Data privacy

Data protection information website

In the following, we inform you about the processing of your personal data by us and the claims and rights to which you are entitled under data protection regulations, in particular the European General Data Protection Regulation (GDPR).

This data protection information explains the type, scope and purpose of the processing of personal data within our website (hereinafter ‘website’). The data protection information applies regardless of the domains, platforms and devices used (e.g. desktop, mobile, etc.).

Personal data within the meaning of the GDPR is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. Which data is processed in detail and how it is used depends largely on the services you use with us.

In our data protection information, we use various other terms within the meaning of the GDPR. These include terms such as processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party, consent, supervisory authority and international organisation. You can find the corresponding definitions for these terms in Art. 4 GDPR.

Table of contents

1. Who is responsible for data processing and who can I contact?

Responsible is:
Dr. Rainer Pust
Schleswiger Str. 114
D-24340 Eckernförde
+49 4621 9853002
mail@endo-docs.com

2. What sources and data do we use?

We process personal data that we receive from you as part of your use of our website and, if applicable, our business relationship.

If you use the website purely for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following access data, which is technically necessary for us to display our website to you and to ensure stability and security. The access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specific website accessed), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its interface, language and version and type of browser software, notification of successful access.

We also receive your personal data if you contact us by contact form or e-mail. Personal data here includes, for example, your first name, surname, address, e-mail address, telephone number, type of treatment, treatment date and, if applicable, the data you send us as a message (hereinafter referred to as ‘contact data’).

3. What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal bases:

Consent, Art. 6 Para. 1 Sentence 1 lit. a) GDPR

If you have given us your consent to process personal data for certain purposes, in particular to contact you (e.g. via our contact form or by email to process and handle the request, send cost estimates by email, send information about healthcare providers, send newsletters, send advertising by telephone, email, SMS, etc.), the legality of this processing is based on your consent.

By ticking the box before submitting the form to contact us or forward us to arrange a personal consultation or to request your individual cost estimate, you expressly declare your informed consent to the collection, processing and use of your personal data. This includes health-related data that you provide to us so that we can obtain information about individualized medical services that you are interested in. This includes the transmission of your data to healthcare providers and clinics within and outside the EU/EEA.

Consent given can be revoked at any time. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is therefore not affected by the revocation. The revocation can be sent to the contact details above or to mail@endo-docs.com.

Performance of a contract and implementation of pre-contractual measures at the request of the person, Art. 6 Para. 1 Sentence1 lit. b) GDPR

When contacting us or our contractual partner Qunomedical GmbH, Chausseestr. 8, 10115 Berlin (via contact form or email, WhatsApp, SMS or other messenger services), your data will be processed in addition to any consent given to process the contact enquiry and its handling on the basis of the implementation of pre-contractual measures, Art. 6 Para. 1 Sentence 1 lit. b) GDPR. Your personal data is processed as part of the operation of our service platform and the provision of personalised advice on medical services by us and our partners.

If you contact us as a healthcare provider (via contact form, email, messenger service, etc.), your contact details and information about your practice or clinic will be processed to process the contact request and its handling, also on the basis of the implementation of pre-contractual measures and for the fulfilment of a contract, Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

Consent, Art. 6 Paragraph 1 Sentence 1 Letter a) GDPR

When you visit our website for the first time, you will be asked whether you would also like to accept non-essential cookies. If you consent to the use of non-essential cookies, this enables us to analyze the use of our website. We can also carry out various marketing activities based on your interactions with the website, other marketing channels and other third parties, such as social networks.

To find out more about the cookies we use, in particular how to manage and delete cookies, see the Cookies section below.

As part of the balancing of interests to protect legitimate interests, Art. 6 Para. 1 Sentence 1 lit. f) GDPR

We process your access data (see data listed above under point 2) to protect our legitimate interests or those of third parties. In particular, we pursue the following legitimate interests

  • ensuring IT security, in particular the security of the website
  • advertising or market and opinion research, provided you have not objected to the use of your data;

Assertion of legal claims and defense in legal disputes

4. Who gets my data?

Within our company, those departments that need your data to fulfill our contractual and legal obligations will have access to it.

Processors we use (Art. 28 GDPR) may also receive data for the purposes mentioned above. These are companies in the categories of IT services, printing services, telecommunications, debt collection, advice and consulting, as well as sales and marketing. If we pass on data to our service providers, they may only use the data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have suitable technical and organizational measures to protect the rights of the data subjects, guarantee an appropriate level of data protection and are carefully monitored by us.

Data is only passed on to third parties who are not data processors within the framework of the legal requirements. We only pass on user data to third parties if this is necessary, for example on the basis of Art. 6 Paragraph 1 Sentence 1 Letter b) GDPR for contractual purposes or on the basis of legitimate interests in accordance with Art. 6 Para. 1 Sentence 1 lit. f) GDPR in the economic and effective operation of our business or if you have consented to the data transfer. If the website is used for purely informational purposes, we generally do not pass on any data to third parties.

5. How long will my data be stored?

For security reasons (e.g. to investigate misuse or fraud), log file information is stored for a maximum of 90 days and then deleted (see point 2 above). Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.

