Privacy Notice

1. Overview

General information
The following information provide an overview about what happens to your personal data whilst you are visiting our website. Personal data are all data that can be used to personally identify you. You will find detailed information about our privacy notice in the following text.

Collection of data via our website
Who is responsible for the collection of data on this website?
The operator of this website is responsible for the processing of the data on it. The contact details of the host are listed under Legal Information.

How do we collect your data?
Your data is collected when you give us your information. This can happen when you fill in a contact form.
Other data are automatically collected during the visit of our website through our IT systems. These are mainly technical data (e.g., browser, operating system or time of visit). The collection of data happens automatically from the moment you are visiting our website.

How do we use your data?
A part of the data is collected to provide a smooth functioning of the website. Other data can be used to analyse the user behaviour.

What are your rights with regard to the data?
You always have the right to receive information free of charge about the origin, the recipients, and purpose of the personal data that we collect from you. Furthermore, you have the right to demand the correction, blockage or deletion of these data. You can send your questions on this issue and on privacy in general to the address listed under Legal Information. You also have a right to complain with the responsible authority.

Analysis-Tools and tools by third parties
When you visit our website your browsing behaviour can be statistically analysed. This happens mainly with cookies and other analysis programmes. Your browsing behaviour is usually anonymously analysed which means your browsing behaviour cannot be tracked back to you. You can object to this analysis or prevent it from happening by not using certain tools. You can find detailed information on this in the following privacy notice.
You can object to this analysis. We will inform you about your options for objection in this privacy notice.

2 General notes and obligatory information

Privacy
The operators of these pages take the protection of your data very seriously. We treat your personal data confidentially and comply with the legal requirements for privacy and with this privacy notice.
When you use this website we will collect various personal data. Personal data are data that can be used to personally identify you. This privacy notice explains what data we collect and how we use them. It also explains the purpose for the data collection.
We are informing you that the data transfer online (for instance during email communication) can incur security flaws. A complete protection of the data from the access of third parties is impossible.

Responsible body
The responsible body for the data processing on this website is:

Robert Bosch Gesellschaft für medizinische Forschung mbH
Institut für Geschichte der Medizin der Robert Bosch Stiftung
Auerbachstraße 112
D-70376 Stuttgart

Tel.: 0711 / 46 08 41 71
Fax: 0711 / 46 08 41 81
info[et]igm-bosch.de

The responsible body is the natural or legal person who decides alone or in collaboration with others about the purpose and methods of processing personal data (e.g., name, email address etc.).

Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You can revoke your consent that you have previously given at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to object in particular situations and to direct marketing (Article 21 GDPR)
You have the right to object at any time to processing of your personal data for reasons arising from your particular situation when they are processed on the basis of Art. 6 para. 1(e) or (f); the same applies to profiling done on the basis of those provisions. You can find the respective legal basis for the processing in this privacy notice. If you file an objection, we will no longer process your personal data affected, unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and liberties, or the processing occurs to assert, exercise or defend legal claims (objection pursuant to Article 21 (1) GDPR). If your personal data is processed for direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such marketing; the same applies to profiling to the extent that it is linked to such direct marketing. When you object your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Article 21 (2) GDPR).

Right to file complaints with the suitable regulatory authorities
In case of violations of the GDPR the person affected has the right of complaint at the competent regulatory authority, in particular in the member state of his or her usual residence, his or her workplace or the place of the alleged breach. The right of complaint is without prejudice to regulatory or court provisions.

Right to data portability
You have the right to have data which we process based on your consent or in fulfilment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS encryption
For safety reasons and to protect the transfer of personal content such as orders or requests that you sent to the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
When SSL or TLS encryption is activated the data that you transfer to us cannot be read from third parties.

Information, restriction, deletion
You have the right to be informed about your personal data, their origin,  recipient and the purpose of processing as well as the right to rectify or erase data and restrict processing of it at any time and free of charge. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.

Objection to promotional emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.

3 Data protection officer

Legally required data protection officer

We have appointed a data protection officer for our organisation.

