Datenschutz­erklärung

This website is intended for persons aged 14 and older. For users under 14, parental or guardian consent is required.

Personal data is any information that can be used to personally identify you, such as name, email address, or IP address. We process this data confidentially and in accordance with legal data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the Telecommunications-Telemedia Data Protection Act (TTDSG).

2. Responsible Party

The entity responsible for data processing on this website is:

EXIAS Medical GmbH
Kratkystraße 2, 8020 Graz
Telefon: +43 316 922953
E-Mail: office@exias-medical.com

Data Protection Officer / Contact Person for Data Protection:
Katharina Fuchs | katharina.fuchs@exias-medical.com

The responsible party is the natural or legal person who alone or jointly decides on the purposes and means of processing personal data.

3. General Information on Data Processing

When you use our website, personal data is processed in various ways:

• Data provided by you: e.g., via contact forms, application forms, or email inquiries.
• Automatically collected data: e.g., IP address, browser type, operating system, time and duration of the visit.

Data processing is based on the GDPR:

• Fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR)
• Compliance with legal obligations (Art. 6 para. 1 lit. c GDPR)
• Protection of legitimate interests (Art. 6 para. 1 lit. f GDPR)
• With consent, if obtained (Art. 6 para. 1 lit. a GDPR)

Data transmission occurs encrypted via HTTPS. Nevertheless, complete protection during transmission over the Internet cannot be guaranteed.

Storage Duration

Personal data is only stored as long as it is necessary for the purpose of processing or as long as statutory retention periods exist.

4. Data Collection on the Website

Cookies and Tracking

Our website uses cookies, which are either stored for the duration of a session (session cookies) or permanently (persistent cookies).
Technically necessary cookies are essential for website functionality, e.g., for login areas or embedded videos. Analytical and tracking cookies are only set with your consent. You can manage cookies at any time via your browser settings or via the Real Cookie Banner: Real Cookie Banner Datenschutz.

Google Tools

We use various Google services to optimize our website:

• Google Analytics: To analyze user behavior. Data is collected anonymously. You can opt out here: Google Analytics Opt-Out.
• Google Tag Manager: Manages website tags. Does not store personal data itself.
• Google Consent Mode: Adjusts tracking functions according to given consent.
• Google Ads: Remarketing and conversion tracking, only with consent. Information and opt-out: Google Ads Datenschutz.
• Google Fonts: Locally hosted fonts, no data transfer to Google servers. Details: Google Fonts FAQ.

Other Tools

• Ultimate Member Login Area: Management of registered users.
• Elementor: Website design and functionality, no independent data storage.
• YouTube iFrame: Embedded videos, data may be transmitted to YouTube/Google.
• Google Maps iFrame: Map display, data may be transmitted to Google.

Server-Logs

When visiting our website, information is automatically stored in server log files: browser type, operating system, referrer URL, IP address, and timestamp. This data serves the security and stability of the website and is processed based on legitimate interests (Art. 6 para. 1 lit. f GDPR).

5. Social-Media-Verlinkungen

Our website includes links to social media profiles such as LinkedIn, XING, YouTube, or Facebook. If you click these links, you leave our website and can use the respective services. We have no control over data processing by these providers. Please refer to the privacy policies of the platforms:

• LinkedIn: LinkedIn privacy policy
• YouTube: YouTube privacy policy

Data generated when clicking or visiting these services is not processed by EXIAS Medical, except when you, for example, send us a message or inquiry via social media channels.

6. Contact Form, Email, Phone

If you contact us via contact form, email, or phone, your data will be stored to process your inquiry. Data will only be shared with third parties if required to process your request, e.g., with the responsible distributor for the selected country in the case of purchase inquiries.

Processing is based on Art. 6 para. 1 lit. b and f GDPR, or on your consent (Art. 6 para. 1 lit. a GDPR).

7. Application Form

If you apply to EXIAS Medical, your data is processed for the application process: CV, contact details, qualifications, and if applicable, health data. Data processing is based on Art. 6 para. 1 lit. b GDPR or your consent (Art. 6 para. 1 lit. a GDPR). Data is deleted when no longer needed for the application process, unless legal retention obligations exist.

8. WhatsApp Business

EXIAS Medical uses WhatsApp Business for communication with customers and support inquiries. Processing is based on Meta’s data protection regulations. Initial contact is usually made via the distributor, but EXIAS Medical may also initiate contact.

More information on data processing and deletion via WhatsApp can be found here: WhatsApp Privacy.

9. Rights of Data Subjects

You have the following rights under the GDPR:

• Access to stored personal data
• Correction of incorrect data
• Deletion or restriction of processing
• Objection to processing, especially for direct marketing
• Data portability
• Withdrawal of given consent

Complaints can be submitted to the competent supervisory authority: Austrian Data Protection Authority, www.dsb.gv.at.

10. Data Processing on Behalf of EXIAS Medical

EXIAS Medical works with service providers for hosting, IT, marketing, and archiving. Data processing agreements (Art. 28 GDPR) are in place. These service providers process personal data exclusively according to our instructions and in compliance with the GDPR.

11. Data Security

We take technical and organizational measures to protect personal data against loss, misuse, or unauthorized access, including:

• Access restrictions to data
• Encryption (SSL/TLS)
• Regular security updates
• Contracts with service providers