1)   Preamble

Welcome to our website! We attach great importance to protecting your data and safeguarding your privacy. We would like to explain below which data we process, when and for what purpose and on what legal basis. We would like to explain to you how our services work and how the protection of your personal data is guaranteed.

According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly. Further information on this can be found in Art. 4 No. 1 DSGVO, among others.

This privacy policy can be accessed, saved and printed out at any time at the https://www.worldsurgerytour.com/privacy-policy .

Insofar as we cite our legitimate interest or a legitimate interest of a third party (Art. 6 para. 1 lit. f) DSGVO) as the lawful basis for processing personal data, you have a right to object pursuant to Art. 21 DSGVO: 

In accordance with Art. 21 of the GDPR, you have the right to object to the processing of personal data. We will then no longer process the personal data for direct marketing or related profiling purposes. 

​

We will also not process your personal data for other purposes after an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims (cf. for example Art. 21 (1) DSGVO, so-called "limited right of objection"). In this case, you must provide reasons for the objection that arise from your particular situation. 

You may also object to processing of your personal data on grounds relating to your particular situation which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest (cf. Article 21(6) of the GDPR). 

We will also refer you to the right of objection again separately in the individual sections (e.g. by the note: " You have a right of objection "), if this right exists. There you will also find further information on how to exercise your right to object. 

In order to keep the following data protection declaration clear, we refer at various points by means of links to information and data protection notices which can be found on external websites (see also the section "Social networks & external links" in this data protection declaration). We make every effort to keep the links listed in this data protection declaration up to date. Nevertheless, due to the constant updating of the websites, it cannot be ruled out that links do not function correctly. If you notice such a link, we would be pleased if you let us know so that we can add the current link.  

​

2)   Responsible 

The controller within the meaning of Art. 4 No. 7 DSGVO for the processing of personal data is: 

​

Rimasys GmbH 

Nattermannallee 

50829 Cologne 

CEO: Miriam Stadthalter

contact@worldsurgerytour.com

Tel.: +49 (0) 221 500 576 71 9 

​

3)   Contact details for data protection 

If you have any questions about the processing of your personal data or about your data protection rights, please contact: contact@worldsurgerytour.com. 

4)    Log files 

When you call up our website, we automatically collect data and information from the system of your device and store some of this in so-called server log files. The data is automatically transferred by your respective browser when you call up our website. The following information is recorded: 

URL of the website from which you accessed our website, the operating system you are using, Type and version of the browser you are using, Your IP address. 

The purpose of this processing is the accessibility of our website from your device and to enable a correct display of our website on your device or in your browser. Furthermore, we use the data to optimize our website and to ensure the security of our systems. The processing of your IP address by our system is also necessary to enable the delivery of our website to your device. 

The legal basis for the processing is Art. 6 para. 1 lit. f) DSGVO. We have a legitimate interest in presenting you with a website optimized for your browser and in enabling communication between our server and your terminal device. For the latter, the processing of your IP address in particular is necessary. 

We store the data for 14 months. 

The recipient of the data is our server host, which works for us under a commissioned data agreement. 

Right of objection 

You have the right to object. You can send or inform us of your objection at any time (e.g. by e-mail to contact@worldsurgerytour.com). 

The provision of personal data is neither legally nor contractually required and is also not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide the data may result in you not being able to use our website or not being able to use it to its full extent. 

5)     Cookies 

Our website uses cookies. Cookies are text files that are stored on your device, e.g. to make the use of a website more comfortable or to recognize the user's device and save settings or similar. Cookies can be used to store entries and settings on a website so that you do not have to enter them again each time you visit a website. Cookies contain a so-called cookie ID, which makes it possible to assign the device in which the cookie was stored. 

​

Cookies help us to design our online offer in a user-friendly and customized way. We use our own cookies and cookies from third-party providers. You have the option to configure the setting of cookies at any time. 

You can restrict or completely prevent the setting of cookies in your browser settings. You can also arrange for the automatic deletion of cookies when closing the browser window. 

You can find out how to delete cookies in the most common browsers and change the cookie settings here: 

Google Chrome:                      Website 

Mozilla Firefox:                         Website 

Apple Safari:                             Website 

Microsoft Internet Explorer:    Website 

​

You can also configure the settings for the cookies used on our website under the notice “cookie settings” . 

