Privacy Declaration

Please note that this is the translation of the German version of the Privacy Declaration for this Web-site. It refers to Privacy Regulations under the EU General Data Protection Regulation (GDPR). Possible additional national regulations of other Member states aren´t considered. We, Abiomed Europe GmbH, thank you for visiting our homepage. As the secure handling of your data is particularly important to us as a company we would therefore like to inform you in detail about the use of your personal data when you visit our website.

Privacy Declaration

Name and contact details of the Controller

The Controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

Abiomed Europe GmbH
Neuenhofer Weg 3
52074 Aachen
Germany

Tel.: +49 241 8860-0
Fax: +49 241 8860-111
E-Mail: europe(at)abiomed.de
Website: www.protectedpci.eu


Contact Details of the Data Protection Officer

Abiomed Europe GmbH has appointed an external Data Protection Officer:

You can reach our DPO at:

VUV Beratungs- und Service GmbH
Datenschutzbeauftragter Abiomed Europe GmbH
Theaterstr. 55
52062 Aachen
Germany

E-Mail: abiomed(at)unser-datenschutz.de



1. Definitions

The Privacy Policy of Abiomed Europe GmbH is based on the terms used by the European Directive and Regulatory in the adoption of the EU General Data Protection Regulation (GDPR), in particular Art. 4 GDPR.

2. Data Collection

The website collects a set of general data and information each time the website is accessed by a data subject or an automated system. These general data and information are stored in the log files of the server. The following can be processed
(1) Browser types and versions used,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system accesses our website (so-called referrers),
(4) the sub-sites, which can be accessed via an accessing system on our Website can be triggered,
(5) the date and time of access to the website,
(6) an Internet Protocol (IP) address,
(7) the Internet service provider of the accessing system; and
(8) other similar data and information required for security purposes in the case of attacks on our information technology systems.

Using this general data and information Abiomed Europe GmbH doesn´t draw any conclusions about the data subject. Rather, this information is needed
(1) to deliver the contents of our website correctly,
(2) to optimise the content of our website and the advertising for it,
(3) the long-term functionality of our information technology systems and the technology of our web-site
as well as to warrant
(4) to provide law enforcement authorities in the event of a cyber attack with the information required

The data and information collected by Abiomed Europe GmbH is therefore evaluated statistically on the one hand and with the aim of improving data protection on the other hand.

Further it is needed to increase the data security in our company, in order to finally achieve an optimal level of protection for the personal data processed by us. The data in the server log files is separated from all personal data provided by a data subject.

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR. The data will be deleted as soon as it is no longer required for the purpose of its collection.

Data stored in log files, is deleted after seven days at the latest. Any storage going beyond this shall only take place if we are legally obliged to do so, e.g. in the case of investigations by law enforcement authorities

3. Contact via the Website

Due to legal requirements our Website contains information that provides a quick electronic contact to our company as well as direct communication with us, for example via a general electronic mailing address (email). If a data subject contacts the data controller by email, the personal data transmitted by the data subject is stored automatically. Such personal data transmitted voluntarily by a data subject to the data controller will be stored for the purposes of processing or contacting the data subject. If you use the contact form on our website for your enquiry, you will be asked to give your prior consent to the processing of your personal data.
This personal data will not be passed on to third parties.

The legal basis for processing the data is Art. 6 para. 1 lit. f (legitimate interest) and Art. 6 para. 1 lit. a GDPR (consent).
The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

4. Use of Cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages.
These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit our website (per-sistent cookies). You can put up settings on your browser so you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. The non-acceptance of cookies may limit the functionality of our website.

The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR.
 

4.1 Use of Google (Universal) Analytics for web analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google, Inc. (“Google”, www.google.de). Google Analytics uses “cookies”, which are text files placed on your com-puter, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and shortened there. The IP-anonymization is active on this website [_anonymizeIp()] . Google will use this information on behalf of the Controller of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other ser-vices relating to website activity and internet usage. The IP-address that your Browser conveys within the scope of Google Analytics will not be associated with any other data held by Google. You may re-fuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also opt-out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Addon for your current web browser.
For further information please visit: https://www.google.com/analytics/terms/gb.html

The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR. The data will be deleted as soon as it is no longer necessary for the purpose of its collection or legal requirements.

Google also has a legitimate interest in the collected (personal) Data to optimize its own services.

Data processing addendum
We have concluded a data processing addendum with Google in order to implement the strict require-ments of the German data protection authorities when using Google Analytics.

4.2 Use of Google TagManager

We use the Google Tag Manager on our website. The Google Tag Manager is a service of Google Inc. ("Google"), 1600 Amphitheater Parkway, Mountain View, CA. 94043, USA.
Through the Google Tag Manager we can arrange various codes and services in a structured and simpli-fied way on our website. The Google Tag Manager implements the tags or "triggers" the tags. When a tag is triggered, Google may process information (including personal data). It cannot be excluded that Google also transmits the information to a server in a third country.

