1. Home page
  2. Privacy and data protection policy

Privacy and Data Protection Policy

1. General provisions

DMU takes data protection very seriously. In the absence of your specific consent, and subject to our best interests as a matter of law, the collection, processing and use of personal data obtained through this website will be limited to what is necessary to provide personalized services and offers. If access to individual offers or services on the website requires input of personal data (for example, to process written requests from a feedback form), we will consider and use this data for the purpose for which it was provided. 

2. Data controller

The data protection policy is enforced by the controller of personal data, the DMU Medical Experts GmbH, Tel. + 49 211 975-315-60. You can also contact the data controller at the address above or by email info@dmu-medical.com 

3. Collection and storage of personal data

Personal data will be immediately deleted as soon as its retention is no longer necessary for the stated purpose and if its destruction is not contrary to statutory and legal obligations. Your personal data will be processed in the following cases: 

3.1 When visiting the website

When you visit a website, our web server temporarily stores the data of the requesting computer's current default connection, namely the website you visit, the date and duration of your visit, the identification data of the browser used and the type of operating system used, including the website from which you accessed us (i.e. server log data). Additional personal information, such as name, address, phone number or email address, is not recorded in this case. In addition, the server log data and personal data are completely unrelated. 

We process the above data for the following purposes: 

• ensuring an uninterrupted connection to the website; 

• ensuring proper use of our website; 

• safety and stability assessment; 

• other administrative purposes. 

The legal basis for data processing is Art. 6 pt. 1 p. 1 of the General Data Protection Regulation. Our legitimate interests do not extend beyond the data collection purposes listed above. We will not use the data we collect to create your personality profile. The data is stored for 13 months and then deleted. 

3.2 Cookie files

Our pages use cookie files. 

Cookie files (cookies) are a small piece of data stored on your media along with certain settings and data to be exchanged with our system through your browser. They serve to make the website more user-friendly and efficient overall. 

You can delete cookies at any time in your browser's security settings, or you can configure your browser settings to suit your preferences, such as disallowing cookies altogether. As a rule, the help function on the menu bar of your web browser shows you how to reject new cookies and delete cookies you've already received. However, in this case, you may not have access to all of the features on our site. 

The cookies we use are partially session cookies. They are automatically deleted from your hard drive when your browser session ends. We also use persistent cookies that remain on your hard disk drive. On your next visit, the website will identify you from your previous visit, and it will "remember" what data you entered and what settings you used. 

Cookies are stored on your hard disk drive and are automatically deleted after a certain period of time. The cookies we use do not identify the data subject. Once cookies are enabled, an identification number is assigned. Linking the person ID to this identification number is completely impossible and is not done. Your name or similar data that allows cookies to be associated with you are not stored. 

The legal basis for data processing according to Art.6 pt. 1 p. f of the General Data Protection Regulation is your explicit consent, which is given when you authorize the tracking and use of cookies. 

3.3. Usage analysis

When working with the data listed in 3.1 paragraph, we use a tool that replaces the last two octads of your IP address with zeros in order to analyze the use of our website, as well as to establish design requirements and further optimization of our website. On the other hand, tracking is used in order to compile statistics on visits to our website and to optimize our services and offers. 

In addition to the data listed in 3.1 above, the tool also collects the following data. 

• Device type, device model, device brand; Screen resolution; 

• The plug-ins used (e.g. Flash, Java); 

• Jump URL (the previous page to which the user had direct access); 

• Country and region from which the request was received; 

• Downloads; 

• Clicks; 

• Number of forms sent (depending on the stated purposes). 

The legal basis for data processing according to Art. 1 pt. 1 p. f of the General Data Protection Regulation is your explicit consent, which is given by you when you authorize the tracking and use of cookies. The data is stored for 13 months and then deleted. 

If you prefer not to have your activities on the site logged and analyzed, you can enable the "Do Not Track" setting on your browser. This is usually done in the browser settings. 

In addition to internal usage analysis, we use tracking with third-party tools to better tailor our website to the needs of our users. In addition, statistical analysis is used to improve our websites. These processing procedures are carried out in a similar manner based on your explicit consent in accordance with Art. 6 part 1 para. a of the General Data Protection Regulation. 

It should be noted that our influence on the processing of data by these external tracking tools is rather limited, and they only provide us with information that complies with the privacy provisions. 

3.4 Google Analytics

On this site, we use Google Analytics, an analytics service provided by Google Ireland Limited (futher referred to as "Google"). In this way, user data, sessions and actions can be hardware-independent, alias-assigned and analyzed by device. 

For example, the following are processed: 

• browser type / version, 

• operating system used, 

• URL of the jump (previous page to which the user had direct access), 

• name of the host from which the computer makes the request (IP address), 

• time of the server request. 

