Information on the processing of personal data by Elten GmbH in the context of ordering and manufacturing orthopaedic aids
Elten GmbH (hereinafter “Elten”, or “we”) is subject to information obligations under the European General Data Protection Regulation (GDPR) in connection with the processing of your personal data.
The following information is intended to give you an overview of what data is involved, to whom it may be transmitted and for what purposes the processing is necessary. You will also receive information about the rights to which you are entitled in the course of the processing of your personal data.
If you have any further questions, please do not hesitate to contact us.
Who is responsible for the processing of your personal data within the meaning of the GDPR?
The controller within the meaning of the GDPR is Elten GmbH, Ostwall 7-13, 47589 Uedem.
Who is the data protection officer at Elten GmbH?
- By post: Data Protection Officer of Elten GmbH,
c/o migosens GmbH, Wiesenstr. 35, 45473 Mülheim an der Ruhr - By e-mail: dsb-elten@migosens.net
For what purposes and on what legal basis is your personal data processed?
Your personal data is processed in particular in the context of counselling and the commissioning of orders for orthopaedic aids and (occupational safety) footwear. In this context, the processing of health data may be necessary. This includes, for example, medical information on health insurance, medical prescriptions or medical certificates. We also take footprints using 3D foot scans or foot foam in order to guarantee the quality requirements of your desired products.
We process your personal data for counselling, needs analysis and for the supply or provision of orthopaedic aids and (occupational safety) footwear. The data collection and data processing is necessary for the above-mentioned purposes and thus for the execution of the contract and is based on Art. 6 para. 1 lit. b GDPR and regarding the processing of health data in accordance with Art. 9 para. 2 lit. a GDPR. Furthermore, we are obliged to regularly store your data collected and processed for the above-mentioned purposes due to legal provisions; the legal basis for this is based on Art. 6 para. 1 lit. c GDPR.
You have the right to withdraw your consent at any time with effect for the future without affecting the lawfulness of processing based on consent before its withdrawal.
Which recipients receive your personal data?
In principle, all processing steps are carried out in our company. The personal data is only used by the employees of Elten GmbH for the above-mentioned purposes. We have also involved processors to fulfil the purposes and processing in compliance with data protection regulations. Data is not transferred to unsafe third countries.
How long will your personal data be stored?
The data will be stored for as long as is necessary for the implementation and fulfilment of the above-mentioned purposes. Subsequently, your data will be stored for the duration of the relevant statutory retention periods.
What are your rights in relation to your personal data (data subject rights)?
If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis Elten GmbH. To exercise your rights, please always contact the above-mentioned controller, as your rights are also to be implemented there.
You can request information about your personal data processed by us in accordance with Art. 15 GDPR.
In your request for information, you should specify your request in order to make it easier for us to compile the necessary data.
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.
In accordance with Art. 21 GDPR, you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation.
If the processing is based on consent, you have the right to withdraw your consent at any time with effect for the future in accordance with Art. 7 GDPR.
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format within the scope of data portability in accordance with Art. 20 GDPR.
Automated decision-making in accordance with Art. 22 GDPR does not take place in the course of processing your personal data.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR or other relevant data protection provisions.
