Data privacy statement of Lohmann & Rauscher GmbH & Co. KG under Articles 13, 14 and 21 GDPR

    I. General

    1. Controller

    We, Lohmann & Rauscher GmbH & Co. KG, take the protection of your personal data and the related statutory obligations very seriously. The statutory requirements demand full transparency in relation to the processing of your personal data. Only when processing is transparent for you as the data subject are you adequately informed about the significance, purpose and scope of the processing. Our privacy statement therefore provides you with a detailed explanation of what personal data are processed by us when you use our website https://www.lohmann-rauscher.com/ and any subpages linked to it (II.), as well as in relation to our other online presence on social networks (III.) and within the framework of a business relationship or when you visit our premises (IV.).

    You can find our data protection advice on the production of photographs and videos at events here.

    The controller within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (FDPA) and other provisions of data protection law is
    Lohmann & Rauscher GmbH & Co. KG
    Irlicher Strasse 55
    56567 Neuwied
    Tel.: +49 2634 99-0
    Fax: +49 2634 99-6467
    info@de.LRMed.com
    further referred to as the “Controller" or “we".

    The data protection officer can be contacted at
    FIRST PRIVACY GmbH
    Mr Peter Suhren
    Konsul-Smidt-Straße 88
    28217 Bremen
    Tel.: +49 421 69 66 32 80
    email: office@first-privacy.com


    Please note that you may be directed to other web pages via links on our website, which are not operated by us but by third parties. These links are either clearly marked by us or are recognisable from a change in the address line of your browser. We are not responsible for compliance with the provisions of data protection law on these pages or for the safe handling of your personal data on these web pages operated by third parties.

    2. Definitions

    2.1. From the GDPR

    This privacy statement uses the terms from the legislative text of the GDPR. You can view the definitions (Article 4 GDPR), for example, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 .

    2.2. Cookies

    Cookies are text files, which a website stores on your user device or reads from it. They contain letter and number combinations designed to recognise the user and their settings, for example, upon a repeat visit to the website that inserted the cookie, to enable the user to remain logged into a customer account or to statistically analyse specific usage behaviour.

    2.3. Data categories

    In this privacy statement, where we refer to categories of processed data, these relate in particular to the following data: Master data (e.g., names, addresses, dates of birth), contact data (e.g., e-mail addresses, telephone numbers, messenger services), content data (e.g., text input, photographs, videos, content of documents/files), contractual data (e.g., subject matter of the contract, terms, customer category), payment data (e.g., bank details, payment history, use of other payment services providers), usage data (e.g., pathway to our website, use of particular content, access times), and connection data (e.g., device information, IP addresses, URL referrers).

    3. Information on data processing

    We process our data only to the extent this is permitted by law. Personal data are only shared in the cases described below. Appropriate technical and organisational measures are used to protect the personal data (e.g., pseudonymisation, encryption).
    Where we are not legally obligated to store or transfer data to third parties (particularly law enforcement agencies), the decision as to which personal data we process, for how long and to what extent we disclose them depends on the purpose for which the particular processing occurs or which function of the website you are using in the particular case.

    4. Duration of storage

    The personal data shall be erased as soon as the purpose for the processing ceases to apply or a set storage period expires unless there is a need for the personal data to continue to be stored for entry into or performance of a contract. If we use cookies, which are not essential to provide you with the service you require, we shall inform you of the period for which these cookies operate at the end of this privacy statement.

    5. Automated individual decision-making, including profiling

    There is no automated decision-making in particular cases, including profiling, to bring about such a decision under Article 22(1) and (4) GDPR.

