Privacy Statement

We collect, use and store your personal data exclusively in accordance with the provisions of the applicable data protection laws. In the following, we inform you about the type, scope and purpose of data collection and use.

This data protection information applies to data processing by:

Company: VISUS Health IT GmbH a company of CompuGroup Medical SE & Co. KGaA
Email: info(at)visus.com
Telephone: +49 234 93693-0
Fax: +49 234 93693-199
Website: www.visus.com

Data Protection Officer

If you have any questions about data protection, please contact our data protection officer.

Michael Vogelbacher
Telephone: +49 234 93693-122
Email: compliance(at)visus.com

Collection and Processing of Data

Every access to our website and every retrieval of a file stored on this website is logged. The storage serves internal system-related and statistical purposes. Logged are Name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser and requesting domain. In addition, the IP addresses of the requesting computers are logged. Further personal data is only collected if the user of the website and/ or customer provides information voluntarily, for example in the context of the online application process, an inquiry or registration or for the conclusion of a contract or via the settings of his browser. The above-mentioned data is collected by us to enable a smooth connection setup as well as a comfortable use of our website. In addition, we use the above data to evaluate system security and stability and for other administrative purposes. The legal basis for this data collection is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest lies in the aforementioned purposes for data collection.

Cookies

Our website uses cookies. A cookie is a text file that is sent when visiting a website and is temporarily stored on the hard drive of the website user and/ or customer. If the corresponding server of our website is called up again by the user of the website and/ or customer, the browser of the user of the website and/ or customer sends the previously received cookie back to the server. The server can then evaluate the information obtained through this procedure in various ways. Cookies can be used, for example, to control advertising or to make it easier to navigate a website.

The user of the website and/ or customer can influence the use of cookies via the consent management tool "Cookiebot". In addition, if the Website User and/ or Customer wishes to completely disable the use of cookies, he/ she may do so by locally making changes to his/ her settings in the Internet browser used on his/ her computer, i.e., the program for opening and viewing Internet pages (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).

Please note that the complete deactivation of cookies can lead to the fact that you cannot fully use all functions of our website. The legal basis for this data collection is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest lies in the aforementioned purposes for data collection.

Consent Management Tool "Cookiebot"

On our website, a web service of the company Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: cookiebot.com) is reloaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to cookiebot.com. The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR. The legitimate interest consists in an error-free function of the website. The deletion of the data takes place as soon as the purpose of their collection has been fulfilled. Further detailed information on the processing of the transmitted data can be found in the privacy policy of cookiebot.com: https://www.cookiebot.com/de/privacy-policy/

You can prevent the collection as well as the processing of your data by cookiebot.com by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Disclosure of personal data

Your personal data will only be passed on to third parties if you have given your express consent to this in accordance with Art. 6 Para. 1 lit. a GDPR, if the transfer in accordance with Art. 6 Para. 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data, if there is a legal obligation for the disclosure pursuant to Art. 6 para.1 lit. c GDPR and if this is legally permissible and necessary pursuant to Art. 6 para. 1 lit. b GDPR for the processing of contractual relationships with you.

Google Analytics 4 as a web analysis tool

We use Google Analytics 4, a web analytics service of the Google Group (for users within the EU: Google Ireland Limited, Gordon House Barrow St, Dublin 4, Ireland; outside the EU: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), on our website for the purposes of reach measurement, personalized online advertising, and remarketing. Google Analytics 4 uses cookies, Java Script, pixels, and device fingerprint.

The following personal information, among others, is collected and processed by default: Gender, interests (e.g. art, entertainment), the age group (e.g. 18-24, 25-34) of the users; continent, subcontinent, country, region city from which the user activity originates; device category (mobile, tablet), brand name and device model of the users; the platform on which the website or app was run, e.g. web, iOS or Android; operating system; the language set in the operating system of the device; operating system version; browser name.

We have also set up conversions. A conversion is any action by users, which is very valuable for us as a company: the cookie set by Google creates an anonymous profile of website visitors, which leads various data on their behavior and on the users themselves. We do not receive any information with which we can personally identify the user.

