Controller & contact
The controller is MEDLINQ Softwaresysteme GmbH, Wentorfer Straße 62, 21029 Hamburg, Germany. Phone: +49 40 416266-0. Email: info@medlinq.com. Contact our data protection officer at datenschutz@medlinq.com.
Legal bases & retention
We process personal data in accordance with the GDPR and the German Federal Data Protection Act (BDSG): on the basis of consent (Article 6(1)(a) GDPR), to enter into or perform a contract (point (b)), to comply with legal obligations (point (c)), or for legitimate interests (point (f)) unless your rights override those interests. Data is retained only for as long as the purpose and contractual or legal obligations require, including commercial and tax retention obligations.
Recipients
Service providers, for example for IT maintenance and support, process data under instructions and contractually agreed safeguards. Where necessary, data may also be provided to delivery services, banks, tax advisers, auditors and tax authorities.
Your rights
Subject to statutory conditions, you have rights of access (Article 15 GDPR, section 34 BDSG), rectification (Article 16), erasure (Article 17, section 35 BDSG), restriction (Article 18) and data portability (Article 20). You may withdraw consent at any time for the future (Article 7(3)); this does not affect processing before withdrawal. You may complain to a data protection supervisory authority (Article 77). To fulfil and document your rights, we process the necessary data under Article 6(1)(c) in conjunction with Articles 15–22 GDPR and section 34(2) BDSG.
Right to object
You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR (Article 21(1)). You may object to direct marketing at any time (Article 21(2) and (3)).
Website & server logs
When you visit, technically necessary information such as browser type and version, operating system, requested page, referrer, IP address, date, time and HTTP status may be processed in server logs. This serves the technical provision and security of the website (Article 6(1)(f) GDPR). MEDLINQ hosts the website itself.
Language selection & local files
The website reads your preferred browser language. Your selected language is stored under the medlinq-language key in your browser’s local storage and can be removed by clearing site data. No location data is requested and no external geolocation services are used. Storage supports your chosen language display. Fonts, images and icons are served locally. The website contains no contact forms, newsletter registration, tracking tools or embedded social media content.
Contact by email or phone
When you contact us, we process your information to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR for contractual enquiries, otherwise our legitimate interest in responding under point (f). Email and phone links open the applications you use.
Customers & orders
Contact details are processed to enter into and perform contracts (Article 6(1)(b) GDPR). Customer and prospect data may also be processed to improve our services and provide targeted information about MEDLINQ offers (point (f)). Other processing may be based on consent (point (a)) or legal obligations (point (c)). For orders by post, phone, email or fax, we use the supplied data to perform the contract; necessary delivery data is shared with delivery providers.
Applications
Application data is processed solely to handle your application and possible employment (section 26(1), first sentence, BDSG). Access is limited to responsible staff bound by confidentiality. Following rejection, data is generally retained for up to six months, unless legal obligations, necessary evidence preservation or your explicit consent permit longer storage. Consent to longer storage may be withdrawn at any time for the future.
LinkedIn & external links
Following external links takes you away from our website. On LinkedIn, LinkedIn Ireland Unlimited Company processes data under its privacy policy. LinkedIn and MEDLINQ may be joint controllers for page statistics; analysis serves our legitimate interest in improving our company page (Article 6(1)(f) GDPR). We process messages sent through LinkedIn to respond to enquiries.