Declaration on the obligation to provide information (data protection declaration)

Dear Sir or Madam,

The General Data Protection Regulation came into effect in May 2018. This provides for extended information obligations. We therefore inform you, in compliance with the current legal regulations, about the data processing carried out by us. We would like to point out that this is data processing that we have already carried out in the past and therefore there will be NO CHANGES in the existing agreement / contractual relationship.

 

As part of your agreement / contractual relationship, the data you provide (for example, contact details, emergency contacts, bank details, etc.) as well as those that arise due to a purchase, rental or leasing agreement / contractual relationship (for example, data regarding master file, authorized users, device documents, service notification in accordance with the German medical device law specified by the manufacturer, etc.).

 

General data processing within the framework of the agreement / contractual relationship.

The processing and transmission of the data takes place for the purpose of billing and compliance with recording, information and reporting obligations, insofar as this is necessary due to laws or norms of collective legal arrangements or contractual obligations, including text documents created and archived with automated support (such as correspondence) in these affairs. We cannot conclude or carry out an agreement/contract with you without this data. This also applies to all voluntary social benefits as well as to external education and training offers. The relevant data in each individual case is transmitted to the following bodies on the basis of the statutory provisions or contractual agreements:

  • manufacturing plant / medical technical device file;
  • processors (such as authorized services);
  • company representative and contact staff;
  • official control bodies and authorities;
  • finance or customs office;
  • municipal authorities and district administrative authorities in administrative police agendas;
  • legal interest groups;
  • education and training providers;
  • legal representatives;
  • court;
  • creditors of the person concerned as well as other parties involved in any legal prosecution associated therewith, also in the case of voluntary salary assignments for due claims;
  • banks dealing with the payment to the person concerned / collection from the person concerned or to third parties;
  • insurance companies within the framework of an existing group or individual insurance;

Data processing within the framework of our website

The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). We inform you about the most important aspects of data processing on our website in this data protection information.

When you visit our website, your IP address and the beginning and end of the session are recorded for the duration of this session. This is due to technical reasons and therefore represents a legitimate interest within the meaning of Art 6 paragraph 1 lit f GDPR. Unless otherwise regulated in the following, this data will not be processed by us.

Contact us

If you contact us using the form on the website or by email, the data you provide will be stored by us for six months in order to process the request and in the event of follow-up questions. We do not pass on this data without your consent.

Data storage

We would like to point out that for the purpose of simplifying the shopping process and for later contract processing, the web shop operator stores the IP data of the subscriber as part of cookies, as well as the name, address and account or credit card number of the buyer.

In addition, we also store the following data for the purpose of processing the contract:

  • sector tax identification
  • number,
  • technical specification / discipline

The data you provide is required to fulfil the contract or to carry out pre-contractual measures. We cannot conclude the contract with you without this data. There is no data transfer to third parties, with the exception of the transfer of the credit card data to the processing bank / payment service provider for the purpose of debiting the purchase price, to the transport company / shipping company commissioned by us to deliver the goods and to our tax advisor to fulfil our tax obligations.

The data stored by us will be deleted after the shopping process has been cancelled. In the event of a contract being concluded, all data from the contractual relationship will be stored for the duration of the operation of the device until the expiry of the tax retention period (7 years) when purchasing a medical device, in accordance with the MPG (Medical Product Act). 

The data name, address, purchased goods and date of purchase are also stored until the product liability expires (10 years).  The data processing takes place on the basis of the legal provisions of § 96 Abs 3 TKG as well as Art 6 Abs 1 lit a (consent) and/or lit b (necessary to fulfil the contract) of the GDPR. 

Cookies

Our website uses so-called cookies. These are small text files that are stored on your device with the help of the browser. They do no harm.

We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit.

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.

Deactivating cookies may restrict the functionality of our website.

Web analysis

Our website uses functions of the web analysis service Google (Google Analytics, Google Tag Manager, Google Search Console, ReCaptcha & Google Maps),

Address: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Cookies are used for this, which enable an analysis of the use of the website by your users. The information generated in this way is transferred to the provider’s server and stored there.

You can prevent this by setting up your browser so that no cookies are saved.

We have concluded a corresponding contract for order data processing with the provider. Your data will not be forwarded to a non-European country.

Your IP address is recorded, but pseudonymized immediately (for example, by deleting the last 8 bits). This means that only a rough localization is possible.

The data processing takes place on the basis of the legal provisions of § 96 Abs 3 TKG as well as Art 6 Abs 1 lit a (consent) and/or f (legitimate interest) of the GDPR.

Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer and our website. Since the privacy of our users is important to us, the user data is pseudonymized. User data is stored for a period of 26 months.

Newsletter

You have the option of subscribing to our newsletter via our website. We need your email address for this and your declaration that you agree to receive the newsletter.

As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration.

You can cancel your subscription to the newsletter at any time. To do this, follow the Unsubscribe button directly in the email OR send your cancellation to the following email address: info@papimi.com.

 

We will then immediately delete your data in connection with the sending of the newsletter. This revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

papimi Finder

In order to make the mutual networking of request/offer (papimi Finder) available or to provide you with targeted information, we collect and process the contact details of our service partners. This includes voluntarily provided information on areas of interest, technical specifications / discipline, contact details, location / business address and the like.

Your rights

You have the right to information, correction, deletion, restriction, data transfer, revocation and objection with regard to your data stored by us. If you believe that the processing of your data violates data protection law or that your data protection claims have been violated in any other way, you can lodge a complaint with us at office@papimi-therapie.eu or the data protection authority.

You can reach us under the following contact details:

papimi Headquarters Vienna

MTG – Medizinisch technische Geräte GmbH
Römergasse 27, 1160 Vienna

T: +43 1 597 91 52 0

E: info@papimi.com