Data Protection Officer

MisterData® — Datenschutz & Consulting UG (haftungsbeschränkt)
Mr. Yilmaz Özdemir — Fully Qualified Lawyer & Data Protection Officer
Schwalbenweg 61/1, 69123 Heidelberg
Mobile: +49 176 727 11 014

Privacy Policy

adViva GmbH takes the protection of your personal data very seriously.
We process personal and pseudonymized data collected when you visit our website in compliance with applicable data protection laws. Your data will neither be published nor improperly disclosed to third parties.

Below, we explain which data we collect during your visit to our website and how exactly we use it.

  1. Datenschutz für diese Website
  2. Datenschutzerklärung zum allgemeinen Aufgabenbereich des Verantwortlichen
  3. Datenschutzhinweis zur Bearbeitung von Bewerbungen

Privacy Policy

Das ist ein sehr umfangreicher Text, den ich dir gern vollständig und professionell auf Englisch übersetze.
Hier ist der Anfang – wenn du möchtest, kann ich den Rest in einem zweiten Schritt liefern oder dir das komplette Dokument in einem Stück als fertige englische Privacy Policy ausgeben.

Privacy Policy

1. Data Collection and Processing When Accessing the Website

When you visit our website, our web servers temporarily store each access in a log file. The following data is collected and stored until automated deletion:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the requested file
  • Amount of data transferred
  • Confirmation whether the request was successful
  • Identification data of the browser and operating system used
  • Website from which the access originated
  • Name of your Internet service provider

This data is processed for the purpose of enabling the use of the website (establishing a connection), ensuring system security, technical administration of the network infrastructure, and optimizing our website.
The IP address is only evaluated in the event of attacks on the network infrastructure of adViva GmbH. Personal user profiles are not created. Beyond the aforementioned cases, personal data is only processed if necessary to fulfill an order you have placed with us or if you have explicitly consented to further processing.

2. Use of Personal Data

Personal data that you provide to us via our website (e.g., your name, address, or email address) is used to correspond with you and for the purpose for which you provided the data to us (e.g., registration for a closed user area, verification of login data, or sending requested information).
Any further use of this data for occasional offers via post or email to inform you about new products and other services or promotions that may be of interest to you will only occur where permitted by law or if you have given your prior consent. The same applies to the use of your data for sending information material and to enable your active participation in services offered via the website.
Any use of your personal data is solely for the stated purposes and only to the extent necessary to achieve these purposes.
You can object to receiving advertising or information material from us at any time by notifying us at the contact address or email provided below. You may also revoke any consent you have given at any time with effect for the future by informing us at the contact or email address below.

3. Newsletter

If you request a newsletter from us, you will receive information about our offers or — where indicated — offers from our cooperation partners. You can unsubscribe from the newsletter at any time using the unsubscribe link in the newsletter, at no cost other than the transmission costs according to the basic rates.

4. Disclosure of Personal Data

Personal data is only disclosed to government authorities and agencies within the framework of legal regulations or if the disclosure is necessary for legal or criminal prosecution in the event of attacks on our network infrastructure.
Any service providers used in the course of processing will only receive the data necessary to fulfill their tasks and are bound to confidentiality, just as our own employees are.
Your data will only be transferred to third parties where permitted by law. Beyond this, your data will not be passed on to third parties.

5. Security

adViva GmbH uses appropriate technical and organizational security measures to protect the personal data we manage from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continually improved and adapted in line with technological developments.

6. Cookies

Cookies are small text files stored on the user’s computer. They are used to manage the internet connection during your visit to our website. At the same time, these cookies provide us with information that enables us to analyze how you use the website in order to optimize it for visitors’ needs.
Some cookies are only stored for the duration of your visit (session cookies), while others are stored longer (persistent cookies).
The session cookie (fe_typo_user), which is set on each page call, exists only during your online session and becomes inactive once you close your browser. It is used solely for the technical communication between browser and web server.
Of course, you can also view our website without cookies. However, most browsers automatically accept cookies. You can prevent the storage of cookies by adjusting your browser settings accordingly. Please note that not accepting cookies may result in functional limitations of our services.

