Privacy Policy (United States)

‍
Effective Date: August 21, 2026
Last Updated: August 21, 2026

‍
STORZ MEDICAL America, Inc. (“STORZ MEDICAL America,” “we,” “us,” or “our”) respects
your privacy. This Privacy Policy explains how we collect, use, and disclose information
when you visit https://www.storzmedicalamerica.com/ (the “Website”), submit information
through the Website’s contact form, or interact with articles, studies, reports, findings, blog
posts, and other materials published on the Website.

‍
The Website is primarily an informational and educational resource concerning STORZ
MEDICAL America’s products, technologies, research, and related subjects. As currently
configured, the Website does not ober online purchasing, accept file uploads, or provide
lead-generation, employment-application, or similar submission forms. In addition to
public blog interactions, the Website provides a general contact form through which
visitors may submit contact information and a message. Except for information submitted
through that form and information needed to support public comments, posts, likes,
reactions, and related blog interactions, the Website is not designed to collect information
directly from visitors.

‍
1. Information We Collect

‍
A. Information You Choose to Submit

‍
If you use the Website’s contact form, we may collect information you choose to provide,
including:
‍
• Your name;
• Your email address, telephone number, mailing address, organization, or other
contact information, to the extent requested or provided;
• The subject and contents of your message, including any questions, thoughts,
comments, criticisms, notes, or other communications; and
• Any other information you voluntarily include in your submission.
‍
If you comment on, post in response to, like, or otherwise interact with material on the
Website, we may collect information associated with that interaction, including:
‍
• A name, username, or display name;
• An email address, if requested by the commenting platform;

• The contents of your comment or post;
• Likes, reactions, ratings, or similar interactions;
• The date and time of the interaction; and
• Information you voluntarily include in a comment, post, username, or other publicly
submitted content.
‍
You are not required to submit a contact form, comment, or otherwise interact with
Website content.
‍
B. Information Collected Automatically
‍
When you access or use the Website, our systems and service providers may automatically
collect limited technical and usage information, such as:
• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• Pages or materials viewed;
• Referring website or page;
• Date and time of access;
• Approximate location derived from an Internet Protocol address;
• Interactions with Website features; and
• Cookie or similar technology identifiers.

We use this information to operate, secure, maintain, and understand the general use of
the Website.
‍
2. Contact-Form Submissions, Public Comments, and Other Interactions
‍
Information submitted through the Website’s general contact form is not intended for
public display. We may use your contact information and the contents of your message to
review and respond to your communication and to maintain related records.
Comments, posts, display names, likes, reactions, and other information submitted for
public display are public information. They may be viewed, copied, indexed by search

engines, quoted, or redistributed by other persons. STORZ MEDICAL America cannot
control how third parties use information that you make public.
‍
Do not include confidential information, personal medical information, patient
information, treatment records, or other sensitive personal information in a contact-form
submission, public comment, or post. The Website’s contact form and commenting
function are not secure patient-communication channels and are not intended for
requesting medical advice, obtaining medical care, or transmitting protected health
information. The commenting function is also not intended for reporting adverse events.
We may review, moderate, restrict, or remove comments or other interactions for purposes
such as enforcing Website rules, preventing spam or abuse, protecting users, and
maintaining the security and integrity of the Website. Moderation may be performed using
automated tools or by service providers acting on our behalf.
‍
3. Cookies and Similar Technologies
‍
The Website may use cookies, web beacons, log files, and similar technologies. Cookies
are small data files stored on a visitor’s browser or device.
The Website may use:

• Essential cookies, which support Website operation, security, navigation, contact-
form and comment functionality, and user preferences; and

• Analytics cookies, which help us understand matters such as the number of
visitors, pages viewed, referral sources, and the general use and performance of
Website content.
‍
Our service providers may process technical and usage information in connection with
hosting, security, content management, contact-form administration, comment
moderation, spam prevention, or analytics services.
‍
Most browsers allow users to reject, restrict, or delete cookies through browser settings.
Restricting essential cookies may abect Website operation or prevent certain features,
including contact-form, comment, or reaction functions, from working properly.

