Privacy Policy
1. Data Protection at a Glance
1.1. General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on how we process your personal data, please refer to this Privacy Policy below.
1.2. Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Information on the Controller" of this Privacy Policy.
How do we collect your data?
Some data is collected when you voluntarily provide it to us. This may include, for example, information you enter into a contact form or submit when uploading your CV. Other data is collected automatically or with your consent when you visit this website through our IT systems. This primarily includes technical data such as your internet browser, operating system, or the time of your visit. This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure the proper functioning and secure provision of this website. Other data may be used to analyze how visitors use the website and to improve our services.
What rights do you have regarding your data?
You have the right to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of your personal data. If you have given your consent to the processing of your personal data, you may withdraw that consent at any time with future effect. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. If you have any questions regarding data protection or the processing of your personal data, you may contact us at any time.
1.3. Analytics Tools and Third-Party Services
1.3. Analytics Tools and Third-Party Services
When you visit this website, your user behavior may be analyzed for statistical purposes. This is primarily carried out using analytics tools and third-party services. The data collected is used to improve the functionality, security, and usability of our website, as well as to continuously optimize our online services. Where your consent is required for the use of analytics tools or third-party services, the processing of your personal data is based exclusively on your consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
2. Hosting
This website is hosted using Zoho Sites. The provider is:
Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, The Netherlands
When you visit this website, personal data is processed on Zoho's servers. This may include, in particular, IP addresses, browser information, metadata and communication data, contact requests, contract data, contact details, names, and other data transmitted through or automatically collected by this website. The hosting is carried out for the purpose of providing a secure, stable, and efficient website, as well as for the performance of pre-contractual and contractual obligations towards prospective and existing customers in accordance with Art. 6(1)(b) GDPR. Furthermore, the processing is based on our legitimate interest in the secure and efficient provision of our online services pursuant to Art. 6(1)(f) GDPR. Where your consent is required for certain processing activities (e.g., the use of cookies or similar technologies), the processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with effect for the future.
We have concluded a Data Processing Agreement (DPA) with Zoho in accordance with Art. 28 GDPR. Zoho processes personal data solely on our behalf, in accordance with our instructions, and only to the extent necessary for the provision of the hosting services.
3. General Information and Mandatory Information
3.1. Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy. When you use this website, various types of personal data are collected. Personal data is any information that can be used to identify you personally. This Privacy Policy explains what personal data we collect, for what purposes it is processed, and on which legal basis the processing is carried out. It also explains how your personal data is processed.
3.2. Information on the Controller
The controller responsible for data processing on this website is:
MEDFLAKE GmbH, Bahnhofstraße 15, 25421 Pinneberg, Germany
Email: info@medflake.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
3.3. Data Retention
Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data only for as long as necessary to fulfill the respective processing purposes. If you exercise your right to erasure or withdraw your consent to data processing, your personal data will be deleted unless we are legally required or otherwise entitled to retain it. In such cases, the data will be deleted once the applicable legal retention periods have expired.
3.4. Legal Bases for Data Processing
Where you have given your consent to the processing of your personal data, the processing is carried out on the basis of Art. 6(1)(a) GDPR or, where special categories of personal data are processed, on the basis of Art. 9(2)(a) GDPR. Where you have expressly consented to the transfer of personal data to third countries, the processing is also based on Art. 49(1)(a) GDPR. Where you have consented to the storage of cookies or access to information stored on your device, processing is additionally carried out on the basis of Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with effect for the future. Where your personal data is required for the performance of a contract or to carry out pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, it is carried out on the basis of Art. 6(1)(c) GDPR. Where processing is necessary for the purposes of our legitimate interests and these interests are not overridden by your interests or fundamental rights and freedoms, processing is based on Art. 6(1)(f) GDPR.
3.5. Recipients of Personal Data
As part of our business activities, we work with various external service providers and partners. Where necessary for the performance of contractual or legal obligations, or where otherwise permitted by law, personal data may be transferred to these recipients. Where processors are engaged, personal data is processed exclusively on the basis of a Data Processing Agreement pursuant to Art. 28 GDPR. Where joint controllership exists, an agreement pursuant to Art. 26 GDPR is concluded.
3.6. Withdrawal of Your Consent to Data Processing
Many data processing activities are only possible with your express consent. You may withdraw any consent you have given at any time with effect for the future. The lawfulness of any processing carried out prior to the withdrawal remains unaffected.
3.7. Right to Object Pursuant to Art. 21 GDPR
Where your personal data is processed on the basis of Art. 6(1)(e) or Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling insofar as it is related to direct marketing.
3.8. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. This right exists without prejudice to any other administrative or judicial remedies.
3.9. Right to Data Portability
You have the right to receive personal data that we process automatically on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format or, where technically feasible, to have it transmitted directly to another controller.
3.10. Right of Access, Rectification and Erasure
Within the scope of the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, as well as the right to request the rectification, erasure, or restriction of the processing of such data. If you have any questions regarding the processing of your personal data, you may contact us at any time.
3.11. Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data where the legal requirements are met. This applies in particular where:
- you contest the accuracy of your personal data;
- the processing is unlawful;
- we no longer require the data, but you need it for the establishment, exercise, or defense of legal claims; or
- you have objected to processing pursuant to Art. 21 GDPR
While processing is restricted, personal data may, apart from being stored, only be processed with your consent or on the basis of applicable legal provisions.
