1. Name and contact details of the controller and of the data protection officer

This privacy policy applies to data processing by:

Controller:

CODAN Medizinische Geräte GmbH
Stig Husted-Andersen Straße 11
23738 Lensahn · DE
Telephone: +49 (0) 43 63 · 51 11
Telefax: +49 (0) 43 63 · 51 12 14

The company data protection officer can be reached at the above-mentioned address, Att. Data protection officer, or by e-mail: Info@codancomponents.com.

2. Collection, storage and deletion of personal data as well as type and purpose and their use

a) When visiting the website:

When you visit our website www.codancomponents.com, the browser you are using on your terminal device automatically sends information to the server of our website. This information will be temporarily stored in a so-called log file. The following information will be recorded without your intervention and stored until automated deletion:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which access has been made (Referrer URL)
• The browser used and, if applicable, your computer’s operating system, and your access provider’s name

We will be processing the above-mentioned data for the following purposes:

• Ensuring a smooth connection of the website
• Ensuring comfortable use of our website
• Evaluation of system security and stability
• Other administrative purposes

The legal basis for data processing is GDPR sec. 6 para 1 lit. f. Our legitimate interest follows from the purposes listed above for data collection.  In no case we will be using the collected data for the purpose of drawing conclusions about you.

b) When contacting us:

We provide various contact information (e.g. e-mail address, telephone number and contact form) on our website that you can use to contact us. If you choose to use them, we process your personal data (in particular name, e-mail address or telephone number, and all content provided in the course of communication) exclusively to answer your inquiry.

The legal basis for this data processing is Article 6 para 1 lit. f GDPR. Our legitimate interest follows from wanting to process your request to your satisfaction. In view of your proactive contact, it is not apparent that this interest would conflict with any of your interests.

If you contact us aiming to conclude a contract with us, the legal basis for this data processing is Article 6 para 1 lit. b GDPR.

c) Erasure of your data:

Your personal data will be deleted in accordance with legal requirements as soon as you have revoked your consent to processing or other legal permissions cease to apply (for example if the data is no longer required to fulfil the respective purpose).

Should the data not be erased because it is required for other legally permissible purposes, we will limit its processing to those purposes. Your personal data will then be blocked and not processed for other purposes. This applies, for example, when processing is necessary for an assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person.

d) When applying for job offers:

Under the category “Career” on our website, you have the opportunity to apply for open positions.

If you send us your application, we will collect all documents you choose to submit to us via e-mail (e.g. cover letter, CV and references) including the personal data contained therein.

Your personal data will be processed exclusively for the purpose of processing your application for a specific job advertisement or as a speculative application. We process your data for the purpose of assessing your suitability for the advertised position or for the position for which you have submitted an unsolicited application based on Article 6 para 1 lit. b GDPR.

In the event of non-employment, your data will be deleted six months after non-employment. If you are hired, your data will be stored in your personnel file and only deleted after the employment relationship has ended and all foreseeable claims have become time-barred (three years at the end of the year, starting at the end of the calendar year in which the employment relationship was terminated). By way of exception, we will deviate from these regular deletion periods if we are obliged to store data for a longer period of time in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or if you consent to further storage in accordance with Article 6 para 1 lit. a GDPR.

3. Disclosure of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• • • you have given your express consent in accordance with Article 6 para 1 lit. a GDPR,
    • the disclosure pursuant to Article 6 para 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
    • in the event that there is a legal obligation for the disclosure pursuant to Article 6 para 1 lit. c GDPR, and
    • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Article 6 para 1 lit. b GDPR.

Where this results in the processing of your data in countries outside the European Union, we will ensure that this data transfer complies with the requirements of the GDPR.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity. The use of cookies is used to statistically record the use of our website and to evaluate it for the purpose of optimising our performance for you. These cookies allow us to automatically recognise when you visit our website again that you have already been with us. These cookies will be erased after a defined period of time. The data processed by cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties pursuant to GDPR sec. 6 para 1 lit. f. Most browsers automatically accept cookies. However, you can configure your browser in a way that no cookies will be stored on your computer or a message always will appear prior to a new cookie being created. However, complete deactivation of cookies might lead to you not being able to using all our website’s functions.

5. Rights of data subjects
You have the right:

• to obtain access to your personal data processed by us in accordance with GDPR sec. 15. In particular, you may obtain access to the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
• to immediately request the rectification of inaccurate or completion of incomplete personal data stored by us in accordance with GDPR sec. 16;
• to request the erasure of your personal data stored by us pursuant to GDPR sec. 17, unless the processing for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for assertion, exercise or defense of legal rights is required;
• to demand the restriction of the processing of your personal data pursuant to GDPR sec. 18, as far as the accuracy of the data is contested by you, the processing is unlawful, but you reject its erasure and we no longer need the data, but you require this, for the exercise or defense of legal claims or you objected to processing pursuant to GDPR sec. 21;
• to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format in accordance with GDPR sec. 20. or to demand transmission to another controller;
• to object to your consent given pursuant to GDPR sec. 7 para 3 at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future and
• to lodge a complaint with a supervisory authority pursuant to GDPR sec. 77. As a rule, you can contact the supervisory authority of your habitual residence or place of work or place of business.

6. Right to object

If your personal data are processed based on legitimate interests pursuant to GDPR sec. 6 para. 1 sentence 1 lit. f, you have the right to object to the processing of your personal data pursuant to GDPR sec. 21, provided that there are reasons on grounds relating to your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to make use of your right of revocation or objection, simply send an e-mail to Info@codancomponents.com.

7. Data security

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser.  Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form can be seen from the closed display of the key or lock symbol in the status bar of your browser.  We make use of the rest of the adequate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

8. Links to services of third parties:

We have included links on our website to third-party websites or to content hosted on such third-party websites. In detail, this involves the following:

www.linkedin.com (a service of the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland).

The integration of the relevant content or links as such does not result in any processing of personal data. However, if you click on one of these buttons, you will be redirected to the respective website. We are not responsible for the processing of your personal data there. Information on the processing of your personal data can be found in the data protection information there.

9. Userway:

To ensure the accessibility of our website, we use Userway. This is a service provided by UserWay Inc., 1000 N. West Street, Suite 1410, Wilmington, DE, 19801, USA. It enables us to include a widget on our website that allows you to customise the display of the website according to your needs and preferences (e.g. contrast, font size, etc.). In this context, information about the settings you have made and, if applicable, data relating to your use of the website (including your IP address) will be processed.

The processing of your personal data is based on Article 6 para 1 lit. c GDPR, where it is necessary to comply with our legal obligations under applicable accessibility law. Beyond that, the processing of your personal data serves our and your legitimate interest according to Article 6 para 1 lit. f GDPR in making our website accessible to everyone, regardless of individual abilities.

Where the use of Userway results in the processing of your data in countries outside the European Union, we will ensure that this data transfer complies with the requirements of the GDPR.

Further information on privacy in the context of Userway can be found at: https://userway.org/dsgvo/

10. Currentness and variation of this privacy policy

This data protection declaration is currently valid and has the status as of Januar 2023. Due to further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at www.codancomponents.com/privacy-policy/.