4. How We Use Information
‍
We may use information collected through the Website to:
• Provide, operate, maintain, and secure the Website;
• Review and respond to contact-form submissions;

• Communicate with you concerning a question, comment, criticism, note, or other
message you submit;
• Display and administer comments, posts, likes, reactions, and other interactions;
• Moderate content and detect spam, fraud, abuse, security threats, or other
prohibited activity;
• Understand how visitors use the Website and its content;
• Improve Website functionality, accessibility, performance, and published materials;
• Diagnose technical problems;
• Enforce applicable Website terms and policies;
• Protect the rights, safety, and property of STORZ MEDICAL America, Website
visitors, and others;
• Establish, exercise, or defend legal claims; and
• Comply with applicable law, legal process, or governmental requests.

We may also use information in aggregated or deidentified form when it does not
reasonably identify a particular person.
‍
5. How We Disclose Information
‍
We may disclose information collected through the Website in the following
circumstances:
‍
A. Publicly Submitted Information
‍
Information submitted for public display – including comments, posts, display names,
likes, and reactions – will be made available to other Website visitors and potentially to the
public generally. Information submitted through the Website’s general contact form is not
intended for public display.
‍
B. Service Providers
‍
We may disclose information to vendors and service providers that support Website
hosting, content management, security, analytics, contact-form processing,
communications, comment administration, spam prevention, technical maintenance, or
similar operations. These providers may process information in connection with the
services they provide to us.
‍
C. Legal and Protective Purposes

We may disclose information when we reasonably believe disclosure is necessary to:
‍
• Comply with applicable law, regulation, legal process, subpoena, court order, or
governmental request;
• Investigate or prevent suspected fraud, abuse, security incidents, or unlawful
activity;
• Enforce our rights, agreements, or policies; or
• Protect the rights, property, safety, or security of STORZ MEDICAL America, Website
visitors, or others.
‍
D. Corporate Transactions
‍
Information may be disclosed or transferred in connection with an actual or proposed
merger, acquisition, reorganization, financing, sale of assets, change of control, or similar
corporate transaction, subject to applicable law.
‍
6. Retention of Information
‍
We retain information for as long as reasonably necessary for the purposes described in
this Privacy Policy, including responding to contact-form submissions, operating the
Website, displaying and moderating comments, maintaining security, resolving disputes,
enforcing agreements, and complying with legal obligations.
‍
Contact-form submissions and related communications may be retained for as long as
reasonably necessary to respond to the submission, maintain appropriate business
records, address follow-up matters, protect our rights, and satisfy applicable legal
obligations.
‍
Public comments and associated display information may remain available for as long as
the relevant article, post, or Website remains available. If a comment is removed, limited
information may remain temporarily in backups, security records, moderation records, or
system logs. Copies made or distributed by third parties may remain available after
information is removed from the Website.
‍
Retention periods may vary based on the nature of the information, the purpose for which it
was collected, operational requirements, and applicable legal obligations.
‍
7. Information Security
‍
We use reasonable administrative, technical, and organizational safeguards designed to
protect information under our control against unauthorized access, use, alteration, or

disclosure. No Internet transmission, Website, or electronic storage system is completely
secure, and we cannot guarantee absolute security.
Information submitted for public display should not be considered private or confidential.
‍
8. Your Choices
‍
You may choose not to submit a contact form, comment, post, like, reaction, or other
Website interaction.
‍
You may manage cookies using your browser settings. Depending on your browser and
device, you may be able to block, restrict, or delete cookies.
‍
You may request the correction or deletion of personal information submitted through the
contact form, or the correction or removal of a comment that you submitted, by contacting
us using the information below. We may request information reasonably necessary to
locate the information and verify that you submitted it. Removal of a public comment from
the Website does not necessarily remove copies previously indexed, copied, or distributed
by third parties.
‍
9. Children’s Privacy
‍
The Website is intended for a general adult and professional audience and is not directed
to children under 13 years of age. We do not knowingly collect personal information online
from children under 13.
‍
If we learn that we have collected personal information online from a child under 13
without legally subicient authorization, we will take reasonable steps to delete it. A parent
or legal guardian who believes that a child under 13 has submitted personal information
through the Website may contact us using the information below.
‍
10. Third-Party Websites and Content