​

Cookies for marketing purposes 

Marketing cookies are used to show you interest-based advertising. When you visit another website, your browser's cookie is recognized again and you are shown selected advertising based on the information stored in this cookie. These cookies are only activated if you have given your consent (legal basis: Art. 6 para. 1 lit. a) DSGVO). You can give your consent conclusively by continuing to use the website after a corresponding notice has been displayed, by actively clicking on "Accept" in the notice “Cookie Settings” displayed on our website . Your revocation does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

​

Cookies for analysis (performance): 

These cookies can be used to measure the reach of our own offer. Through the cookie set, we can, among other things, track which website was visited before our website was called up and how our website was used. We use this data, among other things, to optimize our website by evaluating the campaigns we carry out (legal basis: Art. 6 para. 1 lit. a) DSGVO). 

You can give your consent conclusively by continuing to use the website after a corresponding notice has been displayed, by actively clicking on "Accept" in the notice  “Cookie settings” displayed 

Your revocation does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

​

Essential cookies 

Technically necessary cookies are those that are required for the smooth functioning of our website. Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f) DSGVO. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. 

​

For the management of cookies on our website and for your handling of cookies, we use the cookie Banner of Wix.com Ltd. Nemal St. 40, 6350671 Tel Aviv, Israel, e-Mail: support@wix.com 

It also allows you to refuse all cookies except those that are necessary for the use of the website. The EU Commission has confirmed by adequacy decision that Israel has an adequate level of data protection. We have concluded a data processing contract with WIX. 

More information about data protection by Wix can be find hereunder: https://de.wix.com/about/privacy 

Your cookie preferences are stored in a cookie for this website. 

​

Right of objection 

You have the right to object insofar as data processing is based on Art. 6 (1) f DSGVO. 

You can restrict or completely prevent the setting of cookies in your browser settings. You can also arrange for cookies to be automatically deleted when you close the browser window. 

You can find out how to delete cookies in the most common browsers and change the cookie settings here: 

Google Chrome:                      Website

Mozilla Firefox:                         Website

Apple Safari:                             Website

Microsoft Internet Explorer:    Website

Microsoft Edge:                        Website

​

The provision of personal data is neither legally nor contractually required and is also not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide the data may result in you not being able to use our website or not being able to use it to its full extent. 

Other services used by us also use cookies. We inform you separately about the use of cookies in the individual services. 

​

6)        Information on Google services 

We use various services of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland on our website. 

You can find more detailed information on the individual concrete services from Google that we use on this website in the further data protection declaration. 

Through the integration of Google services, Google may collect and process information (including personal data). It cannot be ruled out that Google also transmits the information to a server in a third country. 

The transmission to the USA depends on the function in which personal data is transmitted. As the responsible party, we ourselves may transfer data to Google in the USA for further use. 

​

There is currently no adequacy decision pursuant to Art. 45 of the GDPR. 

​

However, the transfer can be based on. Standard Contractual Clauses. Google has committed to comply with the Standard Contractual Clauses for the transfer of personal data to third countries under Directive 95/46/EC (SCC). 

​

You can find more information on SCC clauses at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de and at https://policies.google.com/privacy/frameworks?hl=de. 

​

We ourselves cannot influence what data Google actually collects and processes. However, Google states that, in principle, the following information (including personal data) may be processed, among other things: 

​

• Log data (in particular the IP address) 

• Site-related information 

• Unique application numbers 

• Cookies and similar technologies 

​

Information on the types of cookies used by Google can be found at https://policies.google.com/technologies/types. 

If you are logged into your Google Account, Google may add the processed information to your account and treat it as personal data, depending on your account settings. Google states the following, among other things, in this regard: 

​

"If you are not signed in to a Google Account, we store the data we collect with unique identifiers associated with the browser, app or device you are using. This allows us to ensure, for example, that your language settings are retained across all browsing sessions. 

If you are logged into a Google account, we also collect data that we store in your Google account and consider to be personal data." (https://www.google.com/intl/de/policies/privacy/index.html) 

You can prevent this data from being added directly by logging out of your Google account or by making the appropriate account settings in your Google account. You may also refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. 

