Privacy QuantonCal

Preventis GmbH
Dr. Franz Paul Armbruster

Stubenwald-Allee 8a
64625 Bensheim
Tel: +49 6251 70711 - 0
Fax: +49 6251 70711 - 299
E-Mail: info@preventis.com

Contact details of the data protection officer
Thomas Ott
DESAG Sachverständiger für Datenschutz & Datensicherheit
Mobil: +49 1515 2886186
E-Mail: info@datenschutz-ott.de

We welcome you to our website. The protection of your data is very important to us. Therefore, we will show you below how we process your personal data.

In principle, we process the personal data that you provide to us in the context of an inquiry, a pre-contractual legal relationship, or a contractual relationship. In individual cases and insofar as this is necessary within the framework of the performance of the contract, we also process personal data that has been permissibly taken from publicly accessible sources (e.g. commercial register, debtors' registers, Internet) or permissibly transmitted to us by third parties (e.g. credit agencies). This may be personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract term, purchased services, cancellations), communication data (correspondence, e-mail traffic), advertising data (advertising letters) and other comparable categories of personal data.

The use of our website is generally possible without providing personal data. However, we would like to point out that access data is also collected in this case and stored in the server log files. In particular, this involves the following data:

As a matter of principle, we evaluate this information in anonymised form to defend against attacks and to improve our offer (processing of personal data within the framework of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f) GDPR) and subsequently delete it. As a rule, the data cannot be traced back to your person and is not merged with other data. However, in the event of concrete indications of illegal use, we reserve the right to subsequently evaluate the data.

We obtain consent from you in individual cases for certain purposes expressly designated in connection with the collection of data (e.g. contacting us using a contact form). Data processing only takes place if you give us your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the purpose(s) expressly stated. You can revoke your consent at any time with effect for the future. The revocation has no effect on the lawfulness of the processing until the time of revocation.

If personal data is transferred to a third country, we comply with the data protection requirements in that the data transfer is based on standard contractual clauses or we obtain your consent to this in accordance with Art. 49 (1) sentence 1 lit. a) GDPR. A data transfer takes place, for example, in connection with the use of Google services. Due to the use of these services, data is transferred to the United States of America. The data transfer only takes place if you give us your consent. The specific details of the recipient, the personal data transferred and the purpose of the data transfer can be found in the notes on the respective processing below. There is a risk to your personal data as a result of the data transfer. In the United States of America, there is no level of data protection comparable to EU law (GDPR) and / or national regulations (e.g. BDSG) or sufficient guarantees to ensure an adequate level of data protection. Any deficits cannot be compensated by other specific guarantees due to the US legal situation. Nevertheless, depending on the service, standard contractual clauses are sometimes used in order to achieve the greatest possible protection for your data. You can find out whether standard contractual clauses are used in the information on the respective services. You can revoke your consent at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of the revocation.

We process personal data after balancing interests, insofar as this is necessary to protect our interests or the interests of third parties. Examples of such purposes are:

If you contact us by e-mail or telephone, we process the personal data you provide in order to respond to your enquiry. We delete the data once we have completed processing your enquiry, unless there is a contractual or legal obligation to retain the data.

If you send us an enquiry via our contact form, we process the data you have provided on the basis of your consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a) GDPR in order to process your enquiry. In principle, your data will be deleted after the enquiry has been processed, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer this to our inventory system.

You can revoke your consent at any time with effect for the future using any of the contact details provided.

The data protection regulations for the use of the doctors' portal can be accessed via the following link: https://server.quantoncal.com/index.html#/main/patient/patients

Various cookies may be used during your visit to our website. These are text files that are placed on your computer and, among other things, enable a smooth visit to our website. Cookies are sometimes necessary to ensure the functionality or IT security of our website. The use of such function cookies is based on a legitimate interest in enabling the use of our website incl. its functions according to Art. 6 para. 1 p. 1 lit. f) GDPR. We may use other - unnecessary - cookies on the basis of Art. 6 para. 1 p. 1 lit. a) GDPR and thus on the basis of your consent. The purposes of the cookies used in each case may include:

The use of cookies that are not necessary takes place within the framework of so-called usage profiles. You will be assigned a pseudonym under which the usage data will be stored. Your IP address is only stored in shortened form, so that a personal allocation of the usage profile is no longer possible. If we use cookies, particularly for the purposes of (re-)marketing or the implementation of (social media) plugins, we base this use on your free consent to such data processing and require your consent in this respect. With regard to the individual plugins or tracking tools, we refer to the following detailed explanations. Most of the cookies we use are deleted from your computer after you close the browser (session cookies). Other types of cookies may remain on your computer and enable us to recognise your computer the next time you visit our site by means of the user profile created (permanent cookies). Cookies are only used on our site by us and not by third parties, with the exception of thirdparty cookies, which are explicitly mentioned in this privacy policy. You can give your consent by confirming our cookie banner when you visit our website. Once you have given your consent, you can revoke it at any time with effect for the future.