The Website may link to third-party websites, publications, research materials, social-
media services, or other resources. Third parties may collect information under their own

privacy policies when you visit or interact with their services.
‍
STORZ MEDICAL America does not control and is not responsible for the privacy practices
of third parties. You should review the applicable third party’s privacy policy before
providing information or using its services.
‍
11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to the Website, our
information practices, or applicable law. We will post the revised Privacy Policy on the
Website and update the “Last Updated” date above.

If we make material changes abecting how previously collected information is used or
disclosed, we will provide any additional notice or obtain any consent required by
applicable law.

12. Contact Us
‍
Questions or concerns about this Privacy Policy or information collected through the
Website may be directed to:
‍
STORZ MEDICAL America, Inc.
Attn: Privacy
1000 Cobb Place Blvd NW
Building 400, Suite 450
Kennesaw, Georgia 30144
United States
Email: info@storzmedicalamerica.com

‍
‍

‍

‍

‍

‍

Privacy Policy (EU)
‍
Obligations to provide information in accordance with Article 12 et seq. EU-GDPR

‍
I. Scope of data protection notice
This data protection notice applies to the following website of STORZ MEDICAL America:
• storzmedicalamerica.com

‍
II. Name and contact details of the data controller
Your contact, as the controller within the meaning of the EU General Data Protection
Regulation (EU-GDPR) and other national data protection laws of EU Member States and
other provisions of data protection law:

‍
STORZ MEDICAL AG
Lohstampfestrasse 8
8274 Tägerwilen
Switzerland
info@storzmedicalamerica.com
(“STORZ MEDICAL America,” and “STORZ MEDICAL AG,” are hereinafter referred to,
collectively, as “we,”“us,” or “our”)
III. Contact details of the data protection obicer
Our data protection obicer can be contacted as follows:

‍
STORZ MEDICAL AG
Lohstampfestrasse 8
8274 Tägerwilen
Switzerland
info@storzmedicalamerica.com
IV. General provisions on data processing by our websites

‍
a. Scope
In principle, we process your personal data only to the extent that this is required for us to
provide a properly functioning website and our content and services.

‍
b. Legal basis

To the extent that we obtain consent from you to process your personal data, the legal
basis for processing is Art. 6(1)(a) EU-GDPR.
If your personal data is processed for performance of a contract with you or in the course of
preparing a contractual relationship, the legal basis for processing is Art. 6(1)(b) EU-GDPR.
To the extent that processing of personal data is required to fulfil our legal obligations, the
legal basis for processing is Art. 6(1)(c) EU-GDPR.
If your personal data are processed to safeguard our legitimate interests or those of a third
party, whereby these interests do not override your interests, fundamental rights and
freedoms, the legal basis for processing is Art. 6(1)(f) EU-GDPR.

‍
c. Retention period
Your personal data will be erased as soon as the purpose of retention no longer exists or, if
you have the right of withdrawal, you withdraw your consent. Data may also be stored if this
has been stipulated by the EU or national legislator in EU regulations, laws or other
provisions to which we are subject. In this case, however, your personal data will be
rendered inaccessible.