The data collected via Google Analytics 4 is transmitted to a Google server in the USA and stored there. Google has self-certified under the EU-US Transatlantic Data Protection Framework. This means that Google is committed to maintaining a level of data protection comparable to that in the European Union.

The IP anonymization automatically activated in Google Analytics 4 means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area in order to ensure anonymized recording of IP addresses (so-called IP masking).

The storage period of the data is two (2) months.

The legal basis of the processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Use of Google Ads and conversion tracking

We use the online advertising program "Google Ads" on our website and in this context conversion tracking (visit action evaluation). Google conversion tracking is an analysis service provided by Google. Please note that Google may use personal data that you have provided, e.g. if you are logged into your Google account, have activated your location (GPS) and allow Google to access it, or are using an Android device. Google does not share this data with us. When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Because each Google Ads customer receives a different cookie, there is no way that cookies can be tracked across Google Ads customers' websites.

The information obtained with the help of the conversion cookie is used for the purpose of creating conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. In this context, we neither receive nor process information with which users can be personally identified. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR from the legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising, whereby the weighing of interests did not result in any impairment of the rights and freedoms of the user.

Your rights: You have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR. To do so, you can prevent the storage of cookies by selecting the appropriate technical settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics. In addition, you can deactivate personalized advertising for you in Google's advertising settings.

You can find instructions on how to do this at https://support.google.com/ads/answer/2662922?hl=de. Further information as well as Google's privacy policy can be found at: https://www.google.de/policies/privacy/ and at https://support.google.com/analytics/answer/6004245?hl=de.

Google Tag Manager

To integrate and manage the described services of Google and, if applicable, other services of other providers listed here, we can use the "Google Tag Manager". The Google Tag Manager merely implements and manages tags; this service itself does not set any further cookies or collect any personal data.

You can access the usage guidelines of the Google Tag Manager here: https://www.google.com/intl/de/tagmanager/use-policy.html.

Doubleclick by Google

Since we show YouTube videos on our website, "Doubleclick by Google" is also used on the website. Doubleclick belongs to Google, just like YouTube. Doubleclick uses cookies for advertisements and measuring the success of advertisements. For this purpose, your browser is assigned a so-called pseudonymous identification number (pID). According to Google, DoubleClick cookies do not contain any personal information. However, Google uses the cookies and the pID to identify which pages have been visited in order to serve advertisements across pages and analyzes which ads have been displayed and which, if any, have been called up, i.e. clicked on. DoubleClick can use cookie IDs to record so-called conversions that relate to ad requests. In addition, we point out that Google can assign the website visit to your Google account if you are registered and logged in to one of the Google services. Even without registration or login, it is technically possible for Google to query and store your IP address. The information generated by the cookies is transferred by Google to a server in the USA or another EU third country for evaluation and stored there.

If you do not wish to receive personalized advertising, you can set this accordingly at http://www.google.com/settings/ads/onweb/?hl=de. To prevent tracking, you can adjust the cookie settings in your browser so that third-party cookies are suppressed. In addition, you can disable conversion tracking cookies from Google by blocking cookies from the domain "googleadservices.com" in your browser. Please note that this setting only applies until you delete cookies. Finally, in popular browsers (Chrome, Firefox, Microsoft Edge (former Internet Explorer)) you can use a browser plugin that allows you to ensure permanent advertising settings. To do so, please visit https://support.google.com/ads/answer/7395996.

However, such a setting may mean that our website cannot be used without restrictions. For more information on DoubleClick by Google, please visit https://www.google.de/doubleclick.

Integration of YouTube videos

We use the plugin of the service YouTube, which belongs to Google (for users within the EU: Google Ireland Limited, Gordon House Barrow St, Dublin 4, Ireland; otherwise: Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The plugin is recognizable on our site by the embedded video, which can be clicked on. When you click on the video on one of our pages, your browser establishes a direct connection with the servers of Youtube. The YouTube server thus receives information about which particular page of our website you have visited. If you are logged into your YouTube account or other Google account, you would enable YouTube or Google to associate your surfing behavior directly with your personal profile. Google also uses the data for personalized advertising, to customize its services and for market research. You can prevent this possibility of allocation if you log out of your account beforehand. You can also turn off personalized advertising in the settings in your Google account or on your Android device. For more information on this and to object to Google's use of data, see the privacy policy at https://policies.google.com/privacy?hl=de&gl=de. Information on Google's privacy policy is also available in Google's statement on data collection and use at https://privacy.google.com/intl/de/your-data.html and at https://support.google.com/analytics/answer/6004245?hl=de.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. We send newsletters, e-mails, and other electronic notifications with promotional information only if you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR or if a legal permission exists.