    6. Rights of data subjects

    As a data subject you have a right of access under Article 15 GDPR, a right to rectification under Article 16 GDPR, a right to erasure under Article 17 GDPR, a right to restriction of processing under Article 18 GDPR, and a right to data portability under Article 20 GDPR. In the case of the right to access and the right to erasure, the restrictions under Articles 34 and 35 FDPA apply. You have the right to lodge a complaint with a supervisory authority (Article 77 GDPR, in conjunction with Article 19 FDPA). The supervisory authority responsible for us is: The commissioner for data protection and freedom of information for Rhineland-Palatinate [Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz], Hintere Bleiche 34, 55116 Mainz. However, you have the option of lodging a complaint with a different supervisory authority.

    7. The Controller’s notification obligations

    We notify all recipients to whom your personal data have been disclosed of each rectification or erasure of your personal data or restriction of processing under Articles 16, 17(1) and 18, GDPR, unless notification is impossible or associated with disproportionate expense. We tell you who the recipients are if you request this.

    8. Obligation to provide personal data

    Unless illustrated otherwise in the information on the legal grounds provided below, you are not obligated to provide personal data. In the cases of point (b) of Article 6(1) GDPR, the personal data are, however, necessary for performance of, or entry into, a contract. Performance of, or entry into, the contract is not possible unless you provide the relevant personal data. Apart from that, failure to provide data may mean that you are unable to use our website or parts of it, a business relationship with us is not possible or you are unable to enter our premises (video surveillance).

    9. Right to object and withdrawal of consent

    You have the right to object at any time to the processing of personal data concerning you that occurs based on point (f) of Article 6(1) GDPR, on grounds relating to your particular situation. Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.
    Under the first sentence of Article 7(3) GDPR you also have the right at any time to withdraw any consent given to us with future effect. This does not prejudice the lawfulness of the processing that occurred prior to such withdrawal of consent. Withdrawal may be sent by post or e-mail and is not required to be in a set format. Should you lodge an objection, we will no longer process your personal data unless this is permitted on other (statutory) grounds. However, where an objection occurs and no other facts exist to support consent then, under point (b) of Article 17(1) GDPR the personal data are immediately erased.


    The objection and withdrawal are not required to be in a set format and should be addressed to:
    Lohmann & Rauscher GmbH & Co. KG
    Irlicher Strasse 55
    56567 Neuwied
    Tel.: +49 2634 99-0
    Fax: +49 2634 99-6467
    info@de.LRMed.com

    II. Data processing in connection with the use of the website or postal applications

    Use of the website and its functions often requires the processing of certain personal data.

    1. Google Tag Manager

    In order to include content from third-party providers (e.g. Google Analytics, Cookiebot) we use Google Tag Manager. This is a technical solution which does not itself store or read any cookies for which consent is required but merely governs the circumstances in which the other programs utilised on our website and described below are activated.

    2. Use of the website for information purposes

    • Processing purpose: If you view our website and use it purely for information purposes, meaning without using any additional functions such as the contact form or social media plug-ins, we automatically collect personal data for functionality purposes and optimisation of the website and to ensure our IT systems are secure.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Usage data, connection data
    • Recipient of the data: IT service providers
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No

    3. Cookiebots

    • Processing purpose: If you access our website certain information will be stored or read on your end device where this is essential for the operation of our website. This includes information which the “Cookiebot” service processes to ensure that only those cookies are stored or read as are technically essential for the operation of our website or which you have consented to. When you download the Cookiebot code, your IP address will be sent to the ("Cybot") operator where it will be anonymised and stored. We have chosen the operator based on data protection and technical criteria.
    • Legal basis: Points (c) and (f) of Article 6(1) GDPR
    • Data categories: Usage data, connection data.
    • Recipient of the data: Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark
    • Intended third-country transmission: None.
    • Do we store personal data on your end device based on your consent or do we read such data? No

    4. Google Fonts

    • Processing purpose: Greater personalisation of our website through fonts downloaded from Google servers.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Usage data, connection data
    • Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store personal data on your end device based on your consent or do we read such data? No

    5. Google Maps

    • Processing purpose: Incorporation of interactive maps and map function of Google Maps.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Usage data, connection data, location data
    • Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store personal data on your end device based on your consent or do we read such data? No