‍
d. External links
If we provide links to external websites, this data protection notice does not apply to
processing of personal data by the controller of the linked website. We therefore
recommend that you read the data protection information on the external website that you
have visited. To the extent that this linking requires a legal basis for the resulting processing
of your personal data, you are deemed to give your consent under Art. 6(1)(a) EU-GDPR by
clicking on the link.
Normally, the following personal data are processed as a result of your clicking on the link
(hyperlink):
• IP address
• screen resolution
• browser used
• bandwidth
• language settings

‍
V. Data processing on all of our websites

‍
1. General principles

a. Provision of the website and creation of logfiles
‍
(1) Description and scope
As part of providing our website, we process your personal data to enable the smooth
delivery of our website on your PC or mobile device. To do this, some of your personal data
must be stored for the duration of a session.
We also store your personal data in logfiles in order to ensure the functionality of our
website and the security of our IT systems. Your personal data is not otherwise processed
in logfiles.
The following personal data are processed for the provision of the website and to create
logfiles:
• IP address
• access date
• access time
• previously visited website
• browser used
• operating system used
‍
(2) Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is to provide the website, ensure functionality of the
website, and ensure security of the IT systems used for this.
The purpose also includes our legitimate interest.
‍
(4) Retention period
Your personal data are stored in logfiles for 24 hours. Your personal data are otherwise
stored only for the duration of the session as part of the provision of our website.
‍
(5) Option to object to processing and request destruction of data
The processing of your personal data and storage of your personal data in logfiles is
necessary for the provision of the website, to ensure the website functionality and to
safeguard the IT systems used. Therefore, it is not possible to object to processing.
‍

b. Essential cookies
‍
(1) Description and scope
We process your personal data with the use of essential cookies because many functions
and services of our website that make it easier or even possible in the first place to use our
website do not function properly without cookies (known as essential cookies).
We store some of your personal data using these essential cookies, but they are only used
for these functions and services. Your personal data is not otherwise processed.
A list of the essential cookies that we use, their purposes, retention period and other
information can be found at the end of this data protection notice.
The use of essential cookies involves processing of the following personal data:
• IP address
• language settings of your browser
• browser used
‍
(2) Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is the provision of the functions and services of our
website.
The purpose also includes our legitimate interest.
‍
(4) Retention period
Generally for the duration of the session in question, unless stated otherwise in the
detailed information in the list of essential cookies that we use.
‍
(5) Option to object to processing and request destruction of data
Essential cookies are stored on your PC or mobile device and transmitted from there to our
website. Therefore, you have full control over the use of essential cookies.
You can disable or limit the transmission of cookies by changing your browser settings.
Cookies that are already stored may be deleted at any time. This can also take place
automatically. If cookies for our website are disabled, you may not be able to make full use
of all of the website’s functions.
‍

c. Non-essential cookies
To the extent that non-essential cookies are used as part of the functions and services of
our website, you will find a list of these cookies, their purposes, retention period and other
information at the end of this data protection notice.
‍
d. Vimeo videos
‍
(1) Description and scope
We embed Vimeo videos on our website to display video content. This enables us to
display content that we want to present in an engaging and consistent way on our website,
regardless of the user’s end-device. Vimeo is a service of Vimeo.com, Inc., 555 West 18th
Street, New York, New York 10011, USA.
The embedding of Vimeo videos involves processing of the following personal data:
• IP address
• browser used
• screen resolution.
Other personal data may be processed by Vimeo when a video is played. Information about
this can be found at:
https://vimeo.com/privacy
‍
(2) Legal basis
Consent, Art. 6(1)(a) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is the embedding of video content in an engaging and
consistent way that is independent of the end-device.
‍
(4) Retention period
We process your personal data only until the end of your visit to the website (extended data
protection mode). We do not have any influence on the erasure of your personal data by
Vimeo. Further information can be found at:
https://vimeo.com/privacy
‍
(5) Option to object to processing and request destruction of data

