Privacy Policy

28.01.2026

Wenn Sie ein Angebot der Medtrix GmbH nutzen, verarbeiten diese Ihre personenbezogenen Daten. Mit diesen Datenschutzhinweisen informieren wir Sie, wie und warum wir Ihre Daten verarbeiten und wie wir gewährleisten, dass sie vertraulich bleiben und geschützt sind.

save as PDF
Die wichtigsten Themen auf einen Blick

We take data protection seriously: as a matter of principle, we only process personal data if this is necessary for the provision of a service or offer or if it is provided voluntarily by the user. We also use technical and operational security measures to protect personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. We regularly review and modernise these precautions.

Privacy policy for applications

If you have applied for a job with us, you will find the necessary data protection information here.

Data protection at a glance

What data do we collect?

  • Inventory data (e.g., names, addresses)
  • Contact details (e.g., email, phone numbers)
  • Content data (e.g., entries in online forms)
  • Payment data (e.g., bank details, invoices, payment history)
  • Contract data (e.g., subject matter of the contract, term)
  • Usage data (e.g., websites visited, interest in content, access times)
  • Meta/communication data (e.g., device information, IP addresses, ID)

How do we collect the data?

We collect the data that is generated when you access our digital offers automatically. Otherwise, we collect data based on your entries or messages or through the use of cookies or similar technologies.

What do we use the data for?

Bereitstellung digitaler Angebote:

Produktoptimierung:

Kommunikation:

  • Kontakt: Verwaltung und Beantwortung von Anfragen und Kommunikation

Werbung für unsere eigenen Produkte:

Do we share data?

If you have given your consent or we are otherwise legally authorized to do so, we will pass on your personal data to service providers (e.g., hosting, marketing, sales partners, payment service providers) for the above-mentioned purposes. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.

We transfer personal data to other companies within our group of companies or grant them access to this data for administrative purposes. This transfer of data is based on our legitimate business and economic interests or takes place if it is necessary to fulfill our contractual obligations or if the consent of the data subjects or legal permission has been obtained.

Do we transfer data to third countries?

In order to use our digital services, it may be necessary to transfer certain personal data to third countries, i.e. countries where the GDPR does not apply. However, we only allow your data to be processed in a third country if the specific requirements of Art. 44 ff. GDPR are met and thus an adequate level of data protection is guaranteed in that country. This means that the third country must either have an adequacy decision by the European Commission or suitable safeguards in accordance with Art. 46 GDPR or one of the conditions of Art. 49 GDPR. Unless otherwise stated below, we use the currently valid [standard contractual clauses](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=DE “current version of the standard contractual clauses”) for the transfer of personal data to processors in third countries.

How do we secure the data?

In order to protect your privacy and ensure a level of protection appropriate to the risk, we take technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to the rights and freedoms of natural persons. These measures ensure the confidentiality, integrity, availability, and resilience of your data. This includes, among other things, the use of recognized encryption methods (SSL or TLS) and pseudonymization.

However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed, e.g., by email, may be read by third parties. We have no technical influence on this.

When do we delete the data?

We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it.

However, we may still need to store your data until the expiry of the retention obligations and periods imposed by the legislator or supervisory authorities, which may arise from the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act (usually 6 to 10 years). In addition, we may retain your data until the expiry of the statutory limitation periods (i.e., usually 3 years, but in individual cases up to 30 years) if this is necessary for the assertion, exercise, or defense of legal claims. After that, the relevant data will be deleted.

What rights do you have?

  • Information
  • Deletion
  • Correction
  • Objection

You can contact the data protection officer with your request by mail or by email at swmh-datenschutz@atarax.de.

This privacy policy is updated from time to time. The date of the last update can be found at the beginning of this information.

How we make our content available to you

Cookies and similar technologies

If cookies, device identifiers, or other personal data are stored or accessed on your device for processing purposes, this is done on one of the legal bases of Art. 6 GDPR.

In order to be able to provide the telemedia service you have expressly requested, we also take into account the provisions of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), in particular the requirement under Section 25 (2) No. 2 TDDDG.

You can find an overview of the technologies used under Privacy settings.

