Privacy policy

Introduction

April 30, 2023

In this privacy policy, you will learn how we process your personal data during your visit to our website. For registration and use of our app, please refer to the separate privacy policy notices.

EU Dispute Resolution

If you use this website, various personal data will be collected from you. The operators of these pages take the protection of your personal data very seriously. For this reason, the following information should give you a simple overview of what happens to your personal data when you visit this website. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. Personal data is all data with which you can be personally identified. This privacy policy explains what data we collect, when and for what purpose, and on what legal basis we use it. We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data from access by third parties is not possible.

Responsible entity or person

This privacy policy applies to the data processing carried out by us as the data controller according to Art. 4 (7) of the General Data Protection Regulation (GDPR). Our contact details are:

Metra-Health GbR
Susanne Feldt
Gleimstraße 56
10437 Berlin

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (such as names, email addresses, etc.).

Contact person for questions regarding data protection

If you have any questions regarding the processing of your personal data and your rights, please contact our appointed data protection officer. The data protection officer for Metra Health can be reached via email at susanne@metra-health.de (Subject: Data Privacy).

Definition of terms

To the extent that this privacy policy does not contain or imply a different definition, reference is made to the definitions in Art. 4 GDPR with regard to the terms used.

Processing of your personal data when accessing our website.

When accessing our website, or when you otherwise transmit information to us, we or the hosting provider acting on our behalf only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data:

- IP address
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/HTTP status code
- amount of data transmitted in each case
- website from which the request comes
- operating system
- language and version of the browser software

These data are technically necessary for us to display and provide our website to you. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR. For security reasons (e.g. to investigate misuse or fraud), this data is stored for a maximum of 7 days and then deleted. Data that needs to be kept for evidential purposes is exempt from deletion until the respective incident has been finally clarified. The hosting service provider we use processes personal data on our behalf and in accordance with our instructions as a so-called processor within the meaning of Art. 28 GDPR.

Use of a Content Delivery Network

We use a so-called Content Delivery Network (CDN). A CDN is a network of servers that are distributed worldwide. This serves to provide content to the user in the shortest possible time due to greater physical proximity. It also absorbs peak loads in terms of access numbers, since the traffic is distributed across various servers. As part of the use of the CDN, the data listed under item 4 is processed. Furthermore, we use a CDN to ensure technically flawless and fast display of our website while at the same time relieving our IT infrastructure. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f DSGVO. As part of the use of our CDN, data may also be transmitted to subcontractors and service providers. In this context, the above-mentioned data may be transferred to the USA and stored there. The level of data protection in the USA is considered inadequate by the European Commission. The transfer of data to the USA is therefore based on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c DSGVO. The standard contractual clauses can be accessed at this weblink. Alternatively, you can request these documents from us using the contact options specified in item 2.

Usage analysis through Google Analytics

Our website optionally uses Google Analytics to help us improve future websites. You can consent to the use of Google Analytics when you visit the website. You can revoke your consent to the use of Google Analytics at any time. If you give us your consent, we will analyze your use of the website. To do so, we process the following personal data from you:

- IP address (processed only in shortened or anonymized form)
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request comes
- Browser type and version information
- Operating system and its interface
- Language and version of the browser software
- Screen and window resolutionYour approximate locationInformation about your length of stay
- Information about actions taken by you on the website

herefore, we transmit the aforementioned data to Google for analysis purposes. On our behalf, Google evaluates the data on the way you use our website since this data is necessary for us to ensure the stability and security of the website and to further develop it in a way that meets your interests. The collected data is not combined with your other profile information, but instead goes into an anonymous statistic that helps us to better understand our users and adapt the website to their needs. As mentioned earlier, we process this data only with your consent. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a GDPR.

As part of the use of Google Analytics services, data may also be transmitted by Google to group companies and/or subprocessors. In this context, the aforementioned data may be transferred to the USA and stored there. The level of data protection in the USA has been assessed by the European Commission as inadequate. The transfer of data to the USA is therefore based on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR. The standard contractual clauses can be accessed via this link, alternatively you can request these documents from us using the contact information provided in Section 2.
Weblink

Processing of your personal data in the context of contacting us by email

We process emails that you send to us and we send to you using the services of our email provider. As part of email communication, our email provider processes your personal data (i.e. your email address and the information you provide in the email) on our behalf in order to facilitate email communication with you, or if you are our customer, for contract processing. The processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. f or Art. 6 para. 1 sentence 1 lit. b GDPR. We delete the data if it is no longer necessary and no legal obligations oppose this. We review the necessity every six months.

As part of contacting us by phone

If you contact us by phone, we will need your personal data (such as name, phone number, address, or email address) to process your request or issue. This data processing is necessary for communication with you and, if you are our customer, for contract processing. The processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. f or Art. 6 para. 1 sentence 1 lit. b GDPR. We will delete this data if it is no longer required and there are no legal obligations to retain it. We review the necessity every six months.

As part of reaching out via our contact form

When you contact us via the contact form, we require your personal data (such as name, contact information, etc.) in order to process your request or concern. This data processing is necessary in order for us to communicate with you or, if you are our customer, for contractual purposes. The processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. f or Art. 6 para. 1 sentence 1 lit. b GDPR. We delete the data if it is no longer necessary and no legal obligations prevent this. We review the necessity every six months.

Deletion of data

The data processed by us will be deleted in accordance with Art. 17 GDPR or restricted in their processing in accordance with Art. 18 GDPR. Unless otherwise specified in this privacy policy, the data processed by us will be deleted as soon as they are no longer necessary for their intended purpose and there are no legal retention obligations to prevent deletion. We review the necessity for retention every six months.

The rights of data subjects

You have the right: according to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom your data have been or will be disclosed, the envisaged period of storage, the right to rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the source of your data, if not collected by us, as well as the existence of automated decision-making including profiling and meaningful information about its details, if applicable.

to demand without delay the correction or completion of your personal data stored by us, in accordance with Art. 16 of the GDPR.

to request the deletion of your personal data stored with us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

to request the restriction of processing of your personal data according to Art. 18 GDPR, if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, and we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing according to Art. 21 GDPR.

Revocation of given consents

If we process your personal data based on your consent according to Art. 9 para. 2 lit. a or Art. 6 para. 1 lit. a GDPR, you have the right to revoke any given consent in accordance with Art. 7 para. 3 GDPR with effect for the future. If you wish to exercise your right of revocation, you can inform us by email at susanne@metra-health.com. Alternatively, you can use the contact details mentioned above under item 2.

Objection to processing based on legitimate interest

If we process your personal data based on our legitimate interests according to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, provided there are reasons that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without specifying any particular situation. If you wish to exercise your right to object, you can notify us by email at susanne@metra-health.com. Alternatively, you can use the contact details mentioned under point 2. above.

Security measures

We implement organizational, contractual, and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties. Security measures include, in particular, the encrypted transmission of data between your browser and our server.

Changes to this privacy policy

We reserve the right to amend our privacy policy if this becomes necessary due to new technologies or changes in our data processing procedures, or to adapt it to changes in the relevant legal situation for us. However, this only applies to this privacy policy. If we process your personal data on the basis of your consent or if parts of the privacy policy contain provisions of the contractual relationship with you, any changes will only be made with your consent. You can find the current version of our privacy policy under "Datenschutz" (privacy) on our website.

Auf die Warteliste setzen

Sign up for early access and be the first to receive important updates via hermaid’s newsletter.

Thank you

Thanks for reaching out. We will get back to you soon.
Oops! Something went wrong while submitting the form.