Google Analytics also uses cookies (see definition in para. 3.2). The information generated by the cookie about your use of this website is generally transmitted to a Google server in the United States and stored there. If IP depersonalization is activated for this website, your IP address in Member States of the European Union or other parties to the Agreement on the European Economic Area will be reduced. For this website, Google Analytics has been extended by the addition of IP depersonalization, whereby IP addresses are collected anonymously (using IP address masking). For more information about terms of use and privacy: https://www.google.com/analytics/terms/de.html, and: https://policies.google.com/? hl=de 

Google will use this information at our request to evaluate your use of the website in order to report on website activity and to provide associated services based on website and internet usage statistics. 

The data we receive from Google is stored for 12 months and then deleted. You may stop the collection of data generated by cookies and associated with your use of the website (including your IP address), including the transmission and processing of this data by Google by downloading and installing the following browser add-on: https://tools.google.com/dlpage/gaoptout?hl=ru

You can also set a set of cookies that will disable the collection of your data when you visit this website in the future. To prevent data collection through Google analytics on all devices, you must opt out of all systems you use. Click here to activate cookie blocking: Disable Google Analytics. Cookie blocking only applies to the relevant device and browser and to that website. They are stored locally on your device; if you delete cookies, you will need to reactivate the cookie lock. 

3.5 Yandex.Metrika

This website uses the Yandex.Metrica web analytics service provided by the Yandex Oy Limited Company - Moreenikatu 6, 04600 Mantsala, Finland (hereinafter referred to as “Yandex”). Yandex.Metrica also uses cookies (see the definition in 3.2).  

Among others, the following data will be processed:

• Device type, device model, device brand; 

• Screen resolution; 

• The plug-ins used (e.g. Flash, Java); 

• Jumping URL (the previous page to which the user had direct access); 

• The country and region from which the request was received; 

• Clicks; 

• Number of forms sent (depending on stated purposes). 

Information about your use of this website collected by cookies will be transferred to Yandex and stored on Yandex’s server in the EU and the Russian Federation. Yandex will process this information to assess how you use the website, compile reports for us on our website operation, and provide other services. Yandex processes this information as specified in the Terms of Use of Yandex.Metrica Service.

You can opt out of using cookie files by choosing the corresponding settings in your browser. You can also use the tool https://yandex.com/support/metrika/general/opt-out.html However, it can affect some website functions. By using this website, you agree that Yandex can process your data in the above manner and for the above purposes.

3.6 Web beacons

We use web beacons, pixel tags, transparent GIF animations, or similar tools (collectively, "web beacons") on our site. A web beacon is a single pixel image file embedded on our site. Web beacons are usually invisible to the user. They allow us to count the number of website page users who access individual pages of our website when requesting "branded services", and to compile statistics about how our website is used. The data is stored for 13 months and then deleted. 

3.7 Signing up for newsletters

In order to send our newsletter, we need your email address and proof that you are the owner of the email address and want to receive the newsletter. This is done through a two-step subscription procedure. After registering, you receive an email to the email address you provided. This email invites you to click on the link contained therein to confirm your consent to receive the newsletter. You then receive the newsletter to which you have subscribed. 

Only your email address is used for the newsletter. It is not shared with any third parties. The legal basis for use is Art. 6 pt. 1 para. 1 pg. 1 pt. a of the General Data Protection Regulation. 

You can cancel both your subscription and your consent to receive it at any time. At the end of each newsletter there is a corresponding link for the opportunity to unsubscribe. 

4. Our contact forms

If you have any questions, you can contact us using the form on the website. You must include the actual email address of the sender of the request in order for us to respond. Additional information may be provided on a voluntary basis. The processing of data for the purpose of contacting us is in accordance with art. 6 pt. 1 pg. 1 para. a of the General Data Protection Regulation on the basis of your voluntary consent. 

The personal data that we have collected by filling in the request form is automatically deleted after the request has been fulfilled. 

4.1 Using Chat

On our website, you can contact our coordinators through our online advisor and Chatra messenger. Chatra is provided by Roger Wilco LLC, 2200 Clarendon Blvd., Suite 1400A, Arlington, VA 22201, USA, tel. 1-703-243-6333. By using Chatra, you consent to Chatra's privacy policy. Chatra privacy policy: https://chatra.io/privacy-policy/ 

Read this policy carefully before using the service. All information and data is processed by Chatra and (also) stored on servers in the United States. In order to protect your data in the U.S., Chatra is voluntarily certified under the EU-U.S. Privacy Sharing Agreement and complies with EU privacy regulations. For more information about the EU-U.S. Privacy Sharing Rules agreement: https://www.privacyshield.gov

Chatra collects the following data: 

• Duration of your visit; 

• Pages visited; 

• Your location (determined by your IP address); 

• Jump URL; 

• Operating system type; 

• Browser version. 

The following data (if entered) may also be collected when you contact us through Chatra: 

• Contact information; 

• First and last name; 

• Email address; 

• Phone number; 

• History of conversations with our support team and forwarded files. 

Information about Chatra's data processing policy: https://chatra.io/privacy-policy/ 

The processing of data for the purpose of contacting us via chat is in accordance with Art. 6 pt. 1 pg. 1 para. a of the General Data Protection Regulation on the basis of your voluntary consent given at the time of use of the chat room. If you do not agree with these rules, please contact us by e-mail or telephone without using the chat room. 

