1. Data protection at a glance

General information
The following information gives a simple overview over what is happening with your personal data when you visit our website. Personal data are all data with which you can be personally identified.

Data collection on our website

Who is responsible for data collection on this website?
The data processing on this website is carried out by CIM med GmbH. You can find the contact data from the legal info of this website.

How do we collect your data?
Your data is collected primarily when you send it to us – such as by sending an e-mail. Other data are automatically gathered by our IT systems during a visit to our website. This is principally technical data (for example, the Internet browser, operating system or time of the site visit). Collection of this data takes place automatically as soon as you enter our website.

What do we use your data for?
A part of the data is used to ensure that the website is made available without problems. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?
You have the right at any time to obtain, without cost, information about the derivation, recipients and purpose of your stored personal data. You also are entitled to ask for the rectification, blocking or erasure of this data. You are also able to contact us at any time, using the address provided in the legal info, to ask about the above and any other questions on the topic of data protection. Furthermore, you have the right of appeal to the responsible supervisory authority.

2. General information and information about obligations

Data protection
CIM med GmbH takes the protection of your personal data very seriously. We treat your personal data in confidence und in line with the legal data protection regulations as well as with this data protection declaration.

When you use this website, various items of personal data are gathered. Personal data are data with which you can be personally identified. The present data protection declaration explains which data we collect and what we use it for. It also explains how and to what purpose that happens.

We draw your attention to the fact that data transmission over the Internet (such as in communications by e-mail) may involve gaps in security. It is not possible to protect such data completely against access by third parties.

Information about the responsible authority
The responsible authority for data processing on this website is:

CIM med GmbH
Margot-Kalinke-Str. 9
Euro-Industriepark
D-80939 München
Germany
Phone: +49 89. 978 94 08-00
E-mail: info@cim-med.com

If you have questions regarding the processing of your personal data, please get in touch with our data protection officer:

Holzhofer Consulting GmbH
Martin Holzhofer
Lochhamer Str. 31
D-82152 Planegg
Germany
Phone: +49 89. 125 01 56 00
E-mail: dsb-cim-med@holzhofer-consulting.de

The responsible authority is the natural or legal person, who decides alone or jointly with others about the purpose and means of processing personal data (e.g. names, e-mail addresses, or similar items).

Withdrawal of your consent for data processing
Many data processing processes are possible only with your express consent. You can withdraw your consent, which you have granted already, at any time. To do this, send us an informal notification by e-mail. The legality of the data processing up to the time of the withdrawal shall remain unaffected by the withdrawal.

Right of appeal to the relevant supervisory authority
In the event of infringements of data protection legislation, the person affected has the right of appeal to the relevant supervisory authority. Our supervisory authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
D-91522 Ansbach
Germany

SSL or TLS encryption
For security reasons and to protect the transmission of confidential contacts, such as orders or enquiries that you send to us as a website operator, this website uses SSL or TLS encryption. You will be able to recognise an encrypted link by seeing that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data you send to us cannot be read also by third parties.

Recipients of data/ Passing data on
Data which you have given us will categorically not be passed on to third parties. In particular, your data will not be passed on to third parties for their promotional purposes.
However, where necessary, we use service providers for the operation of these Internet sites or for other products of ours. In this case it is possible that a service provider may gain knowledge of personal data. We choose our service providers very carefully – particularly with regard to data protection and data security – and we take all steps required to ensure that our data processing is allowable under data protection legislation.

Data processing outside the European Union
Other than using Google Analytics, your personal data is not processed in a so-called third state outside the European Union.
Regarding the use of Google Analytics, it should be noted that the appropriate level of data security of Google with regard to its participation in the so-called „Privacy Shield“ and the measures put in place by Google for data protection and data security are guaranteed.

3. Data collection on our website

Cookies
Internet sites use so-called cookies to some extent. Cookies present no risks to your computer and contain no viruses. Cookies serve to make our offer more user-friendly, more effective and more secure. Cookies are small text files which are filed on your computer and stored in your browser.

Most of the cookies used by us are so-called “session cookies”. They are deleted automatically at the end of your visit. Other cookies remain and are stored on your terminal until you erase them. These cookies enable us to recognise your browser when you next visit.

You can adjust your browser so that you are informed about the depositing of cookies, and you allow cookies only in an individual case, you exclude the acceptance of cookies for certain cases or in general, and you can activate the automatic deletion of cookies when the browser is closed. The deactivation of cookies may restrict the functionality of this website.

