I. Who is the responsible body (“controller” in terms of the GDPR) and how can I contact the data protection officer?
Algora Gesellschaft für Medizinstatistik und Vertriebssysteme mbH
Münchener Str. 11
You can contact our data protection officer which is JURANDO GmbH (https://www.jurando.de) under firstname.lastname@example.org or by postal letter to our address; in the latter case, please add: “Att. data protection officer”.
II. Which are the rights you are entitled to?
You are entitled to the following rights which you can assert against us with respect to the personal data concerning you:
- Right to information/ access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object to the processing (Art. 21 GDPR).
In addition, you have the right to lodge a complaint about us with a supervisory authority according to Art. 77 GDPR.
Where you have consented to the processing, you have the right to withdraw the consent at any time; however, the withdrawal of consent will not affect the lawfulness of processing based on the consent before its withdrawal.
III. For what purposes do we process personal data and what is the legal basis for the processing?
When you visit our website
When you visit our website for mere information purposes, i.e. when you do not register or otherwise transfer or disclose information to us, we only collect those personal data which your browser transfers to us. This includes (to be agreed with the person in charge of your website)
- IP address
- Date and time of access
- Details of the query (specific page accessed)
- Access status/HTTP status code
- Website from which the query is made (so-called “referrer”)
- Operating system and its surface
- Language and version of the browser software.
We also store this data including the IP address as log files.
We require this data for technical reasons to be able to display our website, ensure stability and security and optimize our presentation.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the aforementioned purposes.
We erase this data after seven days at the latest. We will only store data beyond that time after the personal data has been erased or anonymized. In the case of IP addresses, anonymization can be procured by appropriate shortening of the IP address.
When you contact us via the email addresses we have indicated for such purpose, we will store the personal data you have transferred to us in order to answer your requests. The information you have provided to us might be stored in a Customer Relationship Management System ("CRM system") or similar software.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the purposes mentioned above. Where the email by which you contact us is aimed at contract conclusion or when you send us an email in the context of an existing contractual relationship, the legal basis is Art. 6 subs. 1 b) GDPR.
The data is deleted after the request has been finally settled unless we are required by law to retain the data or we need the data for contract performance. You can also at any time object to the processing when the processing is based on a legitimate interest
When you transfer your application to us, we will process the transferred data to perform our (pre-) contractual duties in the context of the application procedure. If your application is successful, we further process the data for the purpose of handling and executing the employment relationship. The legal basis is Art. 6 subs. 1 b) GDPR as well as § 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). If you voluntarily transfer to us special categories of personal data such as health data or religion, also Art. 9 subs. 2 b) GDPR serves as legal basis. If your application is not successful, we will delete your data after six months at the latest. Until that time, the data is stored to answer any possible queries relating to the application procedure and to comply with our documentation duties under the German Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG). If you withdraw your application, we will delete your data immediately.