📩 Wenn du möchtest, kann ich den gesamten Text (inklusive aller 17 Punkte, Google Maps, Facebook, Matomo, HubSpot etc.) in einem Stück fertig übersetzen. Möchtest du das?
Sag einfach „ja“, und ich liefere dir die komplette englische Datenschutzerklärung als sauberes Dokument.

Privacy Policy on the General Responsibilities of the Controller

Information for the Data Provider (Privacy Notice)

adViva GmbH, Eppelheimer Straße 64, 69123 Heidelberg, collects your data for the purpose of providing you with assistive devices and fulfilling its contractual, pre-contractual, and legal obligations.

The collection and processing of data are necessary and based on Articles 6(1)(b), 6(1)(f), and 9(2)(a) and (h) of the GDPR.

Where necessary to fulfill the contract or legally required, this data will be shared with social insurance carriers, statutory health insurance service providers, insurance companies, authorities, and service providers/data processors or comparable third parties such as partner companies within the OPED Group Germany that are necessary for the performance of the contract. The data will be deleted as soon as it is no longer required for the purpose of processing, taking into account statutory retention periods under tax law (§ 147 AO), commercial law (§ 257 HGB), and medical device regulations (EU Regulation 2017/745 Annex XIII) of six or ten years.

You have the right to request information about the data we store and process about you (Art. 15 GDPR), to request correction of inaccurate data (Art. 16 GDPR), or deletion of data if processing is unlawful (Art. 17 GDPR). You also have the right to restrict processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

You may lodge a complaint at any time with a supervisory authority, for example, the authority of your place of residence or the authority responsible for us. A list of supervisory authorities (for the non-public sector) with contact information can be found at:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Data Transfers to Third Countries

If we transfer personal data to service providers outside the European Economic Area (EEA), this is done only if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate safeguards are in place (e.g., binding corporate rules or EU standard contractual clauses).

We use the online marketing platform HubSpot. Data is processed by: HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. Your data is stored on servers in the USA. HubSpot is certified under the EU-U.S. Data Privacy Framework, for which the EU Commission has attested an adequate level of data protection. We have entered into a data processing agreement (DPA) with HubSpot. Information on data protection at HubSpot:
https://legal.hubspot.com/de/terms-of-service

We also use Microsoft Azure as a data storage platform. Data is processed by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft is certified under the EU-U.S. Data Privacy Framework. We have concluded a DPA with Microsoft. More information about Microsoft’s privacy policy:
https://privacy.microsoft.com/en-us/privacystatement

Consent to the Processing of Health Data and Photo and/or Video Documentation under the GDPR

We require your explicit consent for the processing of health data and image material.

We process this data to provide assistive devices (e.g., product planning, diagnostics, and, if applicable, to demonstrate effectiveness and appropriateness of care) and/or to fulfill our contractual, pre-contractual, and legal obligations.
The collection and processing of this data are based on Article 9(2)(a) and (h) GDPR.

Where necessary to fulfill the contract or legally required, this data may also be shared with social insurance carriers, statutory health insurance service providers, insurance companies, authorities, and service providers/data processors or comparable third parties such as doctors or partner companies within the OPED Group. Data will be deleted when it is no longer required for the purposes of assistive device provision, or if you withdraw your consent. Legal retention periods under tax law (§ 147 AO), commercial law (§ 257 HGB), and medical device law (EU Regulation 2017/745 Annex XIII) remain unaffected. Consent is voluntary and can be withdrawn at any time.
Upon receipt of your withdrawal, the relevant data will no longer be used or processed and will be deleted in accordance with legal requirements. The legality of processing carried out until the withdrawal remains unaffected.

Joint Controllership

The data processing described in this section is partly carried out under joint responsibility (“Joint Controllership”) within the OPED Germany Group.

Controllers as defined by the GDPR are:

  • OPED GmbH, Medizinpark 1, 83626 Valley/Oberlaindern
  • Th. Lückenotto GmbH - Sanitätshaus und Orthopädie-Technik, Caspersgäßchen 8–10, 45657 Recklinghausen
  • Hartlieb GmbH, Esslinger Str. 8, 73037 Göppingen
  • Ortho Form Orthopädie und Rehasonderbau GmbH, Zum Gewerbepark 9, 44532 Lünen
  • Sanitätshaus Fuchs & Möller GmbH, Hasenackerstr. 13–17, 68163 Mannheim
  • adViva GmbH, Eppelheimer Straße 64, 69123 Heidelberg

Their respective privacy statements are available via their websites.

