(1) In the following, we provide information on the collection of personal data when you use our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:
Medemie GmbH
Uerdinger Straße 104
40474 Düsseldorf
Email: info@medemie.de
Internet: www.medemie.de
Managing Director:
Dr. Ancuta Hutuleac
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address and, where applicable, your name/company name and your telephone number) are stored by us in order to answer your questions. We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations exist.
(4) If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we also state the defined criteria for the storage period.
(5) We do not knowingly collect data or information from minors under the age of 18. It is your own responsibility to ensure that your minor children do not transmit any personal data to us without your consent.
(6) Beyond the cases expressly described below, we do not knowingly collect any special categories of personal data within the meaning of Art. 9 GDPR, such as information on your ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or your sexual orientation. We process health-related information exclusively within the scope of the Complication Consult described in section 14; this service is aimed at treating physicians and is used only upon their active submission.
(1) This privacy policy is based on the terms used by the European legislator when adopting the EU General Data Protection Regulation (hereinafter referred to as the “GDPR”). The privacy policy is intended to be easy to read and understand. To ensure this, the most important terms are explained below:
(2) Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
(3) Data subject means any identified or identifiable natural person whose personal data are processed by the controller responsible for the processing.
(4) Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
(5) Profiling means any form of automated processing of personal data consisting of the use of those personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
(6) Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
(7) Controller or controller responsible for the processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
(8) Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
(9) Recipient means a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.
(10) Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.
(11) Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, in the form of a statement or other clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to him or her.
(1) This website is hosted by an external service provider (host). The personal data collected on this website are stored on the host’s servers. These may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data and other data generated via a website.
(2) The host is used for the purpose of performing contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Our host will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions with regard to these data.
(3) In the case of purely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we automatically collect the following data and information from the computer system of the accessing computer each time the website is accessed:
The user’s IP address
Information about the browser type and the version used
The user’s operating system
The user’s internet service provider
Date and time of access
Websites from which the user’s system reaches our website
Websites accessed by the user’s system via our website
Content of the requests (specific pages)
Amount of data transferred in each case
Search engines used
Names of downloaded files
The data are stored in the log files of our server. These data are not stored together with other personal data of the user.
When using these general data, we do not draw any conclusions about the data subject. The data are evaluated for statistical purposes only.
(4) The legal basis for the temporary storage of the log files is Art. 6(1) sentence 1(f) GDPR.
(5) The temporary storage of the data by the system is necessary in order to
enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
optimise the content of our website and the advertising for it
ensure the functionality of our information technology systems and of the technology of our website
provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.
These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6(1) sentence 1(f) GDPR.
(6) The data are deleted as soon as they are no longer required to achieve the purpose – in this case, at the end of the usage session.
Where the data are stored in log files, this is the case after 7 days at the latest. Storage beyond this period is possible. In this case, the IP addresses are deleted or anonymised so that it is no longer possible to identify the accessing client.
(7) The collection of the data for the provision of the website and the storage of the data in log files are absolutely necessary for the operation of the website, which is why there is no possibility of objection.
(1) Our website uses SSL/TLS encryption for the transmission of confidential or personal data. To make sure that SSL/TLS encryption is actually active, you need to monitor this yourself. The status of the encryption can be recognised from the browser’s address line, which changes from “http://” to https:// when encryption is in place. When encryption is in place, your data cannot be read by third parties. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by a lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
(2) If, after the conclusion of a contract subject to a charge, there is an obligation to transmit your payment data to us, these data are required for payment processing. Payment transactions using the common means of payment (Visa/MasterCard) take place exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by a lock symbol in your browser line. With encrypted communication, the payment data you transmit to us cannot be read by third parties.
(1) This website uses so-called cookies. Cookies are small text files which, as soon as you visit a website, are sent from a web server to your browser, stored locally on your device (PC, notebook, tablet, smartphone, etc.) and placed on your computer, and which provide the party using them with certain information. Cookies do not cause any damage to the computer and do not contain viruses. Each cookie contains a characteristic string of characters (so-called cookie ID) which enables the browser to be uniquely identified when the website is accessed again.
(2) We use cookies to make our website more user-friendly and to comply with legal requirements. For this purpose we use, among other things, cookies
to make it easier for you to fill in forms
to make our multimedia content accessible to you.
To store language settings
For the cookie banner
Some elements of our website require that the accessing browser can still be identified after a change of page.