We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. In the course of this, the potential recipient can be added to a distribution list. Subsequently, the user receives a confirmation e-mail to confirm the registration in a legally secure manner. Only if the confirmation is received, the address will be actively included in the distribution list. We use this data exclusively for sending the requested information and offers.

For the realization of our newsletter dispatch we use the software solution "MAILINGWORK" of Mailingwork GmbH, Birkenweg 7, 09569 Oederan.

Your personal data is stored on our behalf on the servers of Mailingwork GmbH in Germany and used by Mailingwork for the dispatch of our newsletters and their evaluation on our behalf. Beyond that, your data will not be used by Mailingwork GmbH; neither will you be contacted by Mailingwork itself, nor will your data be passed on to third parties by Mailingwork.

We have an data processing agreement with Mailingwork GmbH, in which our shipping service provider guarantees comprehensive protection of your personal data against unauthorized access and GDPR-compliant data processing in compliance with the protection and rights of the persons concerned. In addition, Mailingwork has been certified as a reputable email marketing service provider by the Certified Senders Alliance.

You can revoke your consent to the storage of data, the e-mail address, and its use for sending the newsletter at any time, for example by clicking on the "Unsubscribe" link in the newsletter. You can also cancel the newsletter by sending an e-mail to marketing(at)visus.com.

The data protection measures are always subject to technical updates, for this reason we ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.

VISUS account

All users are provided with a user account to use the VISUS ACADEMY and JiveX Compendium applications. This user account is stored centrally for all applications.

The target groups are employees, customers and partner companies. Access is not public.

1. Inventory data
The first and last name of the user and their e-mail address are stored in the user account. In addition, access rights assigned to users for individual applications are stored in the user account.

2. Usage data
The following user data is collected:

IP address of the accessing computer
Date and time of access
Target application of the call

This data is stored until the session is explicitly ended using the "log out" function or expires automatically after ten hours. If users select the "Remember me" function, the data is stored for 14 days and then automatically deleted.

The following technically necessary cookies are also stored in the web browser:

Session ID
The selected language, if applicable

All cookies expire after ten hours at the latest. If the "Remember me" option is explicitly selected when logging in, the cookies are deleted after 14 days. In addition, all cookies are deleted when the session is explicitly ended using the "log out" function and the browser is closed.

JiveX Compendium

The JiveX Compendium is a document management system that provides documents relating to VISUS products. Employees, customers and partner companies can use the JiveX Compendium to list, search and view documents tailored to their respective target groups.

The JiveX Compendium itself does not store any data about the users. Data is only stored in the VISUS account (see above).

VISUS ACADEMY (Moodle)

The teaching and learning platform VISUS ACADEMY is a web-based learning management system. It is based on the open source software Moodle.

VISUS ACADEMY is offered as a service with the aim of training how to use the software. Various courses on various topics related to the VISUS software are offered via the learning platform. Target groups are employees, customers and partner companies. Access is not public and requires an account. The legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.

The categories of personal data specified below are processed:

1. Inventory Data
All users have a user account that authorizes them to access the learning platform.The user's first and last name are stored in the user profile, as well as their e-mail address. In addition to this, each person receives a Moodle user ID that is used within the system.

2. Usage Data
The following user data is collected:

First name, last name and Moodle user ID
IP address of the calling computer
Date and time of the call
Source of the call

In addition, this data is stored in the user profile:

Time of first access to the website
Time of last access to the website
Time of last access to a course

The aforementioned data is stored in the system for 35 days and then deleted.

