Privacy policy

With Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC, which entered into force on 24th May 2016, the European Commission aims to harmonize data protection in Europe. The European Data Protection Basic Regulation is current EU law and therefore directly applicable in all Member States of the European Union. Supplementary national regulations were laid down in Germany at federal level, with the new version of the Federal Data Protection Act by law, to adapt data protection law to Regulation (EU) 2016/679 and to implement Directive (EU) 2016/680 (Data Protection Adaptation and Implementation Act EU – DSAnpUG-EU) of 30th June 2017. If you wish to make use of our company’s services, it may be necessary to process your personal data in order to be able to provide you with the desired services. Where this is necessary, we will inform you accordingly on our website. This data protection declaration is intended to help you as a user to demonstrate transparently the confidential handling of your personal data when visiting our internet pages.

Source information Regulation (EU) 2016/679 -External links to third-party content

I. General information

We are very pleased about your interest in our company and our services. We would like you to be interested in the protection of your pers. data when visiting our internet pages. Feel safe. Our Privacy policy has a particularly high importance for the Ovesco Endoscopy AG and for our management . The observance of the provisions on data protection in the handling of personal data is a matter of course for us. The following regulations inform you about the nature, scope and purpose of processing personal data by us as a provider of these Internet pages. The legal basis on which we process your personal data is the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of individuals with regard to the processing of personal data, on the free Data traffic and repealing Directive 95/46/EC (EU data Protection basic regulation).

– hereinafter referred to as ” GDPR” –

The German Federal Data Protection Act, subject to a complementary effect of the GDPR regulations, by extended national regulations.

– hereinafter referred to as “BDSG” –

Unless otherwise stated, the provision of your personal data is neither legally or contractually required, nor is it necessary for a contract to be concluded with us. They are for providing your pers. data is not obligated in principle. A non-deployment of pers. data has no consequences for you as a user, when viewing our internet pages. This applies only to the extent that the subsequent processing operations do not indicate otherwise.

A. Definitions
The privacy policy of the Ovesco Endoscopy AG is similar to the terminology used by the European Commission in the adoption of the European Data Protection Basic Regulation (GDPR). The terms used here are in abbreviated form, analogous and without any claim to their completeness or legally specified wording. For more information, please refer to the Regulation (EU) 2016/679 of the European
Parliament and of the Council of 27th April 2016, as far as this presentation does not appear to be sufficiently significant in terms of the conceptual declaration or the legal structure. We use the following terms and definitions in this privacy statement:

“Pers. data”
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“Consent”
‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

“Processing”
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

“Controller”
‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

“Processor”
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
“Recipient”. ‘Recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

“Third”
‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

“Constraint”
‘restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future.

“Pseudonyms”
‘pseudonymization’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

“Profiling”
‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

B. Controller
Controller in the sense of the European Data Protection Basic Regulation (GDPR) and the National Federal Privacy Act (BDSG), as well as other data protection laws in the Member States of the European Union and other provisions with data privacy Legal character:

Ovesco Endoscopy AG
Dorfackerstraße 26
72074 Tübingen (Germany)

Phone: + 49 (0) 7071 96528 160 Fax: + 49 (0) 7071 96528 260
E-mail: service@ovesco.com Web: https://www.ovesco.com

C. Group
Ovesco Endoscopy Group of companies include:

  • Ovesco Endoscopy AG
    Dorfackerstraße 26
    72074 Tuebingen
  • Ovesco Endoscopy USA Inc.
    120 Quade Drive
    Cary, NC 27513, USA

The Ovesco Endoscopy AG is the parent company of the group of companies.

D. Data protection supervisor
The data protection officer of the controller is:

DDSB GmbH
Andreas Peter Mückl
Untere Dornäcker 21
72379 Hechingen (Germany)

Phone: + 49 (0) 7471 50101 00
Fax: + 49 (0) 7471 50101 90
Web: https://www.ddsb-datenschutz.de

E. Data privacy supervision
Competent supervisory authority:
The National Commissioner for Data protection And freedom of Information Baden-Württemberg
P.O. Box 102932
70025 Stuttgart (Germany)

Phone: + 49 711 61554 10
Fax: + 49 711 61554 115
E-mail: Poststelle@lfdi.bwl.de
Web: https://www.baden-wuerttemberg.datenschutz.de

II. Technical and organizational

We have taken both technical and organizational security measures to ensure your pers. Data to be protected from loss, destruction, manipulation and unauthorized access. Our security measures are continuously revised in accordance with technological developments and the state of the art to the extent economically reasonable and justifiable, in order to ensure the confidentiality, integrity, availability and resilience of the systems and services always kept at the highest level.

(1) Server Logfiles
With every call to our internet pages, by an affected person or an automated system, a number of general data and information about the maintenance and the safe operation of our internet presences are recorded. This general data and information are stored in the so-called logfiles of the server. This data is only collected in a technically necessary extent. The data remain anonymous and are evaluated solely for statistical purposes, in order to improve our internet sites and online services. The data collected will only be used for statistical evaluations and for the improvement of the websites. However, we also reserve the right to check the server logfiles retrospectively, should we have specific and justified indications of illegal use of our internet pages.

(2) Collection and processing of data types from server Logfiles
The use and/or the call of our web pages are logged,

  • Visited websites
  • Time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Information about the internet service provider of the accessing system
  • Browser type used and version label
  • Operating system used in browser access
  • Used IP address in anonymous form
  • The internet site from which a comprehensive system reaches our website (so-called referrers),
  • The sub-websites, which are controlled via a comprehensive system on our website,
  • Other similar data and information used to provide security in the event of attacks on our information technology systems.

When using this general data and information, the Ovesco Endoscopy AG will make no conclusions on the person concerned. Rather, this information is needed to

  • correctly deliver the contents of our website,
  • optimize the contents of our website and the advertising for them,
  • ensure the permanent functioning of our information technology systems and the technologies of our website.
  • provide law enforcement authorities in the event of a cyberattack, the information necessary for prosecution.

These anonymously collected data and information are on one hand, statistically and further evaluated with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by Ovesco Endoscopy AG.

The anonymous data of the server logfiles are stored separately from all personal data specified by an affected person.
This anonymous data is, separated from pers. data, stored on secure systems and therefore does not provide any conclusions about individual persons. This means that your personal information is protected at all times. The processing takes place on the basis of article 6 (1) lit. f) GDPR from the legitimate interest in the provision and safe operation of our internet pages. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us as the controller or our data protection officer at any time, under the contact data referred to in section I. (B) and (D).