    6. YouTube

    • Processing purpose: Incorporation of videos via the YouTube video plug-in for the personalisation of our website.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Usage data, connection data
    • Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store information on your end device based on your consent or do we read such information? Yes, see overview at the end of this privacy statement

    7. Facebook Custom Audiences ("Facebook Pixel")

    • Processing purpose: Playing of personalised pop-ups in the Facebook Ads network based on your pseudonymised recorded surfing behaviour.
    • Legal basis: Point (a) of Article 6(1) GDPR
    • Data categories: Usage data, connection data
    • Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store information on your end device based on your consent or do we read such information? Yes, see overview at the end of this Privacy Statement.

    8. Google Analytics

    • Processing purpose: statistical analysis and optimisation of website use. Your IP address is collected by us before being anonymised by being abbreviated by Google before long-term storage on its servers.
    • Legal basis: Point (a) of Article 6(1) GDPR
    • Data categories: Usage data, connection data
    • Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store information on your end device based on your consent or do we read such information? Yes, see overview at the end of this Privacy Statement.

    9. Google Ads Conversion Tracking

    • Processing purpose: Tracking of the success of our Google Ads advertising campaigns.
    • Legal basis: Point (a) of Article 6(1) GDPR
    • Data categories: Usage data, connection data
    • Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this Privacy Statement.

    10. Google Ads Remarketing

    • Processing purpose: Playing of personalised pop-ups in the Google Ads network based on your pseudonymised recorded surfing behaviour.
    • Legal basis: Point (a) of Article 6(1) GDPR
    • Data categories: Usage data, connection data
    • Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this Privacy Statement.

    11. matomo

    • Processing purpose: Statistical assessment and measurement of the reach of the cookie-less variant of the “Matomo” service; optimisation and design in line with demand of our website based on our users’ aggregated surfing behaviour. 
    • Legal basis: Point (f) of Article 6 (1) GDPR
    • Data categories: Connection data
    • Recipient of the data: Profihost AG Expo Plaza 1 30539 Hanover
    • Intended third-country transmission: None
    • Do we store personal data on your end device based on your consent or do we read such data? No

    12. Hotjar

    • Processing purpose: Analysis of your surfing and clicking behaviour on our website, creation of “heatmaps” based on this analysis, optimisation and needs-based design of the website and obtaining of feedback based on voluntary surveys.
    • Legal basis: Point (a) of Article 6(1) GDPR
    • Data categories: Usage data, connection data.
    • Recipient of the data: Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta
    • Intended third-country transmission: None
    • Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this Privacy Statement.

    13. LinkedIn Conversion Tracking - LinkedIn Insight Tag

    • Processing purpose: Tracking of the effect of our ads and playing of advertising tailored to your interests.
    • Legal basis: Point (a) of Article 6(1) GDPR
    • Data categories: Usage data, connection data.
    • Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the standard data protection clauses of the EU Commission, point (c) of Article 46(2) GDPR)
    • Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this Privacy Statement.

    14. Request for advertising materials or offers

    • Processing purpose: Sending of advertising materials requested by you and creation and delivery of the offers requested by you.
    • Legal basis: Point (f) of Article 6(1) GDPR; point (b) of Article 6(1) GDPR (should your request relate to entry into a contract or an existing contract)
    • Data categories: Master data, contact data, connection data, contractual data where relevant
    • Recipients of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (particularly IT) service providers.
    • Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (particularly IT) service providers in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection is ensured on the basis of suitable safeguards under Articles 46 and 47 GDPR, and in particular by the EU standard data protection clauses or binding internal data protection in accordance with Article 47 GDPR. We will provide you with a copy of these clauses upon request.
    • Do we store information on your end device based on your consent or do we read such information? No

