Data Privacy Notice for the BIOevents App

The privacy and protection of your personal information is a very important concern for BIOTRONIK AG. We would like to inform you which personal data are collected and used when the BIOevents App is used, as well as the associated configuration options for you.

We process your data in compliance with applicable privacy laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).

1 Person responsible and point of contact for data processing

The data controller according to Article 4 para. 7 GDPR is

BIOTRONIK AG
Ackerstrasse 6, 8180 Buelach, Switzerland
congress.vi@biotronik.com

If you have questions regarding the processing of your personal data within the scope of the BIOevents App, you can contact us at congress.vi@biotronik.com. If you have general questions about data privacy at BIOTRONIK, you can contact our Data Protection Officer. The Data Protection Officer can be reached at privacy@biotronik.com.

2 Your rights

You have the following rights:

To obtain request information about categories of the processed data, purposes of the processing, possible recipients and enivisaged period for which the personal data will be stored (Article 15 GDPR)
To withdraw consent given at any time and with effect for the future (Article 7 para. 3 GDPR)
To object to data processing which is performed based on a legitimate interest, on grounds relating to your particular situation (Article 21 GDPR)
To request the rectification or completion of inaccurate or incomplete data (Article 16 GDPR)
To request the erasure of data in certain cases - particularly in the case in which data are no longer needed for the intended purpose or are unlawfully processed, or you withdraw your consent according to Article 7 para. 3 GDPR or have objected data processing according to Article 21 GDPR (Article 17 GDPR)
Under certain conditions, to request the restriction of data, provided deletion is not possible or the deletion obligation is disputable (Article 18 GDPR)
Data portability, that is, you may obtain your data which you provided to us in a conventional, machine-readable format and, if applicable, their transmission to other controllers (Article 20 GDPR)

In addition, you have the right to file a complaint with the data protection supervisory authorities according to Article 77 of the GDPR.

3 Data processing when using the BIOevents App

3.1 Browser data

If you use the BIOevents App, we automatically collect the data associated with and transmitted from your device to our server. This also takes place if you use the app without logging into your user account. Depending on the device or browser used and its settings, these are usually the following data:

IP address
Device ID
Manufacturer and type of the device on which the browser is used
Date and time of the inquiry
Operating system
Name, language and version of the browser software

We also collect information about how you and your device interacted with our app, including the areas you visited and the links you clicked.

We use these data for the following purposes:

Detect, eliminate, and prevent errors, malfunctions, and possible misuse
Needs-oriented operation of the BIOevents App

The legal basis for the processing of these data is our legitimate interest according to Article 6 para. 1(f) GDPR.

Data will not be forwarded to third parties.

The data are deleted once they are no longer needed for the above-mentioned purposes within the scope of the legal basis.

3.2 User account

After you have installed the app on your device, you will be asked to create a user account in order to use the app to its full extent.

During the registration process the following mandatory data will be collected from you:

First name
Last name
E-Mail
Country

You may voluntarily enter additional data about yourself in order to achieve better visibility as a participant of BIOevents. Voluntary data are the following data types:

Phone Number
Bussiness Title
Organisation
Participation Dates

We use the data for the following purposes:

Your name and contact data are used to inform you accordingly of the settings you made regarding events within the scope of our service provision

4 Data processing in the case of requests

If you contact us (e.g. via email, telephone), we use the data you provide for the following purpose:

The processing of your request

Depending on the content of your matter, our data are processed based on variuos legal bases:

In the case of contractual questions: Article 6 para. 1(b) GDPR
In the case of legal obligations: Article 6 para. 1(c) and Article 9 para 2(i) GDPR
In the case of a legitimate interest: Article 6 para. 1(f) GDPR
In the case of consent granted: Article 6 para. 1(a) and Article 9 para. 2(a) GDPR.

The data may be forwarded for purposes of processing the request to our BIOTRONIK distribution company responsible for your region which performs services under its own responsibility for you or in connection with your contract with us. This is the case if you have requested services from such partners with us or if you agreed to the involvement of the partner or if we involve the partner based on a legal authorization.

Your transmitted data are deleted once they are no longer needed for the above-mentioned purposes and provided there are no further statutory storage obligations.

5 Place of data processing

Your data will in general be hosted and processed in Netherlands. If, by way of exception, your data are processed outside of the European Union (so-called third countries), this will happen provided you have given your express consent for this or this is necessary for us to provide services to you or this is provided for by law (Article 49 GDPR). Moreover, your data are processed in third countries only to the extent that it is ensured through certain measures that an appropriate level of data protection exists for this (Article 44 ff GDPR).

Last update: 3 June 2019