Table of content

I. General information

1. contact details of the data controller

II. Specific information for the collection of personal data

  • 2. Accessing the website
  • a) Purpose of data processing
  • b) Duration of data processing
  • c) Legal Base
  • d) Right of objection and delition
  • 3. Knowledge-database
  • a) Purpose of data processing
  • b) Duration of data processing
  • c) Legal Base
  • d) Right of objection and delition
  • 4. Cookies
  • a) Purpose of data processing
  • b) Duration of data processing
  • c) Legal Base
  • d) d) Right of objection and delition
  • 5. Newsletter
  • a) Purpose of data processing
  • b) Duration of data processing
  • c) Legal Base
  • d) d) Right of objection and delition
  • 6. Contact via email, fax or phone
  • a) Purpose of data processing
  • b) Duration of data processing
  • c) Legal Base
  • d) Right of objection and delition
  • 7. Google Analytics
  • a) Purpose of data processing
  • b) Duration of data processing
  • c) Legal Base
  • d) Right of objection and delition
  • Rights of the data subject
  • Right to information according to Art. 15 DSGVO
  • Right to correction in accordance with Art. 16 DSGVO
  • Right of deletion according to Art.17 DSGVO
  • Right to limitation of processing in accordance with Art. 18 DSGVO
  • Right to information in accordance with Art. 19 DSGVO
  • Right to Data portability Art. 20 DSGVO
  • Right of objection according to Art. 21 DSGVO
  • Automated decisions in individual cases incl. profiling according to Art. 22 DSGVO
  • Right of appeal to a supervisory authority pursuant to Art. 77 DSGVO
  • The right to an effective judicial remedy under Article 79 of the DSGVO

General information

1. contact details of the data controller

Fachvereinigung Krankenhaustechnik e. V. (FKT)
Hermann-Löns-Strasse 31
53919 Weilerswist
Tel: +49 2254 83478 80
Fax:+49 2254 83478 88

E-Mail: fkt@fkt.de

 

II. Specific information for the collection of personal data

2. Accessing the website

a) Purpose of data processing
Every time a data subject accesses a page on our website and every time a file stored on the website is accessed, access data about this process are stored in a log file. Each data record consists of:

  1. the page from which the file was requested (referer URL),
  2. the name of the file,
  3. the date and time of the request,
  4. the amount of data transferred,
  5. the access status (file transferred, file not found, etc.),
  6. a description of the type of operating system and web browser used,
  7. Host name of the accessing computer,
  8. the client IP address.

We use this data to operate our website, in particular to examine the utilization of the website as well as malfunctions of the website and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the requested data; it will be made anonymous by deleting the last digit block (Ipv4) or the last octet (Ipv6) once the technical requirement no longer applies.

b) Duration of data processing
The information are recorded each time a data subject accesses a file of our website and each time our website is accessed and are deleted as soon as they are no longer required for the purpose of recording, which is the case at the latest three months after the website visit.

c) Legal Base
The temporary storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 lit. f of the General Data Protection Regulation of the European Union (hereinafter “GDPR”). The legitimate interest lies in the provision of our website and the examination of misuse.

d) Right of objection and delition
By refraining from using our website, the data subject may object to the processing and, subject to the conditions de-scribed in more detail in the “Rights” section below, request the deletion of data collected by him in this way by means of an informal declaration.

3. Knowledge-database

a) Purpose of data processing
By signging up to our knowlede-database, the responsible partner association, name, address, email address and client IP address will be recorded. This is done to grant access to the database. After the sign up process a transmission of these information to the mentioned partner association will take place to verify the membership.

b) Duration of data processing
As soon as the information are no longer necessary to achieve the purpose intended while recording, they will be deleted, which is the case when the account will be closed and there are no contractual or tax retention periods to the contra-ry. This period is five years for personal data subject to sec. 147 of the German Abgabenordnung (AO) and ten years for personal data subject to sec. 257 of the German Trade law (HGB). The periods begin at the end of the calendar year in which the data was collected.

c) Legal Base
The aforementioned information are stored on the legal basis of Art. 6 para. 1 lit. b GDPR as part of a contract initiation or fulfilment.

d) Right of objection and delition
The person concerned has the right to object to the storage at any time. The data stored will then be deleted.

