Privacy policy

1. Controller

The controller for data processing on this website under the General Data Protection Regulation (GDPR) is MeDiTA Pro GmbH, Bürgermeister-Wegele-Str. 12, 86167 Augsburg, Germany. Managing director: Stephen Hoffmann. Phone: +49 821 4370399900. Email: kontakt@medita-pro.de.

The contact for questions about data protection is Stephen Hoffmann, reachable at the contact details above.

2. What this website does not do

This website sets no cookies, uses no analytics or advertising tools, and loads no fonts, scripts or images from other providers. Everything you see is delivered from our own site. Links to other websites, such as LinkedIn or our online shop, are plain links: data is passed on to them only if you click.

3. Server log files and encryption

When you only look at this website, the web server processes the data your browser sends and that is technically needed to show the page: the page requested, date and time of the request, the amount of data sent, the referring page, the browser, the operating system and the IP address. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a stable and secure website. The data is not passed on to third parties. We reserve the right to check the log files afterwards if there are concrete signs of unlawful use.

For security and to protect confidential content such as requests, the website is delivered with TLS encryption. You can recognise this by "https://" and the lock symbol in your browser.

4. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the data that arises when a page is opened (see section 3) on our behalf.

5. Language selection and cookie notice

The start page shows English or German depending on the language setting of your browser. No cookie is used for this.

When you first visit, a notice asks whether you accept optional cookies. We currently use none. Your choice is stored in your browser (local storage, entry "medita-consent") so that we do not ask again. This storage is technically necessary (section 25(2) no. 2 TDDDG). You can change your choice at any time through "Cookie settings" in the footer.

6. Contact form and email

If you send us a request through the form, we process the details you enter (topic, name, company, country, email, optional phone number and your message) to answer your request. The form passes them to us by email; the web server does not store the request. Legal basis: Art. 6(1)(b) GDPR for pre-contractual enquiries and Art. 6(1)(f) GDPR otherwise. The same applies if you write to us by email directly.

To protect against misuse (spam, automated mass requests) the form works with a time ticket that the server issues when the form opens, and with counters that limit requests per visitor, per email address and overall. The counters consist only of a non-reversible checksum of the IP address or email address and time stamps. They are kept in the server's temporary storage, lose their effect after ten minutes and are cleaned up regularly. A DNS query checks whether the domain of your email address exists. Legal basis: Art. 6(1)(f) GDPR (protection against misuse).

7. Recipients and voluntary information

Our hosting and email provider IONOS SE processes data on our behalf. We do not pass your data on to other third parties. Providing the details in the form is voluntary, but without name, email address and message we cannot answer your request. We do not use automated decision-making or profiling.

8. Storage period

We store personal data only as long as the purpose requires or statutory retention periods demand, for example commercial and tax law periods. We delete requests that came in through the form or by email as soon as they are dealt with and no retention period applies.

9. Your rights

Under data protection law you have the following rights towards the controller:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to be informed (Art. 19 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent given (Art. 7(3) GDPR)
• right to lodge a complaint (Art. 77 GDPR)

Write to us at the address above to exercise your rights.

10. Right to object

If we process your personal data on the basis of a legitimate interest, you have the right to object at any time, on grounds relating to your particular situation, with effect for the future. We then stop the processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. If we process your data for direct marketing, you can object at any time without giving reasons.

11. Supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany (postal address: Postfach 1349, 91504 Ansbach). Email: poststelle@lda.bayern.de.