Where necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the referral to our healthcare providers including non-medical follow-up care and the initiation and fulfilment of a contract with our partner clinics.

In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are two to ten years.

Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years, whereby the regular limitation period is three years.

If you assert your rights as a data subject, we will store the information provided to you in this regard until the expiry of the statutory limitation period in accordance with Section 31 (2) No. 1 OWiG, Section 41 (1) BDSG, Art. 83 (5) GDPR.

If you assert your rights as a data subject, we will store the information provided to you in this regard until the expiry of the statutory limitation period pursuant to Section 31 (2) No. 1 OWiG, Section 41 (1) BDSG, Art. 83 (5) (b) GDPR for 3 years. This period may be extended if the statutory limitation period is extended due to interruptions of the limitation period (e.g. in the context of enquiries by the supervisory authorities).

6. Is data transferred to a third country or an international organisation?

The data provided will be processed within the European Union and in the USA. For countries without an adequacy decision by the Commission in accordance with Article 45 GDPR, as is the case with the USA, we generally agree EU standard data protection clauses with the recipients of your data or obtain your consent for the data transfer.

Note: The protection of personal data in the USA does not correspond to the level of data protection required by the EU. In particular, there are no enforceable rights to protect your data against access by government agencies. There is therefore a risk that these government agencies can access the personal data without the data transmitter or recipient being able to effectively prevent this.

7. What data protection rights do I have?

Every data subject has

  • the right to information in accordance with Art. 15 GDPR (i.e. you have the right to request information about your personal data stored by us at any time)
  • the right to rectification in accordance with Art. 16 GDPR (i.e. in the event that your personal data is incorrect or incomplete, you can request the rectification of this data)
  • the right to erasure in accordance with Art. 17 GDPR and the right to
  • restriction of processing in accordance with Art. 18 GDPR (i.e. you may have the right to request the erasure or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and statutory retention obligations do not require further storage)
  • the right to data portability under Art. 20 GDPR (i.e. you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance).

Furthermore, you can revoke your consent, generally with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). You can find the supervisory authority responsible for you at https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

We would also like to draw your attention to your right to object in accordance with Art. 21 GDPR:

Information about your right to object in accordance with Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) sentence 1 (e) GDPR (data processing in the public interest) and Article 6 (1) sentence 1 (f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and no costs other than the transmission costs according to the basic tariffs will be incurred.

If you wish to exercise your right to object, an informal notification, e.g. to the above-mentioned contact details, is sufficient.

8. To what extent is there automated decision-making in individual cases, including profiling?

When you access our website or contact us by form or email, we generally do not use fully automated decision-making in accordance with Article 22 GDPR. If we use these procedures in individual cases, we will inform you of this separately if this is required by law. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling).

9. Am I obliged to provide data?

As part of our website, you must provide the personal data that is technically necessary for the use of our website or for IT security reasons. If you do not provide this data, you will not be able to use our website.

When contacting us by form or email, you only need to provide the personal data that is required to process your enquiry. Otherwise we will not be able to process your enquiry.

10. Sending cost estimates by e-mail

In the case of booking requests, you will be forwarded to our partner Qunomedical GmbH, Chausseestr. 8, 10115 Berlin, in order to deal with corresponding enquiries and to contact you and send you offers. For this purpose, your data will be passed on as described under point 3.

11. Referral to our partner (clinics)

For your treatments, your master data (address and contact details) as well as the necessary health-related data, such as desired treatment methods and appointments, will be transmitted to the treating doctors and clinics.

12. Cookies

We use cookies on our website. Cookies are small text files, usually consisting of letters and numbers, which are stored on the user’s computer when visiting certain websites.

Some of these cookies are essential for the functioning of our website, while other cookies help us to improve our website by providing us with insights into how you use the website.

By default, we only use necessary cookies. Necessary cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies or individual areas may not function properly. Necessary cookies can only be prevented by making the appropriate settings in your browser.

We only use cookies that are not necessary for the website to function (‘non-essential cookies’) if you have given your consent via our cookie banner. You can return to our data protection information at any time and revoke your consent or make changes.

Alternatively, you can prohibit the storage of cookies individually via the settings of your browser (you can find out how to set the cookie handling via the help page of the browser). You can find help on cookie management in the most common browsers at the following addresses:

  • Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
  • Microsoft Edge: https://support.microsoft.com/de-de/windows/verwalten-von-cookies-in-microsoft-edge-anzeigen-zulassen-blockieren-l%C3%B6schen-und-verwenden-168dab11-0753-043d-7c16-ede5947fc64d
  • Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
  • Opera: http://www.opera.com/de/help
  • Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

13. Processing of personal data in the context of the use of external (online) services

13.1 Integration of videos
We use videos from the manufacturer Boston scientific GmbH / Apollo endosurgery Ltd. to help you understand the treatment methods with the kind permission and provision of the company.
If you have any questions or issues, please contact:

Boston Scientific Medizintechnik GmbH
Klaus-Bungert-Str. 8
40468 Düsseldorf

13.2 Google Ads

On the basis of your consent, we use the Google Ads service of Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) hereinafter referred to as ‘Google’.