Cookies which are needed to perform the electronic communication process are stored based on Art. 6 Abs. 1 lit. f DSGVO. CIM med GmbH has a justified interest in the storage of cookies in order to provide its services in a technically error-free and optimised manner. Insofar as other cookies (such as cookies to analyse your surfing behaviour) are stored, these are treated separately in this data protection declaration.

Server Log files
The provider of the sites acquires and stores information automatically in so-called server log files which your browser sends to us automatically. These are:

• Browser type and browser version
• Operating system in use
• Referrer URL
• Host name of the accessing computer
• Date and time of the server enquiry
• IP address

These data are not amalgamated with other data sources.

The data processing is based on Art. 6 Abs. 1 lit. b DSGVO, which permits the data processing of data for the fulfilment of a contract or precontractual measures.

4. Hosting

We host the content of our website with the following provider:
RAIDBOXES
The provider is RAIDBOXES GmbH, Hafenstr. 32, 48151 Münster, Germany (hereinafter RAIDBOXES). When you visit our website, RAIDBOXES collects various log files including your IP addresses.
Details can be found in the RAIDBOXES privacy policy: https://raidboxes.io/en/legal/privacy/.
RAIDBOXES is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. for device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

5. Plugins und Tools

LinkedIn 
Our website uses a function of the LinkedIn network. It is provided by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If you click the LinkedIn button (plug-in), you will be forwarded to our LinkedIn profile in a separate browser window and, provided you are logged into your account at LinkedIn, you can follow us on LinkedIn. The plug-in establishes a direct connection between your browser and the LinkedIn server. LinkedIn therefore receives the information, that you have visited our website with your IP address. LinkedIn is then be able to associate your visit on our website with you and your account, provided you are logged into your account at LinkedIn. Please note, that we have no knowledge of the content of the transmitted (personal) data and its use by LinkedIn. For more information, please see the LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Google web fonts
This site uses so-called web fonts provided by Google to achieve a uniform representation of font types. When it opens a site, your browser loads the necessary web fonts needed in your browser cache so that texts and font types can be correctly displayed.
For this reason, the browser you are using has to connect to Google’s servers. To do this, Google requires that our website had been called up via your IP address. The use of Google web fonts is done in the interest of having a uniform and appealing presentation of our online offerings. This constitutes a justifiable interest within the scope of Art. 6 Abs. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font type is used by your computer.
You will find further information about Google web fonts at https://developers.google.com/fonts/faq and in Google’s data protection declaration at https://www.google.com/policies/privacy/.

Google Analytics
If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: « Google »). Google Analytics uses « cookies », which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can find more information on terms of use and data protection at https://marketingplatform.google.com/about/analytics/terms/gb/ and at https://policies.google.com/?hl=en.
On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.
Revocation of consent:
You can prevent tracking by Google Analytics on our website by selecting this in the cookie banner. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future as long as the cookie remains installed in your browser.
You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On to deactivate Google Analytics.

OpenStreetMap
This website uses the open source map service from OpenStreetMap (OSM). OSM is used to provide an interactive map on our website that shows you how to find and reach us. This service enables us to present our website in an appealing way by loading map material from an external server. The provider is the Open-Street-Map Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK.
When you visit a website on which OSM is integrated, your IP address and other information (e.g. your interactions with the digital map, device type, browser data, operating system, timestamp) are forwarded to OSMF. OSM may store cookies in your browser or use similar recognition technologies for this purpose. The IP address and other user data are usually deleted after 180 days.
In addition, your location may be recorded if you have allowed this in your device settings – e.g. on your mobile phone. We generally have no influence on this data transmission.
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 (1) TDDDG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You give the corresponding consent via the consent banner.
For details, please refer to the OpenStreetMap privacy policy at: https://wiki.osmfoundation.org/wiki/Privacy_Policy

CleanTalk
This website uses anti-spam plugins from CleanTalk. The provider is CleanTalk Inc, 711 S Carson Street, suite 4, Carson City, NV, 89701, USA (hereinafter « CleanTalk »).
CleanTalk serves to protect our website from spam activities (e.g. preventing unwanted advertising, unwanted messages or comments). For this purpose, CleanTalk collects various personal data such as IP address, e-mail address, nickname of the message sender, information about the JavaScript technology in the sender’s browser and the texts entered.
This information is transferred to a CleanTalk server in the EU and stored there.
For security reasons and to protect against spam, your data is processed in the CleanTalk Cloud Service and stored in log files for a maximum of 31 days. At the end of this period, this data will be completely deleted.
CleanTalk is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website spam activities as effectively as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://cleantalk.org/my/session?back_url=profile#scc_agreement.
Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.