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies. We rely on your consent to the collection of data when using cookies. If you do not consent to the use of data when you first visit our website, we will not collect your usage behaviour and other personal data that may be collected during your visit to the website and will therefore not use it for usage analysis and subsequent remarketing campaigns. This also applies to thirdparty cookies such as the Google Analytics plugin. If you consent to the processing of your data within the scope of the opt-in procedure (confirmation of the cookie banner), the lawfulness of the processing of your data is based on consent in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR, so that we use your data to the extent of the consent you have given for the purposes of marketing and the evaluation of your usage behaviour. The information generated by the cookie about your use of this website is usually transmitted to a Google LLC server in the USA and stored there. If applicable, information about the use of this website and your IP address will be transmitted to a Google server in the USA and also stored on this server. The transfer of data is permissible based on your consent in accordance with Art. 49 (1) p. 1 lit. a) GDPR. However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data, unless you have configured the web and app activity settings in a Google account to allow Google to merge it.

Nähere Informationen zu Nutzungsbedingungen und Datenschutz erhalten Sie unter https://marketingplatform.google.com/about/analytics/terms/de/ bzw. unter https://policies.google.com/?hl=de&gl=de .

Auf unserer Webseite wurde Google Analytics um den Code „anonymizeIp“ erweitert, um IPAdressen anonymisiert erfassen zu können (sog. IP-Masking).

Sie können die Erfassung durch Google Analytics zudem mittels Anklicken des folgenden Links verhindern. Hierdurch wird ein Opt-Out-Cookie gesetzt, der die Erfassung Ihrer Daten beim Besuch dieser Webseite für die Zukunft ausschließt: Google Analytics deaktivieren

Bitte beachten Sie, dass, falls Sie Ihre Cookies löschen, auch der Opt-Out-Cookie gelöscht wird und gegebenenfalls von Ihnen erneut aktiviert werden muss.

Wir verwenden auf unserer Webpräsenz den Google Tag Manager. Der Dienst ermöglicht es uns, auf unserer Webseite eingepflegte Tags (etwa von Google Analytics) in einer Oberfläche zu verwalten. Hierbei werden weder Cookies eingesetzt, noch werden personenbezogene Daten erfasst. Der Google Tag Manager löst andere Tags aus, welche wiederum ggf. Daten erfassen. Google Tag Manager greift auf diese Daten nicht zu. Wenn auf Domain- oder Cookie-Ebene eine Deaktivierung vorgenommen wurde, bleibt diese für alle Tracking-Tags bestehen, die mit Google Tag Manager implementiert wurden.

Social plugins are sometimes integrated on our websites, but these are deactivated in the default setting for data protection reasons. If a user calls up our website, no data is therefore transmitted to the social media services (e.g. Youtube). Profiling by third parties is thus excluded. You have the option of activating the social plugins with one click and thus giving your consent to communication with the respective social network. If a social plugin is activated, certain data is transmitted to the respective social network, e.g. the user's IP address, information about the browser and operating system used, the website accessed, and the date and time. In the course of this communication, data is also uploaded from a server of the social media provider to our website. The respective provider of the social plugin receives information about which websites you visit. This may happen regardless of whether you are currently logged in to the provider of the social plugin or not. The provider may also process this data outside the European Union and may be able to create individualised usage profiles. Where necessary, we obtain your consent for this. We have no influence on the type, scope and purpose of data processing by the providers of the respective social media services. In the context of the use of social plugins, a contract on joint responsibility within the meaning of Art. 26 GDPR has been concluded between us and the respective plugin providers. For further information, please refer to the respective paragraph on the individual social plugins.

YouTube: Plugins from the social network YouTube are used on our website. The operator of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube").

We rely on your consent to the collection of data when using plugins. If you do not consent to the use of data when you first visit our website, the YouTube plug-in will not be activated, so that no data is transmitted even if you accidentally interact with a YouTube plug-in.