    15. Registration for training sessions/seminars and other events

    • Processing purpose: Registration for training sessions, seminars or other events via our website, proof of your registration, ensuring our IT systems are secure.
    • Legal basis: Points (b) and (f) of Article 6(1) GDPR
    • Data categories: Master data, contact data, usage data, connection data, contractual data, payment data where relevant
    • Recipient of the data: Cooperating partner (e.g., conference hotel, courier services)
    • Intended third-country transmission: None
    • Do we store personal data on your end device based on your consent or do we read such data? No

    16. Contacting us (e-mail, telephone, contact form)

    • Processing purpose: Response to your request via a contact form on our website, your email or your call-back request and the forwarding of your request to the responsible institutions within the Lohmann & Rauscher group of enterprises should this relate to medical matters.
    • Legal basis: Point (a) of Article 6(1) GDPR; point (b) of Article 6(1) GDPR (should your request relate to entry into a contract or an existing contract); point (a) of Article 9(2) GDPR (should your request contain health data); Article 88(1) GDPR, in conjunction with Article 26(1) FDPA (should you send us documents in support of a job application)
    • Data categories: Master data, contact data, content data, usage data where relevant, connection data, contractual data where relevant
    • Recipients of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (particularly IT) service providers and other cooperation partners.
    • Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (particularly IT) service providers and other partners in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection is ensured on the basis of suitable safeguards under Articles 46 and 47 GDPR, and in particular by the EU standard data protection clauses or binding internal data protection in accordance with Article 47 GDPR. We will provide you with a copy of these clauses upon request.
    • Do we store information on your end device based on your consent or do we read such information? No

    17. User account

    • Processing purpose: Creation and use of a customer account (also a precondition to orders in our online shop), ensuring our IT systems are secure.
    • Legal basis: Points (a), (b) and (f) of Article 6(1) GDPR
    • Data categories: Master data, contact data, usage data, connection data, contractual data, payment data
    • Recipient of the data: None
    • Intended third-country transmission: None
    • Do we store personal data on your end device based on your consent or do we read such data? No

    18. Newsletter 

    • Processing purpose: The sending of our newsletter and measurement of the clicking and opening behaviour in relation to our newsletter. 
    • Legal basis: Consent according to point (a) of Article 6(1) GDPR. You can revoke your consent at any time. For example, you are provided with an uncomplicated option to withdraw your consent via the unsubscribe link in every newsletter.
    • Data categories: Master data where relevant, contact data, usage data, connection data.
    • Recipients of the data: Processors who support us when sending the newsletter and are contractually subject to our instructions, e.g. the software provider Microsoft and the associated enterprises within the Lohmann & Rauscher group of enterprises which support us when implementing and using the software. 
    • Possible third-country transmission: The data are principally stored in the EU. In special cases, e.g. support cases, specific data may be transmitted by Microsoft to third-countries, e.g. to the Microsoft Corporation in the USA. The European Commission has decided that the USA guarantees an adequate protection level for personal data transmitted from the EU to the companies which participate in the EU-U.S. Data Privacy Framework. The Microsoft Corporation is included on the EU-U.S. Data Privacy Framework List.
    • Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this Privacy Statement.

    19. Online application form and postal applications

    • Processing purpose: Processing of your application and conduct of a recruitment process, at your request also the inclusion of your application in future recruitment processes for us or our subsidiaries, ensuring our IT systems are secure. Postal applications are forwarded to the HR department and digitalised there.
    • Legal basis: Article 88(1) GDPR in conjunction with the first sentence of Article 26(1) FDPA and point (f) of Article 6(1) GDPR, for applications to subsidiaries and for storage for future recruitment processes point (a) of Article 6(1) GDPR in conjunction with Article 7 GDPR, § 26(2) FDPA; point (f) of Article 6(1) GDPR
    • Data categories: Master data, contact data, content data, usage data (not in the case of applications by post), connection data (not in the case of applications by post), contractual data
      Recipients of the data: rexx systems GmbH, Süderstrasse 77, 20097 Hamburg; our subsidiaries (only with your express consent)
    • Intended third-country transmission: None
    • Do we store personal data on your end device based on your consent or do we read such data? No

