Privacy Policy

UGRS International Services GmbH

Heidelberger Landstraße 7

64297 Darmstadt

Germany

Represented by: Jörg Hagen, Managing Director

Email: kontakt@ugrs.de

Phone: +49 (0) 6151 606 1034

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). This may primarily include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling our contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Our hosting provider(s) will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.

We use the following hosting provider(s):

Kinsta, server location Frankfurt am Main

a) When visiting the website

When you access our website www.ugrs-zentrum-darmstadt.com, the web server automatically collects the following data:

• IP address
• Date and time of access
• Browser and operating system used
• Referring URL (referrer)
• Pages visited

This data is used exclusively for technical evaluation and to ensure operation (legal basis: Art. 6(1)(f) GDPR – legitimate interest).

b) When making contact (email or phone)

If you contact us, your details (name, email, phone number, message) are stored in order to process your enquiry.

Legal basis:

• For general enquiries: Art. 6(1)(b) GDPR
• For medical enquiries: Art. 9(2)(h) GDPR in conjunction with § 22 BDSG

c) During medical consultation and treatment

Health data is processed and stored exclusively within the scope of medical confidentiality. It is not disclosed to third parties without your express consent or a legal basis.

Cookies

Our website uses so-called "cookies". Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies may be used to evaluate user behaviour or for advertising purposes.

Cookies that are required for the electronic communication process, to provide certain functions you have requested (e.g. for the shopping cart function), or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); this consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Where further cookies and services are used on this website, you can find details of these in this privacy policy.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – the server log files must be recorded for this purpose.

Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, provided your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested; consent can be revoked at any time.

The data you enter in the contact form remains with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after we have finished processing your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Enquiries by Email, Phone, or Fax

If you contact us by email, phone, or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, provided your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested; consent can be revoked at any time.

The data you send us via contact enquiries remains with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after we have finished processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Communication via WhatsApp

For communication with our customers and other third parties, we use, among other things, the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from accessing the content of the communication. However, WhatsApp does have access to metadata generated during the communication process (e.g. sender, recipient, and time). We further note that, according to its own statements, WhatsApp shares personal data of its users with its US-based parent company Meta. Further details on data processing can be found in WhatsApp's privacy policy at: whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is based on our legitimate interest in the fastest and most effective communication possible with customers, prospective customers, and other business and contractual partners (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, data processing is carried out exclusively on the basis of that consent; it can be revoked at any time with effect for the future.

The communication content exchanged between you and us via WhatsApp remains with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after we have finished processing your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

The company holds a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to complying with these data protection standards. Further information is available from the provider at the following link: dataprivacyframework.gov/participant/7735.

We use WhatsApp in the "WhatsApp Business" variant.

Data transfer to the USA is based on the European Commission's standard contractual clauses. Details can be found here: whatsapp.com/legal/business-data-transfer-addendum.

We have configured our WhatsApp accounts so that there is no automatic data synchronisation with the address book on the smartphones in use.

We have concluded a data processing agreement (DPA) with the above-named provider.

ProvenExpert

We have integrated ProvenExpert review badges on this website. The provider is Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, provenexpert.com.

The ProvenExpert badge allows us to display customer reviews submitted to ProvenExpert about our company on our website in a badge. When you visit our website, a connection is established with ProvenExpert, allowing ProvenExpert to determine that you have visited our website. ProvenExpert also records your language settings in order to display the badge in the selected language.

The use of ProvenExpert is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a comprehensible presentation of customer reviews. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a solution that allows us to manage so-called website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data itself. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, length of visit, operating systems used, and the origin of the user. This data may be summarised by Google in a profile assigned to the respective user or their device.

Google Analytics uses technologies that enable recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to and stored on a Google server in the USA.

The use of this analytics tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

IP Anonymisation

We have activated the IP anonymisation function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout?hl=en.

Data Processing Agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Microsoft Advertising

This website uses Microsoft Advertising. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising sets a cookie on your computer if you reached our website via a Microsoft Bing advertisement. This allows Microsoft and us to recognise that someone clicked on an advertisement, was redirected to our website, and reached a previously defined target page (conversion page). We only learn the total number of users who clicked on a Bing advertisement and were subsequently redirected to the conversion page. We do not receive personal data about the identity of the users.

The use of this analytics tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising, including the associated cost optimisation. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

As part of Google Ads, we use so-called conversion tracking. When you click on an advertisement served by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user's computer system. These cookies generally lose their validity after 30 days and are not used for personal identification.

If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users.

The use of the cookie is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can recognise whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked and how often, and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our advertisements and which actions they performed. We do not receive any information that would allow us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of the cookie is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

More information on Google Ads and Google Conversion Tracking can be found in Google's privacy policy: policies.google.com/privacy?hl=en.

YouTube with Extended Privacy Mode

This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, extended privacy mode does not necessarily rule out the transmission of data to YouTube's partners. For instance, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). Using these cookies, YouTube can obtain information about visitors to this website. This information is used, among other things, to gather video statistics, improve user-friendliness, and prevent fraud attempts. The cookies remain on your device until you delete them.

Further data processing operations may be triggered after starting a YouTube video, over which we have no control.

The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Further information on data protection at YouTube can be found in its privacy policy at: policies.google.com/privacy?hl=en.

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Postfach 3163, 65021 Wiesbaden

Phone: +49 (0) 611 1408 0

Web: https://datenschutz.hessen.de