In particular, the following personal information is provided by the Google Tag Manager:
_ online markings (including cookie identifiers)
_ IP address

You'll also find more detailed information about the Google Tag Manager on the websites https://www.google.com/tagmanager/use-policy.html and under https://www.google.com/intl/en/policies/privacy/index.html under the section »Data, we receive from your use of our services.«.

By integrating the Google Tag Manager we follow the purpose of a simplified and easy integration of various services. In addition, the integration of the Google Tag Manager optimizes the loading times of different services. Our legitimate interest in doing so is due to the great benefit of integrating various services through Google Tag Manager. By integrating the Google Tag Manager we reduce our maintenance and the loading of the website as well as the server and traffic load.

The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection or legal requirements.

Google also has a legitimate interest in the collected (personal) Data to optimize its own services.


Data processing addendum

We have signed a privacy addendum with Google for the use of the Google Tag Manager (Art. 28 GDPR). Google processes the data in our behalf to trigger the deposited tags and the services on our website. Google may transfer this information to third parties, if this is required by law or if third parties have commissioned this data on behalf of Google.
If you have deactivated individual tracking services (e.g. by setting an opt-out cookie), the deactivation remains for all affected tracking tags that are included by the Google Tag Manager.

right of objection

You have the right to object. You have the option to stop sending all Google Tag Manager tags. All you need to do is click this opt-out link to place the Google Tag Manager deactivation cookie in your browser.
However, we point out that deactivation may mean that you cannot or do not use our website in whole.

4.3 Google and EU-U.S. Privacy Shield Certification

Google is certified under the EU-US Privacy Shield. A current certificate can be viewed at https://www.privacyshield.gov/list. The EU-US Privacy Shield is an informal agreement in the field of data protection law, which was nego-tiated between 2015 and 2016 between the European Union and the United States of America. It con-sists of a series of assurances from the US Federal Government and a decision by the European Com-mission. The Commission had decided on 12 July 2016 that the Privacy Shield requirements would be in line with the data protection level of the European Union; since then, the Convention can be applied.

5. Use of YouTube

We use YouTube videos and YouTube plug-ins on our website. YouTube is a service of YouTube LLC ("YouTube"), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc. ("Google"), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
The integration of YouTube is done by embedding the service on our website via a so-called "iframe". When loading this iFrame, it cannot be excluded that YouTube or Google provide this information to a server in a third country. Abiomed Europe GmbH itself does not collect data when you watch a YouTube video on its website. By integrating YouTube, we have the purpose to present you with various videos on our website so you have the opportunity to watch them directly.

The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR.

Our legitimate interest in this is the great benefit that offered by YouTube. By integrating external vide-os we relieve our servers and can use the corresponding resources elsewhere. Among other things, this can increase the stability of our servers.

YouTube/Google also have a legitimate interest in the collected (personal) data to optimize their own services.


right of withdrawal

You have the right to object. You can send or inform us of your objection at any time using the contact data mentioned above.

The provision of personal data is neither legal nor contractual. You are also not obliged to provide the personal data. Failure to provide the personal data however can cause that you may not or may not be able to access all website services in whole.

Further information can be found in the data protection declarations of YouTube and Google, which you can download here: www.google.com/policies/privacy/. For Google's privacy settings, see https://privacy.google.com/take-control.html?categories_activeEl=sign-in.

6. Recipients

Data that you provide to us will generally not be disclosed to third parties. In particular, your data will not be disclosed to third parties for their advertising purposes.
However, we may use service providers for the operation of this website or for other products or ser-vices. In this cases it might happen that a service provider receives knowledge of personal data. We carefully select our service providers - in particular with regard to data protection and data security - and take all data protection measures necessary for lawful processing of data under the relevant data protection laws.

7. Data processing outside the European Union/European Economic Area

If personal data is processed outside the European Union, you can see this from the previous com-ments.

8. Privacy Contact

If you have any questions or concerns about data protection on our website, please feel free to contact our data protection officer at the above contact details.

9. Your rights as Data Subject

You have the right to obtain information about your personal data. You can contact us for an infor-mation at any time. In the case of a request for information that is not made in writing, we ask for your understanding that we may require you to provide proof that you are the person for whom you are claiming to be. You also have the right to correct, delete or limit processing to the extent permitted by law. Finally, you have the right to object to the processing within the scope of the legal requirements. The same applies to the right of data portability.

10. Deletion of personal data

In principle, we delete personal data when there is no requirement for further storage. A requirement may exist, in particular, if the data is still needed in order to be able to fulfil contractual obligations, to check warranty claims and, if applicable, guarantee claims and to grant or defend them. In the case of statutory retention obligations, deletion is only considered after expiry of the respective retention period.

11. Right of appeal to a supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of per-sonal data by us.

12. Changes of this Data Protection Declaration

We revise this Privacy Policy for changes to this website or other reasons that may require it. You will always find the current version on this website.
 

Status: November 2018

DE / EN