4. Cookies

a) Purpose of data processing
In order to visit to our website, we install so-called cookies to the device of the data subject. Cookies are small text files that can be used to identify the device of the data subject, usually by collecting the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. By storing the cookie on the device used – without interfering with the operating system – it is recognized again and enables us to make any prior settings available immediately. We use this information to adapt our website and services offered to your needs and to accelerate accessing our website.

b) Duration of data processing
The duration of saving varies from cookie to cookie. The maximum timespan will be two year. They are stored on the data subjects device, not on our server, so settings of the data subjects browser software influence the timespan. To get to know the process of deleting cookies, please adhere to your browsers manual.

c) Legal Base
The storage of the aforementioned data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest for the setting of cookies is on the one hand to be able to optimize the quality of our website through an analysis and on the other hand to enable the visit of our website; in particular, some functions on our website cannot be used without cookies, because otherwise the data subject and his settings already made would not be recognized when changing pages. Furthermore, the data is stored on the legal basis of Art. 6 para. 1 lit. b GDPR for the execution of the contract.

d) Right of objection and delition
The data subject can block the use of cookies in the device used or delete them after the use. Under certain circumstances, however, individual functions of our offer may not be usable. Information on how cookies can be blocked and cookies that have already been saved can be deleted can be found in the documentation of the used browser software.

5. Newsletter

a) Purpose of data processing
By signing up for a newsletter, the information entered during the sign up process (email address, IP-address, date/time) will be recorded. These information are necessary for processing the signup and documenting it.

b) Duration of data processing
Data will be stored as long as needed for sending the newsletter. After unsubscribing data will be kept for ten years after the last newsletter has been sent to process request concerning the sign up process.

c) Legal Base
The aforementioned information are stored on the legal basis of Art. 6 para. 1 lit. b GDPR as part of a contract initiation or fulfilment.

d) Right of objection and delition
The data subject can at any time unsubscribe from the newsletter by clicking the unsubscribe link or contactint the processor via the aforementioned email address.

6. Contact via email, fax or phone

a) Purpose of data processing
A data subject can contact us by e-mail, fax or telephone. We record the data transmitted to us and provided by the contacting person for processing the request. These data are name, address, e-mail address, telephone and/or fax number, date and time of the inquiry and the description of the request.
The data will not be transmitted to third parties. They are used to process the request of the person concerned.

b) Duration of data processing
As soon as the information are no longer necessary to achieve the purpose intended while recording, they will be deleted, which is the case when the conversation has been completed and the facts have been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to sec. 147 of the German Abgabenordnung (AO) and ten years for personal data subject to sec. 257 of the German Trade law (HGB). The periods begin at the end of the calendar year in which the data was collected.

c) Legal Base
The aforementioned information are stored on the legal basis of Art. 6 para. 1 lit. b GDPR as part of a contract initiation or fulfilment or in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest of the responsible person is to be able to process the contact request and to prevent misuse of the contact request.

d) Right of objection and delition
The data subject has the right to object to the storage at any time. The data stored will then be deleted.

