Your specialist for the hospital sector:
Case figuresFinancial dataReimbursementConsulting
DE EN +49 (0) 2223 913 488 mail@biai.de

Privacy Policy

This page has been translated by machine, therefore we cannot guarantee that this text corresponds 100% to the German version. In case of doubt, the German version of this privacy policy applies.

 

1. Data protection at a glance

 

We have appointed an external data protection officer:

5medical management GmbH
Michael Letter
Mörikestraße 50, 53121 Bonn, Germany
E-Mail:  ext.privacy[-@-]biai.de

If you are contacting us by email, please replace [-@-] with @.

If you have any questions regarding the processing of your personal data or the exercise of your data protection rights, you can contact our Data Protection Officer at any time.

 

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For more detailed information on data protection, please refer to our data protection statement below this text.

 

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the contact details of the website operator in the section "Information on the data controller" in this privacy policy.

How do we collect your data?

On the one hand, your data is collected by you providing it to us. This may, for example, be data that you enter in a contact form. 

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected in order to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

If you have any questions on this or any other data protection matters, please feel free to contact us or our Data Protection Officer at any time.

 

2. Hosting

 

IONOS

We host our website with IONOS SE. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter: IONOS). When you visit our website, IONOS collects various log files including your IP addresses. For details, please refer to the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Order processing

We have concluded a contract on order processing (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the German Data Protection Act (DSGVO).

 

3 General notes and obligatory information

 

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This Privacy Policy explains what information we collect and how we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

 

Note on the responsible office

The responsible party for data processing on this website is:

BI&I GmbH, Laurentiusstr. 24, 53639 Königswinter, Germany.

Telephone: +49-2223-913488

E-mail: privacy[-@-]biai.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

 

Storage period

Unless a more specific storage period is stated within this data protection declaration, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

 

General information on the legal basis for data processing on this Website

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO if special categories of data are processed in accordance with Art. 9 para. 1 DSGVO. If you have consented to the storage of cookies or to the access to information in your terminal device (e.g. via device fingerprinting), the data processing is also based on Section 25 (1) TTDSG. This consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b DSGVO. Furthermore, if your data is required for the fulfilment of a legal obligation, we process it on the basis of Art. 6 para. 1 lit. c DSGVO. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6 para. 1 lit. f DSGVO. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this data protection declaration.

 

Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

 

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

 

Right to object to data collection in special cases and to direct marketing (Art. 21 DSGVO)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) DSGVO).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 DSGVO).

 

Right of appeal to the competent supervisory authority

In the event of breaches of the GDPR, data subjects shall have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right of appeal is without prejudice to any other administrative or judicial remedy.

 

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

 

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, the right to correction or deletion of this data. You can contact us at any time with regard to this and any other questions you may have on the subject of personal data.

 

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
  • If you have lodged an objection pursuant to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data. If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

 

Objection to advertising e-mails

The use of contact data published within the framework of the imprint obligation for the purpose of sending advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.

 

4. Data collection on this website

 

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.

 

Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data resulting from it (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.

The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

 

5. Processing of personal data in connection with information and analytics services for the healthcare market

BI&I GmbH processes personal data in the context of its business information and analytics services for the healthcare market. This may include personal data relating to individuals who work in healthcare, medical and scientific care, research, teaching or related professional fields. In particular, this may concern healthcare professionals, scientific experts and other individuals professionally active in this environment.

The purpose of this processing is to structure professional and scientific information and make it available to authorised business customers in the healthcare market. This may include, in particular, the analysis of medical and scientific expertise, areas of specialisation, institutional affiliations, professional roles and publicly identifiable professional and scientific activities.

 

Categories of personal data

Depending on availability and the relevant professional context, we may process the following categories of personal data in particular:

  • name, title, academic qualifications and professional role;
  • professional contact details and institutional affiliation;
  • medical specialty, areas of specialisation and medical or scientific fields of activity;
  • publicly available information relating to professional and scientific activities, in particular publications, studies, guidelines, conferences and other professional events, lectures, committees, professional societies, institutional roles and professional or scientific collaborations;
  • structuring information derived from the above, such as professional categorisation, relevance within defined medical specialties, indication areas or procedure fields, and links or networks within a professional or scientific context.

The processing generally relates to the professional and scientific activities of the individuals concerned. Information relating to private life is not part of our regular processing.

 

Sources of the data

The data is obtained mainly from publicly available or professional sources. These may include, in particular, publication databases, study registries, guidelines, conference and event programmes, websites of hospitals, universities, research institutions, professional societies, public registers and other publicly available professional information sources.

 

Purposes of processing

The processing is carried out in particular for the following purposes:

  • to provide structured information on medical and scientific expertise and areas of specialisation;
  • to support market, healthcare, network and expert analyses in the healthcare sector;
  • to identify and classify professional and scientific activities within defined medical specialties, indication areas or procedure fields;
  • to ensure the quality, updating, validation and maintenance of the underlying data sets;
  • to fulfil contractual obligations towards business customers and to safeguard the legitimate business interests of BI&I GmbH and its customers.