You have the option to withdraw your consent to processing at any time. You can do this in
particular by ending use and/or reloading the website. You can also disable the use of
cookies via the settings.
‍
e. OpenStreetMap
‍
(1) Description and scope
We embed OpenStreetMap on our website to display map content. This enables us to
display content that we want to present in an engaging and consistent way on our website,
regardless of the user’s end-device. OpenStreetMap is a service of Openstreetmap
Foundation, Cowley Road, Cambridge, CB4 0WS, United Kingdom,
The embedding of OpenStreetMap involves processing of the following personal data:
• IP address
• screen resolution
• language settings
‍
(2) Legal basis
Consent, Art. 6(1)(a) EU-GDPR.
‍
(3) Purpose
The purpose of processing is to display map content.
‍
(4) Retention period
We process your personal data only until the end of your visit to the website (extended data
protection mode). Further information can be found at:
https://sosm.ch/de/
‍
(5) Option to object to processing and request destruction of data
You have the option to withdraw your consent to processing at any time. You can do this in
particular by ending use and/or reloading the website.
‍
2. Communication
‍
a. Contact form and email contact
‍
(1) Description and scope
The contact form and email contact involve processing of the following personal data:

• last name
• first name
• email address
• contents
• other stated contact details such as practice/institution, address and/or telephone
number.
‍
(2) Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is to handle your query.
‍
(4) Retention period
Your personal data are stored until the purpose no longer exists. This is generally the case
once your query had been handled, unless any longer retention periods apply.
‍
(5) Option to object to processing and request destruction of data
You have the option to object at any time to future processing of your personal data within
the scope of making contact. If you do this, however, we cannot continue to handle your
query. In this case, all personal data that are stored in the course of making contact are
erased, unless statutory retention periods prevent them from being erased. Your personal
data are then rendered inaccessible until the end of the statutory retention periods.
‍
3. Marketing and E-commerce
‍
a. Direct marketing
‍
(1) Description and scope
We process your personal data as part of direct marketing campaigns, if we are permitted
to advertise to you without your consent within the narrow scope of application of special
laws. Furthermore, we process your personal data if you have consented to contact for
advertising purposes.
Direct marketing involves processing of the following personal data:
• form of address
• first name

• last name
• postal address
• email address
• telephone number
‍
(2) Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR (post).
Consent, Art. 6(1)(a) EU-GDPR (post, email, telephone).
‍
(3) Purpose
The purpose of data processing is to carry out direct marketing campaigns and to send
obers and additional information.
‍
(4) Retention period
Your personal data is stored until you object to processing. Information about this can be
found in the advertising material in question.
‍
(5) Option to object to processing and request destruction of data
You can object at any time to future processing of your personal data as part of direct
marketing campaigns.
‍
b. Web analysis by Matomo (formerly PIWIK)
‍
(1) Description and scope
We use the open-source software tool Matomo (formerly PIWIK) to analyse your web
surfing behaviour within the scope of web analysis. When individual pages of our website
are accessed, the following data are stored:
• two bytes of the IP address of the accessing system
• the web page being accessed
• the website from which you were sent to the accessed web page (referrer)
• the sub-pages that were accessed from the accessed website
• duration of stay on the website
• frequency of accessing the website

The software that performs analysis runs exclusively on servers of our website. Users’
personal data are only stored there; data is not transmitted to third parties.
‍
(2) Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is to analyse your web surfing behaviour. The analysis of
the gathered data enables us to compile information about the use of individual

components of our website. This helps us to constantly improve our website and its user-
friendliness.

(4) Retention period
The data are erased as soon as they are no longer needed for our recording purposes. In our
case, this is 24 months after visiting the website.
‍
(5) Option to object to processing and request destruction of data
You can object at any time to future processing of your personal data as part of web
analysis.
You can disable or limit the storage of cookies by changing your web browser settings.
Previously saved cookies may be deleted at any time. This can also take place
automatically. If cookies for our website are disabled, it is possible that not all of the
website’s functions can be used fully any more.
Other information about processing of your personal data by Matomo is available at:
https://matomo.org/docs/privacy/
‍
c. Google Tag Manager
‍
(1) Description and scope
We use Google Tag Manager to simplify the management and provision of tracking codes
(known as tags) on our website. It enables us to manage tracking and analysis tags. It also
improves our website performance and ensures a better overview of our implementation of
marketing tags. Google Tag Manager is a service of Google Ireland Limited, Gordon House,
Barrow Street, Dublin 4 Ireland.
The use of Google Tag Manager involves processing of the following personal data:
• IP address