Types and functions of cookies

Cookies are text files that contain data from visited websites or domains and are stored by a browser on users' devices. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, language settings on a website, login status, a shopping cart, or video interactions. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as “user IDs”).

There are the following types of cookies and functions:

  • Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their browser.
  • Permanent cookies: Permanent cookies remain stored even after the browser is closed. This allows, for example, the login status to be saved or preferred content to be displayed directly when the user visits a website again. Similarly, the interests of users, which are used for reach measurement or marketing purposes, can be stored in such a cookie.
  • First-party cookies: First-party cookies are set and used by us to process user information.
  • Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) or other partners to process user information.
  • Strictly necessary (also: essential or necessary) cookies: These cookies ensure functions without which these digital offerings could not be used as desired. They may be absolutely necessary for the operation of a website, for example to store logins or other user entries, or for security reasons.
  • Analysis and statistics cookies: These cookies enable us to analyze the use of our digital offerings, in particular to measure reach—i.e., clicks, visits, and visitor numbers. The aim is to statistically determine the number of visits and visitors and their surfing behavior (duration, origin) and thus obtain market-wide comparable values. The information collected is evaluated in aggregate form in order to derive improvements and optimizations for our products.
  • Marketing and personalization cookies: Cookies are also used to store a user's interests or behavior (e.g., viewing certain content, using functions, etc.) in a user profile. Such profiles are used, for example, to display content to users that corresponds to their potential interests. This process is also referred to as “tracking,” i.e., tracking the potential interests of users. If we use cookies or tracking technologies, we will provide separate information about this in our privacy policy or when obtaining consent.

Technical provision and security

When our offer is used, we automatically employ essential technologies and process the following information:

  • Information about the accessing device and the software used
  • Date and time of access
  • Websites from which the user accesses our website or which the user visits via our website
  • IP address

The collection of these logs and their temporary storage and processing are necessary to ensure system security and integrity (in particular to ward off and defend against attempts at attack or damage) and are carried out in accordance with our legitimate interest (§ 25 (2) No. 2 TDDDG, Art. 6 (1) f GDPR).

The storage period for this log data is usually seven days; for reliable detection of AI bots, it is 30 days. From this point on, this specific server log data is anonymized based on our legitimate interest in statistical evaluation to assess AI bots and their impact on our content (Art. 6 (1) f GDPR).

Essential technology

The following tools and cookies are strictly necessary technologies, i.e., essential for providing our services as requested by the user.

The legal basis for the data processing described below is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Google Tag Manager

The Google Tag Manager service is an organizational tool that enables us to control services. The tool only uses the IP address to establish a connection to the server and to function technically. Otherwise, no personal data is processed by the tool itself. Tag Manager ensures that other services are only executed if the conditions (tags) specified in Tag Manager are met. This allows us to ensure, for example, that tools requiring consent are only loaded after you have given your consent. Tag Manager does not access the data processed by the tools.

Cookie Purpose Duration Type
consentUUID UniqueUserID to store the user's consent status 12 months Cookie
_sp_su Identification of users for sampling consent rates reporting 12 months Cookie
_sp_user_consent UniqueUserID to retrieve the user's consent status stored in our database if necessary Unlimited Local storage
_sp_local_state Determines whether a user has seen the consent banner so that it is only shown once unlimited local storage
_sp_non_keyed_local_state Information about the metadata and the user's UniqueUserID unlimited local storage

Sharing content

You have the option of recommending content on our websites via the buttons placed on the content; on mobile devices via the native sharing function. We provide the social networks with content - and no personal data - that is used exclusively to display content. If you use the buttons, we merely link to the page of the respective social media provider. We do not process any of your personal data.

How we optimize our products

Further development of user-friendliness

We use cookies and tracking tools to optimize our digital offerings based on your usage. To do this, we measure the development of reach and the use of content and functions, and use A/B testing to determine which variants users prefer.

Usage analysis

We want to continuously develop and improve our products. To do this, we need to analyze usage. This serves to evaluate visitor traffic to our digital offerings and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With its help, we can see, for example, when our digital offerings are used most frequently or which functions are popular. This enables us to identify areas that need optimization.

