Thank you for visiting our website www.vdgh.de and for your interest in the Verband der Diagnostica Industrie e. V. (VDGH). The protection of your personal data, e.g. date of birth, name, telephone number, address, is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practices comply with the statutory provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.
I: Responsible body
The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others determines the purposes and means of the processing of personal data.
With regard to our website, the controller within the meaning of the GDPR is the Verband der Diagnostica Industrie e. V. (VGDH), Neustädtische Kirchstraße 8. 10117 Berlin, represented by the Managing Director Dr. Martin Walger.
The VDGH is exempt from the obligation to appoint a data protection officer pursuant to Section 38 (1) BDSG in conjunction with Art. 37 (1) b, c EU GDPR. However, you can contact the person responsible for data protection issues:
VDGH - Verband der Diagnostica Industrie e.V.,
Data Protection
Neustädtische Kirchstr. 8
10117 Berlin
Tel: 030 - 200 599 47
Fax: 030 - 200 599 49
vdgh@vdgh.de
You also have the right to lodge a complaint with the competent data protection authority in connection with the processing of your data.
For the state of Berlin, this is
Berlin Commissioner for Data Protection and Freedom of Information
Meike Kamp
Alt-Moabit 59-61
10555 Berlin
Phone: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
mailbox@datenschutz-berlin.de
II.1: Logfiles
Each time our website is accessed, our system automatically collects data and information from the device accessing it (e.g. computer, cell phone, tablet, etc.).
Type and scope of the data collected
(1) Information about the browser type and version used;
(2) The operating system of the accessing device
(3) Host name of the accessing computer
(4) The IP address of the accessing device
(5) Date and time of access
(6) Websites and resources (images, files, other page content) that were accessed on our website
(7) Websites from which the user's system reached our website (referrer tracking)
(8) Notification of whether the retrieval was successful
(9) Amount of data transferred
This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.
Purpose of the data processing
The temporary (automated) storage of data is necessary for the smooth running of a website visit. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshooting. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our IT systems.
Duration of storage
The aforementioned technical data is deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after our website is accessed.
Right of objection and deletion
You can object to the processing at any time in accordance with Art. 21 GDPR and request the erasure of data in accordance with Art. 17 GDPR. The rights to which you are entitled are explained in the respective sections.
II.2: Use of cookies
Type and scope of the data collected
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. Cookies are small text files that your browser can store on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as "setting a cookie". Cookies can be set both by the website itself and by external web services. The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose stated with your consent. Cookie technology also enables us to recognize individual visitors by means of pseudonyms, e.g. individual or random IDs, so that we can offer more individual services. Details are listed in the table below.
Legal basis for the processing of personal data
Insofar as the cookies are processed on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR, this consent also applies as consent within the meaning of § 25 para. 1 TTDSG for the setting of the cookie on the user's terminal device. Insofar as another legal basis is stated in accordance with the GDPR (e.g. to fulfill the contract or to fulfill legal obligations), the storage or setting is based on an exception in accordance with Section 25 (2) TTDSG. This is the case "if the sole purpose of storing information in the end user's terminal equipment or the sole purpose of accessing information already stored in the end user's terminal equipment is to carry out the transmission of a communication over a public telecommunications network" or "if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user".
Purpose of the data processing
The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose stated with your consent. Cookie technology also enables us to recognize individual visitors by means of pseudonyms, e.g. individual or random IDs, so that we can offer more individual services. Details are listed in the table below.
Duration of storage
Session cookies are used on the server side for the purpose of assigning and verifying browser requests. These are stored for a period of 24 hours. If the user uses the "stay logged in" option, the storage period is up to one week. The IP address provided by your computer, user agent, referrer, date, time and type of request are stored for the purpose of error analysis and audit security. This data is automatically deleted after 90 days.
Objection and deletion options
You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
II.3: events
Type and scope of the data collected
On our website, you have the option of registering for events and seminars offered by us by providing personal data. The data is entered into an input mask and transmitted to us and stored. The following data is collected as part of the registration process, even if this does not take place via our website:
- Name, function, telephone and e-mail address of the participant
- Event for which the registration is made
- Contact details and, if applicable, membership number of the (member) institution to which the participant belongs
- Different billing address, if applicable
Image and sound recordings are regularly made at our events. The recordings of speakers, participants and guests are stored by us and published if necessary, unless you object in individual cases in accordance with Article 21 GDPR. The image and sound material is included in articles and photo galleries on our website, our newsletter, our association publications such as VDGH News and social media channels. The image and sound recordings are processed for public relations purposes, in particular to provide information about the content of events and to draw attention to the content and activities of the association.