    III. Advice in relation to external offers or apps of the Lohmann & Rauscher Group

    1. Facebook website

    • Processing purpose: Under https://www.facebook.com/LohmannRauscherDE/ and https://www.facebook.com/LohmannRauscherGroup/ we operate pages about our company at https://www.facebook.com/pg/hip.hygieneDE and  https://www.facebook.com/hip.hygieneEN/ pages on the general improvement of everyday hygiene, particularly in the medical area, which our company maintains ("Facebook pages"). When you visit and use our Facebook page, Facebook can evaluate your usage behaviour and share with us the information thereby obtained (“insights”). The page insights are used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Master data where relevant, contact data where relevant, content data, usage data, connection data
    • Recipients of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint Controller - the material terms of the agreement are available for download from https://www.facebook.com/legal/terms/page_controller_addendum )
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No
    • Data subjects’ rights: Facebook is responsible for implementing your rights as a data subject. Facebook provides information on your rights as a data subject at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can assert your rights against us; we then immediately forward your request to Facebook.

    2. LinkedIn website

    • Processing purpose: We operate a general page about our company at https://www.linkedin.com/company/lohmann-&-rauscher/ as well as a page managed by our company containing specific information about appropriate wound care at www.linkedin.com/showcase/die-wundzentrale  ("LinkedIn website"). When you visit and use our LinkedIn page, LinkedIn can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Master data where relevant, contact data where relevant, content data, usage data, connection data
    • Recipients of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as joint Controller - the material terms of the agreement are available for download from https://legal.linkedin.com/pages-joint-controller-addendum )
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No
    • Data subjects’ rights: LinkedIn is responsible for implementing your rights as a data subject. LinkedIn provides information on your rights as a data subject at https://www.linkedin.com/legal/privacy-policy. You can assert your rights against us; we then immediately forward your request to LinkedIn.

    3. Kununu profile

    • Processing purpose: We operate a Kununu profile about our company at https://www.kununu.com/de/lohmann-rauscher . When you visit and use our Kununu profile, Kununu can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Master data where relevant, contact data where relevant, content data, usage data, connection data
    • Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No

    4. Twitter account

    • Processing purpose: We operate a Twitter account at https://twitter.com/hip_hygiene , which is maintained by our company and promotes general improvement in everyday hygiene, particularly in the medical area. When you visit and use our Twitter account, Twitter can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Master data where relevant, contact data where relevant, content data, usage data, connection data
    • Recipient of the data: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No

    5. Xing website

    • Processing purpose: We operate a Xing page about our company at https://www.xing.com/companies/lohmann%26rauscher . When you visit and use our Xing page, New Work SE (“Xing”) can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Master data, contact data, content data, usage data, connection data
    • Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No

    6. YouTube channel

    • Processing purpose: We operate a page about our company at https://www.youtube.com/user/lrcorporategroup (“YouTube channel”). When you visit and use our YouTube channel, Google can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Master data where relevant, contact data where relevant, content data where relevant, usage data, connection data
    • Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No

    7. Instagram website

    • Processing purpose: We operate a page containing information for expectant mothers at www.instagram.com/materna_moments/, provided by Facebook Ireland Ltd. ("Facebook"), as well as a page managed by our company containing specific information about appropriate wound care at www.instagram.com/diewundzentrale/  ("Instagram website"). When you visit and use our Instagram page, Facebook can evaluate your usage behaviour and share with us the information thereby obtained (“insights”). The page insights are used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Master data where relevant, contact data where relevant, content data, usage data, connection data
    • Recipients of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint Controller - the material terms of the agreement are available for download from www.facebook.com/legal/terms/page_controller_addendum)
    • Intended third-country transmission: None
    • Do we store information on your end device based on your consent or do we read such information? No
    • Data subjects’ rights: Facebook is responsible for implementing your rights as a data subject. Facebook provides information on your rights as a data subject at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can assert your rights against us; we then immediately forward your request to Facebook.