 

Legal basis

The processing is carried out on the basis of Article 6(1)(f) GDPR. The legitimate interest lies in providing, maintaining and quality-assuring professional and scientific information and analytics services for the healthcare market, as well as in supporting appropriate business, scientific, healthcare-related and market-related analyses.

In balancing the relevant interests, we take into account in particular that the processing generally concerns professional, scientific and publicly available information and does not relate to the private life of the individuals concerned.

 

Recipients of the data

Recipients of the data may include business customers of BI&I GmbH, in particular companies and organisations in the pharmaceutical, biotechnology, medical technology, medical device, healthcare, market research, consulting or healthcare provision sectors, provided they have a legitimate interest in the relevant information.

In addition, technical service providers may have access to personal data where this is necessary for hosting, maintenance, IT security, data preparation, quality assurance or support. Such service providers are engaged on the basis of appropriate contractual arrangements.

 

Retention, updating and restriction of processing

The data is retained for as long as it is required for the purposes described above. Data sets are regularly reviewed, updated, corrected or deleted where necessary. Where deletion is not possible or not appropriate in an individual case, processing may be restricted or a blocking notice may be applied.

 

Your privacy choices

Depending on the applicable law, you may have certain rights in relation to the processing of your personal data. These rights may include in particular:

1. the right to obtain confirmation as to whether personal data concerning you is being processed;

2. the right of access to the personal data processed about you, including the purposes of processing, the categories of personal data, the recipients or categories of recipients, the retention period and the source of the data where it has not been obtained directly from you;

3. the right to receive a copy of your personal data in a commonly used, structured and machine-readable format, where the legal requirements are met;

4. the right to have inaccurate or incomplete personal data corrected or completed;

5. the right to request the deletion of your personal data, unless statutory or other legally permissible grounds prevent deletion;

6. the right to request the restriction of the processing of your personal data;

7. the right to object to the processing of your personal data where the processing is based on legitimate interests;

8. the right to object at any time to the processing of your personal data for direct marketing purposes;

9. the right to withdraw any consent you have given at any time with effect for the future;

10. the right not to be subject to a decision based solely on automated processing, including profiling, where such decision produces legal effects concerning you or similarly significantly affects you;

11. the right to lodge a complaint with a competent data protection supervisory authority.

These rights may be subject to limitations or exceptions under the applicable law.

To exercise any of these rights, you may contact us at privacy[-@-]biai.de. Where possible, please provide your name, your professional institution, your professional email address and a brief description of your request. If your request relates to data processed in connection with our information and analytics services for the healthcare market, additional information about your specialty, institution or the data set concerned will help us to identify your request accurately and prevent misuse.

If you believe that certain information is inaccurate, incomplete or should not be processed for particular reasons, you may contact us at any time using the contact details above.

We will review each request in accordance with the applicable legal requirements and respond within the statutory time limits.

 

Note on professional and scientific information

Where we process personal data relating to healthcare professionals, scientific experts or other individuals professionally active in the healthcare sector, this generally concerns information from a professional and scientific context. This may include, in particular, information on institutional affiliation, professional role, specialty, scientific publications, studies, guidelines, conferences and other professional events, committees, professional societies, professional collaborations and structuring information derived from these sources.

If you believe that certain information is inaccurate, incomplete or should not be processed for particular reasons, you may contact us at any time using the contact details above.
 

 

6. Analysis tools and advertising

 

IONOS WebAnalytics

This website uses the analysis services of IONOS WebAnalytics (hereinafter: IONOS). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D - 56410 Montabaur. As part of the analyses with IONOS, visitor numbers and behaviour (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. from which page the visitor comes), visitor locations and technical data (browser and operating system versions) can be analysed, among other things. For this purpose, IONOS stores the following data in particular:

  • Referrer (previously visited website)
  • requested website or file
  • browser type and browser version
  • operating system used
  • type of device used
  • time of access
  • IP address in anonymised form (only used to determine the location of the access)

According to IONOS, the data collection is completely anonymised so that it cannot be traced back to individual persons. Cookies are not stored by IONOS WebAnalytics.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the statistical analysis of user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

For further information on data collection and processing by IONOS WebAnalytics, please refer to the IONOS data protection declaration at the following link:

https://www.ionos.de/terms-gtc/index.php?id=6

 

Order processing

We have concluded an order processing agreement (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.

 

7. Newsletter

 

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO.

Data that has been stored by us for other purposes remains unaffected by this.

After you have unsubscribed from the newsletter distribution list, your email address will be stored by us or the newsletter service provider in a blacklist if necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

 

8. Plugins and tools

 

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform font display. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

Mehr Informationen zum Umgang mit Nutzerdaten finden Sie in der Datenschutzerklärung von

Google: https://policies.google.com/privacy?hl=de.

Source: This privacy policy was created using a privacy policy template from e-recht24 and supplemented with BI&I GmbH’s own company-specific information.

Contact

Address

BI&I GmbH
Business Intelligence & Information
Laurentiusstr. 24
53639 Königswinter
Germany

Phone

+49 (0) 2223 913 488

E-Mail

mail@biai.de