Recipients of the image and sound recordings are processors who work for us in the context of publication (e.g. agency, print shop). We may also pass on the recordings to media representatives as part of our press work.
Legal basis for data processing
This data processing serves the implementation of pre-contractual measures and the fulfillment of a contract (seminar contract or contract for participation in an event), the legal basis for the processing of the data is therefore Article 6 (1) (b) GDPR. Without this data, a contract for participation in a seminar or event cannot be concluded. The organization of the event and also the production of image and sound recordings for the purpose of public relations are regulated by Art. 6 para. 1 lit. f GDPR.
Purpose of the data processing
In addition to the organization of the event and the implementation of preparatory measures, if you participate in an event or seminar and unless you have previously objected to this in accordance with Article 21 GDPR, we will record your name and the name of the (member) institution to which you belong in a list of participants, which may be displayed for signing as proof of participation and can therefore also be viewed by the other participants. This data may be transmitted to printing companies commissioned by us as part of event management (e.g. for the creation of name badges). This serves our legitimate interest in organizing the event as smoothly as possible and issuing certificates of participation.
Right of objection and deletion
Your data will be deleted as soon as it is no longer required for the implementation of pre-contractual measures or the fulfillment of the contract. Furthermore, for reasons of preserving evidence within the framework of the statutory statute of limitations, further storage may be necessary to safeguard our legitimate interests on the basis of Article 6 (1) (f) GDPR. According to §§ 195 ff. of the German Civil Code (BGB), the regular limitation period is 3 years, only in special exceptional cases up to 30 years (§ 197 BGB). Furthermore, we are subject to various recording and retention obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The retention periods stipulated therein are up to 10 years beyond the end of the contractual relationship. Due to these legal requirements, we are obliged to continue to store data for a correspondingly limited period of time on the basis of Article 6(1)(c) GDPR.
II.4: Social media
We maintain online presences within social networks and platforms (e.g. Facebook, LinkedIn) in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our privacy policy, we process users' data if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.
III: Special functions of the website
Our website offers you various functions that collect, process and store personal data when you use them. Below we explain what happens to this data.
III.1: Use of the member area (login area)
Type and scope of the data collected
By registering for the members' area of the VDGH website, you consent to the electronic processing and storage of the data you provide. We will process the registration and login data you enter to fulfill the purpose stated below.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. b GDPR (implementation of (pre-)contractual measures)
Purpose of the data processing
You have the option of using a separate login area on our website. So that we can check your authorization to use the protected area or the protected documents, you must enter your login data in the corresponding form. The data is processed for the administration and support of your membership. Your data will be stored for the duration of your registration for the VDGH members' area.
Duration of storage
Your data will be stored for the duration of your registration for the VDGH member area.
Objection and deletion options
The rights to which you are entitled and how you can assert them can be found at the bottom of this privacy policy.
III.2: Newsletter
Type and scope of data collected
Members of the VDGH are responsible for subscribing to the newsletter. The only mandatory information for sending the newsletter is your e-mail address. With your consent, you can subscribe to our newsletter, with which we inform you about current developments, and we store your IP addresses and the time of registration. We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the above-mentioned data and the web beacons with your e-mail address and an individual ID. The data is collected exclusively in pseudonymized form, i.e. the IDs are not linked to your other personal data, and direct personal identification is excluded.
Legal basis for the processing of personal data
The lawfulness of data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Purpose of the data processing
The above-mentioned procedure serves to verify your registration and, if necessary, to be able to clarify any misuse of your personal data.
Right of objection and deletion
You can revoke your consent to the sending of the newsletter at any time and without giving reasons and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by sending an e-mail to vdgh@vdgh.de. You can object to this tracking at any time and without giving reasons by clicking on the separate link provided in each e-mail or by informing us via another contact channel. The information will be stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.
III.3: Contact (by e-mail, etc.)
Type and scope of the data collected
It is possible to contact us via the e-mail addresses provided on our website. In this case, the user's personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation. The same applies to ordering information material (press) by e-mail.
If you send us your personal data by means other than transmission via this website (handing over business cards, etc.) or if your data is collected by us via publicly accessible sources, we will process and store your data electronically. This is done for the purpose of individual communication with you on topics relevant to the association. Your data will be stored until the interest in information ceases to exist.