In addition to usage analysis, we also use testing procedures to test different versions of our digital offerings or their components, for example, and to increase certain user actions or reactions if necessary.
For these purposes, profiles, i.e., data summarized for a usage process, are created and information is stored in a browser or on a terminal device and read from it. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and information on usage times.

The IP addresses of users are also stored. We use an IP masking procedure (i.e., pseudonymization by shortening the IP address) for your protection. In general, no clear data of users (such as email addresses or names) is stored in the context of web analysis, A/B testing, and optimization, but rather pseudonyms, so that neither we nor the providers of the software used, who act as processors for us, know the actual identity of the users.

When you contact us

Contacting us

When you contact us, we only collect personal data (e.g. name, e-mail address, telephone number) if you provide it to us voluntarily. This information is expressly provided on a voluntary basis. The purpose of processing your data is to process and respond to your enquiry. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

In the case of a telephone enquiry, your data will also be processed by telephone applications and in some cases also via a voice dialogue system in order to support us in the distribution and processing of enquiries.

We will delete your data that we have received in the course of contacting you as soon as your request has been fully processed and no further communication with you is required or requested by you.

Wenn wir für unsere Produkte werben

Direct marketing

We also use your contact data beyond contract-related use for advertising purposes. This is only done if you have expressly consented (Art. 6 para. 1 lit. a) GDPR) or on the basis of our legitimate interest in a personalised customer approach or direct advertising (Art. 6 para. 1 lit. f) GDPR), for example for information about the same and similar products of our company (Section 7 para. 3 UWG).

If you no longer wish to receive advertising, you can withdraw your consent or object to advertising at any time.

The data processed by us will be deleted as soon as they are no longer required for their intended purpose, you have objected to the advertising and the deletion does not conflict with any statutory retention requirements.

  • durch einen Klick auf den Abmelde-Link am Ende der Mail
  • per Mail an mtd-datenschutz@medtrix.group
  • schriftlich an die MedTriX GmbH, Unter den Eichen 5, 65195 Wiesbaden (bitte Mailadresse und den Namen von der Registrierung angeben)
  • telefonisch unter +49 611 9746 0.

Company presence in the social media

We maintain a presence on social media. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with. Below you will find the most important information on data protection law in relation to our company websites.

In addition to us, we are responsible for the company websites within the meaning of the EU General Data Protection Regulation (GDPR) and other data protection regulations:

  • Meta Platforms (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland); weitere Informationen zum Datenschutz finden Sie hier.
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland); further information on data protection can be found here.
  • Xing (New Work SE, Am Strandkai 1, 20457 Hamburg); further information on data protection can be found here.

We process the data for statistical purposes in order to further develop and optimise the content and to make our offer more attractive. This data includes the total number of page views, page activities and data and interactions provided by visitors. This data is processed and made available by the social networks. We have no influence on the generation and presentation of this data.

Your personal data is also processed for market research and advertising purposes. For example, it is possible that user profiles are created based on your usage behaviour and the resulting interests. This allows, among other things, adverts to be placed within and outside the platforms that presumably correspond to your interests. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly from your end devices may also be stored in your user profiles. Data is also stored and analysed across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.
We do not collect or process any other personal data.

The processing of your personal data by us is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

As we do not have full access to your personal data, you should contact the social media providers directly when asserting your rights as a data subject, as they have access to the personal data of their users and can take appropriate measures and provide information.

Should you nevertheless require assistance, we will of course endeavour to support you. You can find our contact details here.

For a detailed description of the respective processing and the cancellation options, please refer to the information linked below.

What else you should know

Controller

Verantwortlicher im Sinne der DSGVO ist die

MedTriX GmbH

Unter den Eichen 5
65195 Wiesbaden

Data Protection Officer

atarax group of companies

Luitpold-Maier-Str. 7
D-91074 Herzogenaurach
Phone: 09132 79800
Email: swmh-datenschutz@atarax.de.

Joint controllers

We are joint controllers in the following cases.