(3) Organizational measures
All of our employees and all persons involved in data processing are responsible for compliance with the data protection and privacy of relevant laws as well as for the confidential handling of pers. data and data confidentiality.

(4) Automated decision-making
As a responsible company, we dispense with automatic decision-making.

(5) Profiling
We do not create any personal user profiles.

III. Use and earmarking of the processing and its legal bases

(6) Information
We only store and process data that you provide to us by choice. If you make use of services, only data that we urgently need to provide the services and to protect our own legitimate business interests are usually collected. As far as we ask you for further data, this is an optional information.

If the processing of personal data is necessary and there is no legal basis for such processing, we generally collect the consent of the person concerned. The processing of personal data is always carried out in accordance with the European Data Protection Basic Regulation (GDPR) and the National Federal Privacy Act (BDSG) and in compliance with the for the Ovesco Endoscopy AG applicable country-specific data protection regulations.

The Ovesco Endoscopy AG has implemented numerous technical and organizational measures as a controller to ensure the most complete protection of the pers. data processed via this website. However, internet-based data transmission can generally have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, each person concerned is free to transmit pers. data to us also on alternative routes, for example by telephone or postal mail.

(7) Use and purpose binding of the processing
We process personal data that we receive directly from our customers within the framework of our business relationship. In addition, we process personal data which we have received from other companies e.g. for the execution of orders, for the fulfillment of contracts or because of a consent given by you. Furthermore we process personal data, which we have legally obtained from publicly available sources, such as the commercial register, press, media or internet. The personal data provided by you will be processed in accordance with the applicable regulations for the protection of personal data, only for the purposes you have communicated and approved for use. In particular, to

  • Initiation of the contract with you or for its settlement;
  • Be able to process or answer your inquiries effectively and qualitatively;
  • Their needs-appropriate design of services and offers;
  • Processing of your requests and orders;
  • Access, certain information or offers;
  • Protection of legitimate business interests, about customer advice and customer support.

A transfer of your pers. data to third parties does not take place without your express consent.

(8) Legal basis for the processing of personal data
1) Article 6 (1) lit. A) GDPR serves our company as a legal basis for processing operations in which we obtain consent for a particular processing purpose.
2) Where the processing of personal data is necessary for the performance of a contract to which the person concerned is a party, as is the case for, for example, processing operations which are required for the supply or provision of services or are necessary, the processing shall be based on article 6 (1) lit. b) GDPR. The same applies to such processing operations as are necessary for the implementation of pre-contractual measures, for example in cases of requests for quotation.
3) Our company is subject to a legal obligation by which a processing of pers. data is required, such as for the performance of tax obligations, the processing is based on article 6 (1) lit. c) GDPR.
4) In rare cases, the processing of pers. data are necessary to protect vital interests of the person concerned or any other natural person. This would be the case if a visitor would be injured in our company and then his name, age, health insurance data or other information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on article 6 (1) lit. d) GDPR.
5) The processing of personal data is based on article 6 (1) lit. f) GDPR, our legitimate interest is the customer service, the maintenance of our services and the resulting quality controlling, the execution of our business activities in favor of the company and the well-being of our Employees and their associated customer and quality satisfaction. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us at any time, as the controller or our data protection officer, under the contact data referred to in section I. (B) and (D).

(9) Consent
If it should be necessary to obtain pers. data, the processing of which is neither permitted nor offered due to a legal basis, we obtain permission before processing, with the person concerned in the form of an optional consent. You can revoke your consent at any time without being affected by the legality of the processing due to the consent to the revocation.

(10) Legitimate interest
Should processing be necessary to safeguard a legitimate interest of our company or a third party and ensure that the interests are proportionate and that the fundamental rights and fundamental freedoms of the respective concerned, we will carry out the processing on the basis of article 6 (1) lit. f) GDPR in the mature consideration of the associated risks and with full awareness of our obligations of care according to strict evaluation criteria, the processing operations which are otherwise not covered by any of the aforementioned legal bases. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us, as the controller or our data protection officer at any time, under the contact data referred to in section I. (B) and (D).

We are particularly permitted to do such processes, which are sometimes necessary because they have been specifically mentioned by the European legislator. In this respect, the latter considers that, for example, a legitimate interest could be considered if the data subject represents a customer of the person Controller. (cf. EW 47 sentence 2 GDPR).

(11) Data transfer to a third country
Transmission to a third country is not intended.

(12) Processing of personal data
In the case of an offer creation or acceptance, we collect and use pers. data only so far as this is necessary for the establishment, fulfillment or execution of the offers and/or contracts as well as for the processing of relevant inquiries. The provision of this data is necessary for the conclusion of the contract.

The processing takes place on the basis of article 6 (1) lit. b) GDPR and is necessary for the establishment or fulfilment of a contract. Also service providers employed by us (so-called order processors, cf. art. 28 GDPR) can process data for the purposes mentioned in section IV.

As for the purposes of this Declaration, already existing services are included, which the contractor generally makes use of in third parties as an ancillary service to support his operation or his trade in the context of an order processing. In these cases, pers. data are processed by the operator on behalf of article 28 GDPR combined with § 62 BDSG.

In so far as ancillary services are to be included for processing, is processed on the basis of article 6 (1) lit. f) GDPR from the legitimate interest to maintains business operations. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us as the controller or our data protection officer, at any time under the contact data referred to in section I. (B) and (D). This also includes ancillary services which are used by the contractor to ensure the confidentiality, availability, integrity and resilience of the hardware and software of data processing equipment, such as, for example,

  • Telecommunications providers in the context of maintenance and services,
  • Cleaning and/or security services,
  • Auditors in the framework of certifications,
  • Disposal service providers,
  • Data center services,
  • Postal/transport services,
  • IT service provider for plant maintenance and user service.

(13) Submissions
A transmission of pers. data to the national institutions and authorities entitled to information are only carried out within the framework of the relevant laws or if we are obliged to do so by a court decision. The processing takes place on the basis of article 6 (1) lit. e) GDPR. We may transmit your personal data to the companies referred to in section II. (a), to the extent that this is provided for in the context of the purposes set out in section IV. (a) and the information referred to in section IV. B. Legal bases.

(14) Data processing in the employment context
The processing takes place on the basis of article 88 GDPR combined with § 26 BDSG.

(15) Disclosure
Your data will not be passed on to third parties without your explicit consent, which then process them on your own responsibility. A transfer is only made to our service partners, which we need to handle the contractual relationship or service providers of which we serve in the context of an order processing. The scope of data transfer is limited to a minimum. In all cases, we can assure you that when we choose our service providers we serve ourselves in individual cases, our own requirements and standards are sufficient, in view of their suitability and reliability, to conscientiously and faithfully select.

(16) Categories of recipients
Within the Ovesco Endoscopy AG only those who are controller for the processing of the contract or their enquiry will receive your data. Furthermore, personal data are processed on our behalf, on the basis of contracts according to article 28 GDPR combined with § 62 BDSG. In addition to the recipients designated in the respective clauses of this privacy policy, this may be, for example, recipients of the following categories:

  • Sales representative;
  • Shipping service providers;
  • Payment service providers;
  • Business service providers;
  • Logistics providers;
  • Cloud providers and IT service providers;
  • Tax and economic advisors.

Recipients may also be the companies affiliated with us, to the extent permitted by the purposes and legal bases set out in section IV. (a).

(17) Duration of storage
The controller processes and stores pers. data of the person concerned only for the period required to achieve the storage purpose. After completion of the contract, the data will be stored first for the duration of the warranty period, thereafter with consideration of legal, in particular tax and commercial retention periods and then deleted after expiry of the deadline, if you have not consented to further processing and use, or if this is not otherwise determined by the European Commission or any other legislator in the laws or regulations of which the controller is subject.

(18) Confidentiality and data secrecy
Our employees and the service companies appointed by us are contractually obligated to confidentiality and to the observance of data secrecy, in accordance with the provisions of the Federal Privacy Act.

(19) Communication by e-mail
Pers. data are stored in such a way that they are not accessible to third parties by taking all technical and organizational possibilities. In case of communication by e-mail, complete data security of us as a recipient cannot be guaranteed, so that we recommend you to send confidentiality data which is needed by post. The processing takes place on the basis of article 6 (1) lit. A) GDPR with your consent. You can revoke your consent at any time by notifying us without the legality, which is affected due to consent until the revocation of processing.

(20) Contact possibility
The internet pages of the Ovesco Endoscopy AG contains information on the basis of legal regulations, which enable fast electronic contact with our companies and direct communication with us, which is also a general address of the so-called electronic mail (e-mail address). If an affected person is contacted by e-mail or via a contact with us, the pers. data transmitted by the data subject will be sent. Data is automatically saved. We process your pers. data, which you provide to us by e-mail, contact form etc., to answer and fulfill your inquiries. You are not obligated to provide us with your personal data. However, without the notification of your e-mail address, we cannot reply to you by e-mail. Pers. data that you give to us is on a voluntary basis. Data is stored for the purpose of processing the request and contacting the person concerned.

There is no transfer of these pers. data to third parties.

By submitting your message, you consent to the processing of the transmitted data. The processing takes place on the basis of article 6 (1) lit. A) GDPR with your consent.

You can revoke your consent at any time by notifying us without the legality, which is affected due to consent until the revocation of processing. We use your e-mail address only to process your request. Your data will then be deleted under consideration of legal, especially tax and commercial retention periods, if you have not agreed to further processing and use.

(21) Children and/or adolescents
Persons under the age of 16 should not have any pers. data and notably without the consent of the parent/part or their guardians transmitted to us. We do not request any personal data from children or adolescents, do not collect them and do not pass them on to third parties. In special cases, it may nevertheless happen that we require or request further personal data in the course of an application procedure and at the same time in the case of legitimate interest in the application, for the justification of a possible employment relationship.

In these cases, the processing of personal data takes place on the basis of article 6 (1) lit. f) GDPR, from the legitimate interest of the aforementioned purpose and to obtain the necessary written consent of one or more legal guardians in the processing. Legal guardians can revoke the given consent at any time without the legality, which is affected due to the consent until the revocation of processing. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us, as the controller or our data protection officer at any time, under the contact data referred to in section I. (B) and (D).

If the controller concludes an apprenticeship or employment contract with a candidate, the data to be transmitted will be stored for the purpose of the settlement of the job, in compliance with the legal regulations. This processing takes place on the basis of the § 26 para 1 I. v. M abs. 8 p. 2 BDSG in the course of the employment relationship.

-* This is the general legally relevant extract of two further data protection statements from the scope of the applicant’s privacy *-

(22) Applications
Insofar as the application for the fulfilment of a contract with the applicant or for the implementation of pre-contractual measures is necessary, the legal basis for the processing of the data is based on article 6 (1) lit. b) GDPR. If this is an initiative application, the processing is based on article 6 (1) lit. A) GDPR, by consent of the applicant. You may consent to the legal basis of article 6 (1). A) GDPR is
based on the consent of the applicant, at any time by notice to us revoked without the legality, which is affected by the consent to the revocation of processing.

In so far as ancillary services are used for processing, processing is carried out on the basis of article 6 (1) lit. f) GDPR, from the legitimate interest in the processing of the application procedure. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us, as the controller or our data protection officer, at any time under the contact data referred to in section I. (B) and (D).

The legal basis for processing the data beyond other legal bases is in any case the consent of the applicant in accordance with article 6 (1) lit. a) GDPR. In the context of the application process, we void the consent of the applicant. You may consent to the legal basis of article 6 (1). A) GDPR is based on the consent of the applicant, at any time by notice to us revoked without the legality, which is affected by the consent to the revocation of processing.

If the processing of personal data is necessary and there is no legal basis for such processing, we generally collect the consent of the person concerned. You may consent to the legal basis of article 6 (1). A) GDPR is based on the consent of the applicant, at any time by notice to us revoked without the legality, which is affected by the consent to the revocation of processing.

As far as there is an employment relationship between you and us, we may continue to process the personal data we have already received for the purposes of the employment relationship. The legal basis is derived from § 26 para 1 combined with para. 8 s 2 BDSG, if this is necessary for the justification, implementation or termination of the employment relationship or for exercising or fulfilling the rights and obligations of the employees in this respect is required.

Otherwise, the application process ends with the receipt of the rejection, at the applicant.

In the event that there is no employment relationship between you and us, we may also provide data on the basis of article 6 (1) lit. f) GDPR further save as far as this is necessary in order to defend against possible legal claims. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us, as the controller or our data protection officer at any time, under the contact data referred to in section I. (B) and (D).

You can find further information about the topic of career, data protection in the application process and applicant privacy using our online application platform, for reasons of transparency and clarity of important regulations. The extra information we provide for this purpose and which is to be regarded as cumulative in respect of this generally applicable data protection declaration. These apply to data protection in the application process, and also as a privacy statement when using the online application platform combined with The currently valid terms of use. These statements, which are specific to these topics, are a legal element of this privacy statement. These can be found after you have registered in the job portal within your dash area.

(23) Direct marketing
We use your email address, which we have received in the context of a personal contact or combined with a mediation/project business or combined with a service provision/use or combined with a disposal of a product/product for which electronic sending of advertisements for own offers, products or services similar to those which you have already ordered from us, insofar as they have not contradicted such use. The processing takes place on the basis of article 6 (1) lit. f) GDPR from the legitimate interest in direct advertising. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us, as the controller or our data protection officer at any time, under the contact data referred to in section I. (B) and (D). You can also use the link provided in the promotional email. This does not result in any other than the transmission costs according to the basic tariffs.

(24) Credit Check
If we enter in advance, for example in the case of payment on account or direct debit, we reserve the right, if necessary, to obtain credit information on the basis of mathematical-statistical procedures using the

Creditreform Reutlingen Degner KG, Auwiesenstraße 30, 72770 Reutlingen (Germany).

For this purpose, we send the PERSB required for a credit check. Data and use the information obtained on the statistical probability of a default of payment for a weighted decision on the justification, execution or termination of the contractual relationship.

The data processing serves the purpose of the credit check for a contract initiation. The processing takes place on the basis of article 6 (1) lit. f) GDPR from the legitimate interest in the protection against default of payment if we go in cash. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us, as the controller or our data protection officer, at any time under the contact data referred to in section I. (B) and (D).

The credit information can contain probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical procedures and in the calculation of which include address data. We use the information obtained on the statistical probability of a default of payment for a balanced decision on the justification, implementation or termination of a contractual relationship. Your interests that are worthy of protection are considered in accordance with the legal regulations.

(25) Cookies
Our websites use cookies. Cookies are small text files that are stored in the internet browser or the internet browser on a user’s computer system. If a user accesses one of our internet pages, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the Web pages are recalled. We use cookies for the purpose of making our offer more user-friendly, more effective and more secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Our pages use “Session cookies” for example to:

  • Language
  • Display
  • Log-in information to remember

These cookies are deleted from your computer when you close your browser. We also use a limited number of persistent cookies. These remain stored on your computer until you delete them, or until they expire, usually after a short period of up to 1 year. The persistent cookies contain the following information:

  • Status (hidden or expanded) of some menus and widgets
  • The selected tab in the Widgets

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page break. The legal basis for the processing of personal data using technically needful cookies is Article 6 para 1 lit. f) GDPR. You have the right, for reasons arising out of your particular situation, to object against it at any time according to article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You may contact us, as the controller or our data protection officer, at any time under the contact data referred to in section I. (B) and (D). We need cookies for the following applications:

  • Adopting language Settings
  • Memorizing search terms

We also use cookies on our website which allow an analysis of the surfing behavior of the users. In this way the following data can be transmitted:

  • Search terms Entered
  • Frequency of page calls
  • Use of website features

When accessing our website, the user is informed about the use of cookies for analysis purposes and has obtained his consent to the processing of the personal data used in this context. In this context, a reference to the data protection declaration is also made. The legal basis for the processing of personal data using cookies for analysis purposes is, in the presence of the user’s consent, article 6 (1) lit. a) GDPR. You can revoke your consent at any time by notifying us without the legality, which is affected due to consent until the revocation of processing.

The user data collected by cookies is not used to create user profiles. The data collected in this way will be pseudonymized by technical precautions. It is therefore no longer possible to assign the data to your person. The data will not be stored together with other personal information. These cookies help us to gather reliable information about website usage. In this way, we can measure how well the website meets the needs of our users and we can make improvements if necessary.

The use of the analysis cookies is done for the purpose of improving the quality of our website and its contents. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer. The data we collect about your surfing behavior on our website is kept under absolutely safe conditions. These cookies are used only for the purposes described here.

You can control and/or delete cookies as you wish. You can delete all cookies that are already set on your computer, and you can set most browsers to not place cookies. However, if you do so, you may need to manually adjust some settings each time you visit a website, and some services and features may not be available. You can simply accept or reject the cookies on this page. However, you can only reject persistent cookies that are not strictly necessary. Some cookies are required because they provide us with certain functions. The transmission of flash cookies cannot be suppressed by the settings of the browser, but by changes in the setting of the Flash Player.

IV. Conversation and newsletters

(26) Contact
If within our internet offer the possibility to use a contact form for communication with the Ovesco Endoscopy AG, the input of pers. data and its disclosure to us is done on an explicitly voluntary basis. Of course, we will treat this data confidentially.

As part of the contact form we collect your pers. data (name, e-mail address, message body) only in the scope you provide. The processing serves the purpose of contacting.

You have the right to object to the data processing which is based on article 6 para. 1 f) GDPR of legitimate interest, and does not serve direct advertising, for reasons arising from your particular situation, at any time to disagree. You may contact us, as the controller or our data protection officer at any time, under the contact data referred to in section I. (B) and (D). There is no transfer of these collected pers. data to third parties, provided that such disclosure is not required by law or serves the legal defense of the controller.

(27) Newsletter registration
The internet pages of the Ovesco Endoscopy AG allows users to subscribe to our company newsletter. Which pers. data is transmitted to us when the newsletter is ordered, is determined by the input mask used for this purpose.

The Ovesco Endoscopy AG informs our customers and business partners about offers of the company at regular intervals by means of a newsletter. In principle, the newsletter of our company can only be received by the person concerned if:

a) The person concerned has a valid e-mail address;
b) The person concerned has registered for the newsletter dispatch.

For legal reasons, a confirmation e-mail will be sent to the e-mail address of the person concerned for the first time for the mailing of the newsletter in the double opt-in procedure.

This confirmation e-mail is used to check whether the owner of the e-mail address has authorized the receiving of the newsletter as the person concerned. When registering for the newsletter we also save:
The IP address given by the internet service provider (ISP) of the computer system used by the data subject at the time of registration;
The date and time of the login.

The collection of this data is necessary in order to be able to understand the (possible) misuse of the e-mail address of an affected person at a later date and therefore serves the legal protection of the controller. The pers. data collected as part of an application for the newsletter will only be used to send our newsletter.

Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as in the case of changes to the newsletter offer or in the change of the technical circumstances. The processing takes place on the basis of article 6 (1) lit. A) GDPR with your consent. You can revoke your consent at any time without the legality, which is affected due to consent until the revocation of processing. For the purpose of revocation of consent, an unsubscribe link is found in each newsletter. Furthermore, it is possible to unsubscribe at any time directly on the website of the controller for the processing of the newsletter or to communicate this to the controller in another way.

(28) Newsletter tracking
The newsletter of the Ovesco Endoscopy AG contains so-called web beacons. A web beacons is a miniature graphic that is embedded in such e-mails, which are sent in HTML format in order to enable a log file recording and a log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns.

Using the embedded counting pixel, the Ovesco Endoscopy AG detects if and when an e-mail was opened by an affected person and which links in the e-mail were accessed by the data subject. Such pers. data collected via the web beacons in the newsletters are stored and evaluated by the controller for the purposes of optimizing the newsletter delivery and even better the content of future newsletters Interests of the person concerned.

This pers. data will not be passed on to third parties. The processing takes place on the basis of article 6 (1) lit. A). Persons concerned are entitled at any time to revoke the separate declaration of consent given by the double opt-in procedure. After a revocation, these pers. data is deleted from the controller. An unsubscribe from the receipt of the newsletter indicates the Ovesco Endoscopy AG automatically as revocation.

(29) Newsletter shipping
Regardless of the contract, we use your e-mail address exclusively for our own advertising purposes for newsletter delivery, if you have expressly agreed to this. Your data will be passed on to a service provider for e-mail marketing as part of an order processing. A transfer to other third parties does not take place. The processing takes place on the basis of article 6 (1) lit. A) GDPR with your consent. You can revoke your consent at any time without the legality, which is affected due to consent until the revocation of processing. You can cancel the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list.

(30) Form function
If there is a possibility to enter pers. data within our internet offer, the disclosure of the data takes place on an explicitly voluntary basis. Of course, we will treat this data confidentially. By submitting your input, you agree to the processing of the transmitted data. The processing takes place on the basis of article 6 (1) lit. A) GDPR with your consent. You can revoke your consent at any time by notice to us without the legality, which is affected due to consent until the revocation of processing.

V. Integrated processing components

(31) Google Analytics
We use the web Analytics service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on our website. “Google”). The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on the website activities and to provide further, related to the use of the website and Internet use To provide services to the website operator. The IP address submitted by your browser as part of Google Analytics will not be merged with other Google data. Google Analytics uses cookies that allow you to analyze the use of the website. The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymization is enabled on this website. This will shorten your IP address from Google within Member States of the European Union or in other contracting States of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there. Your data will be sent to the USA if necessary. A decision of adequacy by the European Commission exists for data transfers to the United States. The processing takes place on the basis of Article 6 No. 1 Lit. F) DSGVO is based on the legitimate interest in the demand-oriented and purposeful design of the website. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, based on article 6 No. 1 f) DSGVO. You can prevent cookies from being stored by selecting the appropriate technical settings of your browser software; However, we would point out that in this case you may not be able to use all functions of this website in full. You can also prevent Google from capturing the data generated by the cookie and related to your use of the website (including your IP address) to Google, and the processing of such data by using the browser plug-in available at the following link Download and install Https://tools.google.com/dlpage/gaoptout?hl=de. To prevent the capture by Google Analytics across devices, you can set an opt-out cookie. Opt-Out cookies prevent the future collection of your data when you visit this website. You will need to opt-out on all systems and devices used to ensure that this works well. If you click here, the opt-out cookie will be set: Disable Google Analytics.

For more information about terms of use and privacy, see Https://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/

VI. Rights concerned

If the legal requirements are met, you have the following rights under article 7 (3) GDPR and articles 15 to 22 as well as art. 34 and art. 77 GDPR I. V M. § 29 BDSG. If you wish to avail yourself of any of the following rights, you may contact us, as the controller or our data protection officer, at any time under the contact data referred to in section I. (B) and (D).

(32) Right of withdrawal cf. Article 7 (3 GDPR)
Any person affected by the processing of pers. data shall have the right to consent to the processing of personal data which is based on the legal basis of article 6 (1). A) GDPR is based on consent to revoke at any time without the legality, which is affected due to consent until the revocation of this processing.

(33) Right to Information cf. Article 15 GDPR
Any person affected by the processing of pers. data shall have the right at any time by the controller to obtain free information about the pers. data stored about his person.

(34) Right to rectification cf. Article 16 GDPR
Any person affected by the processing of personal data shall have the right to request the immediate rectification of any incorrect personal data relating to them. In addition, the person concerned shall be entitled, taking into account the purposes of processing, to require the completion of incomplete personal data by means of a supplementary declaration. If a person concerned wishes to avail himself of this right of rectification, he may at any time contact our data protection officer or another employee of the controller.

(35) Right to delete Cf. Article 17 GDPR
Any person concerned by the processing of pers. data shall have the right to demand that the controller party deletes the pers. data. Data will be deleted immediately if one of the following is true and if the processing is not required:

  • The pers. data were collected for such purposes or processed in any other way for which they are no longer necessary.
  • The person concerned revokes his consent to which the processing of his pers. data and lacks a legal basis.
  • The person concerned disagrees with the processing and there are no primary justifiable reasons for processing.
  • The person concerned shall at any time object to the processing for the purpose of direct marketing.
  • The pers. data was processed unlawfully.
  • The deletion of the pers. data is required to comply with a legal obligation under union law or the laws of the Member States.
  • The pers. data were collected in relation to information society services provided in accordance with article 8 (1) GDPR.

Were the pers. data from the Ovesco Endoscopy AG Made public and is our company as the person Controller pursuant to article 17 (1) GDPR for the deletion of the pers. data is required, the Ovesco Endoscopy AG Considering the available technology and implementation costs, appropriate measures, including technical ones, to other data controllers Controller for the published pers. process data, to inform that the data subject is Controller for the deletion of all links to these pers. data by those other controllers. Data or copies or replicas of this pers. data To the extent that the processing of such data is not required.

(36) Right to limitation of processing cf. Article 18 GDPR
Any person concerned by the processing of personal data shall have the right granted by the European Commission to require the controller to restrict the processing if one of the following conditions is met:

  • The accuracy of the pers. data is disputed by the person concerned, for a period of time which makes it possible to verify the correctness.
  • The processing is unlawful, the person concerned rejects the deletion of the pers. data and instead requires restriction of use.
  • The person Controller needs the pers. data, but the person concerned is not entitled to claim, exercise or defend claims.
  • The person concerned has appealed against the processing in accordance with article 21 (1) of the GDPR and it is not yet determined whether the legitimate reasons of the person in charge outweigh those of the data subject.

(37) Right of notification, cf. Article 19 GDPR
If you have exercised the right to rectify, delete or restrict the processing to us, we are obligated to pers. data to all recipients to whom you are Controller. Data has been disclosed, to notify such correction or deletion of the data or limitation of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

(38) Right to Data transferability cf. Article 20 GDPR
Any person concerned by the processing of personal data shall have the right granted by the European Commission, the personal data relating to it, which has been provided by the person concerned to an officer, in a structured, common and machine-readable format.

It also has the right to pers. data this data to another person in charge without any obstruction by the person Controller. Provided that the processing is based on the consent referred to in article 6 (1). A) GDPR or article 9 (2) lit. A) GDPR or on a contract pursuant to article 6 (1) lit. (b) GDPR is based and processed using automated procedures, provided that the processing is not necessary for the performance of a task which is in the public interest or in the exercise of public authority which is the responsibility of the has been transferred.

Furthermore, in exercising its right to transfer data, the person concerned shall have the right to obtain the pers. data in accordance with article 20 (1) GDPR. Data is transmitted directly by a person Controller to another person Controller, as far as this is technically feasible and if this does not affect the rights and freedoms of other persons.

(39) Right to objection cf. Article 21 GDPR
Any person concerned by the processing of personal data shall have the right at any time against the processing of personal data relating to it, for reasons arising out of its particular situation, which is subject to article 6 (1) lit. e) or F GDPR is made to appeal. This also applies to profiling based on these provisions.

Ovesco Endoscopy AG processes no longer the pers. data in the event of the opposition, unless we can prove compelling reasons for the processing that outweigh the interests, rights and freedoms of the person concerned, or the processing is intended to assert, exercise or defense of legal claims.

When Ovesco Endoscopy AG processes pers. data in order to operate direct advertising, the person concerned has the right at any time to object to the processing of the pers. data for the purpose of such advertising. This also applies profiling as far as it is related to such direct advertising.

If the person concerned does not object to the Ovesco Endoscopy AG processing for direct marketing purposes, the Ovesco Endoscopy AG The pers. data processing for these purposes.

In addition, the person concerned shall have the right to object, for reasons arising from their particular situation, against the processing of pers. data relating to them, which Ovesco Endoscopy AG, for scientific or historical research purposes or for statistical purposes pursuant to article 89 (1) of the GDPR, shall made opposition, unless such processing is necessary to fulfil a task in the public interest.

The person concerned is also free to exercise its right of objection in connection with the use of information society services, irrespective of Directive 2002/58/EC, by means of automated procedures in which technical specifications are used.

(40) Right to not exclusively automatic processing incl. profiling cf. art. 22 GDPR
Any person concerned by the processing of pers. data shall have the right granted by the European Commission not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect or in a similar manner significantly impairs it, provided that the decision:

  • is not necessary for the conclusion or fulfilment of a contract between the data subject and the person controller;
  • is permissible on the basis of legislation of the Union or of the Member States to which the person Controller is subject, and that this legislation provides for appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject Contain;
  • With the express consent of the person concerned.

Is the decision:

  • necessary for the conclusion or fulfilment of a contract between the data subject and the person controller;
  • shall be made with the express consent of the person concerned,

meets the Ovesco Endoscopy AG appropriate measures to safeguard the rights and freedoms, as well as the legitimate interests of the person concerned, including at least the right to a person’s intervention on the part of the party Controller, the presentation of his own position and the challenge Part of the decision.

(41) Right to notification cf. art. 34 GDPR
In the event of a breach of the protection of your pers. data, we will notify you immediately if the breach is likely to lead to a high risk to your personal rights and freedoms.

(42) Right to appeal cf. art. 77 GDPR combined with § 29 BDSG
Without prejudice to any other administrative or judicial remedy, pursuant to article 77 GDPR i. V. § 29 BDSG, you are entitled to complain to the supervisory authority if you consider that the processing of your pers. data is not lawfully done. The supervisory authority in which the complaint was lodged shall inform the complainant of the status and results of the appeal, including the possibility of a judicial remedy under article 78 GDPR.

VII. Legal or contractual provisions

i. Provision of personal data
We inform you that the provision of pers. data may be required in part by law (e.g. tax regulations) or may arise from contractual regulations (e.g. information about the contractual partner).

ii. Consequences of non-provision of personal data
A non-deployment of the pers. data may result in a contract that cannot be closed with you. You can contact our data protection officer if you have any questions prior to making a deployment. This clarifies them on an individual basis, whether the provision of the pers. data is legally or contractually determined as well as whether this is absolutely necessary for the conclusion of the contract with you or whether an obligation exists the pers. data to provide data and the consequences of non-deployment of pers. data for you.

iii. Commitment to provision
Sometimes it may be necessary to conclude a contract to pers. data that must subsequently be processed by us. For example, you are obligated to pers. data to provide data if our company is to contract with you.

iv. Third party links
If you use external links that are offered as part of our internet pages, this privacy policy does not extend to these links. Insofar as external links are included or offered, we assure that at the time of the link-setting, no violations of applicable data protection laws on the linked internet pages were recognizable. However, we have no influence on the compliance and implementation of the legal data protection regulations by other providers. Please inform yourself on the internet pages of the respective provider, also on the data protection regulations provided there and their contact persons for data protection.

v. Content responsibility
As a service provider we are the controller according to § 7 para 1 TMG for our own content on these pages according to the general laws. According to § 8 to 10 TMG, we as service providers are not obligated to monitor transmitted or stored foreign information or to investigate circumstances that indicate an illegal act. Obligations to remove or block the use of information in accordance with the general laws remain unaffected.

The free and freely accessible contents of this privacy policy have been created with the greatest possible care. However, we expressly point out that we assume no liability or responsibility for the accuracy, topicality or completeness of the content provided in this privacy policy. The contents do not serve as legal advice, on which you can rely on compliance with the legal regulations on data protection – in particular the GDPR – nor can it replace individual legal advice.

vi. Liability
Liability claims against the Ovesco Endoscopy AG, which relate to damages of a material or intangible nature, which are caused by the application of the informative contents of this data protection declaration or by the use of possibly faulty and incomplete or misleading contents are in principle excluded, provided that the Ovesco Endoscopy AG there is no demonstrable intentional or gross negligence.

vii. Legal effectiveness and choice of law
If parts or individual formulations of this data protection declaration should not, no longer or not completely conform to the current legal situation, the remaining parts of the document remain unaffected in their content and validity. German law applies. In the case of consumers, this choice of law only applies insofar as this does not deprive the protection afforded by mandatory provisions of the law of the state of habitual residence of the consumer (favorability principle).

viii. Other provisions
Changes to the law or changes to our internal processes may require an adaptation of this privacy statement. In the event of such a change, we will inform you as far as possible six weeks before the entry into force. You should consider these guidelines occasionally to keep up to date on how we protect your data and continually improve the content of our website. If we make significant changes to the collection, use and/or disclosure of personal information that you provide to us, we will notify you by means of a clear and visible notice on the website. You are generally entitled to a right of withdrawal with respect to your consent. Please note that (unless you make use of your right of withdrawal) the current version of the privacy policy is valid.