7. Google Analytics

a) Purpose of data processing
Die Client-IP-Adresse wird zur Nutzung des Diensts Google Analytics erfasst. Diese Webseite benutzt Google Analy-tics, einen Webanalysedienst der Google Inc. („Google“). Google Analytics verwendet sog. „Cookies“, Textdateien, die auf dem Endgerät des Betroffenen gespeichert werden und die eine Analyse der Benutzung der Webseite ermöglichen. Die durch den Cookie erzeugten Informationen über die Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Aufgrund der Aktivierung der IP-Anonymisierung auf dieser Webseite wird die IP-Adresse des Betroffenen von Google jedoch innerhalb von Mitgliedstaaten der Europäischen Uni-on oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Aus-nahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. Im Auftrag des Betreibers dieser Webseite wird Google diese Informationen benutzen, um die Nutzung der Webseite auszuwerten, um Reports über die Webseitenaktivitäten zusammenzustellen und um weitere mit der Webseitennutzung und der Inter-netnutzung verbundene Dienstleistungen gegenüber dem Webseitenbetreiber zu erbringen. Die im Rahmen von Google Analytics von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. The client IP address of the data subject is collected for use of the Google Analytics service. This website uses Google Ana-lytics, a web analysis service of Google Inc. “(“Google”). Google Analytics uses so-called “cookies”, text files which are stored on the end device of the person concerned and which enable an analysis of the use of the website. The infor-mation generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, Google will reduce the IP address of the person concerned within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and anonymized there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to compile reports on the website activities and to provide the website operator with further services associated with the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

b) Duration of data processing
As soon as the data are no longer necessary to achieve the purpose they have been recorded for, they will be deleted, which is the case when the anonymisation within the European Union has been completed. This takes less than a se-cond.

The data sent by us and linked with cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data for which the retention period has been reached are automatically being deleted once a month.

For more information, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=en.

c) Legal Base
The storage of the aforementioned data is based on Art. 6 S. 1 lit. f GDPR. The legitimate interest lies in the fact that we are able to analyse the use of the website by all data subjects in its entirety without drawing conclusions about the behaviour of identifiable persons; this enables us to optimise our website and our offers.

d) Right of objection and delition
The data subject can prevent the storage of cookies by a corresponding setting of the browser software; however, we point out to the data subject that in this case not all functions of this website may be completely functional. Further-more, the data subject can prevent the collection of data generated by the cookie and related to the use of the website (including the IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link [http://tools.google.com/dlpage/gaoptout?hl=en].

Rights of the data subject

If “personal data” are processed by the data subject on our website, the person concerned has the following rights against the person responsible in accordance with the DSGVO

Right to information according to Art. 15 DSGVO

The person concerned has the right to the following information:

  • (a) processing purposes;
  • (b) the categories of personal data being processed;
  • (c) the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations;
  • d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  • (e) the existence of a right of rectification or deletion of personal data concerning him or of a restriction on processing by the controller or of a right of opposition to such processing;
  • (f) the existence of a right of appeal to a supervisory authority;
  • (g) where the personal data are not collected from the data subject, all available information on the origin of the data;
  • (h) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) DSGVO, and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
  • (i) where personal data are transferred to a third country or international organisation, the data subject shall have the right to be informed of the appropriate guarantees in accordance with Article 46 DSGVO in relation to the transfer.

We provide the data subject with a copy of the personal data that is the subject of the processing. For all other copies requested by the data subject, the data processor may charge an appropriate fee on the basis of the administrative costs.

Right to correction in accordance with Art. 16 DSGVO

The data subject shall have the right to request the controller to rectify any inaccurate personal data concerning him/her without delay. Taking into account the purposes of the processing, the data subject has the right to request the comple-tion of incomplete personal data, including by means of a supplementary declaration.
Right of deletion according to Art.17 DSGVO

The data subject has the right to request from the data controller to delete personal data concerning him/her without delay and the data controller is obliged to delete personal data without delay if one of the following reasons applies:

  • (a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • b) the data subject withdraws his/her consent on which the processing was based pursuant to Art. 6 s. 1 lit. a or Art. 9 s. 2 lit. a GDPR and there is no other legal basis for the processing;
  • (c) the data subject opposes processing in accordance with Article 21(1) of the GDPR and there are no overriding legit-imate grounds for processing or the data subject opposes processing in accordance with Article 21(2) of the GDPR;
  • d) the personal data have been processed unlawfully;
  • e) the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject;
  • f) the personal data was collected in relation to information society services offered pursuant to Art. 8 s. 1 DSGVO
    Right to limitation of processing in accordance with Art. 18 DSGVO
    The data subject has the right to require the controller to restrict processing if one of the following conditions is met:
  • a) the accuracy of the personal data is disputed by the data subject for a period which enables the data controller to veri-fy the accuracy of the personal data,
  • b) the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
  • c) the data controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the purpose of asserting, exercising or defending claims; or
  • d) the data subject has lodged an objection to the processing pursuant to Art. 21 s. 1 DSBER, as long as it is not yet clear whether the legitimate reasons of the data subject outweigh those of the data subject.

