Privacy

The Responsible Body as defined by the data protection laws is:

KLS Martin SE & Co. KG
KLS Martin Platz 1
78532 Tuttlingen, Germany

MMM Münchener Medizin Mechanik GmbH
Semmelweisstraße 6
82152 Planegg, Munich

Recording general information

When you access our web site, information of a general nature is automatically recorded. This information (server log files) includes items such as the type of web browser, the operating system of your computer, the domain name of your internet service provider, and similar information. The recorded information does not include any personal data. This information is a technical requirement in order to display the requested content of the web site correctly and is essential in order to use the internet. We statistically analyze this type of anonymous information in order to optimize our internet presence and the underlying technology.

Registration on our web site

Some personal data, such as name, address, telephone number(s) and email address for contact and communication, will be recorded when you register on our web site. If you are registered with us, you will have access to content and services that we only offer to registered users. Users who are logged-in can also change or delete the data recorded during registration at any time. We will also of course disclose to you the personal data that we hold at any time. We will also correct or delete this data on request, unless we are required by law to retain it. Please use the contact data at the end of this privacy statement if you wish to contact us about your personal information.

Provision of paid services

For the provision of paid services we will request additional data, such as payment details. 
We use state-of-the-art encryption technology (e.g. SSL) over HTTPS to ensure the security of your data.

Newsletter

The data that you provide in order to log in to get our newsletter will be used exclusively for this purpose. Subscribers may also be informed by email about conditions that are relevant for the service or the registration (such as changes to the newsletters offered or technical items). 
We require a valid email address for an effective registration. We use the "double opt-in" procedure to ensure that the owner of an email address is actually the person who registered. For this purpose we log the order of the newsletter, the sending of a confirmation email and the receipt of the requested response. We do not record any additional information. The information is used exclusively for sending the newsletter and is not available for third parties. 
You can withdraw your agreement to the storage of your personal data and its use for sending the newsletter at any time. A corresponding link is included in every newsletter. You can also deregister directly on this web site at any time or send your request to the contact addresses that can be found at the end of this document.

Newsletter emails are sent through Mailchimp. This is a service of The Rocket Science Group LLC in the USA. The appropriate level of data protection is guaranteed through its Privacy Shield certification. Moreover, we have entered into a processing agreement with Mailchimp.

Contact form

If you contact us by email or the contact form, the information that you include will be stored for the purposes of processing your enquiry and for possible subsequent questions.

Deleting or blocking data

We comply with the principles of data avoidance and data minimization. Therefore, we store your personal data only so long as it is required for the purposes stated here or for the various periods specified by the relevant legislation. On completion of the purpose or on expiration of the periods the applicable information will be routinely blocked or deleted in accordance with the legal regulations.

Social media monitoring | Observation and statistical evaluation of social media with digimind

To be able to recognize and evaluate the perception of our products and brand in social media channels, we monitor the publications of users in social media channels regarding the RUMED Academy and our offers. For this purpose, we have commissioned DIGIMIND, a commercial partnership (SA) 6 Place Robert Schumann, 38100 Grenoble (France) as a service provider. Only aggregated information is provided to us. We have entered into an order processing agreement with DIGIMIND (SA). For more information on data processing by DIGIMIND (SA), please visit www.digimind.com/data-privacy/. The legal basis for the data processing is Article 6 Paragraph 1 lit. f GDPR. We have a legitimate interest to know about the market position of our brand and offers and being able to react promptly to developments.

Social media plugins | 2-click solution

Our website uses social plugins from the providers listed below. You can recognise these plugins by the fact that they are marked with a corresponding logo.

These plugins may be used to send information, including personal data, to the service provider and may be used by the service provider. We prevent the automatic and inadvertent collection and transfer of data to the service provider through a two-click solution. To activate the chosen social plugin, it must first be activated by clicking on the corresponding button. Only when the plugin is activated will the collection of information and its transmission to the service provider be triggered. We do not collect any personal data ourselves through social plugins or their use.

We have no influence on what data an activated plugin collects and how it is used by the provider. We must currently work on the assumption that a direct connection to the services of the provider will be established and that your IP address and device-related information will be recorded and used at a minimum. It is also possible that service providers may attempt to store cookies on the computer being used. Please see the privacy policy of the respective service provider to find out what data specifically is collected and how it is used.

