Privacy


Privacy Policy of Easemedcontrol GmbH

Easemedcontrol (hereinafter also referred to as "we") collects and processes your personal data as the controller in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data is any information relating to an identified or identifiable natural person.

Visiting our websites
When you access our website, the browser deployed on your terminal device will automatically send information to our website server. This information is temporarily saved in a so-called log file. In this process, the following information will be collected without any action on your part and stored until its automated deletion, usually after one week:
  • IP address of the computer sending the request,
  • Date and time of website access,
  • Name and URL of the retrieved file,
  • Website from which our site was accessed (referral URL),
  • Browser used and, if applicable, your computer’s operating system as well as the name of your access provider.
  • The above-listed data will be processed by us for the following purposes:
  • Ensuring a smooth connection setup to the websites,
  • Ensuring easy use of our websites,
  • Evaluation of system security and stability,
  • Clarification of any improper page access (DoS/DDoS attacks, etc.), as well as
  • Further administrative purposes.
  • The legal basis for the processing of personal data is Art. 6 (1), sentence 1, lit. f GDPR. Our legitimate interest is derived from the above-listed purposes for data collection. We generally do not use collected data for the purpose of drawing conclusions about your person. However, we reserve the right to do so if required to investigate improper page access.

Making contact
If you have questions of any kind, we offer you the option to contact us by telephone or via e-mail. If you make personal data available to us via these routes or through our website (e.g. via a contact form), we will only save and use this data based on your consent on the basis of Art. 6 (1), lit. a GDPR, to process your inquiries, or on the basis of Art. 6 (1), lit. b GDPR if the subject of your inquiry relates to (pre-)contractual information. You may withdraw your consent to the processing of the provided data at any time by sending an e-mail to aborovik@post.harvard.edu. In this case, we will delete your data, unless we have a legal retention obligation (for example, if you send us a pre-contractual message via the contact form which then becomes the basis of a contractual relationship or if your message refers to existing contractual relationships).

Newsletter
If you provide us with your e-mail address to subscribe to our newsletter, we will use this e-mail address based on your consent according to Art. 6 (1), lit. a GDPR, for the purpose of sending you the newsletter. You may object to this use of your e-mail address at any time by sending an e-mail aborovik@post.harvard.edu. In this case, we will stop sending you the newsletter and will delete your e-mail address, unless we have a legal retention obligation.

Integration of YouTube videos
Our online content may include YouTube videos, which are stored on YouTube and can be played directly from our website. YouTube is another service from Google. YouTube videos are all included in the "Advanced Data Protection Mode", i.e. no user data are transmitted to YouTube if users don’t play the videos. The data listed below is transmitted only when a user plays the videos. We have no influence on this data transfer.
When the website is visited and a video is played, YouTube receives the information that the user has accessed the corresponding sub-page of our online offerings. In addition, further information about the use of these online offerings (including the user's IP address) will be transmitted to a YouTube server in the USA and stored there. This occurs regardless of whether YouTube provides a user account into which the user is logged or whether no user account exists. If the user is logged into YouTube, the user data will be directly associated with the user account. If a user does not want YouTube to associate the video with his or her profile, he or she must therefore log out prior to clicking the button. YouTube stores data as usage profiles and utilizes them for purposes of advertising, market research and/or demand-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the delivery of targeted advertising and to inform other users of the social network about the activities of the user with regard to our online offerings. Users have the right to object to the generation of these profiles, whereby, for the exercise thereof, they will have to contact YouTube.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy, along with additional information about rights and setting options for privacy protection: https://www.google.de/intl/de/policies/privacy.
YouTube will also process your personal data in the United States and is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Linking to third-party services
We may offer links to third-party services and content on our website. However, we are not responsible for the processing of your data by these services.

Using our services
When you use our services, we may, in the scope of providing and maintaining the service (support) gain insight into and access to personal data, which users of the services enter as part of usage or which the system collects during the use of the services (for example, IP address of the computer requesting the service, date and time of access, used browser and, if applicable, your computer’s operating system as well as the name of your access provider). We process this data solely for the performance of the contract, on the basis of Art. 6 (1), lit. b GDPR, in particular, in order to provide you with our services as specified in the contract and to maintain them during the contract period.

In order to provide you with our services, we use third-party companies that render services on our behalf or support us with service performance and who may be contracted to process personal data (contract processing). In particular, we employ the following contract processors:
  • We use infrastructure and platform services of cloud computing service providers for the provision of our services. The processing is done on servers within the European Union.
Routine deletion and blocking of personal data
We only process and store personal data for the period that is required to achieve the purpose of the storage, or for the duration the processing and storage are required by European laws and regulations or by other laws or regulations we are subject to. If the purpose of storage no longer applies or a retention period required by European laws or other applicable laws expires, the personal data is routinely blocked or deleted in accordance with legal requirements.
Rights of data subjects

You have the following rights:
  • To obtain information from us about the personal data we process according to Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing or to object, the right to lodge a complaint, the source of your data if they were not collected by us, as well as the existence of automated decision-making, including profiling, as well as meaningful information about the associated details;
  • To request without delay the rectification of incorrect or incomplete personal data stored by us according to Art. 16 GDPR;
  • To request, according to Art. 17 GDPR, the erasure of personal data stored with us, unless the processing is necessary for exercising the right of freedom of expression and information, full compliance with legal obligations, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
  • To request restriction of processing your personal data according to Art. 18 GDPR, if you contest the accuracy of the data, if the processing is unlawful but you oppose the erasure of the data, and if we no longer need the personal data but you require them for the establishment, exercise or defense of legal claims, or if you exercised your right to object to processing according to Art. 21 GDPR;
  • To request your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to demand the transmission to another controller according to Art. 20 GDPR; and
  • To lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. You can generally contact the supervisory authority at your usual place of residence or workplace or at our seat for this purpose
Data protection officer
Our data protection officer, Mr. Sasha Borovik, can be contacted at Triple Door GmbH, Theresienstr 54, Phone +49 151 230 688 48, e-mailinfo@ease-med-control.com



Share by: