Privacy Policy

We operate our websites in accordance with the principles set out below:
We undertake to comply with the statutory provisions on data protection and endeavor to always observe the principles of data avoidance and data minimization.

1. Name and address of the controller and the data protection officer

a) The controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is: UEBE Medical GmbH, Bgm.-Kuhn-Straße 22, 97900 Külsheim

b) The data protection officer

You can contact the data protection officer of the controller as follows:
SiDIT GmbH, www.sidit.de, email: info@sidit.de

Translated with DeepL.com (free version)

2. Definitions

We have designed our privacy policy in accordance with the principles of clarity and transparency. However, if there are any uncertainties regarding the use of various terms, the corresponding definitions can be found here.

3. Legal basis for data processing

a) Processing of personal data in accordance with the GDPR

We only process your personal data, such as your first and last name, your email address, and your IP address, if there is a legal basis for doing so. In particular, the following provisions of the General Data Protection Regulation apply here:

• Art. 6 (1) (a) GDPR: The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

• Art. 6 (1) (b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

• Art. 6 (1) (c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.

• Art. 6 (1) (d) GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person.

• Art. 6 (1) (e) GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

• Art. 6 (1) (f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

However, we will always point out the legal basis for the processing of your personal data at the relevant points in this privacy policy.

b) Consent of the legal guardian pursuant to Art. 8 (1) sentence 2 alternative 2 GDPR

A legal guardian must consent to all data processing within the scope of this website for which the consent of a minor under the age of 16 is required.

Information on the individual data processing operations, their purposes, and the categories of data concerned for which the consent of the data subject is required can be found in the privacy policy.

You can revoke your consent at any time by sending a written declaration of revocation to the contact details of the controller. Processing remains lawful until revocation.

c) Processing of information in accordance with Section 25 (1) TDDDG

We also process information in accordance with Section 25 (1) TDDDG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This may be personal information or non-personal data, e.g., cookies, browser fingerprints, advertising IDs, MAC addresses, and IMEI numbers. An end device is any device directly or indirectly connected to the interface of a public telecommunications network for sending, processing, or receiving messages, Section 2 (2) No. 6 TDDDG.

We generally process this information on the basis of your consent, Section 25 (1) TDDDG.

If an exception under Section 25 (2) No. 1 and No. 2 TDDDG applies, we do not require your consent. Such an exception applies if we access or store the information exclusively for the purpose of transmitting a message via a public telecommunications network or if this is absolutely necessary in order for us to provide a telemedia service that you have expressly requested. You can revoke your consent at any time.

We hereby inform you that revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent until revocation.

4. Disclosure of personal data

The disclosure of personal data also constitutes processing within the meaning of section 3 above. However, we would like to take this opportunity to inform you separately about the disclosure of data to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to disclosing your data to third parties.

Data is therefore only disclosed to third parties if there is a legal basis for processing. For example, we disclose personal data to persons or companies who act as processors for us in accordance with Art. 28 GDPR. A processor is anyone who processes personal data on our behalf—in particular, in a relationship of instruction and control with us.

In accordance with the provisions of the GDPR, we conclude a contract with each of our processors to oblige them to comply with data protection regulations and thus guarantee comprehensive protection for your data.

5. Storage period and deletion

We will delete your personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed, and if the processing is not necessary for exercising the right of freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims.

6. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Use of AI systems (artificial intelligence)

In order to optimize our processes and improve your personalized visitor experience on our website, your personal data may be processed using artificial intelligence (AI) technologies. AI is used in particular to:

• perform data analyses,

• make forecasts,

• close security gaps,

• and make routine processes more efficient.

The AI used works in accordance with the principles of the GDPR. Any decisions that have legal or similar implications for you are not made by AI alone, but are supplemented by human intervention.

 

8. Cookies

We use cookies on our website. Cookies are small data packets that your browser automatically creates and that are stored on your device when you visit our website. These cookies are used to store information related to the device you are using.

When using cookies, a distinction is made between technically necessary cookies and “additional” cookies. Technically necessary cookies are those that are absolutely necessary to provide an information society service that you have expressly requested.

a) Technically necessary cookies

In order to make the use of our website more pleasant for you, we use technically necessary cookies. These can be so-called session cookies (e.g., language and font selection, shopping cart, etc.), consent cookies, cookies to ensure server stability and security, or similar. The legal basis for the cookies is Art. 6 (1) (f) GDPR, our legitimate interest in the error-free operation of the website and our interest in providing you with optimized services.

b) Other cookies

Other cookies include cookies for statistical, analysis, marketing, and retargeting purposes.

We use these cookies on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

You can revoke your consent to the use of cookies at any time.