We have included the social media buttons of the following companies on our website:

• Facebook plugin
• Instagram plugin
• LinkedIn plugin
• XING plugin
• YouTube plugin

Social media buttons are used on the basis of Article 6 Paragraph 1 Sentence 1(f) GDPR. The promotional purpose behind this is deemed a legitimate interest as defined by the GDPR.

Our activities in social networks

To allow us to communicate with you on social networks and inform you about our services, we run our own pages on these social networks. If you visit one of our social media pages, we and the provider of the social media network are joint controllers (Art. 26 GDPR) regarding to the processing operations triggered thereby, which concern personal data.

We are not the original provider of these pages, but only use them within the scope of the options offered to us by the respective providers.

We would therefore like to point out as a precautionary measure that your data may also be processed outside of the European Union or the European Economic Area. Use of these networks may therefore involve data protection risks for you since the protection of your rights may be difficult, e.g. your rights to information, erasure, objection, etc. Processing on social networks frequently takes place directly for advertising purposes or for the analysis of user behaviour by network providers, and we have no control over this. If the provider creates user profiles, cookies are often used or user behaviour may be assigned directly to your own member profile on the respective social network (if you are logged in).

The processing operations of personal data described are carried out in accordance with Article 6 Paragraph 1(f) GDPR on the basis of our legitimate interests and the legitimate interests of the respective provider in order to communicate with you in a timely manner or to inform you about our services. If you have to grant your consent to the respective providers to process your data as a user, the legal basis for this processing is Article 6 Paragraph 1(a) GDPR in conjunction with Article 7 GDPR.

Since we have no access to these providers’ databases, we would like to point out that you would be best placed to exercise your rights (e.g. to information, rectification, erasure, etc.) directly with the respective provider. More information on the processing of your data on social networks and your options for exercising your right to object or your right of revocation (opt out) is listed below for each of the social network providers we use:

Facebook

(Jointly) Data controller responsible for data processing in Europe:
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy Notice (Data Policy):
https://www.facebook.com/about/privacy

Opt-out and advertising settings:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

https://facebook.com/about/privacy/

Instagram

(Jointly) Data controller responsible for data processing in Europe:
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy Notice (Data Policy):
http://instagram.com/legal/privacy/

Opt-out and advertising settings:
https://www.instagram.com/accounts/privacy_and_security/

LinkedIn

(Jointly) Data controller responsible for data processing in Europe:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Privacy Notice:
https://www.linkedin.com/legal/privacy-policy

Opt-out and advertising settings:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

YouTube

(Jointly) Controller responsible for data processing in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy Notice:
https://policies.google.com/privacy

Opt-out and advertising settings:
https://adssettings.google.com/authenticated

XING

(Jointly) Data controller responsible for data processing in Germany:
XING AG, Dammtorstrasse 29–32, 20354 Hamburg, Germany

Privacy Notice:
https://privacy.xing.com/de/datenschutzerklaerung

Requests for information for XING members:
https://www.xing.com/settings/privacy/data/disclosure

Cookies

General information about cookies

We use cookies on our website. Cookies are small files that are automatically created by your browser and stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.

Information generated from the specific device used is stored in cookies. This does not mean, however, that we will gain immediate knowledge of your identity.

The use of cookies helps us make it more convenient for you to use our website. For example, we use session cookies to detect whether you have already visited individual pages on our website. These are erased automatically when you leave our website.

We also use temporary cookies to optimise user-friendliness. These cookies are stored on your device for a specific period of time. If you return to our website to use our services, cookies allow us to automatically recognise that you have visited our website previously and remember the inputs and settings you have made so that you do not have to enter them again.

We also use cookies to statistically record the use of our website and analyse it for the purpose of optimising our services. These cookies allow us to automatically recognise that you have already visited our website when you visit our website again. These cookies are automatically erased after a defined period of time.

Legal basis for the use of cookies

The data processed by cookies, which are required for the proper functioning of the website, are to safeguard our legitimate interests pursuant to Article 6 Paragraph 1 Sentence 1(f) GDPR.

For all other cookies you have given your consent to this through our opt-in cookie banner in accordance with Article 6 Paragraph 1(a) GDPR.

