Privacy policy

Information on the further use of data in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR)

The protection of your data and your privacy is a top priority at MED-EL. We therefore provide information below on how we handle your personal data, in particular what we use your data for and who we pass it on to. We also inform you of your rights and entitlements with regard to the protection of your data. When we refer to "data" in the following, we mean your personal data. This includes all information that directly or indirectly identifies you as a person.

Please read the following information carefully.

About this privacy policy

This Privacy Policy explains when and why we collect personal information, how we use it and how we protect your data and your associated rights. In accordance with this Privacy Policy, we may collect, use and store your personal information. You will be informed each time we store your data. We reserve the right to update this privacy policy if necessary, even without prior notice. We recommend that you regularly check our website(hoerverlust.at) for the latest changes, whereby we would like to point out that changes will not be made retroactively. When we process your personal data, we always do so in accordance with the General Data Protection Regulation (GDPR). Within the meaning of the GDPR, we act as a "controller" for personal data that we process from you.

Who is responsible for processing the data?

The party responsible for data processing is: MED-EL Elektromedizinische Geräte Gesellschaft m.b.H. Fürstenweg 77a, 6020 Innsbruck, Austria, Tel.: +43 5 77 88, office@medel.com

The responsible data protection officer can be contacted at privacy.at@medel.com or to the attention of the data protection officer at the above address.

Contact:

MED-EL Vienna branch
Fürstengasse 1, 1090 Vienna
Phone: +43 1 317 2400, Fax: +43 1 317 2400 14
office-at@medel.com, hoerverlust.at

What data do we process and from what sources does this data originate?

We process data that we have received directly from you (e.g. contact, purchase history, data from your myMED-EL account), as well as data that is collected through the use of our products and services (e.g. app use, website visit). In addition, we process data that we have received from third parties and/or publicly accessible sources (e.g. company registers or registers of associations, the state, the press or the media). This data is only accessed in accordance with legal requirements (e.g. to fulfill an order/contract, to fulfill legal obligations or with your express consent).

Your personal data from different sources and from different applications and devices can be merged and linked within MED-EL.

Your personal data includes in detail:

• Name
• Contact information incl. e-mail address and telephone numbers
• Demographic information such as zip code, place of residence, preferences and interests
• Other information relevant for market analyses
• IP address
• User names and passwords for the password-protected areas of the website

For what purpose and on what legal basis is the data processed?

We process your data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act (DSG) in the current version.

Contact one of our a hearing advisors

You can contact a hearing advisor (e.g. to ask questions, request help, arrange a personal consultation, etc.) by filling out the form on the respective hearing advisor page. Contact is usually made by e-mail; if a telephone number is provided, by telephone.

Your personal details will be stored by us and automatically forwarded to the respective consultant so that the selected hearing consultant can contact you. It goes without saying that all further conversations remain confidential between you and the consultant. The consultant undertakes to delete your data once the consultation has been completed.

When you contact a hearing advisor (by submitting the form), the following data, which you enter in the relevant fields, will be processed: Name, telephone number, e-mail address and data relating to the request.

Purpose:

Answer/assistance to your request

Legal basis:

Consent - Art. 6 (1) lit. a) GDPR

 

Order info box

You can request free information material at hoerverlust.at/infobox. We will send this to you digitally (by e-mail) or by post, depending on your choice.

When you submit the form, the following data, which you enter in the corresponding fields, will be processed: Name, choice of desired target group, address (street, house number, city, zip code, region, country), e-mail address, consent to be included in the e-mail distribution list.

Purpose:

Dispatch of information material

Legal basis:

Consent - Art. 6 (1) lit. a) GDPR

 

Contact forms

You can contact MED-EL (e.g. to ask questions about our products, request help, etc.) by filling in our contact forms. Contact is usually made by e-mail; if a telephone number is provided, by telephone.

When you submit the contact form, the following data, which you enter in the corresponding fields, will be processed: Name, interests (professional interests), telephone number, address (street, house number, city, zip code, region, country), e-mail address, consent to be included in the e-mail distribution list.