Robert-Bosch-Krankenhaus GmbH
- data protection officer -
Auerbachstraße 110
70376 Stuttgart
Telephone: 0711/8101-2797
Email: datenschutzbeauftragter@rbk.de

4 Data collection on our website

Cookies
The internet pages are partially using cookies. Cookies do not harm your computer and they do not contain viruses. Cookies enable us to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Cookies which are necessary to allow electronic communications or to provide certain functions (e.g., shopping cart function) you wish to use are stored pursuant to Art. 6 paragraph 1, letter f of the GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyse your browsing behaviour) are also stored, they will be treated separately in this privacy policy.

Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
These data will not be combined with data from other sources.
The collection of this data is based on Article 6 (1)(f) GDPR. The website operator
has a legitimate interest in the technically accurate display and optimisation of his website. For that reason, server log files must be collected.

Contact form
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) GDPR.  You can withdraw your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Registration at this website
You can register at our website to use its additional features. We only use the data entered for the purpose of providing the respective offer or service for which you registered. The obligatory information you entered when you registered must be complete. Otherwise we will reject the registration.
For important changes, such as the scope of services and changes that are technically required, we use the email address you provided at your registration to keep you informed.
We process any data you enter at registration only with your consent per Art. 6 (1)(a) GDPR. You can revoke your consent that you have previously given at any time. An informal email making this request is sufficient. The data processed beforehand may still be legally processed.
We save the data collected at your registration as long as you are registered on our website. They will subsequently be deleted. Statutory retention periods are not affected by this provision.

Contact via email, telephone or fax
If you contact us via email, telephone or fax, we will save and process your request, including all resulting personal data (name, request), for the purpose of processing your request. We do not share this information without your permission.
The processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Article 6 (1) a GDPR) and/or on our legitimate interests (Article 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing of requests addressed to us.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding legal data retention periods, remain unaffected by this provision.

GDPR email disclaimer
Mandatory information according to art. 13 GDPR
According to art. 12, 13 GDPR, we are obliged to provide you the following mandatory data protection information on our the first email contact. When you contact us via email, we only process your personal data if there is a legitimate interest in processing it (Article 6 (1) (f) GDPR), if you have expressly agreed to the processing of the data (Article 6 (1) (a) GDPR), if the processing is necessary for the initiation, establishment, content-related design, or change of a legal relationship between yourself and us (Article 6 (1) (b) GDPR), or if another legal norm allows the processing. We will retain the data you provide until you request its deletion, revoke your consent for its storage, or until the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those data retention periods regarding tax and commercial law, remain unaffected by this provision. You always have the right to receive information free of charge about the origin, the recipients, and purpose of the personal data that we collect from you. You also have the right to dissent, data transfer, and right of appeal with the respective authority. Furthermore you can demand the correction, blocking, deletion, and, under certain circumstances, restriction of the processing of your personal data.
You can find the details on our data protection policy on our website under https://www.igm-bosch.de/datenschutzerklärung (http://www.igm-bosch.de/content/language1/html/8382.asp)
You can find our contact details in the signature of the email.

5 Analyse Tools

WebLog Expert
When you access our offers connecting data will be saved. This means that with each access or attempted access to a file on this serverthe following data about this process will be saved by default in a protocol file (server logfile) for system security and statistical purposes.
• Complete IP address
• Time and method of access
• URL opened
• Version of http protocol used
• Result value of access
• Size of access in kbyte
• Page that you accessed before accessing this page (referrer)
• Information on browser and operating system used
None of these data contains direct references to you as a person. Personal data such as your name, your address, telephone number or email address will not be collected. Based on the foregoing, we use the “Webalizer” tool, a web analysis software for statistical evaluation of user access to the website Webalizer” creates surveys of the number of hits, file/page requests, visits, etc., based on the server log file data such as number of hits, file/page requests, visits etc.
These evaluations are not linked to other data sources, in particular to personal data.  The information generated is stored with the provider Rechenzentrum Firma Etes in Germany. No information or data will be passed on to third parties.

6 Plugins and Tools

Google Maps

This card uses Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to and saved at a Google server in the US. The operator of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an attractive display of our online offers and to find the places listed on our website more easily. This marks a legitimate interest pursuant to Article 6(1)(f) GDPR.
You can find more information on how Google processes user data in the Google privacy notice:  https://www.google.de/intl/de/policies/privacy/.