PRIVACY POLICY OF REBMANN RESEARCH
This privacy policy outlines how your personal data is processed when you use the services and features on the website, https://www.rebmann-research.de (the “Website”). This policy also informs you about rights regarding your personal data and provides guidance on how to manage your privacy settings.
Responsible for processing your personal information is: Rebmann Research GmbH & Co. KG, Gewerbepark H.A.U. 8, 78713 Schramberg, Germany. In this policy, terms like “we” or “us” refer to this company.
You can contact our data protection officer at the address given above or at datenschutz@rebmann-research.de.
Notice:
You are not legally or contractually obligated to provide us with the personal data specified in this Privacy Policy. However, if you wish to enter a contract with us—such as licensing software or commissioning our services—providing the necessary contractual information is essential for forming an agreement. Additionally, if you choose not to provide certain data or object to its processing, you may not be able to access or fully utilize our website’s features.
- Types of personal data we process and their sources:
We process various types of personal data obtained from different sources when you use our website. This includes both data automatically collected from all website visitors and data you may voluntarily provide to us.
Data automatically collected when you use our website:
When you visit our website, certain technical information is automatically sent to our web servers, even if you do not contact us directly (e.g., through a contact form). The following access and website usage data (referred to as “usage data”) are collected in all cases:
- Date and time of visit, along with the duration of your use of the website
- the anonymized IP address of your device
- the referral URL (the website from which you were redirected, if applicable)
- the visited subpages of our website
We process this usage data to enable and optimize your website experience and to ensure the website’s functionality. Additionally, we use it to analyze website performance, improve user experience, and address technical issues. Usage data also helps us maintain IT security, protect our systems, and detect or prevent misuse, particularly fraud.
The usage data is stored in a pseudonymized form, preventing us from directly identifying you.
Cookies and other tracking tools
Our website uses cookies to automatically process usage data. Cookies are small text files that are downloaded to your device when you visit our website and that store the information mentioned above:
Google Analytics
With your consent, our website uses Google Analytics and Google Tag Manager, services provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ireland”), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics and Google Tag Manager use cookies to help us analyze the number of visitors and their general behavior on our website. All data collected through these tools is pseudonymized, meaning that we cannot directly identify you. A detailed list of cookies is available at: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.
The information generated by these cookies about your use of our website (e.g., unique identifier, browser type/version, operating system, referring URL, anonymized IP address, country, pages visited, device type, time and duration of use) is generally transferred to and stored on Google servers in the USA. However, within member states of the European Union or in other states that are signatories to the European Economic Area Agreement, Google shortens your IP address on our website to protect your privacy. For this purpose, we use the code “gat._anonymizeIp() ;”, ensuring IP anonymization (IP masking).
Only in exceptional cases, the full IP address may be sent to a Google server in the USA and anonymized there. If any personal data is transferred to the USA, this transfer is governed by your consent to the use of Google Analytics. The legal basis for such data transfers to the USA is Article 49(1)(1)(a) of the GDPR.
Google uses this information on our behalf to evaluate website usage, generate reports on website activity, and provide other services related to website and internet usage. We do not combine the IP address collected through Google Analytics with other Google data.
You may disable cookies in general, and in addition, you can specifically prevent Google from collecting and processing data related to your website usage (including your anonymized IP address) by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout.
For more information on Google’s terms of service and data protection policies, please visit: http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/privacy/.
Google Maps
Our website incorporates Google Maps via an API to help you easily locate the sites mentioned on our website and to enhance your experience with an engaging map presentation. Using Google Maps requires that your IP address be shared with Google. For further details on how Google handles user data, please refer to https://www.google.de/intl/de/policies/privacy/.
