opt Out.
9. Albacross
By using this website, you consent to the processing of personal data on behalf of Albacross Nordic AB (“Albacross”).
Albacross processes cookies that are stored on your device and are considered personal data. Albacross Nordic AB is a Swedish provider of lead identification and ad targeting services with offices in Stockholm and Krakow.
Personal data is processed to enable Albacross to improve the services provided to us and our website (such as lead generation). For this purpose, data about your company is included in a database.
The data collected and used by Albacross for this purpose is information about the IP address from which you visited our homepage. It also includes technical information that enables Albacross to distinguish between different website users from the same IP address. The domain from the form input is stored by Albacross in order to link the IP address to your company.
You can withdraw your consent to this processing at any time. The revocation can be done by contacting Climedo Health GmbH or by contacting Albacross directly. The contact details of Albacross are as follows:
Albacross Nordic AB.
Company reg. 556942-7338
Kungsgatan 26
111 35 Stockholm
Sweden
www.albacross.com
contact@albacross.com
You, as the person concerned by the processing of personal data, are entitled to the rights listed below. These rights result from the provisions of the basic data protection regulation and are reproduced here, sometimes in simplified form.
a. Right of access to information
In accordance with Art. 15 DS-GVO, you have the right to request confirmation from us as to whether personal data relating to you is being processed. If this is the case, you have the right to be informed about this personal data and the information mentioned in Art. 15 Paragraph 1 Hs. 2 DS-GVO. This includes, in particular, the purpose of the processing, the categories of data processed, the recipients to whom data have been or will be disclosed, as far as possible the planned duration of storage or the criteria for the duration of storage.
b. Right to rectification
In accordance with Art. 16 GDPR, you have the right to demand that we immediately correct any incorrect personal data relating to you. Taking into account the purposes of the processing, you have the right to demand the completion of incomplete personal data – also by means of a supplementary declaration.
c. Right to deletion
In accordance with Art. 17 GDPR, you have the right to demand from us that personal data relating to you be deleted immediately. We are obliged to delete personal data immediately if one of the reasons in Art. 17 Para. 1 GDPR applies. These include, for example, that the data are no longer necessary for the purposes for which they were collected or otherwise processed.
d. Right to limit processing
In accordance with GDPR Art. 18, you have the right to demand that we restrict processing if one of the conditions specified in GDPR Art. 18 applies. This includes, for example, that you dispute the accuracy of the personal data. In this case we may only process the data to a limited extent for as long as it takes to check the accuracy of the personal data.
e. Right to data transferability
In accordance with GDPR Art. 20, you have the right to receive the personal data relating to you that you have provided us with in a structured, common and machine-readable format. You have the right to transfer this data to another responsible party, i.e. another body which processes data, without hindrance, provided that the original processing was based on consent or was necessary for the performance of a contract.
f. Right of objection
Under Article 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you if such data is processed on the basis of Article 6 paragraph 1 letter e) or f) GDPR and there are reasons arising from your personal situation. An objection to the processing of data for the purpose of direct marketing may be lodged at any time. Personal data will then no longer be processed for this purpose. The right of objection can be exercised by means of an informal declaration. A written declaration or, alternatively, an e-mail to the above-mentioned contact address is sufficient.
g. Right to withdraw consentg
In accordance with GDPR Art. 7 Para. 3, you have the right to revoke your consent to processing at any time. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected. The right of revocation can be exercised by means of an informal declaration. A written declaration or, alternatively, an e-mail to the above-mentioned contact address is sufficient.
h. Automated decision in individual cases including profiling
According to GDPR Art. 22, you have the right not to be subjected to a decision based exclusively on automated processing – including profiling – which has legal effect vis-à-vis you or significantly affects you in a similar way. GDPR Art. 22(1) provides for exceptions to this, although GDPR Art. 22(4) again provides for partial exceptions.
i. Right of appeal to a supervisory authority
Under Article 77 of GDPR, and without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you is contrary to this Regulation.
In this case, the competent supervisory authority is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
Postfach 1349
91522 Ansbach
Telefon: +49 (0) 981 180093-0
Telefax: +49 (0) 981 180093-800
https://www.lda.bayern.de/de/kontakt.html
IV. Applications and Application processes – Data transfer to Personio GmbH
The application process is handled by our external provider Personio (Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany, hereinafter “Personio”). If we conclude an employment contract with an applicant, the transmitted data will be stored in compliance with legal requirements for the processing of the employment relationship. If no employment contract is concluded between the applicant and Climedo, the application data will be automatically deleted 6 months after receipt of the application, provided that the applicant has not agreed to anything else, or that no other legitimate interests stand in the way of deletion. Other legitimate interests in this context are, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
V. Data security
In order to offer you a particularly high level of data security, Climedo has implemented technical and organisational measures to protect your personal data during data transmission and when third parties gain knowledge of it. These measures are checked and updated at regular intervals. However, we would like to point out that absolute data security cannot be achieved on the Internet, even with extensive technical precautions. In order to increase the security of the transmission of your data, we use state-of-the-art technology and appropriate encryption procedures (e.g. SSL) via HTTPS.
Climedo reserves the right to make changes to the privacy policy at any time with effect for the future. When such an update is made, the date of the last modification, as indicated below, will also be updated. Any changes made to our privacy policy will always be available here, so that Climedo’s users will always be aware of the information we collect and our possible use and disclosure of that information. We therefore recommend that you regularly check the current privacy policy.
Version 2.2 | Updated: July 20, .2020