Data is also processed in the USA as part of this service. There are corresponding risks associated with the processing of your data in the USA. By giving your consent via our cookie banner, you consent to the processing of your data in the USA despite potential access by US authorities, Art. 49 para. 1 sentence 1 lit. a GDPR.

Google Ads is a service for placing advertising banners on the Internet that allows us to place adverts both in Google’s search engine results and in the Google advertising network. Google Ads allows us to pre-define certain keywords that are used to display an advert in Google’s search engine results only when the user performs a keyword-relevant search. In the Google advertising network, our adverts are displayed on relevant websites using an automatic algorithm and taking into account the keywords we have previously defined.

The purpose of our use of Google Ads is to promote our website by displaying adverts on the websites of third-party companies and in Google’s search engine results and, where applicable, by displaying third-party adverts on our website.

If you reach our website via a Google advert, a so-called conversion cookie is stored on your computer by Google. A conversion cookie loses its validity after thirty days and is not used to identify you, but is used to track whether certain subpages of our website have been accessed. The conversion cookie enables both us and Google to track whether you have reached our website via an Ads ad, completed an action (e.g. a purchase) or cancelled it.

The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via adverts. We thus determine the success of our respective Ads ads and are able to optimise our Ads ads for the future based on this information. Neither our company nor other Google Ads advertisers receive information from Google that could be used to identify the data subject.

Instead of using our cookie banner, you can also prevent the setting of cookies by means of a corresponding setting in your Internet browser. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on your computer. In addition, a cookie already set by Google Ads can be deleted at any time via the browser. It is also possible to object to interest-based advertising by Google. To do this, you must call up the link www.google.de/settings/ads from each of the Internet browsers you use (on each device) and make the desired settings there.

If you wish to object to interest-based advertising by Google, you can use the opt-out options provided by Google: http://www.google.com/ads/preferences

Further information and the applicable data protection provisions of Google may be retrieved under https://policies.google.com/technologies/partner-sites and https://www.google.de/intl/de/policies/privacy/

13.3 Google Fonts (offline integration)

Google-Fonts, i.e. external fonts from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland, https://www.google.com/fonts. Google Fonts are integrated by retrieving the fonts from our server, which means that no data is transferred to Google servers.

You can find Google’s data protection information at https://policies.google.com/privacy and an opt-out is possible at https://adssettings.google.com/authenticated

14. Our social media presence

You can find us on social networks and platforms so that we can also communicate with you there and inform you about our services.

We would like to point out that your data may be processed outside the European Union and that the data is generally processed for market research and advertising purposes. Usage profiles can be created from the usage behaviour and resulting interests of users. These user profiles can in turn be used, for example, to place adverts inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies may be stored on users’ computers, in which the usage behaviour and interests of the users are stored. Other data may also be stored in these user profiles, especially if the users are members of the respective platforms and are logged in to them.

On our website, we only link to our company profiles on the respective social networks. Please note, however, that when you click on a link to the social networks, data is transferred to their servers. If you are logged in to the respective social network with your user name and password at this time, the information that you have visited our company profile on the respective social network from our website will be transmitted there and the respective provider can save this information in your user account.

In principle, we have no significant influence on the data processing of social networks. However, we receive statistics from the providers about the use of and visits to our company profiles in the social networks (e.g. information about the number of views, interactions such as likes and comments as well as summarised demographic and other information or statistics). You can find more information on the data used by the providers in the providers’ data protection notices linked below.

If we receive your personal data as part of our social media presence (e.g. as part of a message), you are entitled to the rights set out above in this data protection information. You can address your enquiries regarding data processing in the context of our company profiles to us using the contact details above.

If you also wish to assert rights against the provider of the social network, the easiest way to do so is to contact the respective provider directly. The provider knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing. The contact details can be found in the data protection information linked below. We are also happy to support you in asserting your rights, insofar as this is possible for us.

The processing of users’ personal data is generally based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. The legal basis is also Art. 6 para. 1 lit. b GDPR if we receive and process your data as part of a contract-related enquiry via our social media presence. The legal basis for linking and operating our company profiles in the social networks, including obtaining statistics on the use of our company profiles, is Art. 6 para. 1 lit. f GDPR based on our legitimate interest in our corporate communication in the respective social networks.

For information about the respective processing and the respective objection options, we refer to the following linked data protection information of the providers:

  • Facebook
    (Meta Platforms Limited Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), we operate our Facebook page on the basis of an agreement on joint processing of personal data with Facebook – data protection information: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
  • Instagram
    (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), Online service for sharing photos and videos, data protection information https://help.instagram.com/519522125107875/?helpref=hc_fnav
  • TikTok
    (TikTok Technology Limited, Ropemaker Place Dublin 2, The Sorting Office, Dublin, D02 HD23, Ireland), Online service for sharing photos and videos – data protection information https://www.tiktok.com/legal/page/eea/privacy-policy/de

 

Last updated 12.03.2025