PRIVACY POLICY
ASANUS Medizintechnik GmbH (hereinafter also referred to as ‘we’ and ‘us’) takes the protection of personal data very seriously. This privacy policy gives you an overview of what personal data we collect and how we process it. Personal data is all data that can be related to you personally, such as name, address, e-mail addresses). Your data is processed in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection laws.
- Responsible body
The data processing on this website is carried out by
ASANUS Medizintechnik GmbH
take off Gewerbepark 2
78579 Neuhausen ob Eck / Tuttlingen
Germany
You can reach our data protection officer at the following e-mail address: datenschutz@asanus.de.
- General information on data processing
- description and scope of data processing
We process personal data of our users only to the extent necessary to provide a functional website and our content and services.
- legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
If the processing is necessary for the fulfilment of a contract or pre-contractual measures, it is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
- Provision of the website and creation of log files
- description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The IP address of the user
- Date and time of access
- Status codes
- Size of the response body
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
- legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
- purpose of data processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. We also use the data for the technical optimisation of the website and to ensure the security of our IT systems. The data is not analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
- duration of storage
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client. Other log data is deleted after 12 months at the latest.
- possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.
- Use of cookies
- description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We only use cookies to make our website functional. Some elements of our website require that the accessing browser can be identified even after a page change. Apart from functional cookies, we do not use any other cookies (especially convenience and tracking cookies).
- legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is § 25 para. 2 no. 2 TTDSG. The legal basis for the personal data that we collect and process using functional cookies is Art. 6 para. 1 lit. f GDPR.
- purpose of data processing
The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
We require cookies for the following applications
- Design of the search setting
- Adoption of language settings
The user data collected by technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in the subsequent processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
- duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the storage of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
- Newsletter
- description and scope of data processing
You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us: First name, surname, email address and any data provided voluntarily.
The following data is also collected during registration
- The IP address of the user
- Date and time of registration for the newsletter
Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.
The data will not be passed on to third parties in this context. The data is processed exclusively for the purpose of sending the newsletter.
- legal basis for data processing
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 it. a GDPR if the user has given consent.
- purpose of data processing
The purpose of collecting the user's e-mail address is to deliver the newsletter.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
- duration of storage
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's first name, surname and email address are therefore stored for as long as the subscription to the newsletter is active.
The other personal data collected during the registration process is generally deleted after a period of seven days.
- possibility of objection and removal
The subscription to the newsletter can be cancelled by the user concerned at any time by sending an email to newsletter@asanus.de. There is also a corresponding link in every newsletter for this purpose. This also makes it possible to revoke consent to the storage of personal data collected during the registration process.
- Support ticket system
- description and scope of data processing
On our website, we offer users the opportunity to register with the support ticket system by providing personal data. A password-protected personal account is set up when you register for the first time. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. In addition to the data processed during use, the following data is collected when using the support ticket system:
- E-mail address
- First name and surname
- Position, telephone number
- description of the request and associated ticket number
- Password (stored in encrypted form)
and any data provided voluntarily.
The following data is also stored at the time of registration:
- The user's IP address
- Date and time of registration
- legal basis for data processing
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR if the registration relates to an existing or prospective customer relationship. If the ticket system is used by employees of our customers, we base the processing on Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the efficient, structured processing of technical enquiries and traceability as part of our service obligations.
- purpose of data processing
The data is processed in the context of support requests to set up and manage a user account, authentication and access protection, processing and tracking of support requests, internal documentation, quality assurance and improvement of our customer service and for proof of communication and processing history.
- duration of storage
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is the case for data within the support ticket system when the data is no longer required for the fulfilment of the contract. Even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
- possibility of objection and removal
As a user, you have the option of cancelling your registration at any time. The user has the option of managing their profile and adjusting the data entered during registration. The profile can be deleted by contacting ASANUS Support.
If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.
- Contact form and e-mail contact
- description and scope of data processing
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored: Name and e-mail address as well as any voluntarily provided data.
The following data is also stored when the message is sent:
- The user's IP address
- Date and time of the sending process
We use Google reCAPTCHA to protect against bots. Google's privacy policy applies: https://policies.google.com/privacy
Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored.
The data will not be passed on to third parties in this context. The data will only be used to process the conversation.
- legal basis for data processing
The legal basis for the processing of the data for processing the enquiry is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
- purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. This also constitutes the necessary legitimate interest in processing the data.
The collection of other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
- duration of storage
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional data collected during the sending process will be deleted after a period of seven days at the latest.
- possibility of objection and removal
The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time by sending an email to datenschutz@asanus.de. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
- Marketing / competitions
- description and scope of data processing
When organising competitions, we process personal data (e.g. social media user name, name, email address, postal address) insofar as this is necessary for the implementation of the competition.
- legal basis for data processing
The legal basis for the processing of data for the realisation of our competitions is Art. 6 para. 1 lit. b GDPR. If, in addition, participant data is to be published or used for advertising purposes, we will first obtain express consent in accordance with Art. 6 para. 1 lit. a GDPR.
- purpose of data processing
Data processing is carried out insofar as it is necessary for the realisation of the competition. This includes in particular the determination and notification of the winners and - in the event of a win - the dispatch of the prize.
- duration of storage
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data relating to participation in one of our competitions, this is the case when the competition has ended, provided there are no statutory retention obligations to the contrary.
- possibility of objection and removal
The provision of personal data in the context of competitions is voluntary. However, participation in the competition is only possible if you provide the information required for its realisation.
Participants have the right to object to the processing of their personal data at any time by sending an email to datenschutz@asanus.de. In this case, further participation in the competition or delivery of the prize is no longer possible. After exercising the right to object, your personal data will be deleted, unless there is another legal obligation to retain it.
- Data security
- Disclosure of personal data to third parties
As part of our business activities, we work together with various external organisations. If it is necessary to transfer personal data to these external bodies, we only pass on personal data to external bodies if this is necessary for the fulfilment of a contract, if we are legally obliged to do so (e.g. transfer of data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f GDPR or if another legal basis permits the transfer of data. When using processors, we only pass on our customers' personal data on the basis of a valid contract for order processing. In the case of external service providers outside the EU/EEA, the appropriate level of data protection required under EU data protection law is also ensured by complying with the provisions of Art. 45 et seq. GDPR, usually by agreeing the EU standard contractual clauses within the meaning of Art. 46 para. 2 lit. c GDPR. In the case of joint processing, a joint processing agreement is concluded.
- Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
- You have the right to request information about the processing of your personal data in accordance with the relevant legal provisions. In this context, you also have the right to request a copy of the personal data that is the subject of the processing (Art. 15 GDPR).
- You have the right to obtain from the controller the rectification and/or completion of inaccurate or incomplete personal data concerning you. The controller must carry out the rectification without undue delay (Art. 16 GDPR).
- You have the right to demand the immediate erasure of personal data concerning you if it is no longer necessary for the fulfilment of the purposes for which it was collected or processed or if there is another reason for erasure and there are no obstacles to erasure, e.g. statutory retention obligations (Art. 17 GDPR).
- You have the right to restrict processing if the respective legal provisions apply (Art. 18 GDPR).
- If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients (Art. 19 GDPR).
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR.
If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
- You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
E-Mail: poststelle@lfdi.bwl.de
As of: May 2025