The Ovesco Endoscopy AG in the course of further development of legal provisions, expressly reserves the right to change, supplement or delete parts of the declaration or the declaration in whole without separate announcement, or to cease publication temporarily or definitively. Furthermore, the invocation of this freely accessible content does not result in any contractual relationship between you and us as the user of this content, in the absence of any appropriate legal commitment on our part. Questions and suggestions on the subject of data protection Ovesco Endoscopy AG please address to: service@ovesco.com

Due to current circumstances, such as new or changed legislation, we will update this privacy policy if necessary. Valid is the respective version published here.

ix. Contradiction spam emails
We hereby expressly contradicts the use of contact data for the transmission of non-explicitly requested advertising and information materials, which must be published within the framework of the imprint obligation. We expressly reserve the right to take legal action in the event of unwanted sending of advertising information, such as spam e-mails.

Plant:
A. Data protection Declaration on the application process
B. Online Applicant Platform Privacy Policy

This privacy statement has been created by DDSB GmbH.

Last update 15.05.2018

 

-Information under articles 13, 14 and 21 of the basic Data Protection Regulation (GDPR)-

 

Dear Applicant,

In the following we inform you about the processing of your personal data according to art. 4 para. 2 GDPR in connection with your application.

Section I. – General Information

We only store and process data that you voluntarily provide to us. If you make use of our services, we will usually only process the data that we voluntarily provide you with in the course of our service provision and urgently need to protect your own legitimate business interests.

As far as we ask you for further data, this is voluntary information which is not a legal claim.

The processing of personal data is always carried out in accordance with the European Data Protection Basic Regulation (GDPR) and the National Federal Privacy Act (BDSG), in accordance with the Ovesco Endoscopy AG Applicable country-specific data protection regulations.

Processing can also be done electronically. Ovesco has implemented numerous technical and organizational measures as a controller in order to ensure as complete a protection as possible of the personal data to be processed.

However, Internet-based data transmissions can generally have security vulnerabilities, so absolute protection cannot be guaranteed to a hundred percent.

For this reason, each person concerned is free to transmit personal data to us on alternative routes, for example, in person, by fax or by post.

A. Responsible

Responsible in the sense of the European Data Protection Basic Regulation (GDPR) and the National Federal Privacy Act (BDSG), as well as other data protection laws in the Member States of the European Union and other provisions with data privacy Legal character:

Ovesco Endoscopy AG

Dorfackerstr. 26
72074 Tübingen (Germany)

Phone: + 49 (0) 7071 96528 160
Business Fax: + 49 (0) 7071 96528 260
E-mail:  applications@ovesco.com
Web:     https://www.ovesco.com

B. Data protection supervisor

The data protection officer, the controller:

DDSB GmbH

Andreas Peter Mückl
Untere Dornäcker 21
72379 Hechingen (Germany) 

Phone: + 49 7471 5010 100
Business Fax: + 49 7471 5010 190

Web:     Https://www.ddsb-datenschutz.de

Section II. – Use and purpose binding of the processing and legal bases

A. Earmarking of processing in the application process

We process personal data about you for the purpose of applying for an employment relationship, as far as this is necessary for the decision on the justification of an employment relationship with us. The personal data provided by you will be processed in accordance with the applicable regulations for the protection of personal data, only for the purposes notified to you or used for its use. This, in particular, to

  • Initiation of the contract with you or for its settlement;
  • To be able to process or answer your inquiries effectively and qualitatively;
  • Their needs-appropriate design of services and offers;
  • Processing of your requests and orders;
  • Access, certain information or offers;
  • Protection of legitimate business interests, with regard to advice and support

B. Use of processing in the application process and its legal bases

Insofar as the application for the fulfilment of a contract with the applicant or for the implementation of pre-contractual measures is necessary, the legal basis for the processing of the data is based on article 6 (1) lit. b) GDPR.

If this is an initiative application, the processing is based on article 6 (1) lit. A) GDPR, by consent of the applicant. You may consent to the legal basis of article 6 (1). A) GDPR is based on the consent of the applicant, at any time by notice to us revoked without the legality, which is affected by the consent to the revocation of processing.

In so far as ancillary services are to be used for processing, processing is carried out on the basis of article 6 (1) lit. f) GDPR, from the legitimate interest in the processing of the application procedure.

You have the right, for reasons arising out of your particular situation, at any time against it on article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You can contact us at any time, as the controller or our data protection officer, under the contact data referred to in section I. A and B or in the imprint.

The legal basis for processing the data beyond other legal basis is, in any case, the consent of the applicant in accordance with article 6 (1) lit. a) GDPR.

In the context of the application process, we void the consent of the applicant.

If the processing of personal data is necessary and there is no legal basis for such processing, we generally collect the consent of the person concerned.

You may consent to the legal basis of article 6 (1). A) GDPR is based on the consent of the applicant, at any time by notice to us revoked without the legality, which is affected due to consent until the revocation of processing.

As far as there is an employment relationship between you and us, we may continue to process the personal data you have already received for the purposes of the employment relationship.

The legal basis is derived from § 26 para 1 I. v. M. para. 8 s 2. BDSG, if this is necessary for the establishment, implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of employees is required.

Otherwise, the application process ends with the receipt of the rejection by the applicant.

In the event that there is no employment relationship between you and us, we may also provide data on the basis of article 6 (1) lit. f) GDPR further save as far as this is necessary in order to defend against possible legal claims. You have the right, for reasons arising out of your particular situation, at any time against it on article 6 para 1 lit. f) GDPR based processing of any personal data relating to them. You can contact us at any time, as the controller or our data protection officer, under the contact data referred to in section I. A and B or in the imprint.

Section III. – Data privacy rights in the application process

A. Rights of the person concerned

If the legal requirements are met, you are entitled to the following data privacy rights under article 7 (3) GDPR and articles 15 to 22 GDPR art. 77 GDPR I. V.  M. § 29 BDSG to:

  • Right of withdrawal,
  • Right to information,
  • Right to rectification,
  • Right to delete,
  • Right to limitation of processing,
  • Right to Data transferability,
  • Right to automated decisions in individual cases including profiling.