YouTube
Our website includes links to videos stored on YouTube at http://www.YouTube.com allowing us to share interesting content directly. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To protect your privacy, no data is automatically sent to YouTube when you visit our website. Instead, a connection to YouTube’s servers is only established if you actively click on a video link, thereby consenting to connect with YouTube. The legal basis for this data processing is your consent (Article 6(1)(a) GDPR or § 25(1) TTDSG). Once you click on and play a video, the following personal data will be transmitted to YouTube: your IP address, date and time of the request, content of the request (specific page on our website), HTTP status, referring URL, browser type, operating system and version, and language settings. This data is used by YouTube to recognize the specific page you visited and to deliver the video content to you. For further information on how YouTube and Google handle your data, please visit https://policies.google.com/privacy?hl=de&gl=de
Please note that we do not have control over any cookies that may have been set by YouTube prior to visiting our website. If you have previously visited YouTube and accepted its cookies, you can manage your cookies in the Google Ad Settings.
Data that you provide directly
In addition to the general data collected from all visitors, we also process data you provide when you interact with us directly, such as through our contact form. This may include your name, company, job title (optional), email address, phone number, and the content of your message (all specific fields are shown in the contact form).
We use this data to send your message to our designated email address, info@rebmann-research.de and to respond to your inquiry as requested. Additionally, if you activate a free trial of our ATLAS MEDICUS® system via our website, we process the following information: your name, company, address, phone number, email address, and login details (username, password). This data is used to set up your ATLAS MEDICUS® access and to send you an email with your login credentials and confirmation of activation. For more information on data processing within the ATLAS MEDICUS® system, please see the ATLAS MEDICUS® privacy policy.
- Additional purposes for data processing
In addition to the purposes described above, we may process your data for other reasons, such as disclosing your personal data to third parties when legally required as well as asserting legal claims on our behalf or defending against legal claims made by others.
- Social Networks
We also maintain presences on various social networks, which you can access easily through buttons on our website. These buttons, marked with the respective social network logos, are simple links, not social plugins. As long as you do not click these buttons, no data is shared with the social networks, and you maintain full control over your data.
If you click on a social network button, you consent to the connection with the respective network’s servers. This may result in the transmission of your IP address, browser information, operating system details, screen resolution, installed plugins, and your referring source to the network provider. Once you click on a social network button, you will leave our website and will be subject to the data usage policies of the respective social network. On your next visit to our website, the social network buttons will again be in their default inactive mode, ensuring that no data is transmitted unless you click them again.
For detailed information on the purpose and scope of data collection, the processing and use of your data by the respective social network, as well as your rights and privacy protection options, please refer to the following details:
Facebook (Meta Platforms Inc.):
Facebook Ireland Limited, Grand Canal Square, Dublin 2, Ireland;
Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA;
Privacy policy: http://www.facebook.com/about/privacy
X (Twitter):
X Corp., 1355 Market Street., Suite 900, San Francisco, CA 94103;
Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy policy: http://twitter.com/privacy
YouTube (Google Ltd.):
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
YouTube, LLC 901 Cherry Ave., San Bruno CA 94066, USA
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de
Xing (New Work SE):
New Work SE, Am Strandkai 1, 20457 Hamburg, Germany;
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
LinkedIn:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy#choices-oblig
Please note that when you activate a social network button on our website, some user data may be transmitted to servers located in third countries and processed outside the European Union, potentially subjecting it to different data protection regulations.
- Legal basis for data processing
We process your personal data in compliance with the General Data Protection Regulation (GDPR), an EU-wide legal framework that standardizes data protection laws. Our data processing activities are based on the following legal grounds:
Your consent (Article 6(1)(a) GDPR)
By filling out and submitting our contact forms or requesting free trial access to ATLAS MEDICUS®, you provide explicit consent to the data processing activities described in this privacy policy. If we process your data for setting up and managing your user account, it is done based on your consent.
Pre-contractual obligations (Article 6(1)(b) GDPR)
We also process your data to carry out pre-contractual measures. For instance, if you submit an order request through our website, storing your contact information is necessary to take appropriate pre-contractual steps and respond to your inquiry.
Legitimate interests (Article 6(1)(f) GDPR)
In some cases, we process your data without requiring your consent when it is necessary to protect our legitimate interests or those of third parties. The purposes mentioned above, such as ensuring the security of our IT systems and improving website functionality, fall under our legitimate interests. This legal basis also covers our use of services like Google Analytics and Google Maps, which help us enhance the user experience and improve website performance.