(3) In addition, we use cookies on our website
that enable an analysis of your browsing behaviour
for the user-friendly use of our website, by integrating third-party cookies.
(4) When you access our website, you are informed about the use of cookies and your consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy policy. You can also set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted. Where cookies from third-party companies or cookies for analysis purposes are used, we will inform you about this separately in this privacy policy and, where applicable, request your consent.
(5) The legal basis for the processing of personal data using technically necessary cookies is Art. 6(1) sentence 1(f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes and for third-party providers is, where consent has been given, Art. 6(1)(a) GDPR.
(6) The purpose of using technically necessary cookies is to make the use of websites easier for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised again even after a change of page. Cookies serve in particular to make the website more customer-friendly and more secure, in particular to collect usage-related information such as frequency of use and number of users of the pages as well as patterns of page use. The user data collected by technically necessary cookies are not used to create user profiles. The purpose of using cookies that are not technically necessary is to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continuously optimise our offering. This information may also serve, when you visit the website again with the same device, to recognise you automatically and to make navigation easier for you.
(7) Persistent cookies remain stored even when the browser session is ended and can be retrieved again on a subsequent visit to the site. The cookies are stored on your computer and transmitted from it to our site. You therefore also have full control over the use of cookies. If you do not wish data to be collected via cookies, you can set your browser via the menu under “Settings” so that you are informed about the setting of cookies, or generally exclude the setting of cookies, or also delete cookies individually. Please note, however, that if cookies are deactivated, the functionality of this website may be restricted. In the case of session cookies, these are automatically deleted after you leave the website.
(8) In addition to cookies, we use the local storage of your browser (localStorage). When you log in to your user account, we store a login identifier (token) there as well as your name so that you remain logged in on subsequent page views. This information remains in your browser and is not transmitted to third parties.
(9) This storage is strictly necessary for the operation of the user account; the legal basis is section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1) sentence 1(b) GDPR. You can delete the stored information at any time by logging out or by deleting the website data in your browser. After deletion, you will have to log in again.
(1) If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on these data without your consent.
(2) These data are processed on the basis of Art. 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested.
(3) The data you enter in the contact form remain with us until you request us to delete them, withdraw your consent to storage or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
(1) If you contact us by e-mail, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), is stored and processed by us for the purpose of dealing with your request. We do not pass on these data without your consent.
(2) These data are processed on the basis of Art. 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested.
(3) The data you send us via contact enquiries remain with us until you request us to delete them, withdraw your consent to storage or the purpose for storing the data no longer applies (e.g. once your request has been fully dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you generally have to provide further personal data, which we use to provide the respective service and to which the data processing principles set out above apply.
(2) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are monitored regularly
(3) Furthermore, we may pass on your personal data to third parties if participation in promotions, prize draws, the conclusion of contracts or similar services are offered by us jointly with partners. You will receive more detailed information on this when you provide your personal data or below in the description of the service
(4) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the service.
(1) If you wish to place an order in our web shop, it is necessary for the conclusion of the contract that you provide the personal data we need to process your order. Mandatory information necessary for processing the contracts is marked separately; further information is voluntary. We process the data you provide in order to process your order. The legal basis for this is Art. 6(1) sentence 1(b) GDPR.
(2) Under commercial and tax law, we are obliged to store your address, payment and order data for a period of ten years. However, after two years we restrict processing, i.e. your data are used only to comply with the statutory obligations.
(3) To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL/TLS technology.
(1) An online seminar is comparable to an in-person seminar and takes place via the internet with the aid of computers/software. You can take part in an online seminar if you have made a booking for it beforehand. You can also make a booking for our in-person seminars online.
(2) On our website you have the option of booking seminars online. If you make use of this option, the personal data you enter in the input form, which we need to process your request, are transmitted to us and stored. Mandatory information necessary for processing the request is marked separately or predefined; further information is voluntary.
These data are:
IP address
Date and time of the booking
Name
Postal address
E-mail address
Form of address
Payment information
optional: company, telephone
(3) The data are passed on to third parties only if this is necessary for the purpose of processing the contract or for billing purposes or for collecting the fee, or if you have expressly consented. In this respect, we pass on only the data required in each case. The recipients of the data are
Payment service providers – depending on the means of payment selected
(4) You can voluntarily create a customer account, through which we can store your data for further purchases at a later date. When you create an account under “My account”, the data you provide are stored revocably.