We would like to inform you that revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent until revocation.

To do this, you can either edit your cookie settings on our website, deactivate the use of cookies in your browser settings (although this may also restrict the functionality of the online offer), or set an opt-out for the relevant service in individual cases.

We will inform you of the legal basis on which this data is processed for the respective services within the privacy policy.

9. Cookie banner / consent management

To obtain consent for the cookies we use, we use the cookie banner from the service provider Borlabs Cookie. This sets a so-called consent cookie to query and process the respective consent status. This consent cookie is technically necessary and is therefore used on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR, § 25 (1) TDDDG.

For the use of some services of the Google/Alphabet group, we use the so-called Google Consent Mode V2 in Basic Mode. Details on this consent mode can be found on Google’s website at https://developers.google.com/tag-platform/security/guides/consent?hl=de&consentmode=advanced.

The use of Consent Mode is technically necessary and is therefore used on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

10. Collection and storage of personal data and the nature and purpose of its use

a) External hosting

Our website is hosted by Domain Factory. For this reason, all personal data collected on our website is stored on our host’s servers, unless an external third-party service is integrated. This may include your IP address, email address, communication data, or similar information. You can find out exactly what personal data is involved below in the individual functions and services we describe. If we use an external third-party service, this will be made clear in the description of the respective service or tool.

The host only processes your data on our instructions and to the extent necessary to provide the services on the website. The host does not process the data for its own purposes. We have concluded a contract with the host for order processing.

b) When visiting the website

When you visit our website, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer

• Date and time of access

• Name and URL of the file accessed

• Website from which access is made (referrer URL)

• Browser used and, if applicable, the operating system of your computer and the name of your access provider

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website

• Ensuring convenient use of our website

• Evaluating system security and stability

• Error analysis

• For other administrative purposes

Data that allows conclusions to be drawn about your person, such as your IP address, will be deleted after 7 days at the latest. If we store the data beyond this period, it will be pseudonymized so that it can no longer be traced back to you.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

c) Contractual relationship

(1) Conclusion of contract

Within the framework of establishing the contractual relationship, only the personal data that is absolutely necessary for the execution of the contract will be processed in accordance with Art. 6 (1) (b) GDPR.

If you provide additional voluntary information, this will only be processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. We use this voluntary information to offer a customer-friendly service and to continuously improve it.

d) Contact form

We provide a form on our website so that you can contact us at any time. To use the contact form, you must provide a name for a personal salutation and a valid email address so that we know who the request is from and can process it.

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there and your IP address, will be processed in accordance with Art. 6 (1) (b) and (f) GDPR for the purpose of implementing pre-contractual measures taken in response to your inquiry or for the purpose of safeguarding our legitimate interests, namely the exercise of our business activities.

The inquiries and the associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.

e) Google Fonts

We use Google Fonts on our website. This enables the display of fonts. Google Fonts is a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). These web fonts are integrated by calling up a server, usually a Google server in the USA. This may result in the following information being transmitted to the server and stored by Google:

• Name and version of the browser used

• Website from which the request was triggered (referrer URL)

• Operating system of your computer

• Screen resolution of your computer

• IP address of the requesting computer

• Language settings of the browser or operating system used by the user

For more information about data protection at Google and in relation to Google Fonts, please visit:

https://developers.google.com/fonts/faq/privacy?hl=de

www.google.com/policies/privacy/

The use of Google Fonts serves to make reading our website easier and more visually appealing for you and is therefore based on your consent in accordance with Art. 6 (1) (a) GDPR.

f) Use of Google Maps

Our website uses the Google Maps API. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Google may transfer the information obtained through Maps to third parties if required by law or if third parties process this data on behalf of Google. However, your IP address will not be associated with any other data held by Google. Nevertheless, we must point out that it would be technically possible for Google to identify individual users based on the data received.

We have no influence on whether your personal data and personality profiles are processed by Google for other purposes. If you want to avoid this at all costs, you can deactivate the Google Maps service and thus prevent data transfer to Google. To do this, simply deactivate JavaScript in your browser. In this case, no data will be transferred, but you will no longer be able to use the map display on our website.

The Google privacy policy can be found here. [https://www.google.com/policies/privacy/?hl=de]

By integrating Google Maps, Google Fonts are also dynamically reloaded without the website operator or visitor actively determining this. These web fonts are integrated via a server call, usually a Google server in the USA. This may result in the following information being transmitted to the server and stored by Google:

• Name and version of the browser used

• Website from which the request was triggered (referrer URL)

• Operating system of your computer

• Screen resolution of your computer

• IP address of the requesting computer

• Language settings of the browser or operating system used by the user

For more information, please refer to Google’s privacy policy, which you can access here:

www.google.com/policies/privacy/

The use of Google Maps is a service for you so that you can accurately identify our location and, if necessary, better plan your visit to us. The use of Google Maps is based on your consent in accordance with Art. 6 (1) (a) GDPR.

