Privacy Policy
§ 1 Information regarding the collection of personal data
(1) In the following, we provide information about the collection of personal data when using our services. Personal data is all data that can be related to you personally, e.g., name, address, e-mail addresses, telephone number, user behavior.
(2) The Controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:
Prothesen-Manufaktur-Da Vinci GmbH
Heiligenstädter Straße 82/3
1190 Vienna, Austria
+ 43 1 368 85 80
office@pm-dv.at
(3) When you contact us by e-mail or via a form, the data you provide (name, e-mail address) will be stored by us in order to answer and process your inquiry in the best possible way. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations. If you do not utilize our company’s services following an application and do not become a contractual partner of our company, the data provided by you via the contact form will be deleted after 4 weeks at the latest. The legal basis for the processing of your data is Art. 6(1) sentences 1(a), (b), and (f) GDPR.
(4) If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we also state the defined criteria for the storage duration.
§ 2 Your Rights
You have the right to access, rectification, erasure, and restriction of processing regarding your personal data. Furthermore, insofar as the legal basis for the processing of your personal data is your consent or a contract concluded with you, you have the right to data portability. You have the right to withdraw any consent given for the processing of your personal data. The lawfulness of the processing of personal data carried out until the withdrawal remains unaffected by the withdrawal. You have the right to object to the processing of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing. If you believe that the processing of your personal data violates legal requirements, you have the right to lodge a complaint with the competent data protection supervisory authority (pursuant to Art. 77 GDPR): Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Wickenburggasse 8, 1080 Vienna, dsb@dsb.gv.at
Legal bases for data processing
a. Insofar as you have given us consent for the processing of your personal data, this constitutes the legal basis for the processing (Art. 6(1)(a) GDPR). b. For the processing of personal data for the purposes of initiating or fulfilling a contract with you, Art. 6(1)(b) GDPR is the legal basis. c. Insofar as the processing of your personal data is necessary for the fulfillment of our legal obligations (e.g., for data retention), we are authorized to do so pursuant to Art. 6(1)(c) GDPR. d. Furthermore, we process personal data for the purposes of safeguarding our legitimate interests as well as the legitimate interests of third parties pursuant to Art. 6(1)(f) GDPR. The maintenance of the functionality of our IT systems, the (direct) marketing of our own and third-party products and services (insofar as this does not take place with your consent), and the legally required documentation of business contacts are such legitimate interests. Within the framework of the respective necessary balancing of interests, we take into account in particular the type of personal data, the purpose of processing, the circumstances of processing, and your interest in the confidentiality of your personal data.
§ 3 Collection of personal data when using our services
(1) In the case of purely informational use of our websites—i.e., if you do not register or otherwise transmit information to us—we only collect the personal data that your browser transmits to our server.
(2) We use Cookies on our website. Cookies are small text files that are assigned to the browser you use and stored on your hard drive, and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer and therefore cannot cause any damage. They serve to make the internet offer more user-friendly and effective overall, i.e., more pleasant for you. Cookies may contain data that makes it possible to recognize the device used. However, some cookies only contain information on certain settings that cannot be related to a person. However, cookies cannot directly identify a user.
A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, a distinction is made between:
– Technical Cookies: These are mandatory to move around the website, use basic functions, and ensure the security of the website; they neither collect information about you for marketing purposes nor do they store which websites you have visited;
– Performance Cookies: These collect information about how you use our website, which pages you visit, and, for example, whether errors occur during website use; they do not collect information that could identify you—all collected information is anonymous and is only used to improve our website and find out what interests our users;
– Advertising Cookies, Targeting Cookies: These serve to offer the website user needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 12 months;
– Sharing Cookies: These serve to improve the interactivity of our website with other services (e.g., social networks); sharing cookies are stored for a maximum of 12 months.
Any use of cookies that is not technically strictly necessary constitutes data processing that is only permitted with your express and active consent pursuant to Art. 6(1) sentence 1(a) GDPR. This applies in particular to the use of advertising, targeting, or sharing cookies. Furthermore, we only pass on your personal data processed by cookies to third parties if you have given your express consent to this pursuant to Art. 6(1) sentence 1(a) GDPR.
(3) Cookie settings defined by you on this website or consents granted for the storage of cookies can be revoked or redefined by you at any time.
(4) To manage the cookies used, similar technologies, and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal bases for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the relevant consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, we cannot manage your consents.
§ 4 Further functions and offers
(1) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. The following categories of recipients, which are generally processors, may receive access to your personal data:
– Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g., for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6(1) sentence 1(b) or (f) GDPR, insofar as they are not processors;
– Government agencies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the transfer is then Art. 6(1) sentence 1(c) GDPR;
– Persons employed to carry out our business operations (e.g., auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the transfer is then Art. 6(1) sentence 1(b) or (f) GDPR.
§ 5 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can withdraw this at any time. Such a withdrawal affects the admissibility of the processing of your personal data after you have expressed it to us. Please address your withdrawal by e-mail or by post to the contact details of our company provided above. Cookie settings defined by you on this website or consents granted for the storage of cookies can be withdrawn by you at any time.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you may lodge an objection against the processing. This is the case if processing is, in particular, not necessary for the fulfillment of a contract with you, which is depicted by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we continue the processing.