(5) The legal basis is Art. 6(1) sentence 1(b) GDPR. With regard to the voluntary data, the legal basis for the processing of the data is Art. 6(1) sentence 1(a) GDPR.
(6) The mandatory information collected is necessary for the performance of the contract. We therefore use the data to answer your enquiries, to process your booking and for the purpose of the technical administration of the web pages. The voluntary information is provided to prevent misuse and, where applicable, to investigate criminal offences. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails containing information.
(7) The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. Under commercial and tax law, we are obliged to store your address, payment and order data for a period of ten years after performance of the contract.
(8) If the data are required for the performance of a contract or for carrying out pre-contractual measures, early deletion of the data is possible only to the extent that contractual or statutory obligations do not preclude deletion. With regard to the voluntary data, you may declare your withdrawal of consent to the controller named in section 1 at any time. In this case, the voluntary data are deleted without delay.
(1) On our course and information pages we embed videos from the provider Vimeo (Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA).
(2) The videos are embedded as iframes. When you access a page that contains a video, a connection to Vimeo’s servers is therefore established. In the process, your IP address and information about your browser and operating system, among other things, are transmitted to Vimeo – even if you do not play the video. We have no influence on the scope of this processing.
(3) The purpose of the embedding is to provide the course content and to present our offering. The legal basis is Art. 6(1) sentence 1(b) GDPR insofar as the videos are part of a course you have booked, and otherwise Art. 6(1) sentence 1(f) GDPR on the basis of our legitimate interest in a contemporary presentation of our content.
(4) Vimeo also processes data in the USA. Further information can be found in Vimeo’s privacy policy at https://vimeo.com/privacy.
(5) If you are logged in to Vimeo, Vimeo can attribute your usage behaviour to your account there. If you do not want this, log out of Vimeo before visiting our pages.
(1) For the transmission and recording of our live webinars, we use the Cloudflare Stream service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The video signal is delivered and recordings are stored via this service.
(2) Recordings of live webinars are created automatically and deleted after 90 days. Within this period you can access the recording in your user account.
(3) While you are taking part in a live webinar, we process the following data in order to establish your attendance: your name, your e-mail address, the duration of your participation in minutes and the time of your last activity. This collection is necessary because the issue of a certificate of participation requires a minimum duration of participation.
(4) If you ask a question during a webinar, this question and your name are stored so that they are visible to the moderators, in order to be able to answer the question.
(5) The legal basis for the processing is Art. 6(1) sentence 1(b) GDPR, as it is necessary for the performance of the training contract concluded with you.
(6) Cloudflare also processes data in the USA. Further information can be found at https://www.cloudflare.com/privacypolicy/.
(1) Within our online courses we offer an AI-supported learning assistant. On request, it creates summaries of individual chapters and answers your questions about the course content. The function is available exclusively to logged-in users who have purchased the respective course.
(2) To provide this function, we use the application programming interface of the provider Anthropic PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA.
(3) The following are transmitted to Anthropic: the title of the course and of the respective chapter, the chapter description, excerpts from the official course script and – when the question function is used – the text of the question you enter. Your name, your e-mail address and other details from your user account are not transmitted.
(4) Please do not enter any personal data of third parties in the input field, in particular no information about individual patients. The learning assistant serves to explain course content and is not a substitute for a medical assessment in the individual case.
(5) We temporarily store chapter summaries that have been created in order to avoid repeated queries. These summaries relate to the course content and do not contain any personal data.
(6) The legal basis is Art. 6(1) sentence 1(b) GDPR, as the function is part of the course you have purchased. Anthropic processes data in the USA. Further information can be found at https://www.anthropic.com/legal/privacy.
(1) As part of our “Complication Consult” service, licensed physicians can submit a treatment case for a second opinion from a colleague. The service is aimed exclusively at members of the healthcare professions, not at patients.
(2) When a case is submitted, we process: the case description you enter, the case title, up to four image files uploaded by you, optionally a call-back number, your confirmation that patient consent has been obtained, as well as the assignment to your user account and the time of submission.
(3) Case descriptions and image files may contain special categories of personal data within the meaning of Art. 9(1) GDPR (health data). As the treating physician, you are responsible for ensuring that you have valid consent from the data subject for the transmission and that you pseudonymise the information as far as possible. Please do not transmit any names, dates of birth, addresses or other directly identifying details of your patients.