11. Analysis and tracking tools

We use the analysis and tracking tools listed below on our website. These serve to ensure the ongoing optimization of our website and to design it in line with your needs.

We use these tools on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time by changing your cookie settings. Processing remains lawful until revocation.

The respective data processing purposes and data categories can be found in the corresponding tools. We would like to point out that we have no influence on whether and to what extent the service providers carry out further data processing.

Google Analytics

We use Google Analytics, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”) on our website.

Google Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website, such as

• Name and version of the browser used

• Operating system of your computer

• Website from which access is made (referrer URL)

• IP address of the requesting computer

• Time of the server request

is usually transmitted to a Google server in the USA and stored there.

Your IP address is automatically anonymized by Google before it is recorded via EU domains and servers. Therefore, your IP address is not logged or stored.

On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

We have concluded a contract with Google for order processing.

Please click here for an overview of data protection at Google. [https://support.google.com/analytics/answer/6004245]

12. Image, audio, and video integration

a) YouTube

We embed videos from YouTube, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), into our website using iFrame and/or a plug-in. We have activated YouTube’s extended data protection mode when embedding the videos.

If you play a YouTube video during your visit, a connection to the YouTube servers is established and the YouTube server is informed which of our pages you have visited. This allows YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your member account before visiting our website. In addition, YouTube sets various cookies when the service is started in order to improve its services and prevent misuse, according to its own statements.

Further information on the handling of user data and the cookies set can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

By integrating YouTube, Google Fonts are also dynamically reloaded without the website operator or visitor actively determining this. These web fonts are integrated via a server call, usually a Google server in the USA. This may result in the following information being transmitted to the server and stored by Google:

• Name and version of the browser used

• Website from which the request was triggered (referrer URL)

• Operating system of your computer

• Screen resolution of your computer

• IP address of the requesting computer

• Language settings of the browser or operating system used by the user

For more information, please refer to Google’s privacy policy, which you can access here:

www.google.com/policies/privacy/

The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time by changing the cookie settings on our website.

13. Rights of the data subject

You have the following rights:

a) Information

In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about

• the purposes of processing

• the categories of personal data

• the recipients or categories of recipients to whom your data has been or will be disclosed

• the planned storage period or, at least, the criteria for determining the storage period

• the existence of a right to rectification, erasure, restriction of processing, or objection

• the existence of a right to lodge a complaint with a supervisory authority

• the origin of your personal data, if it was not collected by us

• the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details

b) Rectification

According to Art. 16 GDPR, you have the right to have inaccurate or incomplete personal data stored by us rectified without delay.

c) Erasure

Pursuant to Art. 17 GDPR, you have the right to request the immediate erasure of your personal data stored by us, unless further processing is necessary for one of the following reasons:

• the personal data is still necessary for the purposes for which it was collected or otherwise processed

• to exercise the right to freedom of expression and information

• to fulfill a legal obligation that requires processing under European Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller

• for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9(3) GDPR

• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing

• for the establishment, exercise or defense of legal claims

d) Restriction of processing

In accordance with Art. 18 GDPR, you may request the restriction of the processing of your personal data for one of the following reasons:

• You dispute the accuracy of your personal data.

• The processing is unlawful and you refuse to have the personal data deleted.

• We no longer need the personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims.

• You object to the processing pursuant to Art. 21 (1) GDPR.

e) Notification

If you have requested the rectification or erasure of your personal data or a restriction of processing pursuant to Art. 16, Art. 17, or Art. 18 GDPR, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You may request that we inform you of these recipients.

f) Transfer

You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format.

You also have the right to request the transfer of this data to a third party, provided that the processing was carried out using automated procedures and is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) or on a contract pursuant to Art. 6 (1) (b) GDPR.

g) Revocation

In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent to us at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.

h) Complaint

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

i) Objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to specify the particular situation. If you wish to exercise your right of revocation or objection, simply send an email to datenschutz@uebe.com.

j) Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

i. is necessary for the conclusion or performance of a contract between you and us

ii. is authorized by European Union or Member State law to which we are subject and that law provides for appropriate measures to safeguard your rights and freedoms and legitimate interests

iii. is based on your explicit consent

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases referred to in i) and iii), we take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.

14. Changes to the privacy policy

If we change the privacy policy, this will be indicated on the website.

Status: 10/2025