In addition, pursuant to article 21 (1) GDPR, you are entitled to object to the processing, which is based on article 6 (1). f) GDPR are based on reasons arising from their particular situation and against processing for the purpose of direct marketing. You can contact us at any time, as the controller or our data protection officer. The contact details can be found in section I. A and B of this declaration.

B. Right of appeal to the supervisory authority

According to art. 77 GDPR I. V.  M. § 29 BDSG the right to complain to the supervisory authority if they believe that the processing of their personal data is not lawful.

Section IV. – The Origin and nature of the applicant data and the beneficiaries

A. from which sources do personal data originate?

We process personal data that we receive from you as part of the application process. This data is either from

  • From the application forms that you have to fill out yourself;
  • From the files sent to us by e-mail (application documents, cover letter, passport, CV, testimonials, etc…);
  • From the information you have personally provided to us (by telephone and personal interviews);
  • From the documents you have sent to us by fax or by post.

Furthermore, technical usage data are processed when using and/or visiting the website.

B. Which categories of personal data do we process?

We process data relating to your application. This may be general data on your person (such as name, address and contact details), information about your professional qualification and education, or information on continuing vocational training or other information that you provide to us in connection with your application Let.

In addition, we may process professional-related information that you make publicly available, such as a profile for professional social media networks. In addition, for a successful mediation, we need all the information as they are usually in a CV and those that are necessary for a successful placement in individual cases, such as

  • Personal data (name, first name, date of birth, address, contact details, passport). If you are listed as a candidate in your CV (date of birth, place, country, nationality, marital status, if any),
  • Data of your Professional development (Your current professional situation, your desired location, your availability)
  • Your Professional Wishes, information on how they became aware of the job offer, the reason for the desired employment relationship, etc…),
  • Data for your Education (Beginning and end of school education, type of school, type of graduation, total GPA of the last certificate (without top notes), notes of the last certificate in Subjects mathematics, German, English, business Administration, accounting),
  • Training data (School, university, distance learning, in-company training, apprenticeships, courses, seminars),
  • Data on extra-professional Interests (Hobbies, voluntary engagement),
  • Data on the content of past and current Employment (Work items, performance data, filled items),
  • Data for your Career (Curriculum vitae, professional experience, continuing education, work tasks of past employment relationships, work tasks of current employment relationships),
  • Knowledge And Qualifications (Knowledge, qualifications, certificates, etc…)
  • Official approvals (Driving licence, forklift license, Passenger transport certificate, residence certificate, declaration confirmation, severely disabled certificate, police certificate, health certificate, Social Security card),
  • Communications (called website, date and time of retrieval, amount of data sent in bytes, source/reference from which you reached the page, information about the Internet service provider of the accessing system, the type of browser used and its version name, Operating system used in browser access, the IP address used in anonymized form),
  • Self-generated data (we assign a separate application number to each applications, characteristics and notes that we assign to you in the application process)
  • Other types of data (data that is incurred in the course of communication with you, declaration of consent for the processing of personal data which you have voluntarily left us in the application procedure or which you have uploaded to us or which you have sent us otherwise, Application letter, etc…).

C. What categories of recipients will receive my data?

Within the Ovesco Endoscopy AG only those who are responsible for the preparation and implementation of the application process will receive their data. These are the employees in the Human resources department as well as the departments in which a job is to be occupied, the executives and the potential supervisors. Also, service providers employed by us (so-called order processors, cf. art. 28 GDPR) may process data for purposes mentioned in section II.

We may transmit your personal data to companies affiliated with us as far as this is permissible within the scope of the purposes and legal bases set out in section II. In addition, personal data may be INSB on our behalf, on the basis of contracts under article 28 GDPR. By host provider or provider of Management systems to which we serve ourselves.

In so far as ancillary services are to be used for processing, processing is carried out on the basis of article 6 (1) lit. f) GDPR, from the legitimate interest of the execution of the application procedure. In principle, they have the right to object at any time to the processing of personal data relating to GDPR, based on article 6 (1), for reasons arising out of their particular situation. This also includes ancillary services which are used by the contractor to ensure the confidentiality, availability, integrity and resilience of the hardware and software of data processing equipment, such as

  • Telecommunications providers in the context of maintenance and services,
  • Cleaning and/or security services,
  • Auditors in the framework of certifications,
  • Disposal service Providers,
  • Data center Services,
  • Postal/transport Services,
  • IT service provider for plant maintenance and User Service.

As for the purposes of this Declaration, already existing services are included, which the contractor generally makes use of in third parties as a ancillary service to support his operation or his trade in the context of an order processing. In these cases, personal data are processed by the respective operator on behalf of us.

Your data will not be passed on to third parties, who will process them on your own responsibility.

Section V. – Provisions

A. To what extent are my data used for profiling?

Your data will not be used to profile. Profiling is any kind of automated processing of personal data, which consists in the use of this data to analyze or predict certain personal aspects.

B. Is it intended to be transmitted to a third country or to an international organization?

It is not intended to be transferred to a third country or to an international organization within the scope of the application procedure.

C. How long will your data be stored?

No later than 6 months after receipt of the cancellation, the data will be anonymized. This does not apply to the extent that the processing and storage of your personal data is necessary in the specific case for the assertion, exercise or defense of legal claims.

If necessary, you will receive an invitation for a so-called “talent pool” for future job vacancies, despite a rejection in a specific application process Ovesco Endoscopy AG. In case of your consent your application data will be stored for three more months. Once every three months, you will have to re-agree that you want to remain in the applicant pool.

If you do not respond to this demand within 14 days, your documents will be deleted after a further 6 months if no other legitimate interests of the Controller conflict with the deletion. In any case, the data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. This is the case during the application process for the performance of a contract or for the implementation of pre-contractual measures, if the data are no longer necessary for the implementation of the contract or for the implementation of pre-contractual measures.

Even after the conclusion of the contract, a requirement to store personal data may exist in order to comply with contractual or legal obligations. A deletion may be requested by the person responsible under section II. (a), indicating their full name.

If the data are required for the performance of a contract or for the implementation of pre-contractual measures, a premature deletion of the data is only possible if no contractual or statutory obligations are contrary to deletion.

D. What is the need to provide personal data?

As part of your application, you should only provide us with the personal data necessary for the admission and implementation of the application process. The provision of personal data is neither legally nor contractually required, nor is it obligated to provide personal data.

E. What are the consequences of non-provision of personal data?

Without providing any meaningful data or information about yourself, we will unfortunately have to reject your inclusion in the application process.

F. Is there an automated decision-making process?

No automated decision is taken in individual cases within the meaning of article 22 GDPR, i.e. the decision on your application is not based solely on automated processing.

_