Data Protection Policy (Website)

Disclaimer The English version is a translation of the original in German for information purposes only. In case of a discrepancy, the German original will prevail.

Version 2.0 – June 2023

We as Lumetry Diagnostics GmbH (hereinafter “we”, “us”) and operator of the website www.lumetry-diagnostics.com take the protection of your data seriously.

With the following data protection policy we inform you about the type, scope, purpose, duration and legal basis of the processing of your personal data on our website www.lumetry-diagnostics.com (hereinafter the “website”). Please note that we may update this data protection policy as necessary.

Our data protection policy is structured as follows:

  1. Information about us as controllers
  2. Information about our data protection officer
  3. Your rights (data subject rights)
  4. Processing of personal data when using our website

1. Controller

In the following we inform you about the collection of personal data when using our app. Personal data is all data that can be related to you personally, e.g. B. name, address, e-mail addresses, user behavior.

Responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Lumetry Diagnostics GmbH
Nikolaiplatz 48020 Graz
Email: contact@lumetry.at

2. Data Protection Officer

Lumetry Diagnostics GmbH has appointed a certified data protection officer.

Name: Andreas Nagler- Ruhry
Email: datenschutz@lumetry.at

3. Your Rights (data subject rights)

You have the following rights towards us with regard to your personal data:

Right to access: You can request confirmation at any time as to whether data relating to you is being processed, information about the scope, origin, recipients of the stored data and the purpose for which it was stored, as well as copies of the data. (Art 15 GDPR)

Right to rectification: You can request that incorrect or incomplete personal data concerning you be corrected or completed. (Art 16 GDPR)

Right to erasure: You can request immediate deletion of your personal data at any time. Please note that legal retention periods may prevent deletion. (Art 17 GDPR)

Right to restrict processing: You can request that the processing of your personal data be restricted if one of the following conditions is met (Art 18 GDPR):

  • You contest the accuracy of the personal data (the restriction is for a period that enables us to verify the accuracy of the personal data).
  • The processing is unlawful and you refuse to delete your personal data.
  • The data is no longer required for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • You have lodged an objection to the processing (see right of objection) and the weighing of interests within the framework of the objection procedure has not yet been completed.

Right to data portability: You can receive the personal data that you have provided to us in a structured, common and machine-readable format, provided that the processing is carried out using automated procedures and is based on consent or a contract. (Art 20 GDPR)

Right to withdraw consent: You can withdraw your consent to the processing of personal data at any time. Please note that with the revocation, the use of the affected services is no longer possible. This does not affect the lawfulness of the processing of your personal data up until the point at which the revocation was received. (Art 7 GDPR)

Right to object: You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Art 6 Para 1 lit f GDPR (data processing on the basis of a legitimate interest), to object. (Art 21 GDPR)

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process personal data in order to operate direct advertising, you have the right to object to this at any time.

Right to complain: If you believe that the processing of your personal data violates data protection regulations, you can lodge a complaint with the supervisory authority responsible for Lumetry Diagnostics GmbH. (Art 77 GDPR)

Austrian Data Protection Authority
Wickenburggasse 8-10
1080 Vienna
Email: dsb@dsb.gv.at

4. Processing of personal data when using our website

4.1 Contact

When you contact us via the contact form or email, your name and email address and any other personal data you have provided will be stored by us. Providing the data is necessary for processing and answering your request.

The legal basis for this processing relates to our overriding interest in accordance with Art 6 Para 1 lit f GDPR and, depending on the content, on pre-contractual measures in accordance with Art 6 Para 1 lit b GDPR. We store this data for as long as it is necessary to be able to respond to your request, but no longer than six months after the last contact.

We would like to point out that data transmission when communicating via the contact form or e-mail can have security gaps. A complete protection of the data against access by third parties is not possible. Please take this into account, in particular before you send us health data by e-mail.