Share
Not all products are available in the USA. Click here for a regulatory status overview.
Last updated: July 2024

Privacy Policy

Protection of your personal data is very important to us. We therefore process your personal data (“data” for short) solely on the basis of the applicable statutory provisions. With this Privacy Policy, we want to inform you comprehensively about the processing of your data in our company and your relevant rights under Art. 13 of the European General Data Protection Regulation (GDPR).

Responsible data controller:
CytoSorbents Europe GmbH
Müggelseedamm 131
D-12587 Berlin, Germany

 

The company’s data protection officer is:
Prof. Norman Uhlmann
h3ko Innovations GmbH
Pappelallee 64, D-16359 Biesenthal (Germany)
E-Mail: [email protected]
Tel.: +49 30 549887013

We process the data received from you in the context of contract initiation or settlement, on the basis of independently and expressly given consents, as part of your application to us, or for management of your employment contract.

 

Personal data include:
Contact details, such as first and last name, address, electronic contact details (e-mail address, telephone number, fax), bank details.

 

For applicants and employees, this additionally date of birth, data from the CV and employment certificates, information on religious affiliation, and sound and image recordings.

 

For business partners, this additionally includes the names of their legal representatives, corporate name, commercial register number, VAT number, any further company numbers, and registered address.

 

For visitors to our company, this additionally includes their signatures.

 

In addition to the above, we may also process the following further personal data:

  • Information on the type and contents of contracts, order data, sales and receipt data, customer and supplier history, and advice documents;
  • advertising and sales data;
  • meta-information from your electronic data exchange with us (e.g., IP address, log-in data);
  • other data that we have received from you in the course of our business relationship (for example in customer meetings);
  • data that we may generate ourselves using contact data, such as the results of customer needs and potential analyses;
  • the documentation of your consent to the receipt of e.g. newsletters; and
  • photographs taken during social events.

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act 2018, as most recently amended:

 

❖ for fulfillment of (pre-)contractual obligations (Art. 6 (1) b of the GDPR):

Your data are processed for contract settlement and handling, including the management of employment contracts. The data are processed in particular upon business initiation and contract implementation.

 

❖ for fulfillment of statutory obligations (Art. 6 (1) c of the GDPR):

Your data are processed for the purpose of meeting various statutory obligations, e.g. exigencies of the German Commercial Code or the German Tax Code.

 

❖ for the protection of legitimate interests (Art. 6 (1) f of the GDPR):

Due to a balancing of interests, data may be processed beyond the actual fulfillment of the contract in order to safeguard our legitimate interests or those of third parties. Data processing for the protection of legitimate interests takes place, for example, in the following contexts:

  • Advertising or marketing (see item 4)
  • Measures for the business control and further development of services and products
  • Maintenance of a group-wide customer database to improve customer service
  • In the context of legal action
  • Sending of non-promotional information and press releases

❖ based on your independent and express consent (Art. 6 (1) a of the GDPR):

If you have agreed to the processing of your data, e.g. for the dispatch of our newsletter, publishing photos, competitions, etc.

You may object to the use of your personal data for advertising purposes, at any time. generally or for individual measures. without incurring any costs other than the transmission costs.

 

Under § 7 (3) of the German Unfair Competition Act (UWG), we are entitled to use the e-mail address you provided when signing the contract for direct advertising for goods or services similar to those contracted. These product recommendations are provided by us regardless of whether you have subscribed to a newsletter.

 

If you do not wish to receive such recommendations by e-mail from us, you may object to the use of your address for this purpose at any time without incurring any costs other than the transmission costs. A basic written message is sufficient. Of course, every e-mail we send will always include an unsubscribe link.

 

You can change your mind at any time by clicking on the unsubscribe link which you can find in the footer of any email you receive from us, or by contacting us at [email protected]. We will treat your information with care and respect.

If we employ a service provider (“processor”) for order processing, we will still be responsible for protecting your data (“data controller”). All processors are contractually obliged to treat your data as confidential, and to process them only for provision of services. The processors commissioned by us will receive your data only if and to the extent that they need them to render their respective performances. Such processors include IT service providers that we need for the operation and security of our IT system, as well as advertising and address publishers for their own promotions.

 

Your data will be processed in our customer database. The customer database supports enhancement of the quality of existing customer data and enables enrichment by merging with data from publicly accessible sources. These data are provided to the group companies if necessary for implementation of the contract. The storage of customer data is company-related and separate, whereby our parent company acts as a service provider for the individual companies.

 

In the event of a legal obligation and in the context of legal action, public authorities and courts as well as external auditors may receive your data.

 

In addition, insurance companies, banks, credit bureaus, and service providers may receive your information for the purpose of contract initiation and fulfillment.

We process your data until termination of the business relationship or expiry of the applicable statutory retention periods (as may be prescribed in the Commercial Code, the Tax Code, or the Working Hours Act); and beyond this, as the case may be, until termination of any legal disputes in which the data may be required as proof.

Basically, we do not transmit any data to a third country. Transmission in individual cases may take place only on the basis of an adequacy decision of the European Commission, standard contractual clauses, appropriate guarantees, or your express consent.

You have the right to access, rectification, erasure, or restriction of the processing of your stored data, a right of objection to the processing, as well as a right to data portability and to filing of a complaint in accordance with the requirements of data protection law (right of appeal).

 

Right of access:
You can ask us for information as to whether and to what extent we process your data.

 

Right to rectification:
If your data as processed by us are incomplete or incorrect, you can request correction or completion at any time.

 

Right to erasure:
You may request deletion of your data if we process it unlawfully, or if the processing disproportionately interferes with your legitimate interests. Please note that there may be reasons opposing an immediate deletion, e.g. in the case of statutory retention requirements.

If you assert this right, we will immediately and completely erase your data, unless there is a conflicting statutory retention obligation.

 

Right to restriction of processing:
You may require us to restrict the processing of your data if

  • you contest the accuracy of the data;
  • the processing of the data is unlawful, but you do not wish deletion and instead require restriction of data usage;
  • we no longer need the data for the intended purpose, but you still need these data to assert or defend legal claims; or
  • you have objected to the processing of the data.

 

Right to data portability:
You may require us to provide you with the information you have provided to us in a structured, common, and machine-readable format, enabling you to transfer that information to another person without hindrance, provided that

  • we process these data based on a consent given or revocable by you or for implementation of a contract between us, and
  • this processing is done using automated procedures.

If and insofar as this is technically feasible, you may require us to transfer your data directly to another person.

 

Right to object:
If we process your data for the protection of legitimate interests, you can object to such data processing at any time; this likewise applies to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing, or defending legal claims. You can object to the processing of your data for the purpose of direct mail at any time without stating reasons.

 

Right of appeal:
If you believe that we violate German or European data protection laws when processing your data, we ask you to contact us to clarify the issue. Of course, you also have the right to contact the supervisory authority responsible for you, namely the respective State Office for Data Protection Supervision.

 

If you want to assert any of the above rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

Processing of your data is necessary to conclude or fulfill your contract with us. If you do not provide us with these data, we will generally have to refuse conclusion of the contract, or we will be unable to implement an existing contract and consequently have to terminate it. However, you are not obliged to give your consent to any processing of data that is not relevant or legally required for fulfillment of the contract.

If you need any further information about our privacy policy concerning other countries, please do not hesitate to visit our Global Privacy Policy page.