3.12. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential information, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and displays a padlock icon. Where SSL/TLS encryption is activated, the data you transmit to us cannot generally be read by third parties.
3.13. Objection to Promotional Emails
The use of contact details published in accordance with legal notice requirements for the purpose of sending unsolicited advertising or informational material is hereby expressly prohibited. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, in particular by means of spam emails.
4. Data Collection on this Website
4.1. Cookies
This website uses so-called "cookies." Cookies are small text files that are stored on your device and do not cause any damage. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you delete them or they are automatically removed by your web browser. Cookies may be set by us (first-party cookies) or by third parties (third-party cookies). Third-party cookies enable the integration of certain third-party services and functions on our website. Some cookies are technically necessary to ensure the proper operation of this website. Other cookies may, subject to your consent, be used to analyze and optimize our online services. Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in the technically error-free and optimized provision of its website. Where your consent is required for the storage of cookies or similar technologies, processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with effect for the future. You can configure your browser to notify you before cookies are stored, allow cookies only in individual cases, reject cookies altogether, or automatically delete cookies when closing your browser. Please note that disabling cookies may limit the functionality of this website. Details of the cookies and services used on this website can be found in the relevant sections of this Privacy Policy.
4.2. Server Log Files
The hosting provider of this website automatically collects and stores information in so-called server log files, which your browser transmits automatically. This information may include:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources. The processing is carried out on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically error-free operation, security, and optimization of the website.
4.3. Application Form (CV Upload)
When you submit your Curriculum Vitae (CV) through the application form provided on this website, the personal data you provide (e.g., your name, email address, and uploaded documents) will be processed for the purpose of reviewing and managing your application. The application form is provided through Zoho Forms. The application documents and personal data you submit are processed and stored in Zoho Recruit for the purpose of managing the recruitment process.
The services are provided by:
Zoho Corporation B.V.Beneluxlaan 4B, 3527 HT Utrecht, The Netherlands
The processing is carried out on the basis of Art. 6(1)(b) GDPR where it is necessary to take pre-contractual steps at your request. In all other cases, the processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring an efficient recruitment process or, where applicable, on your consent pursuant to Art. 6(1)(a) GDPR. Your personal data will only be shared where this is necessary for processing your application or where you have expressly consented to such disclosure.
The personal data you submit will be retained until the purpose of the processing no longer applies, you withdraw your consent, or you request the deletion of your personal data, unless statutory retention obligations require otherwise.
Further information about Zoho's data processing practices can be found at:
https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html
We have concluded a Data Processing Agreement (DPA) with Zoho in accordance with Art. 28 GDPR. Zoho processes personal data solely on our behalf, in accordance with our instructions, and only to the extent necessary for providing the application form and managing the recruitment process.
4.4. Contact by Email or Telephone
If you contact us by email or telephone, the personal data you provide (e.g., your name, contact details, and the content of your inquiry) will be processed for the purpose of handling your request. The processing is carried out on the basis of Art. 6(1)(b) GDPR where your request relates to pre-contractual measures or the performance of a contract. In all other cases, the processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the efficient handling of your inquiry or, where applicable, on your consent pursuant to Art. 6(1)(a) GDPR. Your personal data will be stored only for as long as necessary to process your request or as required by applicable statutory retention obligations.
5. Social Media
5.1. LinkedIn
This website includes buttons and links to the social network LinkedIn. The service is provided by:
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland
When you click a LinkedIn button or link, you will be redirected to LinkedIn's website. LinkedIn may process personal data, in particular your IP address and information about your visit to this website. Please note that we have no influence over the nature and scope of the data collected and processed by LinkedIn after you access its services. Where your consent is required for the use of this service, the processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with effect for the future. Where no consent is required, the processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in maintaining a professional presence and visibility on social networks.
Further information on how LinkedIn processes personal data can be found in LinkedIn's Privacy Policy:
6. Analytics Tools
6.1. Zoho PageSense
This website uses the web analytics service Zoho PageSense. The service is provided by:
Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, The Netherlands
We use Zoho PageSense to analyze the use of our website in order to continuously improve its functionality, usability, and content.
The following information may be processed:
- Referrer URL (previously visited website)
- Pages or files accessed
- Browser type and browser version
- Operating system used
- Device type
- Time of access
- Anonymized IP address (used only to determine the approximate location of access)
The data is collected in an anonymized form and generally cannot be used to identify individual users. The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in analyzing and optimizing our online services. Where your consent is required for the use of Zoho PageSense, the processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with effect for the future.
Further information about Zoho's data processing practices can be found at:
https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html
We have concluded a Data Processing Agreement (DPA) with Zoho in accordance with Art. 28 GDPR. Zoho processes personal data solely on our behalf, in accordance with our instructions, and only to the extent necessary for providing its analytics services.
7. Additional Services
7.1. Vimeo
This website embeds videos provided by Vimeo. The service is provided by:
Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, United States
When you access a page containing an embedded Vimeo video, a connection is established to Vimeo's servers. During this process, personal data such as your IP address and technical information about your browser and device may be processed. Where your consent is required for the use of Vimeo, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with effect for the future.
Further information about Vimeo's processing of personal data can be found at:
Source: https://www.e-recht24.de
