Privacy Policy for Visitors of the Smart Reporting Website



Dear Website Visitor,

the sensible and responsible handling of your data has always been important to Smart Reporting. The new General Data Protection Regulation (in short: GDPR) of the European Union now places special emphasis on transparency in the processing of personal data.

If you wish to take a look at the GDPR, you will find it on the Internet at: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679

In the light of this new legislation we would like to provide you with some information on the protection of your personal data, as required by the GDPR. The term “personal data” covers any piece of information that refers to an identified or identifiable natural person (“data subject”). By visiting the Smart Reporting website, you may become a data subject within the meaning of the GDPR.

This Privacy Policy only applies to the web pages within the smart-radiology.com website, but may also apply to other websites of Smart Reporting GmbH that incorporate this Privacy Policy by reference. In particular, this Privacy Policy does not apply to third party websites that are linked with smart-radiology.com.

This Privacy Policy does not automatically apply to profiles of Smart Reporting GmbH on third party platforms, including, but not limited to social networks (e.g., Facebook, Twitter, Google+ or Instagram). Profiles on those platforms are subject to the privacy policies of the respective platform operator(s) and, if applicable, the privacy policies provided therein as a full text version or link by Smart Reporting GmbH.



I. Our responsibility for data protection and your contact persons

1. The party responsible for the processing (“controller”) of your data gathered during your visit to our website is

Smart Reporting GmbH
Briennerstr. 11
80333 München
email: info@smart-radiology.com

2. You may also contact our data protection officer directly by sending an email to datenschutz@smart-radiology.com or a letter to our postal address with the additional line “Datenschutzbeauftragter” (data protection officer).

II. Information on the processing of personal data

1. Data automatically collected while browsing this website

When you access our website, the following information is usually automatically transmitted by your browser to our server:

a) Internet address (IP address) of the accessing computer at the time of access
b) Date and time of access
c) Accessed web pages or files
d) Transmitted data volume
e) Message whether the retrieval was successful or why it failed, if applicable (error code)
f) Operating system and browser software of retrieving computer, both including version
g) Screen resolution and color depth of the retrieving computer
h) Browser and language settings
i) Browser plugins (JavaScript, Flash Player, Java, Silverlight, Adobe Acrobat Reader, etc.)
j) Previously visited website (referrer URL)
k) Search term with which the Website was found, e.g., via Google.

We will process this data based on our legitimate interests within the meaning of Art. 6, par. 1, sentence 1, lit. f of the GDPR, namely

a) for making our website available,
b) for maintaining the technical stability and security of our website, including the detection and removal of service interruptions (e.g., by blocking a denial-of-service-attack that is caused by a certain IP address),
c) for statistical analysis of the use of our website for the purpose of its customization and improvement, and
d) for examination in the event of well-founded reasons to suspect an unlawful use (e.g., in the event of a suspected libel and slander in a blog made available by us or fraud in connection with the registration for our services).

This data will be automatically collected when you access our website. Our website cannot be used if you object to the collection of this data. We do not use this data for the purpose of drawing conclusions regarding your identity as a visitor of our website, except when there are well-founded reasons to suspect an unlawful use.

The collected data will be deleted at regular intervals or fully anonymized by deleting at least certain parts of the IP address.

2. Cookies

The website will use cookies which assign an identification code to your computer. Cookies are small text files (with an identification code) that are stored on the visitor's computer when a website is accessed. Being text-only files, cookies cannot contain viruses or other malware.

Cookies help to make websites more comfortable, efficient, and secure. We use both transient and persistent cookies:

a) Transient cookies will be automatically deleted when you close the browser. These are, in particular, session cookies. They store a so-called session ID that can be used to attribute various inquiries made by your browser to just one session. This allows us to recognize your computer when you return to our website. Session cookies are deleted when you log off or close the browser. For instance, a session cookie can be used to keep you logged into your account until you log out.
b) Persistent cookies will be stored beyond a browser session, but automatically deleted upon the expiration of a predefined term which may vary depending on the type of cookie. In addition, you may delete the cookies in the system security settings of your browser at any time.