(4) Submitted cases can be viewed exclusively by our organisation’s medical lead, who is authorised to carry out the professional assessment, and by you yourself in your user account. They are not passed on to third parties.
(5) We provide notification by e-mail of the submission of a case and of the reply to it. The reply constitutes a second opinion from a colleague and replaces neither your own medical assessment nor your responsibility for the treatment.
(6) The legal basis for the processing is Art. 6(1) sentence 1(b) GDPR in conjunction with Art. 9(2)(a) GDPR.
(7) Submitted cases, including the image files, are deleted as soon as they are no longer required for the purpose of the assessment and its documentation.
(1) After you have completed a course or a learning assessment or taken part in a webinar, we make a certificate of participation or a continuing education certificate available to you as a PDF file in your user account.
(2) For this purpose we process: your form of address, your title, your first name and surname, the name of the course, the date of completion, the result of the learning assessment and – if you have provided it – your uniform continuing education number (Einheitliche Fortbildungsnummer, EFN).
(3) We store the results of your learning assessments in order to be able to provide proof of completion and, if an assessment is not passed, to determine the permissible time for a repeat attempt.
(4) The legal basis is Art. 6(1) sentence 1(b) GDPR. Insofar as we are obliged to report CME credits to the competent State Chamber of Physicians (Ärztekammer), your EFN and the continuing education result are transmitted on the basis of Art. 6(1) sentence 1(c) GDPR.
(1) On this website we also offer payment via PayPal. PayPal is an online payment service provider. PayPal makes it possible to initiate online payments to third parties and also to receive payments. PayPal also performs trustee functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
(2) If you select “PayPal” as the payment option during the ordering process in our web shop, your data are transmitted to PayPal automatically. By selecting this payment option, you consent to the transmission of personal data required for payment processing.
(3) The personal data transmitted to PayPal are generally first name, surname, address, e-mail address, IP address, telephone number, mobile telephone number or other data necessary for payment processing. Personal data relating to the respective order are also necessary for processing the purchase contract.
(4) The purpose of transmitting the data is payment processing and fraud prevention. We will transmit personal data to PayPal in particular where there is a legitimate interest in the transmission.
(5) PayPal may pass on the personal data to affiliated companies and service providers or subcontractors insofar as this is necessary to fulfil the contractual obligations or the data are to be processed on its behalf.
(6) You may at any time withdraw your consent to the handling of personal data vis-à-vis PayPal. A withdrawal does not affect personal data that must necessarily be processed, used or transmitted for payment processing (in accordance with the contract).
(7) PayPal’s applicable privacy policy can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
(1) On this website we also offer, among other things, payment using the services of Stripe. The provider for customers within the EU is Stripe Payments Europe, Ltd.,1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”).
(2) If you select Stripe (credit card) as the payment option during the ordering process in our online shop, data of the data subject are transmitted to Stripe automatically. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.
(3) The personal payment-related data required for payment processing (credit card number, expiry date, CVC code) are entered by you as the customer directly into a Stripe input field when you select credit card via Stripe as the payment method. We ourselves do not pass on any personal payment-related data and cannot access these data either.
(4) The provider for customers within the EU is Stripe Payments Europe, Ltd., which is based in Ireland. Where data are transmitted to the US parent company in the course of payment processing, Stripe, according to its own information, bases this transmission on the EU-US Data Privacy Framework or on standard contractual clauses pursuant to Art. 46(2)(c) GDPR.
(5) The purpose of transmitting the personal data (first name, surname, postal address) is payment processing and fraud prevention. The personal data exchanged between Stripe and us may be transmitted by Stripe to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness. Please refer to Stripe’s privacy policy for information on how Stripe further processes the data.
(6) If you pay by credit card, the data you provide are processed by the respective credit institution. We have no knowledge of the exact processing and can view these data only to a limited extent. If you have any questions about data protection, please therefore contact your respective credit institution.
(7) When you pay via Stripe, your payment data are forwarded to Stripe via an interface on our site in order to carry out the payment. You can read details of this in Stripe’s privacy policy at the following link: https://stripe.com/de/privacy.