Legal obligations (Article 6(1)(c) GDPR) or public interest (Article 6(1)(e) GDPR)
We may also process certain data to fulfill legal requirements, such as providing information to law enforcement or tax authorities, or when it is necessary to carry out a task in the public interest.
- Who we share your data with:
Except for the service providers and partners outlined below, we do not share your data with third parties (aside from Google, as already specified). When the listed data recipients process your information on our behalf, they do so strictly in accordance with our instructions and are bound by stringent security requirements to protect your data.
We share your data exclusively with our hosting service providers:
- TRNetworX, Treskowallee 101, 10318 Berlin, GERMANY
- Hetzner Online GmbH, Gunzenhausen, GERMANY
- DomainFactory GmbH, 85737 Ismaning, GERMANY
These providers enable the operation of our website.
- Data processing outside the EEA:
In general, we do not transfer your access and account data to countries outside the European Economic Area (EEA) or “third countries.” Your data is hosted solely on the servers of our hosting providers, mentioned above, located in Germany.
However, usage data collected via Google is processed in the USA, which is considered a third country. We ensure that a suitable level of data protection is always maintained. In particular, we ensure that Google, as the data recipient, has accepted the EU Standard Contractual Clauses or provides alternative appropriate safeguards as defined by the GDPR to guarantee an adequate level of data protection.
- Storage period:
We process and store your personal data only as long as it is necessary to fulfill our contractual or legal obligations. Therefore, we keep your data for the duration of our contractual relationship with you and, following termination, only for as long as required by German law. Usage data is deleted as soon as it is no longer needed to operate the website.
- User profiles:
We do not use your data to create user profiles. This means we do not process your information to deliver a personalized website experience based on your individual preferences or interests, nor do we offer tailored content based on previous behavior. For example, we will not use your IP address to determine your geographical location for localized content, and your data will not be used for automated decisions that could legally affect you or significantly impact you in similar ways.
- Your legal rights under the GDPR:
Under the GDPR, you have the following rights regarding your personal data:
- Right of access in accordance with Article 15 GDPR
- Right to rectification in accordance with Article 16 GDPR
- Right to erasure (´right to be forgotten´) in accordance with Article 17 GDPR
- Right to restriction of processing in accordance with Article 18 GDPR
- Right to data portability in accordance with Article 20 GDPR
Additionally, you have the right to lodge a complaint with the relevant data protection authority (Article 77 GDPR in conjunction with Section 19 of the German Federal Data Protection Act (BDSG)).
You may also withdraw your consent to the processing of your personal data at any time by contacting us through our web form. This withdrawal applies to any consent granted before the GDPR’s implementation on May 25, 2018. Please note, however, that this withdrawal only affects future processing; processing completed before the withdrawal remains lawful and unaffected.
Information on your right to object under Article 21 GDPR
- Right to Object in Specific Situations
In addition to the rights previously outlined, you have the right to object, at any time and on grounds related to your particular situation, to the processing of your personal data based on Article 6(1)(e) GDPR (processing in the public interest) or Article 6(1)(f) GDPR (processing based on a balance of interests). If you make an objection, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.
- Right to Object to Processing for Advertising Purposes
You also have the right to object at any time to the processing of your personal data for direct marketing purposes, including receiving our newsletter. This also applies to any related profiling activities linked to direct marketing. Should you object, we will stop processing your personal data for these purposes.
Please be aware that refusing to provide certain data or objecting to its use may limit or prevent your access to our website or its full functionality.
You may submit your objection informally by contacting us at:
datenschutz@rebmann-research.de or REBMANN RESEARCH GmbH & Co. KG, Gewerbepark H.A.U. 8, 78713 Schramberg, Germany
- Updates to this privacy policy
To ensure this privacy policy reflects our current data processing practices, we may amend it as needed. Any updates will apply the next time you visit our website.
Effective December 2023