Purpose:

Answer/assistance to your request

Legal basis:

Consent - Art. 6 (1) lit. a) GDPR

Chatbot

You can contact MED-EL (e.g. to ask questions about our products, request help, etc.) by using our chatbot. Contact is usually made by e-mail.

If you would like to forward a request to the chatbot to an expert, you have the option of forwarding your request to "Customer service". The following data that you enter in the chat history will be processed Request and e-mail address

Purpose:

Answer/assistance to your request

Legal basis:

Consent - Art. 6 (1) lit. a) GDPR

 

Newsletters and mailings

If you contact us, you can register for our newsletter and e-mail distribution list to receive information about our products and services. The following data is used for this purpose: Name, profession, professional interests, telephone number, address, e-mail address, analysis of user behavior (e.g. opening e-mails and clicking on content)

Purpose:

Advertising for MED-EL products and services

Legal basis:

Consent - Art. 6 (1) lit. a) GDPR

Who receives your data?

Your data may be passed on within MED-EL and its subsidiaries. However, only those areas, departments or employees who need your data for further processing will have access to it.

Transmission of data to third parties:

We use various service providers and third parties ("data processors") to continuously improve our website and mobile applications and to provide you with user-friendly services.

MED-EL only uses data processors that have signed appropriate data protection contracts and offer sufficient guarantees under applicable law. As far as possible, we choose cooperation partners with headquarters or servers within the European Union (EU).

In order to be able to offer you certain services, we commission third-party providers based or with servers outside the EU. Unless otherwise stated below, we use the EU standard contractual clauses as suitable guarantees: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj to ensure a GDPR-compliant level of protection for your data.

We also pay attention to additional security measures and data protection regulations or certifications of our partners.

It may be necessary to pass on data to health insurance companies or medical institutions for billing purposes or for your health care.

Update

Your personal data will primarily be updated if you inform us or notify us of a change request. However, an update can also be carried out using publicly available information or information from third parties.

How long will your data be stored?

If necessary, we process your data for the duration of our business relationship with you (contacting, processing and termination of a contract), as well as in accordance with the legally prescribed documentation obligation pursuant to the Austrian Commercial Code (UGB) and the Federal Fiscal Code (BAO) or for the enforcement, exercise and defense of legal claims.

In addition, the statutory limitation period is taken into account for the duration of data storage.

Therefore, your data will generally be deleted as soon as the contract with us is completely fulfilled, you withdraw your consent or object, unless the storage of the data is necessary for the fulfillment of a legal obligation or the establishment, exercise or defense of legal claims. Further processing of your data will only take place if you have expressly consented to the further use of your data or if we reserve the right to further processing in accordance with the statutory provisions.

It is also possible for us to anonymize data instead of deleting it. In this case, any information that allows conclusions to be drawn about you will be irretrievably deleted. As a result, the obligation to delete the data no longer applies. In this case, it is no longer possible to assign the data to a specific person.

Your rights

You have the following rights under the GDPR:

• Right of access - Art. 15 GDPR:
  You have the right to obtain confirmation as to whether or not your personal data is being processed; if this is the case, you have a right of access to this personal data;
• Right to rectification - Art. 16 GDPR:
  You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you;
• Right to erasure ("right to be forgotten") - Art. 17 GDPR:
  You have the right to obtain the erasure of personal data concerning you without undue delay;
• Right to restriction of processing - Art. 18 GDPR:
  You have the right to request the restriction of the processing of your personal data;
• Right to data portability - Art. 20 GDPR:
  You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided;
• Right to object - Art. 21 GDPR:
  You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) lit. e) or f) GDPR.

If you would like to request access to your data, change your preferred method of contacting us, have any other questions or concerns about this Privacy Policy or how we process your personal data, please email us at privacy.at@medel.com or contact your nearest MED-EL office: MED-EL Offices Worldwide

We will endeavor to answer any questions or concerns you may have on this subject. However, if you believe that your personal data has not been processed in accordance with the Privacy Policy or your data protection claims have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, the data protection authority is responsible for this.

