Privacy Policy

Thank you for your interest in our website. The protection of your personal data is particularly important to us. Below, we provide detailed information on how we handle your personal data. We comply with all applicable provisions of the GDPR and other data protection regulations.

1. An overview of data protection

General information

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is any data that can be used to identify you personally. This Privacy Policy explains what data we collect, what we use it for, and how and for what purpose this is done.

Please note that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

Controller Responsible for Data Collection on Our Website

The controller responsible for data processing on this website is:

NEUROmedical
part of NEUROzentrum Dr. Tiedge und Kollegen

Elisabethstrasse 7
99096 Erfurt
Germany

Phone: +49 361 – 64 35 991
Fax: +49 361 – 64 35 910

mail@neuromedical.aero
neuromedical.aero

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses or similar information).

Click here for detailed information on data collection on our website under Section 4.

2. Hosting und Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (hosting provider). Personal data collected on this website is stored on the hosting provider’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contractual data, contact details, names, website access data and other data generated through the use of a website.

The hosting provider is used for the purpose of fulfilling our contractual obligations towards prospective and existing customers (Art. 6(1)(b) GDPR) and in our legitimate interest in providing our online services securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR). Our hosting provider will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.

We use the following hosting provider:

1&1 IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

Data Processing Agreement

To ensure data processing in compliance with data protection regulations, we have concluded a data processing agreement with our hosting provider.

3. General Information and Mandatory Disclosures

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw consent that you have already given at any time. An informal notification by email is sufficient. The lawfulness of any data processing carried out prior to the withdrawal of consent remains unaffected.

Right of Access and Withdrawal

Under the EU GDPR, you have the right to request information from us at any time as to whether we store personal data relating to you. You also have the following rights with regard to such stored data:

  • the right of access to stored data (Art. 15 GDPR);
  • the right to rectification of inaccurate data (Art. 16 GDPR);
  • the right to erasure of data (Art. 17 GDPR);
  • the right to restriction of data processing (Art. 18 GDPR);
  • the right to object to data processing (Art. 21 GDPR); and
  • the right to data portability (Art. 20 GDPR).

If you have given your consent to the use of your data, you may withdraw this consent at any time with effect for the future.

Please send all requests for information, access requests or objections relating to data processing by email to mail@neuromedical.aero oor by post to NEUROzentrum, Dr. med. Oliver Tiedge, Elisabethstrasse 7, 99096 Erfurt, Germany.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of a breach of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company has its registered office. A list of Data Protection Commissioners and their contact details is available via the following link.

Objection to Promotional Emails

We hereby object to the use of contact details published as part of our legal notice obligations for the purpose of sending unsolicited advertising and informational materials. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional communications, such as spam emails.

4. Data Collection on Our Website

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the change in your browser’s address bar from “http://” to “https://” and by the padlock symbol displayed in your browser.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

How Do We Collect Your Data?

Some data is collected when you provide it to us. This may include, for example, information that you enter into a contact form or send to us by email.

Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data (e.g. your Internet browser, operating system or the time at which the page was accessed). This data is collected automatically as soon as you access our website.

What Do We Use Your Data For?

Some of the data is collected to ensure that the website functions correctly. Other data may be anonymised and used to analyse user behaviour.

Cookies

This website uses cookies in some areas. Cookies do not damage your device and do not contain viruses. They are used to make our services more user-friendly, effective and secure. Cookies are small text files that are stored on your device by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser when you next visit our website.

You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to reject cookies in certain cases or in general, and to automatically delete cookies when you close your browser. Disabling cookies may restrict the functionality of this website.

Cookies required to carry out electronic communications or to provide certain functions requested by you are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of its services. Where other cookies are stored, they are addressed separately in this Privacy Policy.

Further information about the cookies we use can be found in our Cookie Policy.

Cookie Consent with Borlabs Cookie

Our website uses Borlabs Cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this consent in compliance with data protection regulations. This technology is provided by Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter “Borlabs”).

When you access our website, a Borlabs cookie is stored in your browser. This cookie records the consent you have given or the withdrawal of such consent. This data is not transferred to the provider of Borlabs Cookie.

The collected data will be stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. For details on data processing by Borlabs Cookie, please visit: https://borlabs.io/docs/what-data-does-the-borlabs-cookie-store

Borlabs Cookie consent technology is used to obtain the consent required by law for the use of cookies. The legal basis for this is Art. 6(1), sentence 1, point (c) GDPR.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us when you access our website. This information includes:

  • browser type and browser version;
  • operating system used;
  • referrer URL;
  • hostname of the accessing device;
  • time of the server request; and
  • IP address.

This data is not combined with data from other sources.

The legal basis for this data processing is our overriding legitimate interest in the continuous availability and security of our website pursuant to Art. 6(1)(f) GDPR. The log file is deleted after seven days unless it is required to provide evidence of or investigate specific legal violations that became known during the retention period.

Rechtsgrundlage der Datenverarbeitung ist gemäß Art. 6 Abs. 1 f) DSGVO unser überwiegend berechtigtes Interesse an der fortlaufenden Bereitstellung und Sicherheit unserer Webseite. Die Logdatei wird nach sieben Tagen gelöscht, es sei denn, diese wird benötigt, um konkrete Rechtsverletzungen, in innerhalb der Aufbewahrungsfrist bekannt geworden sind, nachzuweisen oder aufzuklären.

Telephone and Email

If you contact us by telephone or email, your enquiry, including any personal data arising from it, will be stored by us for the purpose of processing your enquiry and any follow-up questions. We will not disclose this data without your consent. The legal basis for this processing is our overriding legitimate interest in handling your enquiry pursuant to Art. 6(1)(f) GDPR.

The data you provide by telephone or email will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory statutory provisions, particularly retention periods, remain unaffected.

5. Plugins und Tools

Google Web Fonts (Local Hosting)

This website uses web fonts provided by Google to ensure the consistent display of fonts. Google Fonts are installed locally. No connection to Google servers is established.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://policies.google.com/privacy.

Font Awesome (Local Hosting)

This website uses Font Awesome to ensure the consistent display of fonts and icons. Font Awesome is installed locally. No connection to the servers of Fonticons, Inc. is established. Further information about Font Awesome can be found in the Font Awesome Privacy Policy: https://www.fontawesome.com/privacy.

Google Search Console

This website uses Google Search Console. The search analytics provided by this service show how often our website appears in Google search results. We can filter and group the data, for example by categories such as search query, date or device. We use the results solely to optimise our website’s search performance. You acknowledge and agree that Google’s Privacy Policy applies and that, through the use of Google services https://www.google.de/intl/de/policies/privacy/, you are subject to Google’s provisions regarding the use of personal data.

Yoast SEO

We use Yoast SEO plugins on our website. These are provided by Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, The Netherlands, Tel: +31 (0)24 82 00 337 (Chamber of Commerce / KvK: 55404367, VAT Number: NL851692540B01).

This plugin handles the technical optimisation of our website for search engines and also assists with content development. Further information can be found in the Privacy Policy of Yoast BV: https://yoast.com/privacy-policy/

UpdraftPlus

This website uses the WordPress plugin UpdraftPlus (Simba Hosting Ltd., UK registered company number: 8570611, VAT number: 202 1260 80; product development and marketing in cooperation with XIBO Ltd, Cardiff, UK). Its use is based on our legitimate interests within the meaning of Art. 6(1)(f) GDPR. This service is used to create encrypted backups (SFTP/SCP) of the entire WordPress installation at regular intervals on the servers of our hosting provider. Further information can be found in the UpdraftPlus Privacy Policy: https://updraftplus.com/data-protection-and-privacy-centre/