If you use our Online Service, various data will be collected. This personal data is data with which you can be personally identified. The terms used below (e.g. "personal data" or "processing") have the meaning as defined in Art. 4 GDPR. We would like to point out that data transmission on the Internet can be subject to security gaps. A complete protection of the data against access by third parties is not possible.
Responsible in the sense of Art. 4 no. 7 GDPR for the processing in this Online Service is
RoweMed AG – Medical 4 Life
You can contact us at:
Phone: +49 (0) 3871 / 451-280
If you have any questions regarding data protection with regard to our Online Service, please contact our data protection officer:
To exercise your rights, you can contact one of the contact options listed above.
We process the following data:
Visitors and users of the Online Service (hereinafter jointly referred to as "users") are affected by the processing. Many processing operations are only possible with your express consent. You can revoke your consent at any time (Art. 7 para. 3 GDPR). An informal email to us is sufficient for this revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
You can assert your rights by sending a message to the contact data specified in the "Controller" section or to the data protection officer appointed by us.
According to the GDPR, users have the following rights with regard to processing:
a) Right of access (Art. 15 DSGVO)
Pursuant to Art. 15 GDPR, you have the right at any time to request confirmation free of charge of the processing of the data in question and to be informed of this data, as well as to receive further information and a copy of the data. The subject of the information is the stored personal data themselves, the origin of the data, their recipients and the purpose of the data processing.
b) Right of rectification (Art. 16 DSGVO)
You have the right, in accordance with the law, to ask us, the data controller, to complete the data concerning you or to rectify the false data concerning you.
c) Right to erasure (‘right to be forgotten’, Art. 17 GDPR)
Within the framework of the applicable legal provisions, you also have the right to demand that we, as the person responsible, delete the data we have stored concerning you. This applies in particular to persons who have given their consent in childhood. However, this right can be exercised regardless of age.
The data is deleted when it is no longer needed for the purposes for which it was collected and there are no legal retention periods or a legal obligation to retain it (e.g. data retention). If deletion cannot take place for one of the aforementioned reasons, data processing will be restricted.
d) Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data. The restriction leads to the data being blocked and not processed for other purposes. This right exists in the following cases:
The data processed by us will be deleted in accordance with the statutory provisions or their processing restricted. Unless expressly stated otherwise in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for the intended purpose and there are no legal storage obligations. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website.
If the data are not deleted because they are required for other legally permissible purposes, their processing is restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for economic or tax reasons.
We use socalled "session cookies", which are automatically deleted when you close your browser after visiting the website. They store a session ID with which various requests from your browser can be assigned to the shared session. They are necessary for the use of the Online Service, in particular we can recognize the used terminal device when you return to the page. We also use permanent cookies, which remain stored on your computer until you delete them. They are also referred to as "permanent" or "persistent" and are used, for example, to store the login status when users visit the site after several days. The user's interests can also be saved, which are used to measure reach or for marketing purposes.
"Third party cookies" are cookies offered by providers other than the controller who operates the online service. The cookies used by the controller are therefore also referred to as "first party cookies".
If you do not want cookies to be stored on your device for range measurement or online marketing purposes, you can object to the use of these files here:
Cookies, which are necessary for the execution of the electronic communication process or for the provision of certain functions, are stored on the basis of Art. 6 para. 1 sent. 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically errorfree and optimised provision of our services as well as for the improvement of the functionality of our website. Inso-far as other cookies are stored (e.g. cookies to analyse your surfing behaviour), these are dealt with separately in this data protection declaration.
For security reasons and to protect the transmission of confidential content, such as for example requests that you send to us as a site operator, we use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://", as well as by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
We use external hosting services. These serve to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, email delivery, security services and technical maintenance services that we use to operate this Online Service. All data required for the operation and use of our website will be processed. The purpose of this is to ensure the efficient and secure provision of our website. The legal basis for the processing is Art. 6 para. 1 sent. 1 lit. f GDPR.
We or our hosting provider process here inventory data, contact data, content data, contract data, usage data, metadata and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interest in the efficient and secure provision of this online service in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 para. 3 GDPR (order processing).
Data processing via external web hosts is mandatory for the provision of our Online Service. However, you may object to the processing for reasons arising from your particular situation pursuant to Art. 21 para. 1 GDPR. In this case, we will not further process your data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion and exercise of or defence against legal claims. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing. You can send us your objection via the contact data mentioned in the section "Controller".
In principle, you can use our Online Service without disclosing your identity for purely informational purposes. However, when using our Online Service, so called server log files are automatically collected and stored, which are transmitted to us by your browser. They are collected by us and our hosting providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 sent. 1 lit. f GDPR, i.e. for the improvement, stability, functionality and security of our website.
The date collected are:
These data are not merged with other data sources. These data are collected on the basis of Art. 6 para. 1 sent. 1 lit. f GDPR. We have a legitimate interest in the technically errorfree presentation and optimisation of our online services - server log files must be recorded for this purpose. The access data is deleted when it is no longer required for the purpose of processing it. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website.
This data is collected exclusively for statistical purposes and to improve the functionality and security of the website. For security reasons, the server log files are stored for a maximum of 7 days and then deleted; in individual cases, further processing is possible. In this case, the IP address is deleted or altered in such a way that it is no longer possible to assign the calling client. The data is stored for security reasons. If data have to be deleted for reasons of proof (e.g. suspicion of illegal use), they are excluded from deletion until the incident has been finally clarified.