Right to information in accordance with Art. 19 DSGVO

If the data subject has claimed from the data subject a correction with regard to his personal data in accordance with Art. 16 DSGVO, a deletion Art. 17 s. 1 DSGVO or a restriction on processing in accordance with Art. 18 DSGVO, and if the data subject has informed all recipients to whom the data subject’s personal data have been disclosed of the data subject’s request (unless this was impossible or disproportionate), the data subject has the right to be informed by the data subject about the recipients.

Right to Data portability Art. 20 DSGVO

The data subject has the right to receive the personal data concerning him/her that he/she has provided to a controller in a structured, current and machine-readable format and he/she has the right to transmit this data to another controller without our interference, provided that

  • a) processing is based on consent pursuant to Art. 6 s. 1 lit. a or Art. 9 s. 2 lit. a or on a contract pursuant to Art. 6 s. 1 lit. b DSGVO and
  • (b) processing is carried out by means of automated methods.

The rights and freedoms of other persons must not be affected by this.

When exercising the right to data transferability pursuant to paragraph 1, the data subject has the right to request that the personal data be transferred directly by us to another data controller, insofar as this is technically feasible.

The exercise of the right to data transferability does not affect the right to cancellation pursuant to Art. 17 DSGVO. The right to transferability shall not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

Right of objection according to Art. 21 DSGVO

The data subject has the right to object at any time to the processing of personal data concerning him/her on the basis of Article 6(1)(e) or (f) of the DSGVO for reasons arising from his particular situation; this also applies to profiling based on these provisions.

We no longer process personal data unless we can prove compelling grounds for processing that outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims.

Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him/her for the purposes of such advertising, including profiling in so far as it is related to such direct marketing. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The data subject may revoke his/her consent at any time. However, the collection and processing that has taken place up to this point remains legal.
Automated decisions in individual cases incl. profiling according to Art. 22 DSGVO
The data subject shall not be subject to a decision based exclusively on automated processing – including profiling – which has legal effect against him or significantly impairs it in a similar manner.

This does not apply if the decision

  • a) is necessary for the conclusion or performance of a contract between the party concerned and us,
  • b) is admissible by law of the Union or of the Member States to which we are subject and that law contains appropriate measures to safeguard the rights, freedoms and legitimate interests of the person concerned; or
  • c) with the express consent of the data subject.

These decisions may not be based on special categories of personal data pursuant to Art. 9 s. 1 DSGVO, unless Art. 9 s. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect the rights, freedoms and legitimate interests of the data subject.

In the cases referred to in points a) and c), we shall take appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person on our part, to state his own position and to challenge the decision.

Right of appeal to a supervisory authority pursuant to Art. 77 DSGVO

Without prejudice to any other administrative or judicial remedy, any data subject shall have the right of appeal to a supervisory authority, in particular in the Member State of his place of residence, his place of employment or the place of suspected infringement, if the data subject considers that the processing of personal data concerning him or her is contrary to this Regulation.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

The right to an effective judicial remedy under Article 79 of the DSGVO

Without prejudice to any available administrative or extrajudicial remedy, including the right of appeal to a supervisory authority under Article 77 DSGVO, any data subject shall have the right to an effective judicial remedy if he considers that his rights under this Regulation have been infringed as a result of processing of his personal data in breach of this Regulation.
Any action against us by a processor shall be brought in the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may also be brought before the courts of the Member State in which the person concerned is resident, unless we or the processor is an authority of a Member State which has acted in the exercise of its sovereign powers.