Data privacy for customers and interested parties

For purposes of the pre-contractual proposal phase or for order fulfillment or provision of services, we process personal data that we receive from you, such as address and contact information, information on discussions held, your requirements, proposals and other information. In the case of business customers, we also process information – particularly contact information – on our contact persons. We can store and process data on your bank account or credit card information for purposes of payment processing. If external partners are involved in the provision of services or contract fulfillment, information which is needed to render their performance can be shared with them. Support systems (IT environment, CRM/ERP systems, financial accounting) may be used during the processing of the information, which the contractors access in the course of maintenance. In these cases, we enter into the necessary contracts for processing.

Data processing for webinars

If you register for a webinar, we process the data you provide in order to fulfill this offer (fulfillment of contract). In return for your participation in webinars, you grant us permission to use your data for the purpose of sending you further information as well as for the purpose of contacting our sales organization (also specialized trade partners) with regard to our offers. Otherwise we will not be able to offer webinars. Of course, you can revoke your permission to use your data at any time if you accept this offer. To do so, please send an email to contact@rumedacademy.com.

Processing for the purpose of conducting the webinar is necessary for the fulfillment of a contract or a pre-contractual measure in accordance with Art. 6 Par. 1 lit. b DS-GVO. Within the framework of private autonomy, you can decide under which conditions you wish to receive the services. The prohibition of tying in accordance with Art. 7 Para. 4 is therefore not relevant.

In order to provide the service, we involve contract processors within the meaning of Art. 4 No. 8 in conjunction with Art. 28 DSGVO. In order to protect your data and, if necessary, to enable us to transfer data to third countries (outside the EU/EEA), we have concluded agreements on order processing on the basis of the standard contractual clauses of the European Commission.

In order to be able to conduct webinars, we must involve external service providers. For this we use:

• GoToWebinar, a service provided by LogMeIn, Inc, which is based in the USA. Information about the provider's privacy policy can be found at: https://www.logmeininc.com/de/legal

We also use external service providers for payment processing for seminars with costs. For this we use:

• Stripe, Inc; which has its headquarters in the USA. Information on the data protection of the provider can be found at: https://stripe.com/de/privacy 

If we want to record online seminars, we will inform you transparently and - if necessary - ask for your consent. The fact of the recording will also be displayed in the app.

Recordings of presentations and requests in chats can be made available to all participants as part of the seminar follow-up.

An automated decision making process in the sense of Art. 22 DSGVO is not used.

The provision of your data is necessary to fulfill the service. Without your data, participation in the webinar is not possible.

Processing of your data in the context of participation in promotional campaigns

Within the framework of the promotion campaigns, personal data is collected and processed in order to fulfill the respective conditions of the promotion program. These data are, for example, details of your company, your contact details, details of orders and serial numbers of products already delivered. The legal basis is the fulfillment of the contract concluded with you in accordance with Art. 6 para. 1 lit. b DS-GVO.  The collected or processed data will only be used for the fulfillment of the program and will not be disclosed to unauthorized third parties.  In the case of programs for discounting additional purchases, your data will be passed on to our order processing department, please refer to the notes in the section "Processing of customer and supplier data". If these discount promotions are run by a third party, such as the supplier or manufacturer of the item, your data may be shared with them. For cash-back or trade-in programs, the required information is provided to payment service providers. For gift or demo programs, we share address information with logistics service providers.  We use The "Microsoft Forms" service for registration, please see our notice in the relevant section of this privacy information.

Data privacy for suppliers

We store and process information about you in the course of selecting suppliers or service providers. As part of supplier review and evaluation, we may obtain and also store further information – such as from credit agencies – for this purpose. In addition to your master data, we also process order-specific information for purposes of order fulfillment. In the case of business contacts, we also process information – particularly contact information – on our contact persons. Support systems (IT environment, CRM/ERP systems, financial accounting) may be used during the processing of information. 

Plugins and other services
Microsoft Forms

We use the "Microsoft Forms" service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA to create surveys, polls and quizzes.
Microsoft Forms is a web-based application for creating surveys, quizzes and polls. The created forms can be shared via links or embeds on a web page to collect feedback from an audience or to conduct polls. The results of the surveys are collected automatically and can be viewed and analyzed in real time.
When using Microsoft Forms, various personal information may be collected, including:

• Information you provide yourself when completing a survey, poll, or taking a quiz, such as name, email address, or response to questions.
• Data about your use of Microsoft Forms, such as date and time of access, browser type, operating system, and IP address.