(8) Your data are transmitted to Stripe on the basis of Art. 6(1)(b) GDPR (performance of a contract) and on the basis of our legitimate interest in the use of reliable and secure payment processes (Art. 6(1)(f) GDPR).
(9) You may at any time withdraw your consent to the handling of personal data vis-à-vis Stripe. A withdrawal does not affect personal data that must necessarily be processed, used or transmitted for payment processing (in accordance with the contract).
(1) You can subscribe to our newsletter on our website. Registration uses the double opt-in procedure: after you have entered your e-mail address, we send you a message with a confirmation link. Only after you have confirmed do we add you to the mailing list. Until then, your registration does not take effect.
(2) To send the newsletter, we process your e-mail address and – if provided – your name. The legal basis is your consent pursuant to Art. 6(1) sentence 1(a) GDPR.
(3) You can unsubscribe from the newsletter at any time. Every newsletter e-mail contains an unsubscribe link for this purpose. Alternatively, a message to info@medemie.de is sufficient. After you have unsubscribed, your e-mail address is removed from the mailing list.
(4) For the technical dispatch of newsletters, we use the SendGrid service of Twilio Inc., 101 Spear Street, First Floor, San Francisco, CA 94105, USA. Your e-mail address is transmitted to SendGrid for this purpose. Further information can be found at https://www.twilio.com/legal/privacy.
(5) Contract-related e-mails – such as order confirmations, invoices, appointment reminders and certificates – are sent independently of the newsletter via the mail server of our hosting service provider. The legal basis for this is Art. 6(1) sentence 1(b) GDPR. You cannot unsubscribe from these messages as long as a contractual relationship exists.
To display fonts uniformly, this website uses so-called web fonts provided by Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you access a page, your browser loads the required font files from Google servers (fonts.googleapis.com and fonts.gstatic.com). In the process, your IP address is transmitted to Google. We have no influence on the scope of this processing.
Further information on the handling of user data can be found in Google’s privacy policy at https://policies.google.com/privacy and in the information on Google Fonts at https://developers.google.com/fonts/faq.
(1) On our home page we use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies that enable an analysis of the use of the website.
(2) The information collected about your use of this website is generally transferred to a Google server and stored there. A transfer to the USA cannot be ruled out in this context.
(3) We have activated IP anonymisation, so that your IP address is truncated beforehand by Google within the European Union or the European Economic Area.
(4) The legal basis is your consent pursuant to Art. 6(1) sentence 1(a) GDPR in conjunction with section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with effect for the future.
(5) You can additionally prevent collection by Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout. Further information on the handling of user data at Google can be found at https://policies.google.com/privacy.
(1) In order to understand which of our content and offerings meet with interest, we record in anonymised form how often individual links on our website and in our e-mails are accessed. The identifier of the respective link and the time of access are stored.
(2) This information is not merged with your user account, nor are usage profiles created.
(3) The legal basis is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest lies in designing our training offering in line with demand.
(1) Some of our in-person workshops are supported by a company from the medical or pharmaceutical sector (hereinafter “sponsor”). We inform you on site and in the consent text on the recording page which sponsor is supporting an event.
(2) On site, you can record your participation yourself via a QR code. In doing so, we process your first name and surname, your e-mail address, the name and date of the event and the time of your entry. The recording page does not set any cookies, does not integrate any third-party services and stores neither your IP address nor other usage data.
(3) We transmit your name and your e-mail address to the sponsor only if you have expressly agreed to this on the recording page. The legal basis in this respect is Art. 6(1) sentence 1(a) GDPR. We store the wording of your consent together with your entry so that it remains traceable what you consented to.
(4) You may withdraw your consent at any time with effect for the future, informally and without giving reasons, for example by e-mail to info@medemie.de. The lawfulness of the processing carried out up to the withdrawal remains unaffected. After a withdrawal, we will not transmit your data to the sponsor again; we cannot reverse transmissions that have already taken place, but will notify the sponsor of your withdrawal on request.
(5) If you were unable to scan the code yourself on site, we will enter your participation subsequently at your request. If we do not have your consent in this case, we use the information exclusively for our own documentation of the event and do not transmit it to the sponsor. The legal basis is Art. 6(1) sentence 1(b) GDPR, and otherwise Art. 6(1) sentence 1(f) GDPR; our legitimate interest lies in providing evidence that our training courses have been properly conducted.