​

You can find out how to delete cookies in the most common browsers here: 

Google Chrome:                       Website 

Mozilla Firefox:                          Website 

Apple Safari:                              Website 

Microsoft Internet Explorer:     Website 

You can find more information in Google's privacy policy, which you can access here: 

​

You can find information on Google's privacy settings at https://privacy.google.com/take-control.html. 

7)     Order tickets for the World Surgery Tour 

You have the option of placing an order in our online shop on our website. In the context of an order in our online shop, the following data in particular will be processed: 

• E-mail address 

• First name 

• Work experience 

• Payment data 
   

The data also results from the respective order or input form. 

The purpose of processing the personal data is to process the order and fulfil the contract. 

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit b) DSGVO. 

In addition, we also process your IP address and the date and time of the order in order to be able to check the data in the event of suspected misuse. 

The legal basis for this is Art. 6 para. 1 lit f) DSGVO. We have a legitimate interest in being able to recognize abusive orders in our online shop and take necessary measures. 

Your payment data may be transmitted to the commissioned credit institution insofar as this is necessary for the processing of the payment. In addition, the data is processed for us by our server host as part of order processing. 

Furthermore, we have to take into account the statutory retention obligations. Accordingly, we are obliged to keep certain documents (in particular § 257 HGB, § 147 AO, §§ 14, 14b UstG) for up to 10 years. As soon as the contract has been fully processed, the contract data is therefore blocked and deleted after expiry of the deadline. The legal basis for this is Art. 6 para. 1 lit. c) DSGVO. 

The other data (in particular IP address) is deleted as soon as it is no longer required to achieve the purpose for which it was collected. 

Insofar as we base the processing of your personal data on our legitimate interest, you have the right to object. 

Right of objection 

You can send or inform us of your objection at any time (e.g. by e-mail to contact@worldsurgerytour.com ). 

The provision of personal data is neither legally nor contractually required. However, it is necessary in order to be able to place an order in our online shop. You are not obliged to provide the personal data. However, failure to provide it would result in you not being able to place an order with us. 

Insofar as you have purchased a ticket for an online visit to the World Surgery Tour, you must register for online access via the website https://worldsurgerytour.tv/. You will find further information on this under section X "Registration". Your data will be deleted when it is no longer required for the fulfilment of the contract, unless legal retention periods require longer storage. 

​

8)        Registration function 

You have the option of creating a user account https://worldsurgerytour.tv via the website. 

​

In the course of registration, the data entered in the input fields will be processed by us. 

This includes the following data as mandatory information: 

• E-mail address 

• First name 

​

In addition, you can add further data as voluntary information. The following data is potentially affected: 

• Salutation 

• Phone number 

• Company 

We treat mandatory and voluntary information equally. The mandatory information is necessary to create a user account for you. 

​

When submitting the registration, the following data will also be processed: 

​

• Your IP address 

• Date and time of sending 

​

The purpose of processing the personal data is to provide the user with his or her own user account. 

​

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit f.) DSGVO. We have a legitimate interest in providing you with a user account. 

​

Right of objection 

You have the right to object. You can deactivate or delete your user account at any time. 

You can also send or inform us of your objection at any time ( e.g. by e-mail to contact@worldsurgerytour.com ). 

​

The information processed is only stored for as long as necessary for the intended purpose or as required by law. 

You can delete your account at any time by clicking the Link “delete account” which you can find within our account area. 

The recipient of the data is our server host, who works for us under a commissioned data agreement. 

The provision of personal data is neither legally nor contractually required and is also not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, we cannot provide you with a user account without the necessary information. 

9)     Payment via PayPal 

You have the option to pay via PayPal.  When completing your order, you will be redirected to the website of the payment provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). When paying via PayPal, information (including personal data) is transmitted by us to PayPal for the purpose of payment processing and processed by PayPal. When paying via PayPal, the following data in particular will be transmitted by us to PayPal: 

​

• Name of the product 

• Unique user ID (integer) 

When you access the PayPal website or PayPal services, PayPal places cookies on your device. PayPal uses these cookies, among other things, to recognize you as a customer, to personalize PayPal services, content and advertising, as well as to evaluate the effectiveness of advertising and to ensure the security of your account. You can prevent the installation of cookies by adjusting your browser software settings accordingly, unless these cookies are required for fraud prevention or to ensure the security of the websites managed by PayPal. However, we would like to point out that in this case you may not be able to use all of PayPal's functions to their full extent. 