Joint controlling with Meta Platforms

When you visit our Meta Platforms fan page, we are jointly responsible with Meta Platforms for the processing of your personal data. Below we inform you about the associated data processing on our fan page, which does not affect Meta Platforms' terms of use:

Contact details of the controllers and joint controllership pursuant to Art. 26 GDPR

Joint controllers:
the entity responsible for this website (see the information about us mentioned at the beginning)
and
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland
According to the European Court of Justice (ECJ), we are jointly responsible with Meta Platforms for the processing of your personal data.

Appearance on the Meta Platforms fan page

Scope of data collection and storage

Data Purpose Legal basis
User interactions (posts, likes, etc.) User communication via social media Art. 6 para. 1 a GDPR
Meta Platforms cookies Target group advertising Art. 6 para. 1 a GDPR
Demographic data (based on age, place of residence, language or gender information) Target group advertising Art. 6 para. 1 a GDPR
Statistical data on user interactions in aggregated form, i.e. without personal reference (e.g. page activities, page views, page previews, likes, recommendations, posts, videos, page subscriptions incl. origin, time of day) Target group advertising Art. 6 para. 1 a GDPR

The promotional use of your personal data is particularly important for Meta Platforms. We use the statistics function to find out more about the visitors to our fan page. Using this function enables us to customise our content to the respective target group. In this way, we also utilise demographic information on the age and origin of users, for example, although we are unable to make any personal reference here. In order to provide the social media service in the form of our Meta Platforms fan page and to use the Insight function, Meta Platforms generally stores cookies on the user's end device. These include session cookies, which are deleted when the browser is closed, and persistent cookies, which remain on the end device until they expire or are deleted by the user. As a user, you can use your browser settings to decide for yourself whether and which cookies you wish to allow, block or delete. You can find instructions for your browser here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile (links). Alternatively, you can also install so-called ad blockers, such as Ghostery.

According to Meta Platforms, the cookies used by Meta Platforms are used for authentication, security, website and product integrity, advertising and measurement, website functions and services, performance, analysis and research. Details of the cookies used by Meta Platforms (e.g. names of cookies, duration of function, content collected and purpose) can be viewed here by following the links provided there. There you will also find the option of deactivating the cookies used by Meta Platforms. You can also change the settings for your advertising preferences there.

You can also object to the collection and storage of data through the use of the above-mentioned cookies by Meta Platforms at any time with effect for the future via this opt-out link.
You can use the aforementioned link to manage your preferences regarding usage-based online advertising. If you object to usage-based online advertising with a specific provider using the preference manager, this only applies to the specific business data collection via the web browser you are currently using. Preference management is cookie-based. If you delete all browser cookies, the preferences you have set with the preference manager will also be removed.

Note on Meta Platforms Insights

We use the Meta Platforms Insights function for statistical analysis purposes. In this context, we receive anonymised data on the users of our Meta Platforms fan page. However, we use the filters provided by FacebMeta Platformsook to specify the categories of data according to which Meta Platforms provides anonymised statistics. Meta Platforms provides us with the following criteria or categories for analysing the activities of the website in anonymised form, provided that the corresponding information has been provided by the user or is collected by Meta Platforms:

  • Age range
  • Gender
  • Place of residence (city and country)
  • language
  • Mobile or stationary page views (YouTube additionally individual device types)
  • Interactions in the context of posts (e.g. reactions, comments, shares, clicks, views, video usage time)
  • Time of use
    This anonymised data is used to analyse user behaviour for statistical purposes so that we can better tailor our offers to the needs and interests of our audience.

We see our legitimate interest (Art. 6 para. 1 f GDPR) for data processing in the presentation of our company and our products and services for your information.

Disclosure and use of personal data

If you interact with Meta Platforms, Meta Platforms will of course also have access to your data.

Joint controlling with YouTube

We use the technical platform and services of YouTube, a Google company, with its principal place of business at Gordon House, Barrow Street, Dublin 4, Ireland. This means that if you are habitually resident in the European Economic Area or Switzerland, unless otherwise specified in any additional terms, you will be provided with the services of Google Ireland Limited ("Google"), a company incorporated and operated under the laws of Ireland.

