Privacy on olingomedical.com

The controller of personal data and operator of this website is Ollsoft GmbH, Lichtenbergstraße 8, 85748 Garching b. München, Germany, represented by its Managing Director Krystof Olik (Amtsgericht München, HRB 299893). For anything concerning personal data, contact us at [email protected]. Full company details are in the legal notice.

This notice covers the public website only. The website does not accept or process medical documents: it has no upload form or any other way to submit them. How documents are processed when Olingo Medical is used in a hospital is covered under “Olingo Medical product deployments”.

The website application keeps no record of visitors’ requests, sets no analytics cookies and uses no advertising pixels. It measures visits to the homepages and articles as described below. To select a language version, the server reads the browser language and, where present, the country added by the network delivering the site; it does not store those details.

When a page is delivered, technical data such as your IP address, the time of the request and your browser’s identification necessarily pass through the hosting and network services that deliver the website and protect it against attacks. These may record such data in their operational and security logs. The purpose is delivering and securing the website; the legal basis is legitimate interest (Art. 6(1)(f) GDPR). Retention is governed by what is needed to operate and secure the website.

We use an analytics service on the homepages and articles to measure visits, website performance and campaign effectiveness. It processes pages viewed and campaign parameters in the incoming link, the referring domain, technical browser and device details, clicks on contact links, and whether a callback form was started and submitted. We do not send your phone number or the contents of the form to the analytics service.

Analytics does not use cookies or a persistent visitor identifier and does not link separate page loads. We store your Accept or Reject choice in your browser’s local storage so it also applies on later visits. We do not use session recordings, heatmaps or automatic click capture, and do not link analytics data to the phone number in a callback request. Analytics does not run on legal or error pages.

We use an external analytics service provider as our processor. Analytics data is stored in the EU; the provider technically receives the IP address during transmission, but our project does not retain it. Support staff and subprocessors may also access data from outside the EU, subject to the GDPR rules for international transfers. Further information on recipients and transfers is available from <legalEmail></legalEmail>.

We use the data to evaluate and improve the website and our campaigns, relying on our legitimate interest under Art. 6(1)(f) GDPR. Analytics begins when you visit the website until you reject it using the bar or change the setting later; rejection stops further measurement. It does not start when Do Not Track or Global Privacy Control is enabled. We retain analytics records for no longer than 1 year. You may also object at [email protected].

Articles are loaded by the server from the editorial database (Supabase). Images in articles are delivered from this website’s own address, and nothing is sent from your browser to the database. The only other service your browser contacts on article pages is the web analytics described above.

When you write to [email protected] or [email protected], we process your address and your message in order to reply. The legal basis is our legitimate interest in answering enquiries or, where applicable, steps taken at your request before entering into a contract (Art. 6(1)(f) and (b) GDPR). We keep correspondence for as long as needed to handle your enquiry and any follow-up, and longer only where the law or the defence of legal claims requires it. Please do not send us medical documents or other health data; an anonymised document is enough for a demo.

When you request a callback, we send your phone number by e-mail to [email protected] with the page language, time and campaign parameters from the incoming link, where present. We use the number only to contact you about Olingo Medical as a step taken at your request before entering into a contract (Art. 6(1)(b) GDPR); we process campaign information to evaluate our campaigns on the basis of legitimate interest (Art. 6(1)(f) GDPR). We delete the e-mail after handling the request, no later than 365 days after receipt. The website does not store the number in a database or operational logs and does not send it to the analytics provider. We verify the form’s origin and limit deliveries to prevent abuse without storing the sender’s IP address.

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. Write to us at [email protected]. You may also lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The authority competent for Ollsoft GmbH is the Bavarian State Office for Data Protection Supervision (BayLDA) (opens in a new window).

Processing of medical records when Olingo Medical is used in a hospital is not processing by this website, and this notice does not describe it. Data flows, access, storage and retention, controller and processor roles and any subprocessors are defined for each agreed deployment and must be documented in the contractual documentation before production use.