Data protection information in accordance with the EU General Data Protection Regulation (GDPR)

Scope Below we give you an overview of the processing of your personal data by us and the associated rights under data protection law. You will receive information about the type, scope and purpose of the collection and use of your data.

1. Responsibility for data processing OT medical GmbH Konsul-Smidt-Straße 8b28217 Bremen Telephone: 0421 5571610 Fax: 0421 55716195 E-mail address: info@ot-medical.de

2. Data and data sources We process personal data that we receive from our customers or potential customers, suppliers, applicants and third parties in the course of our business activities. In addition, we process personal data that we legitimately receive from other companies or other third parties. This data is required for the processing of orders/orders, the execution of contracts or for sending offers and information about our products and services by post. Relevant personal data (master data) are: - first and last name - title, academic degree - address - Other contact details such as B. Telephone, email address, date of birth, gender, occupational group names of employees, provided they are entrusted with the order processing or processing of our products 3. Collection of general information on our website With each access to this offer by us or the web Provider automatically collects information. This information, also referred to as server log files, is of a general nature and does not allow any conclusions to be drawn about your person. Among other things, the following is recorded: name of the website, file, date, data volume, web browser and web browser version, operating system, the domain name of your Internet provider, the so-called referrer URL (the page from which you accessed our offer) and the IP address. Without this data it would not be technically possible to deliver and display the content of the website. In this respect, the collection of data is absolutely necessary. In addition, we use the anonymous information for statistical purposes. They help us to optimize the offer and the technology. We also reserve the right to subsequently check the log files if we suspect illegal use of our offer. If you contact us via the online form or by e-mail, we will save the information you provide in order to answer your inquiry and to be able to ask possible follow-up questions. Our website uses so-called cookies. These are text files that are stored on your computer by the server. They contain information about the browser, the IP address, the operating system and the Internet connection. We do not pass this data on to third parties or link it to personal data without your consent. Cookies fulfill two main tasks. They help us to make it easier for you to navigate through our offer and enable the website to be displayed correctly. They are not used to inject viruses or start programs. Users have the option of accessing our website without cookies. To do this, the corresponding settings must be changed in the browser. Please use your browser's help function to find out how to disable cookies. However, we would like to point out that this may impair some functions of this website and limit the ease of use. The sites http://www.aboutads.info/choices/ (USA) and http://www.youronlinechoices.com/uk/your-ad-choices/ (Europe) allow you to manage online advertising cookies .4. Purpose of data processing We process the personal data mentioned under point 2 in accordance with the GDPR. 4.1 For the fulfillment of contractual obligations (Art. 6 Para. 1b GDPR) Personal data is processed to fulfill the orders and inquiries placed with us, orders placed by us and other business correspondence. 4.2 As part of the balancing of interests (Article 6 Para. 1f GDPR) If necessary, we process the personal data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties. - Data exchange with credit agencies - Advertising (e.g. serial letters assigned to agencies) - Guarantee of IT security - Processing 4.3 Based on your consent (Article 6 Para. 1a GDPR) As far as we have consent, personal data can be passed on for specific purposes (course planning, exchange of interests among customers, ...) 4.4 Due to legal regulations (Article 6 Para. 1 c GDPR) or in the public interest (Article 6 Para. 1e GDPR) As a manufacturer of medical devices, we are subject to various legal obligations and legal requirements. This concerns the obligation to report according to §3 of the MPSV as well as the inspection of the documentation of the QMS by auditors, notified bodies or competent authorities. 5. Data transfer Within the company, those departments that need access to personal data to fulfill contractual and legal obligations receive it. Service providers and vicarious agents used by us may receive data for this purpose if they have previously been sworn to secrecy or are subject to a legal obligation of secrecy. Personal data will be passed on to the transport company commissioned with the delivery as part of the contract processing. Payment data will be passed on to the commissioned bank as part of payment processing, if this is necessary for payment processing. 6. Data transfer to a third country Data is only transferred to countries outside the EU if an incident has occurred and medical devices are recalled in accordance with the provisions of the MPSV (Medical Device Safety Regulation), the requirements of the FDA, Section 21 CFR 803 "Medical Device Reporting ’ and Canadian Medical Device Regulations SOR/98/282, Sections 59 – 65 ‘Mandatory Problem Reporting’ and ‘Recall’. 7. How long do we store the data Personal data is stored for as long as is necessary for the contractual obligation or legal obligations. As a rule, the business relationship with our customers is long-term and therefore extends over several years. If data is no longer required to fulfill contractual or legal obligations, we delete it. Legal obligations within the framework of commercial and tax retention periods, Council Directive 93/42/EEC on medical devices and MPSV.8 must be observed. Data protection rights Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right of portability under Article 20 GDPR. Restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right to deletion. In addition, there is a right of appeal to a data protection supervisory authority in accordance with Article 77 GDPR i. V. m. § 19 BDSG.9. Obligation to provide data The personal data required for the establishment and implementation of a business relationship as well as for compliance with legal regulations must be provided. In particular, the fulfillment of legal regulations (e.g. traceability of a medical device) is binding for us.10. Automated decision-making (including profiling) In order to establish and implement our business relationships, we generally do not use fully automated decision-making in accordance with Article 22 GDPR. Profiling is only used if we want to provide targeted information to a specific professional group (dentists, dental technicians) about new products or training opportunities.

11. Changes to our data protection declaration In order to ensure that our data protection declaration always corresponds to the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adjusted due to new or revised services, for example new services. The new data protection declaration replaces the previous one. Information about the right of objection according to Article 21 DSGVO1. Individual right to object For special personal reasons, you can object at any time to the processing of personal data pursuant to Article 6 Paragraph 1e GDPR (data processing in the public interest) and Article 6 Paragraph 1f GDPR (data processing on the basis of a balance of interests). This also applies to profiling based on this provision i. s.d. Article 4 para. 4 GDPR. After an objection has been filed, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh the rights of the objector, or the processing serves to make money, exercise or defend legal claims.2. Right to object to the processing of data for advertising purposesWe process personal data for direct advertising (e.g. newsletters) to a small extent. You can object to this processing at any time. This also applies to advertising in connection with profiling. After an objection has been filed, we will no longer use the personal data for these purposes. The objection can be made informally, by phone (Tel. 0421 55716150), email: info@ot-medical.de, but also by letter or in person to an employee

Google Maps and Google Fonts

Google Maps Our website uses maps from Google Maps. This map service is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. For technical reasons, the display of the map material may require that Google, as the provider of the content, registers the IP address of the user. You can find the Google Maps terms of use at: https://www.google.com/intl/de_de/help/terms_maps.html

Google Fonts We partially integrate the fonts ("Google Fonts") provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated. For technical reasons, the display of the fonts may require that Google, as the provider of the content, registers the IP address of the user. You can find the terms of use for Google Fonts at: https://policies.google.com/terms?hl=de

Youtube

We embed the videos from the "YouTube" platform provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

Data protection information as of May 25, 2018