Last used IP address (is deleted every night)

3. Content Data
Content data is also created by the users themselves and depending on their role. The users can create content, for example, in votes, feedback surveys, hyperlinks, calendars, group management, tasks, tests, interactive content, forums, glossaries or wikis as well as in the messages (messaging) across learning rooms. Uploaded files also count as content data.

This category of data also includes grades given for graded learning activities. The evaluations can either be carried out automatically by the system, as in electronic self-tests, or manually by the roles of manager and supervisor, as in the case of tasks.

4. Deletion of data
All data listed below are stored in the system for 35 days:

Time of first access to the website
Time of last access to the website
Time of last access to a course
Last used IP address (is deleted every night)

Linking to social networks and use of the share button

On our site, you can access our respective online presence on these social networks by clicking on the logos of the respective social networks or share the entries that are of interest to you by clicking on "Share" button in your social networks. Only by actively clicking on the logos/"Share" button will a connection to the social networks be established. Only then does the data processing described below take place.

You have the option to recommend our products on the social networks Facebook, Twitter, LinkedIn and Xing. If you click on one of the logos of these networks, you will be redirected to the website of the corresponding network and asked to log in or register. As long as you are on our website, no data is forwarded to the networks. Only when you click on the logo and are redirected do these networks collect data from you. You can find out what data is collected in the privacy statements of the respective network (see next point).

Privacy policy for our online presences in the social networks

In the following, we inform you about which data is processed when you access our online presences in the social networks.

As the operator of our company website, we receive anonymized visitor statistics (insights) in the respective social network, which are created on the basis of data collected by the respective social network. Page insights are summarized data that provide us with information about how users interact with our site. We do not receive personal data. We therefore do not gain insight into the individual personal data of visitors to our company site. As the operator of the company site, we are jointly responsible for the visitor statistics (Insights) with the provider of the respective social network (Art. 26 GDPR), with the provider of the respective social network assuming primary responsibility. The legal basis for the use of Insights data is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR to provide information and communication offers for interested parties and customers via social networks. We use this information for economic and communication purposes, including to remain competitive as a company.

When you access our online presences in the social networks, the respective social network places cookies on the device you use for this purpose (i.e. your computer or mobile device), which have the purpose of storing information in the web browsers and remain effective for a period of up to two years, unless they are deleted. The respective social network receives the information stored in the cookies, records it and processes it. This happens not only when you access services of the respective social network, such as our Facebook/Twitter/ Xing/ Kununu/ LinkedIn/ Spotify page, but also in the case of services provided by other members of the corporate group of the respective social network as well as services provided by other companies that use the services of the respective social network.

Partners of the respective social network and third parties also use cookies on the respective social networks to provide services. The data is used by the respective social network and third party companies for product research and development and advertising and sponsored content.

Please note that cookie placement when you access our company site occurs regardless of whether or not you have an account on the respective social network.

If you have an account in the respective social network, the respective social network collects data when you call up the company page, provided you have provided this data in your account, and processes it. This includes your age, gender, relationship status, professional situation as well as information about your lifestyle, interests and purchases or purchasing behavior (demographic data). The respective social network also collects and processes geographical data such as your location. This is used by the respective social networks to offer their information services and advertising in a targeted manner (personalization). The respective social network can assign this data to your person.

If you do not have an account with the respective social network, the cookie placement will in any case collect your IP address, information about your device, the region or, if applicable, the more precise location where you use it, call time and dwell time, as well as estimate the above-mentioned demographic data based on your surfing behavior.

You can prevent the collection of the data generated by the cookie and related to your use of our company site (including your IP address) to the respective social network as well as the processing of this data by the respective social network by adjusting your cookie settings before calling up our company site on the social networks. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it is pointed out that the use and especially the user comfort will be limited without cookies. In addition, you can activate the "do not track" function in your browser, disable script code executions in your browser or use a so-called script blocker.

The U.S. providers of the respective social network also have servers in the U.S. as well as other EU third countries and use a network of computers, cloud-based servers and other infrastructure and information technologies as well as other service providers that may be located outside the European Economic Area and Switzerland, i.e. in countries whose data protection does not meet the level of the EU GDPR and the Federal Republic of Germany. In this case, further guarantees such as standard contractual clauses of the EU Commission are concluded.