Are you obliged to give us your data?

As part of your business relationship with us, you only need to provide us with the personal data that is necessary to establish and maintain the business relationship or that must be stored by law. You are also required to inform us if your data changes. Without this data, we will generally have to refuse to conclude or execute a contract and an existing contract can no longer be maintained and must therefore be terminated.

Will my data be used for automated decision-making, including profiling?

We do not use any mechanisms for automated decision-making in accordance with Art. 22 GDPR.

Security

We are committed to ensuring that your personal data is protected. To prevent unauthorized access or disclosure of your information, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure your information.

Links to other websites

Our website may contain links to other websites whose content may be of interest to you. Please note that we have no control over these other sites should you decide to use these links and leave our site. We are therefore not responsible for the protection and privacy of any information which you provide whilst visiting such sites. These sites are not part of this privacy policy. You should always exercise caution and look at the privacy policy of the external website in question.

Cookies and social plugin cookies

A cookie is a small text file that saves Internet settings. This technology is used by almost all websites. Your internet browser downloads the cookie when you visit the website for the first time. The next time you visit the website with the same device, the cookie and the information stored in it is either sent back to the site that created the cookie (first party cookie) or it is sent to another website to which it belongs (third party cookie). This informs the website that it has already been visited with this browser in the past, and in some cases the displayed content is adapted.

Some cookies are very helpful as they can enhance the user experience when a particular site is visited repeatedly. If you use the same device and the same browser over and over again, cookies can, for example, save which content you prefer or how you want to use the site and adapt the content displayed to your personal interests and needs. Most of our cookies are automatically deleted from your hard disk at the end of the browser session ("session cookies"). However, we also use cookies that remain stored on your hard disk after the session. These are mainly used to improve your user experience when you visit our website again. This way, the website and loading times can be optimized and adapted to your personal needs.

Cookies that do not require consent

Cookies that do not require consent are so-called essential cookies or "strictly necessary" cookies. These ensure functions of a website without which you would not be able to use the site as intended. These cookies are used exclusively by us and are therefore called "first party cookies". They are only stored on your computer for the duration of your browser session. Absolutely necessary cookies: We have so-called "session cookies" for logins on our website. Without these cookies, logins (and all associated functions) would not work.

In addition, such cookies ensure, for example, that the conversion from "http" to "https" works and thus ensure better compliance with the security requirements for data transmission when switching websites. No consent is required for the use of these necessary cookies.

Cookies that require consent

There are cookies that are not required by law for the use of a website, but which nevertheless fulfill important functions. Without these cookies, functions that enable convenient browsing on our website (such as pre-filling forms) are not available. Settings made, such as the language selection, cannot be saved and must therefore be queried again for each page. First party cookies used, including a detailed description:

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The use of Google Analytics also includes the Google Analytics 4 application. This facilitates the assignment of data, sessions and interactions between different devices to a pseudonymized user ID and thus enables a cross-device analysis of user behavior.

On behalf of the operator of the website, Google uses this information to evaluate your user behavior on the website, to compile reports on website activity and to provide the website operator with other services related to website or internet usage. You can find more information on data protection here: https://policies.google.com/?hl=de

Legal basis:
Consent - Art. 6 (1) a GDPR

Use of Facebook Remarketing

We use the "Facebook Pixel" and "Facebook Custom Audiences" services of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. You can find information on data protection from Facebook here: https://www.facebook.com/about/privacy.

These services enable Facebook to display our ads on Facebook only to those Facebook users who have visited our website and have shown an interest in certain topics or products.

Purpose:

We use Facebook Pixel and Custom Audiences for marketing and optimization purposes, in particular to place relevant and interesting ads for you on Facebook and thus improve our services.

Legal basis:
Consent - Art. 6 (1) a GDPR