Legal basis for the processing of personal data
The legal basis for processing the data is Article 6(1)(f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6(1)(b) GDPR.
Purpose of the data processing
The processing of personal data serves us solely to process the contact request, which is also the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
Objection and deletion options
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Of course, you can contact us at any time and object to the storage of your personal data. Please note that in such a case the conversation will not be continued. Your data will be stored for a maximum period of six months, unless a longer period is required to process your order or answer your question.
IV.1: eTracker (Matomo)
Type and scope of the data collected
We use the technology of Matomo, Innocraft Ltd (New Zealand) to analyze visits. Cookies are used to statistically analyze the use of this website by its visitors and to display usage-related content or advertising. Pseudonymized user profiles can be created from the processed data. The cookies have a storage period of one week.
The following data is processed as part of the reach analysis: The browser type and version used by the user, the operating system used by the user, the country of origin, the date and time of the server query, the number of visits, the time spent on the website and the confirmed external links. The user's IP address is anonymized before it is saved.
The data generated in this way is processed and stored by Matomo on our behalf exclusively in France and is therefore subject to strict European data protection laws and standards.
Legal basis for the processing of personal data
Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit. f (legitimate interest) GDPR. Our concern is the optimization of our online offer and our website. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymized or pseudonymized as soon as possible. To the best of our knowledge, the data is not used in any other way, merged with other Matomo data or passed on to third parties.
Purpose of data processing
We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes.
Duration of data storage
The data relevant for web tracking is stored by eTracker for as long as is necessary to fulfill the booked web service. Data is collected and stored anonymously. If there is any personal reference, the data will be deleted immediately, provided that it is not subject to any statutory retention obligations.
Objection and deletion options
You can object to the collection and storage of data at any time with effect for the future without giving reasons. In any case, the data will be deleted automatically after the retention period has expired.
Further information on data protection at Matomo can be found here: https:// matomo.org/privacy-policy/
IV: Your rights as a data subject affected by data processing
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller
- Right to information - Article 15 GDPR
You have the right to request information from us in accordance with Article 15 GDPR i.V.m. § 34 BDSG to request information from us about the personal data concerning you that we process. In this case, we will provide you with a copy of the personal data, if necessary also in electronic format. You also have the right to the information specified in Article 15 (1) GDPR. However, the aforementioned rights are not unrestricted; the restrictions on these rights can be found in particular in Article 15 (4) GDPR and Section 34 BDSG. - Right to rectification - Article 16 GDPR
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed in accordance with Article 16 GDPR. - Right to erasure - Article 17 GDPR
You have the right, in accordance with Article 17 GDPR i.V.m. § Section 35 BDSG to demand the immediate erasure of personal data concerning you. However, this right to erasure is not unrestricted. In particular, erasure cannot be requested if further processing of the personal data concerning you is necessary for the performance of a contract between us, for compliance with a legal obligation or for the establishment, exercise or defense of legal claims. The conditions and restrictions of the right to erasure are set out in detail in Article 17 GDPR and Section 35 BDSG. - Right to restriction of processing - Article 18 GDPR
You have the right to request the restriction of the processing of personal data concerning you in accordance with Article 18 GDPR if one of the conditions of Article 18 (1) GDPR is met. In this case, we may continue to store this data, but may only process it beyond this under strict conditions. The conditions and restrictions of the right to erasure are set out in detail in Article 18 GDPR. - Right to data portability - Article 20 GDPR
In accordance with Article 20 GDPR, you may request to receive the personal data you have provided to us, which we process by automated means on the basis of the contract between us or your consent, in a structured, commonly used and machine-readable format. We are prohibited from preventing you from transferring this data to another controller. You may also request that we transmit this data directly to another controller, insofar as this is technically feasible. The conditions and restrictions of the aforementioned rights in detail can be found in Article 20 GDPR. - Right to lodge a complaint - Article 77 GDPR
As a data subject, you have the right to lodge acomplaint in accordance with Article 77 GDPR in conjunction with § 19 BDSG, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. - Right to withdraw consent at any time - Article 7 GDPR
You can withdraw your consent to the processing of your personal data at any time. Please note that the revocation only takes effect for the future and does not affect the legality of the processing carried out on the basis of the consent until the revocation. - Right to object - Article 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (processing for the purposes of the legitimate interests pursued by the controller or by a third party).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.