Generally, we do not use cookies to draw conclusions regarding your identity, but only to identify your computer for the purposes described above. In certain cases, the user may also be identified, if it enters its contact data on our website while a session cookie is placed (e.g., when registering for an account).

We will process data obtained in connection with cookies based on our legitimate interests within the meaning of Art. 6, par. 1, sentence 1, lit. f of the GDPR, namely

a) for providing certain functionality of our website, and
b) for statistical analysis of the use of our website with the aim of its customization and improvement.

Most browsers allow users to receive a warning before a cookie is stored, allow users to completely refuse the acceptance of cookies, and/or to delete existing cookies subsequently. However, the usability of the website may be limited due to these settings.

If you wish to object to the processing of your data in connection with cookies, please disable the acceptance of cookies in your browser settings, or make the following settings in Google Analytics as described in the following section.

In particular, smart-radiology.com uses cookies for Google Analytics as described below.

When you access our website, you will see the actively displayed cookie notice, regardless of whether you call up this Privacy Policy. If you confirm this cookie notice by clicking on “OK, I understand” we may also place a cookie on your computer that ensures that you will not be shown this notice for a period of one (1) year.

3. Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (hereinafter referred to as “Google”). Google Analytics also uses "cookies", i.e., text files that are stored on your computer and that allow Google to analyze your use of a certain website. Generally, information on your use of this website generated by cookies will be transmitted to a Google server in the U.S. and stored on that server. Since the anonymization of IP addresses has been enabled for this website, your IP address will be shortened by Google within any of the member states of the European Union or in any other countries which are contracting parties to the Agreement on the European Economic Area prior to transfer outsite this region so that it may no longer be matched with a connection point and/or user. Only in exceptional cases, the full IP address will be transferred to a Google server within the U.S. and shortened afterwards.

Furthermore, this website uses Google Analytics for a device-independent analysis of click streams that is based on user IDs.

On behalf of Smart Reporting, Google will use the collected data to analyze your use of the website in order to compile website activity reports and to provide additional services in connection with the use of the website and the internet to Smart Reporting. Furthermore, Google may transfer this information to third parties, if it is required to do so in accordance with statutory provisions, or if third parties process data on behalf of Google. Under no circumstances will Google link your IP address with other Google data.

We use Google Analytics to analyze the use of our website and to improve it on an ongoing basis. The statistical data obtained will help us improve our offer and to make it more interesting to you as a user. With regard to the exceptional cases in which personal data is transmitted to the United States, Google has agreed to be bound by the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics are our legitimate interests pursuant to Art. 6, par. 1, sentence 1, lit f of the GDPR. Our legitimate interests consist in the analysis, optimization, and the efficient operation of our website.

You may prevent the storing of cookies by making the appropriate settings in your browser software. In addition, you may object to the collection of data by Google Analytics, by installing an opt-out add-on for your browser available from the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

This add-on can be installed for all common web browsers and gives you extensive control over the information that Google will collect when you access our website. To this end, the add-on will inform Java Script (ga.js) of Google Analytics that the transmission of information on the visit of our website to Google Analytics is not permitted. However, this does not prevent the transmission of information to us or to other web analysis services. Whether we use other web analysis services and which they are will be explained in this Privacy Policy, if applicable.

Furthermore, Google makes additional information on data protection available at

https://www.google.com/intl/de/policies/privacy/partners,

including on the possibilities of opting out of data collection.

4. Retargeting/remarketing with Google DoubleClick

In our website we use retargeting/remarketing technologies to optimize our offer. The legal basis is Art. 6, par. 1, sentence 1, lit f of the GDPR, since we have a legitimate interest in the efficient operation of our website and in the optimization of our advertising campaigns, and our entire online offer.

a) What is retargeting/remarketing?