    8. WoundNavi app / WundApp

    • Processing purpose: We offer apps for healthcare professionals that can provide advice as well as a preliminary selection of suitable products from our range on the basis of pictures of wounds uploaded. With your consent, these applications also process personal data concerning you so that we can also send you additional information concerning our services.
    • Legal basis: Point (a) of Article 6(1) GDPR
    • Data categories: Master data, contact data, usage data
    • Recipient of the data: none
    • Intended third-country transmission: none
    • Do we store information on your end device based on your consent or do we read such information? No

    9. Kompressions-App [Compression app]

     

    • Processing purpose: We offer an app for healthcare professionals ("L&R Kompressionslösungen [L&R compression solutions]") that provide a preliminary selection of suitable products from our range on the basis of indications provided. With your consent, via this application we also process personal data concerning your customers (name, customer size) for the purpose of providing our production/distribution services (individual compression products)
    • Legal basis: Points (a), (b) and (f) of Article 6(1) GDPR; points (a) and (f) of Article 9(2) GDPR
    • Data categories: Master data, contact data, content data
    • Recipients of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises.
    • Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (particularly IT) service providers and other partners in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection is ensured on the basis of suitable safeguards under Articles 46 and 47 GDPR, and in particular by the EU standard data protection clauses or binding internal data protection in accordance with Article 47 GDPR. We will provide you with a copy of these clauses upon request.
    • Do we store information on your end device based on your consent or do we read such information? No

    10. L&R Bestell-App (L&R Order app]

     

    • Processing purpose: We offer customers an application that can be used to order products from Lohmann & Rauscher GmbH & Co. KG.
    • Legal basis: Points (a), (b) and (f) of Article 6(1) GDPR
    • Data categories: Master data, contact data, content data
    • Recipients of the data: Simple Things GmbH, Münsterstraße 1, 53111 Bonn
    • Intended third-country transmission: none
    • Do we store information on your end device based on your consent or do we read such information? No

    IV. Data processing for business contacts and video surveillance

    1. Commercial partners (and their employees)

    • Processing purpose: The processing occurs for the protection of our legitimate interests in the presentation of our company, in the provision of information about our products and services, and in the promotion of sales and for invitations to participate in an exchange on potential future commercial relationships in connection with our goods and services.
      Legal basis: Point (f) of Article 6(1) GDPR (provided you have given us consent: point (a) of Article 6(1) GDPR)
    • Data categories: Master data, contact data, content data (particularly project descriptions, public reporting)
    • Source of the data where not collected from you: Commercial partners (e.g., project developers, architects), public sources
    • Recipients of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (particularly IT) service providers and other cooperation partners.
    • Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (particularly IT) service providers and other partners in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection is ensured on the basis of suitable safeguards under Articles 46 and 47 GDPR, and in particular by the EU standard data protection clauses or binding internal data protection in accordance with Article 47 GDPR. We will provide you with a copy of these clauses upon request.

    1.1. Companies associated with us (and their employees)

    • Processing purpose: Processing occurs for the purpose of safeguarding our legitimate interest in promoting the commercial activities of our business and the business activities of the Lohmann & Rauscher group of enterprises.
    • Legal basis: Article 26(1) FDPA and point (f) of Article 6(1) GDPR (provided you have given us consent: Article 26(2) FDPA and point (a) of Article 6(1) GDPR)
    • Data categories: Master data, contact data, contractual data, content data
    • Source of the data where not collected from you: companies associated with us, public sources
    • Recipients of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (particularly IT) service providers.
    • Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (particularly IT) service providers in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection is ensured on the basis of suitable safeguards under Articles 46 and 47 GDPR, and in particular by the EU standard data protection clauses or binding internal data protection in accordance with Article 47 GDPR. We will provide you with a copy of these clauses upon request.