4.2 Using the callback function

You have the opportunity to leave your phone number on the site by using the form provided and (optionally) your name and the desired time of call, so that our employees can contact you at the specified time. The processing of data for the purpose of contacting us is in accordance with Art. 6 pt. 1 pg. 1 para. a of the General Data Protection Regulation, on the basis of your voluntary consent. 

The personal data collected by us when filling out the callback order form will automatically be deleted when the request is fulfilled. 

5. Proceeding your treatment request

I agree that DMU may transmit the information and medical documents I have provided within the request to the relevant medical institutions (including clinics, health centers, prevention centers) in order to check the possibility and organization of treatment, and that my medical letters and invoices as well as other documents may be requested from the clinic where I am being treated and archived for further services (translations, search for follow-up treatment, etc.).

DMU retains medical documents (including diagnosis and treatment results) and the final bill for a maximum of five years after completion of treatment, in order to be able to refer to the data in case of renewed contact.

DMU may evaluate the medical report (including diagnosis and treatment results), the final invoice and the data from the voluntary patient survey in pseudonymized form for quality assurance purposes and to determine economic key figures. It is not possible to trace the data back to an individual.

The DMU acts as an intermediary to arrange your treatment at a medical facility. During this process, your data will be transmitted to the relevant medical facility.

Furthermore, your data will be passed on to third parties as far as this is stipulated by the relevant legal regulations. In particular, third parties may include:

• Depending on your insurance status, compulsory or private health insurance institutions;

• Family physicians, doctors who carry out ongoing treatment, monitoring or co-treatment;

• Other medical or therapeutic institutions, rehabilitation facilities, nursing facilities.

6. Collection and storage of personal data

Responsible for compliance with the Data Protection Policy: Personal Data Operator: Deutsche Medizinische Union, Tel: + 49 211 975-315-60. The Chief Data Protection Officer at the company can be contacted at the above address or by e-mail at info@dmu-medical.com

7. Rights of the subject of personal data

You have the right to: 

• Request information on your personal data processed by us, in accordance with Art. 15 of the General Data Protection Regulation. In particular, you have the right to obtain information about the purposes for which the data is processed, the type of personal data, the type of recipients to whom the data has been or will be communicated, the intended retention period, the right to obtain the correction of inaccurate data, to delete data, to restrict the processing or to withdraw your consent to the processing, to complain, to discover the source of your data, if it was not supplied by you, including information on automated decision-making, the criteria applied to the collection of statistical data, the source of the data which was collected. 

• Ask for the immediate correction of the data you have stored and for the completion of the same, as per Art. 16 of the General Data Protection Regulation; 

• Demand the cancellation of your personal data that we have conserved, if the processing of the data is not necessary for the exercise of the right to freedom of expression, if the information is not necessary to fulfil a legal obligation or for reasons of public interest, or to establish, exercise or defend a legal claim pursuant to art. 17 of the General Data Protection Regulation; 

• Demand a limitation of the processing of your personal data if you contest its accuracy, if it is processed unlawfully, if you have refused to have it deleted, if we no longer need the data but it is necessary for the establishment, exercise or defense of a legal claim pursuant to art. 18 of the General Data Protection Regulation, or if you have protested the processing of personal data pursuant to Art. 21 of the General Data Protection Regulation; 

• Demand the receipt of the personal data you have already provided in a structured universal electronic format or request their transfer to another operator pursuant to Art. 20 of the General Data Protection Regulation; 

• Withdraw your explicit consent to the processing of the data you have already given to us pursuant to Art. 7 pt. 3 of the General Data Protection Regulation. Consequently, we shall not be able to carry out any data processing for which your explicit consent is required in the future and to lodge a complaint with the supervisory authority in accordance with Art. 77 of the General Data Protection Regulation. 

8. The Right to object

Because the processing of your personal data is based on legitimate interests according to Art. 6 pt. 1 pg. 1 para. f of the General Data Protection Regulation, you are entitled to object to the processing of your personal data if grounds arising from your personal circumstances are provided or to object to the use of direct advertising in accordance with Article 21 of the General Data Protection Regulation. In the latter case, you have a general right of objection, which we exercise without having to state your personal reasons. If you wish to exercise your right of cancellation or right of revocation, simply send an email to: info@dmu-medical.com 

9. Data security

We take all necessary technical and organizational security measures to protect your personal data from loss and misuse. This ensures that your data is stored in a secure working environment and is not accessible to the public.

In some cases your personal data is encrypted during transmission via TLS. This means that if your browser supports the TLS protocol the communication between your computer and our servers will be established using strong encryption tools. 

10. Updating our privacy policy and making changes

The Privacy Policy is currently considered to be valid and has been in effect since July 2019.

Changes to this policy may be required due to further development of our web site and related offers or based on statutory or administrative requirements.