When you contact us, personal data may be collected and stored to respond to your inquiry. If you do not provide the necessary data, it may be impossible to process your request. Other data processed during the sending process, which are not listed below, are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
a) Contact form
If you send us enquiries via our contact form, your details from the enquiry form, including the contact data you entered there, will be stored by us for processing the enquiry and in the event of followup questions. These data will not be passed on without your consent.
A valid email address must be provided in order to process your enquiry. At the time the message is sent to us, the following data will also be processed:
The processing of data entered in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 sent. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after completion of processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected by this.
b) Email, phone or fax
If you contact us by email, telephone or fax, your request including all personal data (name, request) will be stored and processed by us for the purpose of processing your request. These data will not be passed on without your consent.
If your request is related to the fulfilment of a contract or is necessary for the implementation of precontractual measures, these data will be processed on the basis of Art. 6 para. 1 sent. 1 lit. b GDPR. In all other cases, processing is based on your consent (pursuant to Art. 6 para. 1 sent. 1 lit. a GDPR) and/or on our legitimate interests (pursuant to Art. 6 para. 1 sent. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us.
The data sent to us by you via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after completion of the processing of your request). Mandatory legal provisions - in particular retention periods - remain unaffected by this.
Personal data will only be disclosed to other persons, companies or bodies to the extent described below, unless you have given your effective consent to such disclosure. The legal basis for the processing is then Art. 6 para. 1 sent. 1 lit. a GDPR.
a) To third parties
We only transfer personal data to third parties if this is necessary for the establishment, execution or termination of legal transactions with our company, for example to the companies entrusted with the delivery of the goods or the credit institution commissioned with the payment processing. Further transmission of the data will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. Your name and address will be passed on to the shipping service provider for the purpose of shipping the goods. Your email address and telephone number will not be passed on to the shipping service provider.
Your personal data will also be passed on if a subcontractor or vicarious agent, whom we use exclusively in the context of providing the offers or services you have requested, requires this data (unless you are expressly informed otherwise, such auxiliary persons are only entitled to process the data to the extent necessary to provide the offer or service). In addition, data will be passed on to third parties in the event of an enforceable official or court order or if we are obliged by law to pass it on (Art. 6 para. 1 sent. 1 lit. c GDPR) or if the processing is necessary to protect vital interests of the persons concerned or another natural person (Art. 6 para. 1 sent. 1 lit. c GDPR). 6 para. 1 sent. 1 lit. d GDPR), the disclosure is necessary for the performance of a task which is in the public interest or is carried out in the exercise of official authority (Art. 6 para. 1 sent. 1 lit. e GDPR) or we are authorised or even obliged to disclose for the pursuit of overriding legitimate interests (Art. 6 para. 1 sent. 1 lit. f GDPR).
The basis for data processing is Art. 6 para. 1 sent. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or precontractual measures.
b) To third countries
If we process data in a third country, i.e. a country which does not belong to the EU, or if this is done as part of the use of third party services or the passing on or transfer of data to other persons or companies, this only occurs if this is done to fulfil our (pre)contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests.
Subject to legal or contractual approvals, we process or leave the data in a third country only if the legal requirements are met (cf. Art. 45 ff. GDPR). This means, for example, that the processing takes place on the basis of special guarantees or an adequacy decision, such as the staterecognised determination of a data protection level corresponding to the EU (e.g. for the USA for companies registered under the "Privacy Shield") or the observance of officially recognised special contractual obligations.
We process your personal data if and to the extent necessary for the initiation, justification, execution and/or termination of a legal transaction with us. The legal basis for this is Art. 6 para. 1 sent. 1 lit. b GDPR. If the data processing is necessary for the conclusion of a contract, it may be impossible to conclude the contract, carry out and/or terminate a legal transaction with our company if the data processing is not provided.
Personal data will only be collected, processed and used by us to the extent necessary for the establishment, content or amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 Para. 1 S. 1 lit. b GDPR, which permits the processing of data to fulfil a contract or precontractual measures. Personal data will only be collected, processed and used in connection with the use of our website (usage data) to the extent required to enable the user to make use of the service or to bill the user for it.
The data entered by you for the purpose of order processing includes:
The collected customer data will be deleted or blocked after conclusion of the order or termination of the business relationship if we are not entitled to further storage and processing in the respective context due to a consent given by you, a contractual agreement, a legal authorization (e.g. authorization to send direct mail) or due to legitimate interests (e.g. storage to enforce claims). Legal retention periods remain unaffected.
Our Online Services include third-party content such as videos, maps, RSS feeds or graphics from other websites. This integration always presupposes that the providers of this content ("third-party providers") perceive the IP addresses of the users, otherwise they could not send the content to the browser of the respective user. The IP address is therefore required for the presentation of this content.
We make every effort to use only content from third parties who process the IP address solely for the purpose of delivering the content. However, we have no influence on this if the third-party providers process the IP addresses, e.g. for statistical purposes. As far as we are aware of this, we will inform you about it in the following.
With some third party providers, data processing outside the European Union is possible.
This website uses Google Maps to display interactive maps and to create directions. Google Maps is a map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. When you access our online services, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser and integrated into the website by it. Therefore, we have no influence on the extent of the data collected in this way by Google. According to our state of knowledge, this is at least the following data:
We have no influence on the further processing and use of the data by Google and can therefore assume no responsibility for this.
The use of Google Maps and the processing of data collected about you by Google Maps on our website requires your express consent.
Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, whose text you can call up here:https://www.privacyshield.gov/EU-US-Framework.
The use of Google Maps takes place exclusively on the basis of your consent within the meaning of Art. 6 para. 1 sent. 1 lit. a GDPR. We have no knowledge of the storage period on GoogleMaps and have no influence on it.
Status: 1. June 2019