Consent to Electronic Contact for Quality Assurance or Activities Such as Events and Promotions

For contacting you electronically (e.g., by email) for quality assurance purposes after your care or for activities such as promotions or events, we require your consent. This is independent of your consent to data processing and can be revoked at any time.

Withdrawals should be addressed to:

adViva GmbH, Eppelheimer Straße 64, 69123 Heidelberg
Phone: +49 6221 73923-0
Email: empfangzentrale@adviva-info.de

Postal Advertising

We reserve the right to use your first and last name and postal address, which you provided to us in connection with your care, for quality assurance and advertising purposes, e.g., to send you interesting offers and information about our products by mail. This serves to safeguard our legitimate interests in advertising to our customers in accordance with Art. 6(1)(f) GDPR.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

IF THE PROCESSING OF PERSONAL DATA IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES.

Privacy Notice on the Processing of Applications

For what purposes and on what legal basis do we process personal data?

We process personal data about you for the purpose of handling your application for employment, insofar as this is necessary for the decision on establishing an employment relationship with us. The legal basis for this is § 26 (1) in conjunction with (8) sentence 2 of the German Federal Data Protection Act (BDSG).

We may also process personal data about you to the extent necessary to defend ourselves against legal claims asserted against us from the application process. The legal basis here is Art. 6 (1)(f) GDPR, where our legitimate interest, for example, is to provide evidence in proceedings under the German General Equal Treatment Act (AGG).
If an employment relationship is established between you and us, we may further process the personal data you have already provided to us for the purposes of the employment relationship in accordance with § 26 (1) BDSG, if this is necessary for the performance or termination of the employment relationship or for exercising or fulfilling the rights and obligations of employee representation arising from a law, collective agreement, works agreement, or service agreement (collective agreement).

Joint Controllership

The data processing described in this section is carried out under joint controllership within the OPED Germany Group.

The controllers within the meaning of the GDPR are:

  • OPED GmbH, Medizinpark 1, 83626 Valley/Oberlaindern
  • Medizinpark Valley Immobilien GmbH, Medizinpark 1, 83626 Valley/Oberlaindern
  • OPED Wundversorgung GmbH, Friedenstraße 33, 90571 Schwaig
  • Th. Lückenotto GmbH – Sanitätshaus und Orthopädie-Technik, Caspersgäßchen 8–10, 45657 Recklinghausen
  • Hartlieb GmbH, Esslinger Str. 8, 73037 Göppingen
  • Ortho Form Orthopädie und Rehasonderbau GmbH, Zum Gewerbepark 9, 44532 Lünen
  • Sanitätshaus Fuchs & Möller GmbH, Hasenackerstr. 13–17, 68163 Mannheim
  • adViva GmbH, Eppelheimer Straße 64, 69123 Heidelberg

The respective privacy policies of these entities can be accessed by clicking on the relevant links on their websites.

Who receives the data?

When you click the application button on the careers page, you will be redirected to the job portal of the OPED Germany Group. Your data will be collected for the purpose of filling positions jointly managed by all companies of the OPED Germany Group.
By entering your data, you consent to the use of your data by all companies of the OPED Germany Group.
For more information, please refer to the privacy policy of the OPED Germany Group job portal.

What categories of personal data do we process?

We process data that is related to your application. This may include general personal information (such as name, address, and contact details), details about your professional qualifications and education, information about professional training, or other information you provide to us in connection with your application.
Additionally, we may process publicly available, job-related information about you, such as a profile on professional social media networks.

How long will your data be stored?

We store your personal data for as long as it is necessary to make a decision about your application. If no employment relationship is established between you and us, we may also continue to store data to the extent necessary to defend against potential legal claims. In this case, the application documents will be deleted six months after notification of the rejection decision, unless longer storage is necessary due to legal disputes.

Wenn du möchtest, kann ich dir daraus auch ein vollständiges, gut formatiertes Privacy Notice for Applicants erstellen, z.B. für eine Karriereseite oder als PDF. Sag einfach Bescheid!