If you consent to the processing of your data by the YouTube plugin within the scope of the opt-in procedure, the lawfulness of the processing of your data is based on consent in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR, so that we use your data to the extent of the consent you have given for the purpose of linking to YouTube.

If you are on a page of our website that contains such a plugin, your browser will only establish a direct connection with the YouTube servers when the user activates the relevant button by clicking on it ("extended data protection mode"). The content of the plugin is then transmitted by YouTube to your browser and integrated by it into the website. By activating the plugin, YouTube receives the information that you have accessed the corresponding page of our website. Content is then transmitted by YouTube to your browser and included on the page. YouTube thereby receives the message that you are on the corresponding page of our website. This happens even if you do not have a YouTube profile or are not logged in. Personal data (including your IP address) is then automatically forwarded to a YouTube server located in the USA and stored. A direct allocation on the part of YouTube only takes place if you are logged in to YouTube. A corresponding interaction also takes place if you actively press the corresponding button. This results in publication on your YouTube account and display in your contacts. Further details on how YouTube handles your personal data can be found on the following page: https://policies.google.com/privacy?hl=de&gl=de. The transfer of data to the USA is permitted on the basis of your consent in accordance with Art. 49 Para. 1 lit. a) GDPR.

Our website contains links to other external websites (Apple AppStore, Google Play Store). These are not so-called social plugins. If you click on a link, you will call up the corresponding website and will be forwarded to it. In addition, the aforementioned websites process your personal data for their own purposes. We cannot make any statement about the way in which your personal data is processed, the purposes for which it is used or how long it is stored by these providers. Please refer to the data protection provisions of the respective provider to obtain further information about the processing of your personal data by them. You can find them at:

We pass on data to other third parties if and to the extent that we have delegated the performance of tasks to them. Data is only passed on insofar as this is necessary for the fulfilment of the assigned tasks. We work together with the following companies:

Furthermore, service providers can be entrusted with tasks in the following areas, for example:

The transfer of data always takes place on the basis of a legal standard or a suitable contract in accordance with Art. 26 or 28 GDPR, which ensures compliance with all data protection requirements. Apart from that, data is only passed on in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities. In these cases, the data transfer is legitimised according to Art. 6 para. 1 sentence 1 lit. c) GDPR.

It is intended to transfer data to a third country. This transfer will take place on the basis of the consent you have given. The recipients of the data provided by you are the following companies: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If data is transferred to a third country on the basis of consent without an adequacy decision or other suitable guarantees being in place at the same time, it must be pointed out on the basis of Art. 49 (1) p. 1 lit. a) GDPR that this entails an increased risk of data processing in the context of the transfer. However, we would like to assure you that thanks to careful selection and constant review of the standards of our contractual partners, potential risks are successfully minimised.

Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfilment of contractual and legal obligations. Personal data will be stored at least for as long as is necessary for the fulfilment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual period, as the data may still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired. The criteria for the duration of the storage of cookies can be found in the corresponding section.

As a data subject of personal data processing, you have the following rights: You have the right to request confirmation as to whether personal data are being processed. If this is the case, you have the right to be informed about the personal data and to receive the information listed in detail in Article 15 of the GDPR.

You have the right to obtain from the controller the rectification without undue delay of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data (Art. 16 GDPR). You have the right to request from the controller that personal data concerning you be deleted without undue delay if one of the reasons listed in detail in paragraph 17 of the GDPR applies, e.g. if the data are no longer needed for the purposes pursued (right to erasure). You have the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of the controller's review. You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing of this data is based on your consent or on a contract and the processing is carried out with the help of automated procedures (Art. 20 GDPR). When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, where this is technically feasible (right to data portability). You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 GDPR). With regard to the exercise of your rights, you can contact us at any time via the contact options offered on our website.

In individual cases, we process personal data in order to carry out direct advertising. In this case, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising (Art. 21 GDPR). If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. The objection can be made form-free at any time via one of the contact options given in this data protection declaration or in our imprint.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Article 77 GDPR). You can assert this right with a supervisory authority in the member state of your residence, workplace or the place of the alleged infringement. In Hesse, the competent supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information. You can find more information at the following link:

https://datenschutz.hessen.de/

Of course, you can also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact person on the subject of data protection is to use the following contact details:

info@preventis.com

+49 6251 70711-0

In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.