Our website uses cookies/tracking technology to collect data for the optimization of our advertising activities and the entire online offer (so-called retargeting/remarketing). This data will not be used to identify you as an individual, but merely serves the purpose of analyzing the use of our website and, possibly, to address advertising to users who had already shown interest in our website - both on our website and on our partners’ websites. We are convinced that interest-based advertising is generally more appealing to the user than advertising that is not tailored to the user’s needs. The display of advertising on our or on our partners’ websites occurs based on an analysis of the user’s previous browsing behavior. However, user profiles are only created as anonymized and/or pseudonymized profiles. By no means, your tracking data will be combined with the personal data stored on our servers. In the following section of this Privacy Policy, you will learn how to disable retargeting/remarketing technologies.

b) Google DoubleClick
In this website, we use the DoubleClick feature offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Google uses cookies/tracking technologies that are stored on your device and that allow Google to analyze your use of any website. Information generated by cookies/tracking technology on your use of this website (including your IP address) will be transferred to a Google server in the U.S. and stored on that server. Afterwards the last three digits of the IP address will be deleted by Google so that it is no longer possible to unequivocally match this IP address with personal data.

For further information on the analysis of your search and browsing behavior please refer to: https://www.google.com/intl/de/policies/privacy/
https://policies.google.com/technologies/ads?hl=de

You may object to the storage and use of cookies for the purposes of remarketing/retargeting at any time with effect for the future, by preventing the storing and use of cookies through technical means, i.e., the corresponding browser settings and/or browser add-ons. Furthermore, you may opt-out of interest-based Google advertising by clicking on the following link: https://adssettings.google.com/.

5. YouTube

Our website uses YouTube plug-ins. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, U.S. is the operator of those web pages. YouTube, LLC, is a subsidiary of Google LLC. When you visit one of our web pages that use a YouTube plug-in, our web page will connect with the YouTube servers. In the course of this process, the information listed in no. 1 will be transmitted to the YouTube server, including which of our pages you visited.

If you have logged into your YouTube Account, you will also allow YouTube to link your browsing behavior directly with your personal profile. You may prevent this by logging out of your YouTube account.

The integration of YouTube videos constitutes a legitimate interest based on Article 6, par. 1, sentence 1, lit. f of the GDPR. Our legitimate interests consist in the optimization, and the efficient operation of our website.

YouTube stores your data as usage profiles and will use it for advertising or market research purposes, and/or for the customization of its website. Such data will be analyzed (even for users that have not logged in) for the purpose of providing customized advertising and to inform other users of the social network about your activities on our website. You have the right to object to this type of user profiling. Please note that you need to contact YouTube to exercise this right.

For further information on the use of user data please refer to the privacy policy of YouTube, a company of the Google Group, at: https://www.google.de/intl/de/policies/privacy

Google Group also processes your personal data in the U.S. and has agreed to be bound by the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.

6. Contact form and other forms of inquiries

If you contact us via our contact form or by email, we will use the data you provide for processing your request or inquiry. You need to provide personal data to enable us to process and respond to your request or inquiry – otherwise we cannot respond or may not be able to fully reply to your inquiry

The legal basis for this type of data processing is Art. 6, par. 1, sentence 1, lit. b of the GDPR, since the processing of the corresponding data is required for performing the contract or for taking other steps prior to entering into a contract.

Your data will be deleted when your inquiry has been fully responded to and if there are no conflicting statutory retention periods that forbid its deletion, such as retention periods under trade or tax law.

7. Services subject to registration

Services that require a user registration such as a newsletter or our services for assistance with structured online reporting may be subject to additional data protection regulations to which reference will be made during the registration process.