    1.2. Other visitors (e.g. people taking factory tours)

    • Processing purpose: The processing occurs for the protection of our legitimate interests in the presentation of our company, in the provision of information about our products and services, and in the promotion of sales and for invitations to participate in an exchange on potential future commercial relationships in connection with our goods and services.
    • Legal basis: Point (f) of Article 6(1) GDPR (provided you have given us consent: point (a) of Article 6(1) GDPR)
    • Data categories: Master data, contact data, content data (particularly project descriptions, public reporting)
    • Source of the data where not collected from you: Commercial partners (e.g., project developers, architects), public sources
    • Recipients of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (particularly IT) service providers and other cooperation partners.
    • Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (particularly IT) service providers in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection is ensured on the basis of suitable safeguards under Articles 46 and 47 GDPR, and in particular by the EU standard data protection clauses or binding internal data protection in accordance with Article 47 GDPR. We will provide you with a copy of these clauses upon request.

    2. Customers or suppliers (and their employees)

    • Processing purpose: Processing occurs primarily for the purpose of implementing pre-contractual steps or performance of a pre-existing contract between you and us. Where we have not entered into the contract with you but with your employer or principal, we process your data (e.g., as a contact) for the purpose of implementing pre-contractual steps or performance of a pre-existing contract between us and our customer. In addition, we process your personal data in order to perform our statutory obligations, e.g., under the German Commercial and Fiscal Codes and for the protection of our legitimate interests such as, for example, the determination of commercial risks (payment defaults) or, where relevant, to pursue existing legal claims against you or our customer.
    • Legal basis: Points (b), (c) and (f) of Article 6(1) GDPR (provided you have given us consent: Point (a) of Article 6(1) GDPR)
    • Data categories: Master data, contact data, contractual data, payment data
    • Source of the data where not collected from you: Your company
    • Recipients of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (particularly IT) service providers and other cooperation partners.
    • Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (particularly IT) service providers and other partners in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection is ensured on the basis of suitable safeguards under Articles 46 and 47 GDPR, and in particular by the EU standard data protection clauses  or binding internal data protection in accordance with Article 47 GDPR. We will provide you with a copy of these clauses upon request.

    3. Video surveillance

    • Processing purpose: Some of our buildings are equipped with live video surveillance or video intercoms. The surveillance relates only to the area around the entrance to our buildings and is for the purpose of visitor recognition by our reception and to control access to our buildings.
    • Duration of storage: No video recordings are stored.
    • Legal basis: Point (f) of Article 6(1) GDPR
    • Data categories: Content data
    • Recipient of the data: None
    • Intended third-country transmission: None

     

    4. Data processing by Microsoft Teams within the ambit of business cooperation

    • Processing purpose: Registration for business cooperation in relation to projects, orders and compliance with contractual obligations with external parties via Microsoft Teams; preparation and implementation of business cooperation; proof of your registration; guarantee of the security of our IT systems (these also constitute our legitimate interests according to point (f) of Article 6(1) GDPR).
    • Legal basis: Points (b) and (f) of Article 6(1) GDPR
    • Data categories: Master data, contact data, content data, contract data, usage data, connection data (depending upon business cooperation and your configuration)
    • Recipient of the data: Microsoft Ireland Operations Limited, Ireland
    • Intended third-country transmission: In specific cases, the USA (based on the EU standard contractual clauses including appropriate additional technical, organisational and contractual measures to guarantee an adequate level of data protection)
    • Do we store personal data on your end device based on your consent or do we read such data? No

     

    V. Cookie explanations

    This website contains information on products and medical practices which is targeted to a wide range of audiences and could contain product details or information otherwise not accessible or valid in your country. Please be aware that we do not take any responsibility for accessing such information which may not comply with any legal process, regulation, registration or usage in the country of your origin. Medical practices and regulations can be different from one country to another.