The retention period for personal data is based on the respective statutory retention period.
Participation in the surveys, polls or quizzes is voluntary. The legal basis for the processing of personal data is your voluntarily given consent according to Art. 6 para. 1 lit. a) DS-GVO. You can revoke this at any time with effect for the future.
This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision pursuant to Art. 45 DS-GVO, so that a transfer of personal data may also take place without further guarantees or additional measures.

You can find more information about the Microsoft Forms service and the privacy policy at: privacy.microsoft.com/de-de/.

Microsoft Teams

We use the "Microsoft Teams" tool ("MS Teams") to conduct our communications, both in written form (chat) and in the form of telephone conferences, online meetings and video conferences. The operating company of the service is Microsoft Ireland Operations ("Microsoft"), Ltd, 70 Sir John Rogerson's Quay, Dublin, Ireland. Microsoft Ireland Operations, Ltd. is part of the Microsoft group of companies located at One Microsoft Way, Redmond, Washington, USA.
When using MS Teams, the following personal data is processed:

• Meetings, chats, voicemails, shared files, recordings and transcripts.
• Data that is shared about you. Examples include your email address, profile picture, and phone number.
• A detailed history of the phone calls you make.
• Call quality data.
• Support/feedback data Information related to troubleshooting tickets or feedback sent to Microsoft.
• Diagnostic and service data Diagnostic data related to service usage.

To enable the display of video and playback of audio, data is processed from your endpoint device microphone and from an endpoint device video camera for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time through the "Microsoft Teams" applications.

If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a) DS-GVO. In the context of an employee relationship, corresponding data processing takes place on the basis of Section 26 BDSG. The legal basis for the use of "MS Teams" in the context of contractual relationships is Art. 6 para. 1 lit. b) DS-GVO. In all other cases, the legal basis for processing your personal data is Art. 6 para. 1 lit. f) DS-GVO. Here, our interest is in the effective conduct of online meetings.
If we record online meetings, we will inform you of this before we start and, where necessary, ask you to consent to the recording. If you do not wish to do so, you may leave the online meeting.
As a cloud-based service, "MS Teams" processes the aforementioned data as part of providing the service. To the extent that "MS-Teams" processes personal data in connection with Microsoft's legitimate business operations, Microsoft is an independent data controller for such use and, as such, is responsible for compliance with applicable laws and obligations of a data controller. To the extent you access the MS Teams website, Microsoft is the data controller. Accessing the website is necessary to download the MS-Teams software.

If you do not want to or cannot download the software, the service can be provided through your browser and, to that extent, through Microsoft's website.
This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision pursuant to Art. 45 DS-GVO, so that a transfer of personal data may also take place without further guarantees or additional measures.

Detailed information on the subject of data protection at Microsoft, in connection with "MS Teams", can be found at: docs.microsoft.com/de-de/microsoftteams/teams-privacy.

Your rights of disclosure, correction, blocking, deletion and objection

You have the right to receive disclosure of your personal information that we hold at any time. You also have the right to correct, block or delete your personal information, subject to the data storage requirements specified for processing transactions. Please contact our privacy officer if you want more information. See below for the contact details. 
In order to implement a blockage of data at any time the data must be retained in a blocked file for control purposes. You can also request your information to be deleted, unless there is a legal requirement for archiving it. If this applies to the data in question, we will block it on request. 
You can make changes or withdraw an approval with effect into the future by informing us.

Lodging a complaint with a supervisory authority

You can contact the competent supervisory authority at any time with a complaint. Your competent supervisory authority is based on the federal state of your domicile, your place of work or the place of the alleged infringement. You will find a list of supervisory authorities (for the private sector) with addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Amendment of our privacy regulations

We reserve the right to amend this privacy statement at times to ensure that it always corresponds to the current legal requirements or to implement changes to our services, e.g. the introduction of new services. The new privacy statement will apply next time you visit our web site.

Questions to the privacy officer

If you have any questions regarding information privacy, please write to us by email or contact our privacy officer directly:
Contact information: 
DatenschutzBeauftragter@klsmartin.com, Tel.: +49-7461 706-166, KLS Martin Platz 1, 78532 Tuttlingen