1. Responsible authority
apoplex medical technologies GmbH
1-3 Delaware Avenue
Phone: +49 6331 69 89 98-0
Fax: +49 6331 69 89 98-19
Managing Director: Albert Hirtz
Data Protection Officer: Regine Martz
3. Legal basis of processing and duration of storage
We process data that we receive from the person concerned or from a responsible person in the course of an order processing.
Personal data will be processed exclusively on the basis of the possibilities provided for in Article 6 of the DSGVO. For our purposes, this is the case if the data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes or the processing is necessary for the performance of a contract to which the data subject is a party. In addition, processing may be necessary to carry out pre-contractual measures at the request of the data subject or a third party entitled to do so.
The data will be deleted as soon as the purpose of its collection has been fulfilled and no other legal or contractual storage obligations, for example in the course of an instruction from the person responsible for processing an order, are to be observed. The data will not be deleted as long as it is required for asserting, exercising or defending legal claims.
4. Purpose of data collection, processing and use
4.1 Benefits concerned
We need and use personal data to fulfil pre-contractual, contractual or post-contractual and legal obligations. For this purpose, data from suppliers with the respective contact persons
(supplier administration), data of customers with the respective contact persons (customer administration) and data of third parties (processing on behalf) collected, processed and used.
Order Processing - SRAclinic, SRADOC/SRA24
With the evaluation of the ECG data transmitted to us, we process personal health data. For this purpose, pseudonymised ECG data is sent electronically by the treating physician to our analysis software
transferred. The latter transmits the results, also electronically, back to the attending physician. The entire process is encrypted.
4.2 Processing of personal data
4.2.1 Customer management data: Name and address (doctor/clinic in general and contact person), telephone, fax, e-mail addresses, customer number, bank details, payment methods, contract data, purchased products.
4.2.2 Supplier management data: name and address, telephone, fax, e-mail addresses, supplier number, bank details, contract data.
4.2.3 Order processing (according to instructions of the principal): Pseudonym numeric/alphanumeric, age, gender, ECG raw data. The order data will generally be deleted after 12 weeks, unless otherwise instructed.
of the client.
We use the data within our company exclusively for the fulfilment of pre-contractual, contractual or legal obligations. In certain cases (service and scientific purposes) we provide the following data
to contractors or other third parties. Other third parties are partners who are involved, for example, in conducting medical studies. In the case of the transmission of personal health data this takes place
and only with the patient's consent. The person affected can therefore no longer be identified.
6. Rights of the data subject
You have the right to information and there are rights to correction, deletion or restriction of the processing. They also have the right of appeal to the competent supervisory authority (Art. 15 DSGVO). A
You can revoke your consent to the processing of personal data already given at any time with effect for the future. The revocation is to be addressed to the body mentioned under 1. Since we work exclusively with pseudonymised data in the field of stroke risk analysis, we do not know the real identity of the patients. The provision of information and the exercise of the other rights listed here can only be done by your doctor or intuition.
6.1 Information as to whether personal data concerning you are being processed and, if so, information and data for processing purposes and the categories of personal data being processed
as well as the recipients/categories of recipients, the planned duration of the storage of your personal data, the origin of the data if these were not collected by the person concerned and, if applicable, the existence of the data.
automated decision making. Depending on the facts of the case, information may be provided orally, in writing or electronically if desired and, if possible, in the form of a copy of personal data (Art. 15 Para. 3, DSGVO).
6.2 Correction of incorrect or incomplete personal data concerning you (Art. 16 DSGVO)
6.3 Deletion of personal data concerning you if it is no longer necessary for the purposes for which it was collected or otherwise processed; if you have withdrawn your consent and sent it to
any other legal basis for the processing is missing; if you have lodged an objection to the processing (Art. 21 DSBER); if the personal data have been processed unlawfully; if the deletion is intended to
fulfilment of a legal obligation is required under Union law or the law of the Member States to which the person responsible is subject and none of the reasons stated in Art. 17 para. 3 DSGVO for the further fulfilment of the legal obligation is required. processing / storage is relevant (Art. 17 DSGVO)
6.4 Limitation of processing (Art. 18 DSGVO) if the accuracy of personal data is disputed, for a period that enables us to verify the accuracy of the personal data, or if
the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data, or if we collect the personal data for
no longer need the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or if you have filed an objection to the processing for as long as
it is not clear whether the legitimate reasons on our part outweigh your interests (Art. 18 DSGVO)
6.5 Data transferability/receipt of the personal data concerning you that you have provided to us in a structured, common and machine-readable format and on transmission of this data to another party
persons responsible without our interference, provided that the processing of personal data is based on your consent or a contract and the processing is carried out by means of automated procedures (Art. 20 DSGVO)
7. Automated decision, data transfer to third countries
No processing based exclusively on an automated decision - including profiling - takes place. The data will not be transferred to third countries/countries outside the European Union.
If the opportunity for the input of personal or business data (email addresses, name, addresses) is given, the input of these data takes place voluntarily. The use and payment of all offered services are permitted - if and so far technically possible and reasonable - without specification of any personal data or under specification of anonymized data or an alias. The use of published postal addresses, telephone or fax numbers and email addresses for marketing purposes is prohibited, offenders sending unwanted spam messages will be punished. We expressly reserve the right to take legal action against senders of so-called spam mails who violate this prohibition.