In accordance with the Google Privacy Policy, we assume that personal data, including its processing, will also be transferred to servers of Google LLC in the USA.

In its judgement in case C-210/16, the CJEU ruled that platform operators (in this case YouTube) and the operator of a channel located on the platform are jointly responsible for the data processing carried out via the respective channel. In this respect, platform operators and channel operators are to be regarded as joint controllers pursuant to Art. 26 GDPR.

Data processed by us__

Your personal data is processed for the purpose of market observation and user communication, in particular by initiating and obtaining user feedback. We process the following access data for the aforementioned purposes:
Access source, region, age, gender, subscription status regarding YouTube channel, subscription source, playlist, device type, YouTube product, live/on demand, playback location, operating system, subtitles, language for video information, translations used, element type, info card type, info card, where was shared.
The above data processing can be legitimised in accordance with Art. 6 para. 1 lit. f GDPR and our "legitimate interest". We have pointed out the right to object in accordance with Art. 21 GDPR (see below). Our legitimate interest lies in playing video content on YouTube with the widest possible reach. With the help of the data collected, the topics, design, length and playback time of the videos can be better tailored to user behaviour.

If you contact us directly as a YouTube user, for example via enquiries, comments and feedback, this contact and the communication of your details is expressly on a voluntary basis and with your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). We may forward your comments or reply to them or write comments that refer to your account. The data you freely publish and disseminate on our YouTube channel is thus included by us in our offering and made accessible to our followers and other users. In addition, we process the data that you voluntarily provide to us as part of a personal message, if necessary for the purpose of replying to the message.

Data processed by YouTube__

Information about what data is processed by YouTube and for what purposes this data is used can be found in the YouTube Privacy Policy. By using YouTube, your personal data will be collected, transferred, stored, disclosed and used by YouTube and transferred to, stored and used in the United States and any other country in which YouTube does business, regardless of your place of residence.

On the one hand, YouTube processes your voluntarily entered personal data such as your name and user name, email address, telephone number or the contacts in your address book when you upload or synchronise it. On the other hand, YouTube also analyses the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users and can determine your location using GPS data, information on wireless networks or your IP address in order to send you advertising or other content. YouTube may use analysis tools such as Google Analytics for evaluation purposes. If tools of this type are used by YouTube for our channel, this is not done on our behalf. The data obtained during the analysis is also not made available to us. We can only view the information on access activities listed under point 1. This so-called "log data" can be the IP address, the browser type, the operating system, information about the previously accessed website and the pages you have accessed, your location, your mobile phone provider, the end device you are using (including device ID and application ID), the search terms you have used and cookie information.

You have the option of restricting the processing of your data in the settings of your YouTube account as well as information on these options at https://support.google.com/accounts?hl=de#topic=3382296. In addition, you can restrict YouTube's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used.

You also have the option of requesting information via the YouTube privacy policy or the YouTube terms of use or via YouTube's community guidelines and security at:
https://www.youtube.de/t/privacy
https://www.youtube.com/t/terms
https://www.youtube.de/t/community_guidelines
Further information on YouTube's data protection can be found at https://www.youtube.com/?gl=DE&hl=de

Your rights

  • In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In this context, you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 para. 3-4 GDPR.
  • In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or the completion of your personal data stored by us.
  • In accordance with Art. 17 GDPR, you can request the erasure of your personal data stored by us.
  • In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data.
  • In accordance with Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and you can request the transfer to another controller.
  • In accordance with Art. 7 para. 3 GDPR, you can revoke your consent once given to us at any time. This means that the processing carried out on the basis of the consent prior to the revocation was lawful and has the consequence that we may no longer continue the data processing based on this consent in the future.

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR or Art. 6 para. 1 sentence 1 lit. e) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR. In the event of such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
In the case of direct marketing, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority against the processing of your personal data if you feel that your rights under the GDPR have been violated. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

Data protection information in the GTC

With this privacy policy, we fulfil the information obligations under the GDPR. Our General Terms and Conditions also contain data protection information. These explain in detail how your personal data, which we require to fulfil contracts and for the purpose of identity and credit checks, is processed.

Changes to the privacy policy

We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.