Privacy policy
This Privacy Policy outlines medical trAIning GmbH ("we", "our" or "the Company") practices with respect to the scope and purpose of the information collected and processed from users who access our website at en.valmed.online ("Site"), and any sub-domains of this Site unless expressly excluded by their own terms and conditions, or otherwise share personal data with us (collectively: "Users").
Personal data is all information that can be used to identify you personally and that can be traced back to you. This includes, for example, your name, address, email address, customer and user behaviour. With regard to the other terms, in particular the terms “processing” and “consent”, we refer to the legal data protection definitions according to the General Data Protection Regulation (hereinafter “GDPR”).
Responsible authority within the meaning of data protection laws, in particular the GDPR: Hessen Commissioner for Data Protection and Freedom of Information.
1. Controller
The person responsible for data protection as the Controller in the meaning of the GDPR is:
medical trAIning GmbH
Fasanenweg 2
63225 Langen
Germany
Email: contact@valmed.online
For questions and/or comments about our Privacy Policy, please contact us by using the aforementioned contact details.
2. General information about the scope of the data collection and processing
We process your personal data in connection with our website, content and services. Therefore, we collect two types of data and information from Users.
The first type of information is un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via your use of the Site (“Non-personal data”). We are not aware of the identity of a User from which the Non-personal data was collected. Non-personal data which is being collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to enhance the functionality of our Site. We may also collect information on your activity on the Site (e.g. pages viewed, online browsing, clicks, actions, etc.).
The second type of information personal data which is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual.
Such information includes:
- Device Information: We collect personal data from your device. Such information includes geolocation data, IP address, unique identifiers (e.g. MAC address and UUID) and other information such as login data which relates to your activity through the Site.
- Registration information: When you submit the registration and/or contact form you will be asked to provide us certain details such as: full name; e-mail or physical address, and other information.
- Input and Output information: We collect your interaction activities with our tool Valmed A(I)cademy®, in particular your Input and Output.
- Financial information: We collect and process billing information, such as your name, billing address, payment method details (e.g., credit card number, expiration date), and transaction history, when you purchase products or services on our Site.
3. Purpose for processing of personal data
Processing of your personal data is necessary for the performance of our contractual obligations towards you and providing you with our services, to protect our legitimate interests and for compliance with legal and financial regulatory obligations to which we are subject.
We may use the information for the following:
- Providing, developing and improving our services;
- Communicating with you – sending you notices regarding our services, providing you with technical information and responding to any customer service issue you may have;
- To communicate with you and to keep you informed of our latest updates and services;
- To serve you advertisements when you use our Site (see more under "Advertisements");
- To market our websites and products (see more under "Marketing");
- Conducting statistical and analytical purposes, intended to improve the Site.
When you use the Site, you consent to the collection, storage, use, disclosure and other uses of your personal data as described in this Privacy Policy.
We encourage our Users to carefully read the Privacy Policy and use it to make informed decisions.
4. Recipients of the personal data
In addition to the different uses listed above, we may transfer or disclose personal data to our subsidiaries, affiliated companies and subcontractors.
In addition to the purposes listed in this Privacy Policy, we may share personal data with our trusted third party providers, who may be located in different jurisdictions across the world, for any of the following purposes:
- Hosting and operating our Site;
- Providing you with our services, including providing a personalized display of our Site;
- Storing and processing such information on our behalf;
- Serving you with advertisements and assist us in evaluating the success of our advertising campaigns and help us retarget any of our users;
- Providing you with marketing offers and promotional materials related to our Site and services;
- Performing research, technical diagnostics or analytics;
We may also disclose information if we have good faith to believe that disclosure of such information is helpful or reasonably necessary to:
(i) comply with any applicable law, regulation, legal process or governmental request;
(ii) enforce our policies (including our Agreement), including investigations of potential violations thereof;
(iii) investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues;
(iv) to establish or exercise our rights to defend against legal claims;
(v) prevent harm to the rights, property or safety of us, our users, yourself or any third party; or
(vi) for the purpose of collaborating with law enforcement agencies and/or in case we find it necessary in order to enforce intellectual property or other legal rights.
5. Legal basis for processing of personal data
We process personal data of our Users solely insofar as this is necessary in order to provide a functional website, as well as our content and services. The processing of the User’s personal data is carried out in accordance with the provisions of the GDPR.
5.1 Consent
Art. 6 para. 1 lit. a GDPR serves as legal basis insofar as we seek the consent of the data subject for processing operations of personal data.
The processing of the personal data of our users is regularly only carried out after obtaining the consent of the user. An exception applies in cases in which it is not possible to obtain consent in advance for factual reasons and the processing of the data is authorized through statutory provisions.
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
5.2 Performance of a contract
Art. 6 para. 1 lit. b GDPR serves as legal basis for the processing of personal data, which is necessary for the performance of a contract to which the data subject is party. The same applies to the processing operations that are necessary in order to take steps prior to entering into a contract.
5.3 Compliance with a legal obligation
Art. 6 para. 1 lit. c GDPR serves as legal basis insofar as a processing of personal data is necessary for compliance with a legal obligation to which our company is subject. In the case that vital interests of the data subject or of another natural person necessitate the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as legal basis.
5.4 Legitimate interests
Art. 6 para. 1 lit. f GDPR serves as legal basis for the processing if the processing is necessary for the purpose of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
6. Rights of the data subject
If your personal data are processed, you are a data subject within the meaning of the GDPR are are entitled to the following rights. To exercise your rights, you can contact us or the protection officer using the contact details provided above.
You may request to:
6.1 Receive confirmation as to whether or not personal data concerning you is being processed, and access your stored personal data, together with supplementary information (right of access).
6.2 Receive a copy of personal data you directly volunteer to us in a structured, commonly used and machine-readable format (right to data portability).
6.3 Request rectification of your personal data that is in our control (right to rectification).
6.4 Request erasure of your personal data (right to erasure).
6.5 Object to the processing of personal data by us (right to object).
6.6 Request to restrict processing of your personal data by us (right to restriction of processing).
6.7 Withdraw your declaration of consent under the data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
6.8 Lodge a complaint with a supervisory authority.
If you wish to exercise any of the aforementioned rights, or receive more information, please contact: contact@valmed.online
7. Retention
We will retain your personal data for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. Under applicable regulations, we will keep records containing client personal data, account opening documents, communications and anything else as required by applicable laws and regulations.
8. Automated individual decision including profiling
We do not use solely automated decision-making in accordance with Art. 22 GDPR to provide our services. Should we use these procedures in individual cases, we will inform you separately about this and about your rights in this regard, insofar as this is required by law.