(6) We delete the participation data as soon as they are no longer required for the aforementioned purposes, but no later than three years after the end of the year in which the event took place. Statutory retention obligations remain unaffected.
(1) On pages with an event venue, we offer you a map. This map is not loaded automatically. Initially, only a placeholder area with the “Load map” button is visible.
(2) Only when you click this button is a connection established to servers of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. In the process, your IP address is transmitted to OpenStreetMap; this is technically necessary so that the map tiles can be delivered to your browser. Without your click, no data whatsoever are transferred to OpenStreetMap.
(3) The legal basis for loading the map is your consent pursuant to Art. 6(1) sentence 1(a) GDPR, which you give by clicking the button. You may withdraw this consent at any time by reloading the page; the map is then again displayed only as a placeholder.
(4) Further information on how the OpenStreetMap Foundation handles your data can be found in its privacy policy at osmfoundation.org/wiki/Privacy_Policy.
(5) We determine the coordinates of our event venues once, when the respective address is saved, via the Nominatim service of the OpenStreetMap Foundation. In doing so, only the address of the event venue is transmitted, but no personal data of our users. This process takes place on our server and is not triggered by your accessing a page.
If personal data are processed, you have the following rights:
Right of access
Right to rectification
Right to restriction of processing
Right to erasure
Right to notification
Right to data portability
Right to object to processing
Right to withdraw consent under data protection law
Right not to be subject to an automated decision
Right to lodge a complaint with a supervisory authority
Right of access
(1) You may request confirmation from the controller as to whether personal data concerning you are being processed by us. Where such processing takes place, you may at any time request from the controller, free of charge, information about the personal data stored concerning you and about the following:
a) the purposes for which the personal data are processed;
b) the categories of personal data that are processed;
c) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
d) the envisaged period for which the personal data concerning you will be stored or, if specific information on this is not possible, the criteria for determining the storage period;
e) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
f) the existence of a right to lodge a complaint with a supervisory authority;
g) any available information as to the source of the data, where the personal data are not collected from the data subject;
h) the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
(2) You have the right to request information as to whether the personal data concerned are transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
Right to rectification
You have a right vis-à-vis the controller to rectification and/or completion without undue delay if the processed personal data concerning you are inaccurate or incomplete.
Right to restriction of processing
(1) Under the following conditions, you may request from the controller the restriction of processing of the personal data concerning you without undue delay:
a) if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;
c) the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims, or
d) if you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.
(2) Where processing of the personal data concerning you has been restricted, these data may – with the exception of their storage – be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure
(1) You may request the controller to erase the personal data concerning you without undue delay where one of the following grounds applies:
a) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;
b) you withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing;
c) you object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR;
d) the personal data concerning you have been unlawfully processed;
e) the erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject;
f) the personal data concerning you have been collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.
(2) The right to erasure does not exist to the extent that processing is necessary
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, in so far as the right referred to under section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
e) for the establishment, exercise or defence of legal claims.
Right to notification
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification/erasure/restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right vis-à-vis the controller to be informed about those recipients.
Right to data portability
(1) You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
a) the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and
b) the processing is carried out by automated means.
(2) In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be adversely affected by this.
(3) The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
To assert the right to data portability, the data subject may contact the controller responsible for the processing at any time.
Right to object
(1) You have the right to object, on grounds relating to your particular situation, at any time to processing of the personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.
(2) The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
(3) Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of the personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.
(4) In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
(5) To exercise the right to object, the data subject may contact the controller responsible for the processing directly.
Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You may contact the controller for this purpose.
Right regarding automated individual decision-making, including profiling
(1) You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
a) is necessary for entering into, or the performance of, a contract between you and the controller,
b) is authorised by Union or Member State law to which the controller is subject and that law lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
c) is based on your explicit consent.
(2) However, these decisions must not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures to safeguard the rights and freedoms and your legitimate interests are in place.
(3) With regard to the cases referred to in (1) and (3), the controller takes suitable measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
(4) If the data subject wishes to assert rights relating to automated decisions, he or she may contact the controller responsible for the processing at any time.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of the personal data concerning you infringes the GDPR.
We reserve the right to amend our data protection practices and these provisions in order to adapt them, where necessary, to changes in relevant laws or regulations or to better meet your needs. Any changes to our data protection practices will be announced here accordingly. Please note the current version date of the privacy policy in this regard.
Version: August 2026