• technical connection data such as date and time
• device data.
‍
(2) Legal basis
Consent, Section 25, para. 1 TDDDG (German Telecommunications and Digital Services
Data Protection Act in conjunction with Art. 6(1)(a) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is to simplify the management and provision of tracking
codes on our website and to manage tracking and analysis tags.
‍
(4) Retention period
We process your personal data only until the end of your visit to the website (extended data
protection mode). We do not have any influence on the erasure of your personal data by
Google. Further information can be found at:
https://policies.google.com/privacy?hl=en&gl=en#inforetaining
‍
(5) Option to object to processing and request destruction of data
You have the option to withdraw your consent to processing at any time. You can do this in
particular by ending use and/or reloading the website. You can also disable the use of
cookies via the settings.
‍
d. Google Ads and Google Ads Remarketing
‍
(1) Description and scope
We place Google Ads cookies on our website, which enable us to monitor your behaviour
on our website using a cookie ID, to display personalised advertising to you and to measure
the ebectiveness of advertising campaigns run by us. Google Ads Remarketing allows us to
advertise to you again on third-party websites after visiting our website.
The cookie ID enables us to trace that you reached our website after clicking on a Google
Ads web advertisement. We also recognise you as a visitor to our website. Using the data
collected in this way, Google provides us with a purely statistical analysis of our advertising
activities. Google Ads is a service of Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4 Ireland.
The use of the Google Ads cookie ID involves processing of the following personal data:
• products that were placed in the basket

• which ads were clicked on
• actions that were carried out after clicking on an ad
• visits to our own website.
‍
(2) Legal basis
Consent, Art. 6(1)(a) EU-GDPR.
‍
(3) Purpose
The purpose is to make it possible to statistically analyse the Google Ads commissioned by
us.
‍
(4) Retention period
We process your personal data only until the end of your visit to the website (extended data
protection mode). We do not have any influence on the erasure of your personal data by
Google. Further information can be found at:
https://policies.google.com/privacy?hl=en&gl=en#inforetaining
‍
(5) Option to object to processing and request destruction of data
You have the option to withdraw your consent to processing at any time. You can do this in
particular by ending use and/or reloading the website. You can also disable the use of
cookies via the settings.
‍
e. Google Conversions Tracking
‍
(1) Description and scope
Within the scope of web analysis, we use Google Enhanced Conversions to analyse your
web surfing behaviour on our website in more detail, to ober you personalised advertising
using the information collected in this way via Google Ads, and to measure the
ebectiveness of our Google advertising activities. Google Enhanced Tracking is a service of
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland.
Google Enhanced Conversions involves processing of the following personal data:
• IP address
• browser used
• referrer website
• website visits

• product views
• form entries
• date and time of access.
‍
(2) Legal basis
Consent, Art. 6(1)(a) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is to analyse your web surfing behaviour on our website
and to measure and optimise our Google advertising campaigns.
‍
(4) Retention period
We process your personal data only until the end of your visit to the website (extended data
protection mode). We do not have any influence on the erasure of your personal data by
Google. Further information can be found at:
https://policies.google.com/privacy?hl=en&gl=en#inforetaining
‍
(5) Option to object to processing and request destruction of data
You have the option to withdraw your consent to processing at any time. You can do this in
particular by ending use and/or reloading the website. You can also disable the use of
cookies via the settings.
‍
f. Meta Pixel and Conversion API
‍
(1) Description and scope
Within the scope of web analysis, we use Meta Pixel and Conversion API to analyse your
web surfing behaviour on our website, to ober you personalised advertising using the
information collected in this way via Facebook and Instagram, and to measure the
ebectiveness of our Meta advertisements. Meta Pixel and Conversion API are services of
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland.
We process the following personal data within the scope of using Meta Pixel and
Conversion API:
• IP address
• browser used

