Privacy Policy
Privacy policy according to Art. 13 GDPR
The protection of your personal data in the context of the use of www.medcareukraine.org is important to us. Medgate Deutschland GmbH and its affiliated companies (“Medgate”, “we”, “us”) protect your personal data. Medgate processes your personal data in accordance with applicable European and German data protection regulations. According to the EU General Data Protection Regulation (GDPR), we have to inform you in accordance with Art. 13 GDPR about the purpose of the data processing. With this privacy policy, we inform you about how we handle your personal data on www.medcareukraine.org. Please note that this privacy policy may be subject to changes in the event of procedural adjustments.
Controller
Medgate Deutschland GmbH processes your personal data as a data controller within the meaning of Art. 4 No. 7 GDPR.
Address:
Medgate Deutschland GmbH
Unter den Linden 24
10117 Berlin, Germany
E-mail: datenschutz@medgate.de
Further information can be found in the imprint.
Data Protection Officer
Our external data protection officer will be happy to provide you with information on the subject of data protection under the following contact details:
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
If you contact our data protection officer, please also indicate the controller.
Data processing on the website
Use of the website
In order to make our website available and to ensure its functionality, the web server automatically records your visit in so-called server log files when you visit our website. The following data is processed in the process: Browser type and version, the operating system used by the terminal device, the IP address of the requesting computer, access date and time of the server request, the duration of the stay on the website, the amount of data transferred, the location from which the user retrieves data from the website, connection data and sources, as well as from which page the access is made. This data is processed for the purpose of providing our website and for statistical evaluations as well as for the purpose of identifying and tracing unauthorized access to the web server and other criminal offenses. Log file information is stored from the end of your respective website visit for the duration of a maximum of 30 days and deleted thereafter. The legal basis for the processing of this is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests are to ensure IT security and the operation of our Internet presence. The site cannot be visited without providing the data.
Contact by e-mail or telephone
You can contact us via our website using the e-mail addresses and telephone numbers provided by us. If you make use of this possibility, your personal data transmitted with the e-mail or by means of a telephone call will be processed for the purpose of handling your inquiry. In the course of processing your inquiry, your data will be transmitted to our employees who will process your inquiry. As a matter of principle, we only store your data until we have completely answered your inquiry. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b), because the execution of your request necessarily involves data processing, as well as Art. 6 para. 1 p. 1 lit. f) GDPR. The legitimate interest in these cases arises from the fact that we can only perform the action requested by you (e.g. answering inquiries) by processing your data accordingly. There is no obligation to provide the personal data, but contact cannot be made without the data.
Place of data processing, data processors
Only Servers in Germany are used to process and store your data. The server is managed by our IT service provider in Switzerland as our processor and its subcontractors in Germany and in Switzerland. The legally required contracts according to Art. 28 GDPR, which regulate an exclusively instruction-bound data processing, have been concluded. The processors do not have access to the processed data. The uniform level of data protection is guaranteed by the adequacy decision pursuant to Art. 45 GDPR (available here: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32000D0518).
Automated decision making and profiling
Your personal data will not be subject to automated decision-making including profiling in the sense of Art. 22 GDPR.
Analysis and tracking
This website does not use additional analytics services such as Google Analytics or similar services, nor does it use tracking tools for marketing or re-marketing purposes.
Rights of the data subject
If we process your personal data, you have the following rights against us:
Right to information
You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing exists, you can request information from us about the information listed in Art. 15 GDPR. If you exercise your right without telling us what specific information you want, we will provide you with all information pursuant to Art. 15 GDPR.
Right to rectification
You have a right against us to have your personal data corrected and/or completed if the processed personal data concerning you is inaccurate or incomplete.
Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
- If you dispute the accuracy of the personal data concerning you. This applies for a period that allows us to verify the accuracy of the personal data.
- The processing is unlawful. You refuse the deletion of the personal data and instead request the restriction of the use of the personal data.
- We no longer need your personal data for the purpose of processing. However, you need them for the assertion, exercise or defense of legal claims.
- If you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether our legitimate grounds for further processing override your grounds. If the processing of personal data relating to you has been restricted, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
Right to deletion
Obligation to delete
You may request us to delete the personal data concerning you without undue delay. For our part, there is an obligation to delete this data without delay if one of the reasons listed in Art. 17 GDPR applies.
Information to third parties
If we have made the personal data concerning you public in an individual case and we are obliged to erase it pursuant to Art. 17 para. 1 GDPR, we shall take reasonable measures, including technical measures, taking into account the available technologies and the cost of implementation, to inform the data controllers processing the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data. However, as a matter of principle, we do not make your personal data public.
Exceptions
The right to erasure does not exist insofar as the processing is necessary to
- to exercise the right to freedom of expression and information;
- for compliance with a legal obligation which requires processing under Union or national law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
- for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h) and lit. i) and Art. 9 para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89 para. 1 of the GDPR, insofar as the right to deletion is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
- for the assertion, exercise or defense of legal claims.
Right to information
If you have asserted the right to rectification, erasure or restriction of processing of your personal data against us, we are obliged to notify all recipients of your personal data of this rectification or erasure of the data or restriction of processing. This does not apply if the notification proves impossible or would involve a disproportionate effort. You have the right against us to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another controller, provided that
- the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and
- the processing is carried out with the aid of automated procedures. If you so request and insofar as it is technically feasible for us and the freedoms and rights of other persons are not thereby impaired, we shall transmit the personal data relating to you directly to the other controller.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 lit. e) or lit. f) GDPR; this also applies to the creation of user profiles based on these provisions.
We will no longer process the personal data concerning you after your objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to user profiling insofar as it is related to such direct marketing.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the provisions of data protection law, including the GDPR.
Withdrawal of consent given
If you have given your consent under data protection law, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. If you have given several declarations of consent under data protection law, please tell us which of the consents you are withdrawing. If we do not receive such a specification even upon request, we will assume that your withdrawal applies to all consents granted up to that point. We will then terminate the data processing activities based on the consents with the exception of the consent-based cookies on our website.
The withdrawal of a consent given to us can be declared by e-mail to datenschutz@medgate.de or by telephone under the number +49 800 181 1116.
Links to third party websites
Please note that our website contains links to content from other providers to which this data protection notice does not apply. We do neither have influence on these websites nor on whether they comply with the applicable data protection provisions.