Privacy Policy

This Privacy Policy applies to data processed by:

Matthias Hartmann Orthopädie + Sport GmbH<br/> Auf der Langaar 9<br/> 35684 Dillenburg-Frohnhausen<br/> Tel.: 02771 – 2679-0<br/> Fax: 02771 – 2679-29<br/> Email: info(at)hartmann-os.com

Owner: Matthias Hartmann (master orthopaedic shoemaker)

The company Data Protection Officer of Matthias Hartmann Orthopädie + Sport GmbH is Mr René Schneider, and he can be contacted at the above address.

2. Collection and storage of personal data, and type and purpose of its use

a) When visiting the website

When you visit our website, www.einlagenportal.com, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in what is known as a log file. The following information is recorded without your intervention and will be stored until it is automatically deleted:

  • IP address of the requesting computer
  • The date and time of access
  • The name and URL of the accessed file
  • The website from which access is made (referrer URL)
  • The browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The data listed will be processed by us for the following purposes:
  • Ensuring a smooth connection to the website
  • Ensuring convenient use of our website
  • Evaluating system security and stability
  • Other administrative purposes

The legal basis for the processing of data is Art. 6 (1) 1 f) of the GDPR. Our legitimate interest arises from the purposes listed above for data collection. Under no circumstances will we use the data collected for the purpose of drawing conclusions about you. We additionally use cookies and analysis services when you visit our website. For further explanations, please refer to paragraphs 4 and 5 of this Privacy Policy.

b) When registering for our newsletter

Insofar as you have explicitly given your consent in accordance with Art. 6 (1) 1 a) of the GDPR, we will use your email address to send you our newsletter on a regular basis. To receive the newsletter, all you need to do is provide your email address.

You can unsubscribe at any time, for example, via the link provided at the end of each newsletter. Alternatively, you can also email your unsubscribe request to info(at)hartmann-os.com at any time.

c) When using our contact form

If you have any queries, you can contact us using the form provided on the website. A valid email address is required so that we know who sent the request and can respond to it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) 1 a) of the GDPR on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed.

3. Disclosure of data

Your personal data will not be disclosed to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

  • you have expressly consented to this under Art. 6 (1) 1 a) of the GDPR;
  • disclosure is required under Art. 6 (1) 1 f) of the GDPR for asserting, exercising or defending legal claims and there is no reason to believe that you have an overriding interest in your data not being disclosed;
  • in the event that disclosure under Art. 6 (1) 1 c) of the GDPR is a statutory obligation; and
  • this is legally permissible and, in accordance with Art. 6 (1) 1) b) of the GDPR, is required in order to transact contractual relationships with you.

4. Analytical tools

Google Analytics
Insofar as you have given your consent, Google Analytics, a web analysis service provided by Google LLC, is used on this website. The responsible service provider within the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Analytics uses cookies, which enable the analysis of your use of our website. The information about your use of this website, which is automatically collected using cookies, is generally transmitted to and stored in a Google server in the USA.

[OPTIONAL] We use the user ID function. Through user ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyse user behaviour across devices.

[OPTIONAL] We use Google Signals. This means that Google Analytics collects additional information about users who have activated personalised ads (interests and demographic data), and ads can be delivered to these users in cross-device remarketing campaigns.

We use the "anonymizeIP" function (known as IP masking): due to the activation of IP anonymisation on this website, your IP address will be truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will be transferred to a Google server in the USA and truncated there in exceptional cases only. The IP address provided by your browser for the purposes of Google Analytics will not be combined with other data from Google.

During your visit to the website, the following data is recorded:

  • The pages you have visited, your "click path"
  • Achievement of "website goals" (conversions, e.g., newsletter registrations, downloads, purchases)
  • Your user behaviour (e.g., clicks, length of stay, bounce rates)
  • Your approximate location (region)
  • Your IP address (truncated)
  • Technical information about your browser and the end devices you use (e.g., language setting, screen resolution)
  • Your Internet provider
  • The referrer URL (through which website/promotional medium you arrived at this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your (pseudonymous [NOT WHEN USING USER ID]) use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website [OPTIONAL] and the success of our marketing campaigns.

Recipient
The recipient of the data is

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,

as the data processor. We have entered into a processing contract with Google for this purpose. Google LLC, based in California, USA, and possibly US authorities, can access the data stored by Google.

Transfer to third countries
The transfer of data to the USA cannot be ruled out.

Retention period
The data sent by us and linked to cookies is automatically deleted after 14 months. Once the retention period for a piece of data has expired, it will be deleted in an automatic process that runs once per month.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by
a. withholding your consent to the placement of the cookie or
b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

You may refuse the saving of cookies by selecting the appropriate settings in your browser. However, if you configure your browser so that all cookies are rejected, this may restrict the functionality of this and other websites.

The legal basis
for this data processing is your consent, which may be revoked, under Art. 6(1) 1 a) of the GDPR. You can revoke your consent at any time with effect for the future by opening the cookie settings [PLACE LINK TO SETTINGS OPTIONS FOR CONSENT TOOLS HERE] (we'll do this) and changing your selection there.

Further information about the terms of use of Google Analytics and data protection at Google is available at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

5. Rights of data subjects

You have the right:

  • to request information about personal data of yours that is processed by us under Art. 15 of the GDPR. In particular, you may obtain information about the purposes of the data processing; the category of personal data; the categories of recipients to whom your data has been or will be disclosed; the planned retention period; the existence of a right to rectification, a right to erasure, a right to restriction of processing or a right to object; the existence of a right of appeal; the origin of your data, if it has not been collected by us; and the existence of any automated decision-making, including profiling, and, where appropriate, meaningful information about its details;
  • to immediately request the rectification of incomplete or incorrect personal data stored by us in accordance with Art. 16 of the GDPR;
  • to request the erasure of your personal data stored by us in accordance with Art. 17 of the GDPR;
  • in accordance with Art. 20 of the GDPR, to receive the personal data of yours that you have provided to us in a structured, current and machine-readable format or to request its transfer to another data controller;
  • in accordance with Art. 7 3 of the GDPR, to withdraw your consent, which you previously gave to us, at any time. As a result, we would then no longer be allowed to continue processing data on the basis of this consent in the future; and
  • under Art. 77 of the GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or at the location of our headquarters.

6. Right to object

If your personal data is processed on the basis of legitimate interests under Art. 6 (1) 1 f of the GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data if this is due to reasons which arise from your particular situation or if the objection is raised against direct advertising. In the latter case, you have a general right of objection, which we will implement without the need for you to specify a particular situation. If you wish to assert your right of withdrawal or your right to object, it is sufficient to send an email to info@hartman-os.com.

7. Data security

When you visit our website, we utilise the common SSL (Secure Socket Layer) method in combination with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether or not a particular page of our website is transmitted in encrypted form is indicated by the display of a closed key or lock icon in the bottom status bar of your browser. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised third-party access. Our security measures are improved continuously in order to meet state-of-the-art requirements.

8. Integration of third-party services and content

From time to time, third-party content such as maps or fonts from other websites may be integrated into this website. Users should assume that the third parties providing this content can see their IP addresses, because they would not be able to send the content to the users' browsers without the IP address. Your IP address is therefore necessary in order for this content to be displayed. These third parties can also set their own cookies and process user data for their own purposes. In the process, user profiles can be created from the processed data. We use this content in as sparing a manner as possible and select third-party providers which are reliable in the secure handling of data.

The following presentation provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and on options for objecting (known as "opt-out") – in part, already mentioned here:

9. Cookies

10. Updates and amendments to this Privacy Policy

This Privacy Policy is currently valid and was last updated in October 2018.