PayPal's applicable privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full. 

​

The purpose of the processing of the data is the handling of the payment process and the contract. 

The legal basis for the processing of data within the framework of the ordering process and the processing of the contract is Art. 6 para. 1 lit. b) DSGVO. 

​

The data will only be stored by us as long as this is necessary for the implementation and processing of your order and compliance with the statutory retention periods. 

​

The provision of personal data is necessary for the conclusion of a contract. Failure to provide the data would result in the contract not being concluded. 

​

​

10)  Payment - Klarna 

We offer you the possibility to pay your order via the service Klarna (also known as "Sofort"). Klarna is an online payment service provider that offers you, among other things, the possibility to pay immediately online using your bank details. Klarna's provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm Sweden, phone: 0046 8-120 120 00, fax: 0046 8-120 120 99, contact: info@klarna.de. In Germany, you can contact Sofort GmbH, Theresienhöhe 12, 80339 Munich. 

When completing the order, you will be redirected to the website of the payment service provider Klarna. To process the payment, you will be asked to enter your account number, your online banking PIN and a corresponding TAN from your bank. If you confirm this process, Klarna will check your account balance and whether your account covers the amount to be transferred (account coverage check) and any transfers made with Sofort from your account in the last 30 days have been successfully completed. If the check is positive, Klarna will then send your approved transfer order electronically to your bank and inform your chosen payee (online provider) that the transfer has been successfully completed. According to its own information, Klarna processes your account number, your online account PIN, the TAN entered and the data displayed in the transfer form as part of this check and forwards them to your bank. 

​

As part of the confirmation of the successful setting of the transfer order, we then receive from Klarna/Sofort the data displayed in the transfer form (name, account number, bank code, subject, transfer amount) as well as the date (with time) and the transaction identifier selected by the online provider (e.g. order number). In addition, the confirmation to us also contains the BIC and IBAN if the transfer is a SEPA transfer or - depending on your bank - the BIC and IBAN are required to set the transfer in your online banking account. 

When you access the Klarna/Sofort website or its service, Klarna/Sofort places cookies and tokens on your device. Klarna/Sofort uses these, among other things, to store the preferred user language, the sender country, the last selected bank interface and the e-mail address requested for transaction confirmations in order to have these available again when you use Klarna/Sofort again. You can prevent the installation of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of Klarna/Sofort to their full extent. 

Information on how Klarna works can be found at the following link: https://www.klarna.com/sofort/ 

You can find detailed information on data protection at Klarna/Sofort under the following link: 

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy 

The purpose of the processing of the data is the handling of the payment process and the execution of the contract. 

The legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO. The data will only be stored by us as long as this is necessary for the implementation and processing of your order and compliance with the statutory retention periods. 

The data processed by us within the framework of the contract processing may be transmitted to the commissioned transport company, insofar as this is necessary for the fulfilment of the contract. Your payment data may be transmitted to the commissioned credit institution, insofar as this is necessary for the processing of the payment. In addition, the data is processed for us by our server host as part of order processing. 

​

Furthermore, we have to take into account the statutory retention obligations. Accordingly, we are obliged to keep certain documents (in particular § 257 HGB, § 147 AO, §§ 14, 14b UstG) for up to 10 years. As soon as the contract has been fully processed, the contract data is therefore blocked and deleted after expiry of the deadline. The legal basis for this is Art. 6 para. 1 lit. c) DSGVO. 

The provision of personal data is necessary for the conclusion of a contract. Failure to provide the data would result in the contract not being concluded. 

​

11)  Payment - Giropay 

We offer you the possibility to place your order via the service Giropay, which is operated by giropay GmbH, An der Welle 4, 60322 Frankfurt/Main ("Giropay GmbH"). 

After confirming your data on our website, you will be asked to process the payment via Giropay. After clicking on the link, you will be redirected to the Giropay website where you can select your bank. You will then be redirected to the website of your bank and can carry out the transaction there. We do not process any of your data during this payment process. 

​

The purpose of the processing of the data by us is the handling of the payment process and the execution of the contract. 

​

The legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO. The data will only be stored by us as long as this is necessary for the implementation and processing of your order and compliance with the statutory retention periods. 

The provision of personal data is necessary for the conclusion of a contract. Failure to provide the data would result in the contract not being concluded.