We maintain online presence on:

Facebook, provider: Facebook Inc, Headquarters: 1 Hacker Way, 94025 Menlo Park, CA, USA; for users within the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For more information:

In Facebook's Data Policy at https://www.facebook.com/privacy/explanation,
in Facebook's Cookie Policy at https://www.facebook.com/policies/cookies,
in the information on Page Insights data at https://www.facebook.com/legal/terms/information_about_page_insights_data,

Twitter, provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, US.
For more information:
In Twitter's data policy https://twitter.com/de/privacy

Xing, provider: NewWork SE, Dammtorstraße 30, 20354 Hamburg, Germany.
You can obtain further information:
In Xing's data protection policy at https://privacy.xing.com/de/datenschutzerklaerung

Kununu, provider: also New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
You can obtain further information:
In the privacy policy of Kununu https://privacy.xing.com/de/datenschutzerklaerung

Spotify, Provider: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.
For more information:
In Spotify's privacy policy at https://www.spotify.com/de/legal/privacy-policy/

LinkedIn, provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"), or LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
For more information:
In LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy

LinkedIn conversion tracking

We use the LinkedIn Insight Conversion Tool of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"), or LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn", website: www.linkedin.com) on our website.

This tool enables us to analyze the use of our website and to optimally adapt it to the interests of our customers. LinkedIn use cookies, i.e. small text files that are stored in your browser by the LinkedIn Insight tag. This allows LinkedIn to recognize you when you visit our website again. LinkedIn uses this data to send us anonymized analyses of how our visitors use our website.

If you agree to our cookie terms by clicking "OK", the LinkedIn Insight Tag will be activated and a cookie will be stored in your browser. The LinkedIn Insight Tag starts collecting data about your activity on our website, including URL, referrer URL, IP-address, device and browser properties (user agent) and the start, end and duration of your visit to our website. LinkedIn has agreed to encrypt this data, specifically to shorten IP-addresses and remove ID of LinkedIn members within 7 days to pseudonymize the data. The remaining pseudonymized data will be deleted within 90 days. The reports and user data from LinkedIn are anonymous to us, which is why we cannot draw any conclusions about your identity. LinkedIn connects the data with a specified ID, which is stored in the form of a cookie or provided by your end device or with your LinkedIn user account if you are logged in. If you would like to prevent LinkedIn Corporation from storing this data and linking it to your account, please log out before visiting this website. Details on data collection as well as your rights and setting options can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.

You can deactivate the LinkedIn Insight Conversion Tool by opting out here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

If you are a member of LinkedIn, click on the "Decline on LinkedIn" box to do so. Otherwise, please click on "decline”.

Web font from fast.fonts.net or fonts.com

This site uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the servers of fonts.com. This enables fonts.com to know that our website has been accessed via your IP address. The use of Fonts.com Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

If your browser does not support web fonts, a default font is used by your computer. For more information about these web fonts, see https://www.fonts.com/info/legal and Fonts.com's privacy policy: https://www.fonts.com/info/legal/privacy/ and https://www.monotype.com/legal/privacy-policy/'s privacy policy.

Data subject rights

As a data subject, you have the right,

to request information about your personal data processed by us in accordance with Art. 15 GDPR;
pursuant to Art. 16 GDPR, to demand the correction or completion of your personal data stored by us without undue delay;
pursuant to Art. 17 GDPR, to request the erase of your personal data stored by us, insofar as this does not conflict with any of the reasons stated in Art. 17 (3) GDPR;
pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data;
pursuant to Art. 20 GDPR, to request the transfer of your data provided to us in a structured, common and machine-readable format without any obstacles;
in accordance with Art. 7 para.3 GDPR, to revoke your consent given to us at any time;
file a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.

Right of objection

You have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, provided that they are processed on the basis of legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR and insofar as there are grounds arising from your particular situation or your objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation. To exercise your right of revocation or objection, a simple e-mail to datenschutz(at)visus.com is sufficient.

Data security

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Headquarter Germany

Headquarter Switzerland