Privacy policy

Privacy Policy for the Processing of Data pursuant to Art. 13 of the EU General Data Protection Regulation (GDPR)

We, Science for Life GmbH (hereinafter referred to as “we”, “us” or “the Company”), are pleased that you are visiting our website at www.prehab-m.com.

Data protection and data security are very important to us. We therefore want to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy is intended to inform you about how your personal data is processed within our company and about your rights in relation to that processing. If you have any questions, please contact us at:

support@prehab-m.com

As legal changes or adjustments in our internal processes may require us to update this privacy policy, we kindly ask you to review it regularly.

This privacy policy applies to the online services of the company accessible via the domain www.prehab-m.com as well as its various subdomains and individual pages (hereinafter collectively referred to as “Website” or “Website Services”).

  1. Definitions

This privacy policy is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (hereinafter referred to as “GDPR”). Our goal is to make this privacy policy easy to read and understand for the general public, as well as for our customers and business partners. To ensure this, we explain the terminology used:

  • Personal data

Any information relating to an identified or identifiable natural person (data subject), such as name, identification number, location data, online identifier, or factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity.

  • Data Subject

Any identified or identifiable person whose personal data is processed.

  • Processing

Any operation or set of operations performed on personal data, whether or not by automated means (e.g., collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction).

  • Restriction of processing

The marking of stored personal data with the aim of limiting its future processing.

  • Profiling

Any automated processing of personal data that evaluates certain personal aspects of a natural person (e.g., work performance, health, interests).

  • Pseudonymization

Processing of personal data in such a way that it can no longer be attributed to a specific individual without the use of additional information.

  • Controller

The natural or legal person who determines the purposes and means of personal data processing.

  • Processor

A natural or legal person who processes personal data on behalf of the controller.

  • Recipient

A natural or legal person to whom personal data is disclosed, whether or not they are a third party.

  • Third Party

Anyone other than the data subject, controller, processor, or those authorized under the direct responsibility of the controller or processor.

  • Consent

A freely given, specific, informed, and unambiguous indication of the data subject’s agreement to the processing of personal data.

  1. Contact

Science for Health GmbH
Lugallee 22
40545 Düsseldorf
Germany
Email: support@prehab-m.com

  1. Rights of the data subject

We take the protection of your personal data seriously and aim to uphold your rights. We retain your data only for as long as legally permitted and necessary for the purposes described below. Data is deleted once it is no longer required.

Please note: Providing your data is not legally or contractually required, nor necessary to conclude a contract. However, if you do not provide your data, some website functions may not be available to you.

You have the right to:

  • Access information about the personal data we store about you.
  • Rectify inaccurate or incomplete data.
  • Request erasure of your data, subject to certain legal exceptions.
  • Restrict processing if justified.
  • Object to processing.
  • Data portability to another controller.
  • Withdraw consent at any time for future processing.

Please contact us regarding these rights at:

Science for Health GmbH
Lugallee 22
40545
Düsseldorf
Germany

Email: support@prehab-m.com

If you have complaints, you may also contact the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia

P.O. Box 20 04 44
40102 Düsseldorf
Phone: +49 211 38424-0
Fax: +49 211 38424-999
Email: poststelle@ldi.nrw.de

  1. Collection of Personal Data,  Cookies and Use

Depending on which features of our website you use, we may need to collect and process personal data. Your personal data will only be used for the purposes specified in this privacy policy.

Informational use of the website
If you visit our website for informational purposes only, we collect only the data that your browser transmits to our server. This includes data necessary to display the website and ensure stability and security (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to GMT
  • Access status/HTTP status code
  • Amount of data transmitted
  • Referrer URL
  • Browser type and version
  • Operating system and interface
  • Language and version of browser software
  • Unique device ID and identifiers

Cookies
We also use cookies and similar tracking technologies to track activities on our website and to store certain information. Tracking technologies used include beacons, tags and scripts to collect and track information and to improve and analyze our website services. The technologies we use may include:

  • Cookies or Browser-Cookies:

A cookie is a small file that is placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our website services. Unless you have set your browser to refuse cookies, our website services may use cookies.

Cookies can be “persistent” or “session” cookies. Persistent cookies remain on your PC or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser. Learn more about cookies here: TermsFeed Generator cookies.

We use both session and persistent cookies for the purposes listed below:

  • Necessary / Essential Cookies

Type: Session cookies

Managed by: Us

Purpose: These cookies are essential to provide you with services available through the website and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these cookies, the services you have requested cannot be provided, and we use these cookies only to provide you with these services.

  • Cookie Policy / Notice Acceptance Cookies

Type: persistent cookies

Managed by: Us

Purpose: These cookies identify whether users have accepted the use of cookies on the website.

