1. personal data means any information relating to an identified or identifiable natural person (‘data subject’) an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
   

2. processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
   

3. restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future;
   

4. profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
   

5. pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
   

6. controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
   

7. processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
   

8. recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. 2However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
   

9. third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
   

10. consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
    

As defined by the EU General Data Protection Regulation (GDPR), Tegus Medical GmbH (hereinafter referred to as "Tegus" and/or "we" and/or "us"), Hoheluftchaussee 18, 20253 Hamburg, Germany, is responsible for the processing of your personal data as a data subject.

If you have any questions, concerns or complains about our Privacy Policy or other provisions related to data protection, please contact us:

Tegus Medical GmbH
Hoheluftchaussee 18
20253 Hamburg
Phone: Germany +49 (0)40 76122571, UK +44 151 947 0224
Mail: sarinfo@tegusmedical.com
Website: www.tegusmedical.com

The use of the internet pages of Tegus is possible without any indication of personal data; however, if a data subject wants to use special services via our website, processing of personal data could become necessary.

1. Categories of personal data
   ‍
   

   1. Contact data: Name, e-mail-address, telephone number
      

   2. General personal data: IP-address, browser version, browser language
      

   3. Communication and the use of our website: data gathered via cookies and other tracking technologies
      

2. Processing of personal data
   ‍
   ‍We only process your data if this is permitted by an applicable legal regulation. Such regulations are for example:
   ‍
   

   1. Consent:
      We will process certain data only on the basis of the consent you have given expressly and voluntarily. You have the right to revoke your consent at any time with effect for the future.
      

   2. Fulfillment of pre-contractual and contractual measures:
      For initiation and/or execution of your contract with us, we require access to certain data.
      

   3. Fulfillment of a legal obligation:
      We are subject to a number of legal specifications. In order to comply with these requirements, we must process certain data to the required extend.
      

   4. Protection of legitimate interests:
      We will process certain data in order to protect our legitimate interests or the interests of third parties. However, this only applies if your interests do not outweigh ours in individual cases.
      

3. Security and data storage
   ‍
   We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of personal data. Therefore, Tegus has implemented numerous organizational, technical, and administrative measures to ensure the most complete protection of personal data under our control.
   Unfortunately, no data transmission over the internet or data storage system can be guaranteed to be 100 % secure. Please notify us immediately, if you have reason to believe that your interaction with us is no longer secure.
   We will keep your data only as long as necessary for the respective purposes for which we process your personal data. We also keep it in order to comply with our legal and regulatory obligations (such as tax, accounting, and financial reporting obligations). We may also keep your personal data to assist with our fraud monitoring, detection and prevention activities.
   In all cases where we keep your personal data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.
   

As a data subject you have the following rights with regard to the personal data we control about you:

1. Right to withdraw your previously given consent (Article 7 GDPR)
   Where the processing of your personal data is based on your previously given consent, you have the right to withdraw your consent at any time.
   

2. Right to information (Article 15 GDPR)You have the right to request confirmation of whether Tegus processes personal data relating to you, and if so, to request a copy of that personal data.
   

3. Right to correction (Article 16 GDPR) You have the right to request that Tegus rectifies or updates your personal data that is inaccurate, incomplete or outdated.
   

4. Right to erasure (Article 17 GDPR)You have the right to request that Tegus erase your personal data in certain circumstances.
   

5. Right to restriction of processing (Article 18 GDPR)
   You have the right to request that Tegus restrict the use of your personal data in certain circumstances.
   

6. Right to data portability (Article 20 GDPR)
   Where technically feasible, you have the right to request that Tegus export your personal data that we hold to another company.
   

7. Right of objection (Article 21 GDPR) You may also have the right to object to the processing of your personal data.
   

Cookies are text files with small pieces of data that are used to identify your computer or other device as you visit a website. Cookies can track, personalize and save information about each user’s session. The next time you open a website with the same user device, the cookie and the information stored in it is either sent back to the website that created it (first-party cookie) or sent to another website it belongs to (third-party cookie). For example, cookies remember your preferences, how you use a site and adapt the displayed offerings to be more relevant to your personal interest and needs. Therefore, these small text files can help to improve the user experience on opening a website that you have already visited a number of times.

You may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of your internet browser and may thus permanently deny the setting of cookies. Already set cookies may be deleted via your internet browser or other software programs at any time. If you deactivate the setting of cookies, not all functions of our website may be entirely usable.

Tegus uses the social plug-in of the social network Twitter.

The operator of Twitter is Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). These plug-ins are marked with a Twitter logo. For an overview of Twitter webpage elements please go to:  [https://dev.twitter.com/web/overview](https://dev.twitter.com/web/overview) .

The Twitter plug-in on our website is inactive. If you activate the Twitter Plug-in on the Tegus website, your browser sets up a direct connection to the servers of Twitter. The content of the plug-in is transferred by Twitter directly to your browser and then integrated into the website. Twitter will receive the information that you have opened the corresponding page of the Tegus website. If you are logged in to Twitter, they can assign the visit to your Twitter account. As soon as you interact with the plug-ins, the corresponding information is sent from your browser directly to Twitter and stored there. The purpose and scope of the data processing and the use thereof as well as your rights and setting options can be found in the data protection information provided by Twitter:  [https://twitter.com/de/privacy](https://twitter.com/de/privacy)

‍
If you do not want Twitter to use our website to collect data about you, you should not activate the Twitter Plug-in when visiting our website.