Privacy Policy of Institutes Dr. Schrader
- General Information
The Institutes Dr. Schrader, consisting of the following individual companies, are responsible for data processing:
Institut Dr. Schrader Ancopharm
Institut Dr. Schrader Beratungslabor
Institut Dr. Schrader Creachem GmbH
Institut Dr. Schrader Hautphysiologie
Institute Dr. Schrader International GmbH
Max-Planck-Str. 6
37603 Holzminden
Phone: 05531 / 9313-0
Email: info@schrader-institute.de
Data Protection Officer
For any further information and explanations, you can contact our data protection officer at any time:
Dr. Heiko Nerenz, Phone: 05531 / 9313-0, Email: datenschutz@schrader-institute.de
- Hosting
The web server for operating our website is technically operated by the following external hosting provider.
BluelionWebdesign – iosoft-websolutions
Wilhelm Köhler Str. 33a
86956 Schongau
Germany
The personal data collected on this website is stored on the host’s servers. This can be in particular IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.
The external hosting takes place for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) b GDPR (General Data Protection Regulation)) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1) f GDPR). If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 (1) a GDPR and § 25 para. 1 (e. g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
We have concluded a contract for order processing (Art. 28 GDPR) with the above-mentioned service provider. This legally required contract ensures that this provider only processes the personal data of our website visitors according to our instructions and in compliance with the GDPR.
- Purpose and Scope of Data Processing
Access and Use of the Website
Every time our website is called up, the following access data about this process is automatically stored in a log file on our host’s server for technical reasons:
- Browser type und browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of server request
- IP address
We process this data (log files) for the purpose of providing the content of our website, to ensure the functionality of our information technology systems, in particular to ward off attempts to attack our web server, and to optimize our website. It is not possible for us to draw conclusions about individual persons based on this data. The data of the log files are stored separately from other personal data of the user.
The legal basis for the aforementioned data collection is Article 6 (1) f GDPR. Our legitimate interest in data collection results from the stated purposes.
This data is generally stored by us for a period of 7 days and then deleted, unless we have been legally obliged by a third party to continue to store this data and/or we have concrete indications of illegal use.
Contact by Email or Telephone
If you contact us by e-mail or telephone, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) a GDPR) and/or on our legitimate interests (Art. 6 (1) f GDPR), since we have a legitimate interest in the effective processing the inquiries addressed to us.
The data you sent to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
Contact Form
You can contact us via a contact form provided by us on our website. If you send us inquiries in this way, your details from the contact form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) f GDPR) or on your consent (Art. 6 (1) a GDPR) if this was queried.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
- Cookies
Our website uses so-called “cookies”. Cookies are small data packages and do not damage your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.
Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites.
Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.
Cookies that are required to carry out the electronic communication process, to provide certain functions you want or to optimize the website (necessary cookies) are processed on the basis of Art. 6 (1) f GDPR, unless another legal basis is given. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies was requested, processing takes place exclusively on the basis of this consent (Art. 6 (1) a DSGVO and § 25 Para. 1 TTDSG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
You can find out which cookies and services are used on this website in this data protection declaration.
Consent with Complianz
Our website uses the Complianz consent technology to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, The Netherlands (hereinafter “Complianz”).
Complianz is hosted on our servers, so there is no connection to the Complianz’s provider’s servers. Complianz saves a cookie in your browser in order to be able to allocate the given consent or its revocation to you. The data collected in this way is stored until you request us to delete it, delete the Complianz cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.
Complianz is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) (c) GDPR.
- Plugins and Tools
Google Fonts (local hosting)
This website uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.
You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://policies.google.com/privacy?hl=en.
Font Awesome (local hosting)
This website uses Font Awesome for the uniform display of fonts. Font Awesome is installed locally. There is no connection to Fonticons, Inc. servers.
For more information about Font Awesome, see the Font Awesome Privacy Policy at: https://fontawesome.com/privacy.
Google Maps
This website uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this website has no influence on this data transfer. If Google Maps is activated, Google can use Google Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
Google Maps is used in the interest of an attractive presentation of our online offers and to make it easier to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6 (1) f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) a GDPR and Article 25 Paragraph 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
As soon as you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (e.g. your IP address) is transmitted to Google’s servers and stored there. This can also result in transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Article 6 (1) f GDPR on the basis of Google’s legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. You can find more information on handling user data in Google’s data protection declaration: https://policies.google.com/privacy?hl=en.
- Storage Period
Unless a specific storage period has been specified in this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the data will be deleted once these reasons have ceased to exist.
- Own Services
Handling of Applicant Data
We offer you the opportunity to apply to us (e.g. by e-mail or post). In the following we will inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data takes place in accordance with the applicable data protection law and all other statutory provisions and that your data will be treated with the utmost confidentiality.
Scope and Purpose of Data Collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes from job interviews, etc.) insofar as this is necessary to make a decision on the establishment of an employment relationship. The legal basis for this is § 26 of the Federal Data Protection Act (BDSG) under German law (initiation of an employment relationship), Article 6 (1) b GDPR (general contract initiation) and – if you have given your consent – Article 6 (1) a GDPR. The consent can be revoked at any time. Within our company, your personal data will only be passed on to people who are involved in processing your application. If the application is successful, the data you submit will be stored in our data processing systems on the basis of § 26 BDSG and Article 6 (1) b GDPR for the purpose of carrying out the employment relationship.
Retention Period of the Data
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have transmitted on the basis of our legitimate interests (Art. 6 (1) f GDPR) for up to 6 months to be kept with us from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted if the purpose for further storage no longer applies. A longer storage can also take place if you have given your consent (Art. 6 (1) a GDPR) or if statutory storage obligations prevent the deletion.
- Your Rights
You have the following rights regarding your personal data, vis-a-vis the responsible entity:
- Right to information, Article 15 of the GDPR
- Right to correction, Article 16 of the GDPR
- Right to correction and erasure, Article 17 of the GDPR
- Right to restriction of processing, Article 18 of the GDPR
- Right to object to the collection, processing, and/or use, Article 21 of the GDPR
- Right to data portability, Article 20 of the GDPR
- Where the processing of personal data is based on your consent (Article 6 (1) (a) GDPR), you may revoke such consent at any time for the purpose in question. The lawfulness of processing your data based on your given consent continues until such time as the revocation of such consent has been received.
Furthermore, you are entitled to make a complaint to the data protection supervisory authority. Your responsible supervisory authority is that of your place of residence. A list of the supervisory authorities (Germany) can be found here: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