8. Recipients of personal data

We will only disclose your personal data to external third parties, if this is required for the processing or handling of your concern, if this is permitted based on another legal basis, or if you have granted your consent. External recipients may include, but are not limited to service providers that we use in the provision of services, for instance in the area of technical infrastructure and the maintenance of our website. These processors will be carefully selected. They shall use the data exclusively for the purposes indicated by us and in accordance with our instructions.

In the event data is transmitted to third parties whose registered office, place of residence, or place of data processing is not within a member state of the European Union or another country that is a party to the Agreement on the European Economic Area, we will ensure prior to passing on your data that, except for the statutorily permitted exceptions, the recipient complies with a reasonable level of data protection or that you have provided your sufficient consent.

9. Storage period

We will store your personal data only as long as required for meeting the purposes or – if a consent was granted – as long as you do not withdraw your consent. In the event of an objection, we will delete your personal data, unless their continued processing is permitted in accordance with the applicable statutory provisions, or even compellingly required (e.g., due to retention periods under trade or tax law). We will also delete your personal data if we are obligated to do so subject statutory requirements.

III. Your rights as a data subject

1. As a data subject, you have numerous rights. These include, but are not limited to the following rights:

a) Right of access (Article 15 of the GDPR): You have the right to require us to provide information on the data stored about you.
b) Right to rectification (Article 16 of the GDPR): You may demand that we rectify inaccurate personal data.
c) Right to erasure (Article 17 of the GDPR): You may demand that we erase or delete any data that has been unlawfully processed.
d) Right to restriction of processing (Article 18 of the GDPR): You may demand that we restrict the processing of your data, specifically, that we “block” data where their processing is disputed.
e) Right to data portability (Article 20 of the GDPR): If you provide data to us under an agreement or based on a consent, you may demand the provision of the data submitted by you in a structured, common, and machine-readable format, or that we transmit this information to another controller.
f) Objection to data processing where “legitimate interest” is the legal basis (Article 21 of the GDPR): If reasons exist that are based on grounds relating to your particular situation, you may object at any time to the processing of personal data by us, to the extent that the “legitimate interest” is the legal basis for this processing. If you should exercise your right to object, we will discontinue the processing of your data, unless we are able to show that there are compelling reasons that allow the continued data processing and outweigh your rights. In the event of direct marketing or the use of cookies based on legitimate interests, we will generally comply with your objection and shall discontinue the corresponding processing of your data. Please note that you need to make certain browser settings, as described above, if you wish to object to cookies.
g) Withdrawal of consent (Art. 7, par. 3 of the GDPR): If you have granted your consent to the processing of your data you may withdraw this consent at any time with effect for the future. The legitimacy of the processing of your data until the date of your withdrawal remains unaffected.
h) Right to lodge complaints with a supervisory authority (Art. 77 of the GDPR): Furthermore, you have the right to lodge a complaint with the competent supervisory authority, if you consider that the processing of your personal data violates the applicable statutory provisions, rules, and regulations. In this case, you may contact the data protection authority having competence at your place of residence or in your country or the data protection authority having competence at our place of business.

2. Furthermore, we are obligated to inform all recipients to whom we have disclosed data about any rectification or deletion of data or the restriction of its processing that occur in accordance with the Articles 16, 17 par. 1, 18 of the GDPR (Right to be forgotten). However, this obligation shall not apply, if this notification is not possible or only with a disproportionate amount of effort. Notwithstanding this fact, you have the right to obtain information on these recipients.

3. You are only entitled to the rights described above subject to the condition precedent that the applicable legal requirements have been complied with, including those that are not explicitly mentioned in the above explanations.

4. You must assert any claims as a data subject against Smart Reporting GmbH. However, with regard to you rights you may also contact our data protection officer.

IV. Version and reviews of this Privacy Policy

  1. This Privacy Policy becomes effective on 26st March 2019.
  2. Due to the further development of technology, of our services, and/or organization and due to changed legal and/or official requirements it may be necessary to review and amend this data protection information. The current version of our Privacy Policy as retrievable from our website on the date of your visit to our website shall apply.