  • Functionality cookies

Type: persistent cookies

Managed by: Us

Purpose: These cookies allow us to remember choices you make when using the website, such as remembering your login details or language preferences. The purpose of these cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you use the website.

You can configure your browser settings according to your preferences and, for example, reject third-party cookies that are not necessary for the use of our website and the website services. Please note that you may not be able to use all functions of the website services.

For more information about the cookies we use and your options for choosing their use on the website and during the provision of our website services, please refer to our cookie banner, which is displayed when you first visit the website. This cookie banner serves as a tool for obtaining and/or managing your consent to data processing and as an additional source of information.

Google Analytics
We have integrated the Google Analytics component on this website. We and Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA are jointly responsible for the processing of your user data in accordance with Art. 26 GDPR.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Google will use the data and information obtained, among other things, to evaluate the use of our website, to compile online reports on the activities on our websites for us, and to provide other services related to the use of our website.

Google Analytics sets a cookie on the IT system of the data subject. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of this website operated by the controller and on which a Google Analytics component has been integrated is accessed, the Internet browser on the data subject’s IT system is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis purposes. In the course of this technical procedure, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlements. Personal data such as the access time, the location from which access was made and the frequency of visits to our website by the data subject are stored via the cookie.

In addition, the company has concluded a data processing agreement with Google Inc. The data processing is essentially carried out by Google. This means that Google collects the following data on behalf of the company for the purpose of analyzing visitor flows and user behavior of website visitors. However, the specific data processed and the purposes for which it is processed are largely determined by Google. Therefore, it is possible that Google also uses the data processing for its own purposes, such as profiling or linking Google accounts.

Every time our website is visited, your personal data is transferred to Google in the United States of America on the basis of the EU standard contractual clauses and additional safeguards. This personal data is stored by Google in the United States of America. It is not excluded that Google may disclose this data.

Furthermore, we refer to Google’s information on data processing and data protection. Google’s privacy policy and the relevant provisions on Google Analytics can be found here:

https://www.google.de/intl/de/policies/privacy/
https://www.google.com/intl/de_de/analytics/

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR. This is explicitly obtained by our cookie banner at the start of your visit to our website. However, you may revoke your consent at any time with effect for the future by contacting us using the contact details provided above. Furthermore, as the data subject, you have the option to object to the collection of data generated by Google Analytics relating to your use of this website, as well as the processing of such data by Google, and to prevent such collection. To do this, the data subject must download and install a browser add-on under the following link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is regarded as an objection by Google. If the IT system of the data subject is deleted, formatted, or reinstalled at a later time, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their sphere of influence, it is possible to reinstall or reactivate the browser add-on.

  1. Duration for which the personal data are stored

The criteria for determining the duration of the storage of personal data is the respective statutory retention period. After the expiry of this period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment or initiation of a contract.

  1. Security measures to protect the data stored with us

It is important to us to protect your privacy and to treat your personal data confidentially. In order to prevent loss or misuse of the data stored with us, we have taken extensive technical and organizational security precautions. We regularly review these precautions to ensure that they comply with current technological standards. Your data is stored in our databases. These databases are only accessible to us and our employees who are specially trained in data protection. We place the highest value on the standards to which we adhere. However, we would like to point out that we cannot exclude the possibility that the rules of data protection and the security measures taken by us may be circumvented by other persons or institutions outside our sphere of responsibility. For this reason, it is possible that unencrypted data transmitted over the Internet may be read by third parties. We have no technical influence over this. It is your responsibility to protect the data you provide against misuse by encrypting it or using other protective methods.

  1. Data storage abroad

We ensure legally binding data protection within the European Union. In some cases — particularly for technical reasons — your data entrusted to us may be stored on servers outside your country (including outside the European Union), where the data was originally entered. This applies especially to the integration of third-party services, as already explained in detail. In such cases, and in the event of a risk that the countries to which your data is transferred do not have the same strict data protection laws as your home country or the country from which you use our services, we ensure that your data is treated in accordance with the provisions of this privacy policy.

  1. Hyperlinks to external websites

Our website contains so-called hyperlinks to websites of other providers. When these hyperlinks are activated, you are redirected from our website directly to the website of the other provider. You can recognize this by the change in the URL, among other things. We cannot accept responsibility for the confidential handling of your data on third-party websites, as we have no influence over whether these third parties comply with data protection regulations. Please inform yourself directly on the respective websites about how these third parties handle your personal data.

  1. Disclosure of data to recipients

Your personal data will not be disclosed to third parties without your consent, except in the cases presented in this privacy policy, unless we are legally obliged to disclose this data (e.g., to law enforcement authorities and courts; to public bodies that receive data based on legal regulations, such as social insurance institutions, tax authorities, etc.) or for the enforcement of our claims to professional secrecy involving third parties.

  1. Existence of automated decision making

As a responsible company, we do not use automated decision-making or profiling.