April 30, 2023
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (such as names, email addresses, etc.).
If you have any questions regarding the processing of your personal data and your rights, please contact our appointed data protection officer. The data protection officer for Metra Health can be reached via email at firstname.lastname@example.org (Subject: Data Privacy).
When accessing our website, or when you otherwise transmit information to us, we or the hosting provider acting on our behalf only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data:
- IP address
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/HTTP status code
- amount of data transmitted in each case
- website from which the request comes
- operating system
- language and version of the browser software
These data are technically necessary for us to display and provide our website to you. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR. For security reasons (e.g. to investigate misuse or fraud), this data is stored for a maximum of 7 days and then deleted. Data that needs to be kept for evidential purposes is exempt from deletion until the respective incident has been finally clarified. The hosting service provider we use processes personal data on our behalf and in accordance with our instructions as a so-called processor within the meaning of Art. 28 GDPR.
We use a so-called Content Delivery Network (CDN). A CDN is a network of servers that are distributed worldwide. This serves to provide content to the user in the shortest possible time due to greater physical proximity. It also absorbs peak loads in terms of access numbers, since the traffic is distributed across various servers. As part of the use of the CDN, the data listed under item 4 is processed. Furthermore, we use a CDN to ensure technically flawless and fast display of our website while at the same time relieving our IT infrastructure. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f DSGVO. As part of the use of our CDN, data may also be transmitted to subcontractors and service providers. In this context, the above-mentioned data may be transferred to the USA and stored there. The level of data protection in the USA is considered inadequate by the European Commission. The transfer of data to the USA is therefore based on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c DSGVO. The standard contractual clauses can be accessed at this weblink. Alternatively, you can request these documents from us using the contact options specified in item 2.
Our website optionally uses Google Analytics to help us improve future websites. You can consent to the use of Google Analytics when you visit the website. You can revoke your consent to the use of Google Analytics at any time. If you give us your consent, we will analyze your use of the website. To do so, we process the following personal data from you:
- IP address (processed only in shortened or anonymized form)
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request comes
- Browser type and version information
- Operating system and its interface
- Language and version of the browser software
- Screen and window resolutionYour approximate locationInformation about your length of stay
- Information about actions taken by you on the website
herefore, we transmit the aforementioned data to Google for analysis purposes. On our behalf, Google evaluates the data on the way you use our website since this data is necessary for us to ensure the stability and security of the website and to further develop it in a way that meets your interests. The collected data is not combined with your other profile information, but instead goes into an anonymous statistic that helps us to better understand our users and adapt the website to their needs. As mentioned earlier, we process this data only with your consent. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a GDPR.
As part of the use of Google Analytics services, data may also be transmitted by Google to group companies and/or subprocessors. In this context, the aforementioned data may be transferred to the USA and stored there. The level of data protection in the USA has been assessed by the European Commission as inadequate. The transfer of data to the USA is therefore based on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR. The standard contractual clauses can be accessed via this link, alternatively you can request these documents from us using the contact information provided in Section 2.
We process emails that you send to us and we send to you using the services of our email provider. As part of email communication, our email provider processes your personal data (i.e. your email address and the information you provide in the email) on our behalf in order to facilitate email communication with you, or if you are our customer, for contract processing. The processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. f or Art. 6 para. 1 sentence 1 lit. b GDPR. We delete the data if it is no longer necessary and no legal obligations oppose this. We review the necessity every six months.
If you contact us by phone, we will need your personal data (such as name, phone number, address, or email address) to process your request or issue. This data processing is necessary for communication with you and, if you are our customer, for contract processing. The processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. f or Art. 6 para. 1 sentence 1 lit. b GDPR. We will delete this data if it is no longer required and there are no legal obligations to retain it. We review the necessity every six months.
When you contact us via the contact form, we require your personal data (such as name, contact information, etc.) in order to process your request or concern. This data processing is necessary in order for us to communicate with you or, if you are our customer, for contractual purposes. The processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. f or Art. 6 para. 1 sentence 1 lit. b GDPR. We delete the data if it is no longer necessary and no legal obligations prevent this. We review the necessity every six months.
You have the right: according to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom your data have been or will be disclosed, the envisaged period of storage, the right to rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the source of your data, if not collected by us, as well as the existence of automated decision-making including profiling and meaningful information about its details, if applicable.
to demand without delay the correction or completion of your personal data stored by us, in accordance with Art. 16 of the GDPR.
to request the deletion of your personal data stored with us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
to request the restriction of processing of your personal data according to Art. 18 GDPR, if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, and we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing according to Art. 21 GDPR.
If we process your personal data based on your consent according to Art. 9 para. 2 lit. a or Art. 6 para. 1 lit. a GDPR, you have the right to revoke any given consent in accordance with Art. 7 para. 3 GDPR with effect for the future. If you wish to exercise your right of revocation, you can inform us by email at email@example.com. Alternatively, you can use the contact details mentioned above under item 2.
If we process your personal data based on our legitimate interests according to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, provided there are reasons that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without specifying any particular situation. If you wish to exercise your right to object, you can notify us by email at firstname.lastname@example.org. Alternatively, you can use the contact details mentioned under point 2. above.
We implement organizational, contractual, and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties. Security measures include, in particular, the encrypted transmission of data between your browser and our server.
Sign up for early access and be the first to receive important updates via hermaid’s newsletter.