• referrer website
• website visits
• product views and completed purchases
• form entries
• date and time of access
• mouse and keyboard behaviour.
‍
(2) Legal basis
Consent, Art. 6(1)(a) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is to analyse your web surfing behaviour on our website
and to measure and optimise our Meta advertising campaigns.
‍
(4) Retention period
We process your personal data only until the end of your visit to the website. We do not
have any influence on the erasure of your personal data by Meta Platforms Ireland Limited.
Further information can be found at:
https://www.facebook.com/about/privacy
‍
(5) Option to object to processing and request destruction of data
You have the option to withdraw your consent to processing at any time. You can do this in
particular by ending use and/or reloading the website. You can also disable the use of
cookies via the settings.
‍
4. Data protection and the law
‍
a. Exercising your data subject rights under Article 12 et seq. EU-GDPR
‍
(1) Description and scope
We process your personal data within the scope of data subject rights. In this regard, we
process the contact details you provided only for the purpose of handling and answering
your message and for the onward documentation of lawful processing within the scope of
our duty of accountability.
The handling of data subject rights involves processing of the following personal data:

• first name
• last name
• postal address
• email address
• telephone book.
‍
(2) Legal basis
Legal obligation, Art. 6(1)(c) in conjunction with Art. 12 et seq. EU-GDPR.
Legitimate interest for onward documentation, Art. 6(1)(f) EU-GDPR.
‍
(3) Purpose
Lawful processing of your data subject rights under data protection law.
‍
(4) Retention period
3 years after completion of handling the process in question.
‍
(5) Option to object to processing and request destruction of data
You have the option to object at any time to future processing of your personal data within
the scope of handling your data subject rights. If you do this, however, we cannot continue
to handle your data subject rights under data protection law.
It is strictly necessary to document the lawful processing of any handling of your data
subject rights. It is therefore not possible to withdraw consent to this.
‍
b. Defence and enforcement of rights
‍
(1) Description and scope
We process your personal data whenever you exercise legal claims against us or we
exercise claims and rights against you.
‍
(2) Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
(3) Purpose
The purpose of data processing is to defend unjustified claims and to legally enforce and
exercise claims and rights.

This also includes our legitimate interest.
‍
(4) Retention period
Your personal data are stored until the purpose no longer exists. This is generally the time
at which a decision on a matter becomes final and absolute.
‍
(5) Option to object to processing and request destruction of data
The processing of your personal data as part of defence and enforcement of rights is
strictly necessary for the defence and enforcement of rights. It is therefore not possible to
withdraw consent to this.
‍
1. Customer account registration
‍
a. Description and scope
‍
We ober you the option on our website to create a customer account once registration is
complete. This makes it easier for you to use the services that we ober.
Registration and opening a customer account involves the processing of the following
personal data:
• last name
• first name
• email address
• business address (practice/institution)
• telephone number
‍
b. Legal basis
Performance of a contract, Art. 6(1)(b) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to provide your customer account and the provision of
any other additional content and services as the case may be.
‍
d. Retention period
Your personal data will be stored for the duration of provision of your customer account.
‍
e. Option to object to processing and request destruction of data

You have the option to delete your customer account at any time. In this case, your
personal data are erased, unless statutory retention periods preclude deletion.
‍
2. Newsletter
‍
a. Description and scope
‍
The following personal data are processed in order to deliver our newsletter:
• first name
• last name
• email address.
‍
b. Legal basis
Consent, Art. 6(1)(a) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to deliver our newsletter.
‍
d. Retention period
The duration for which your personal data are stored depends on the continued existence
of your consent.
‍
e. Option to object to processing and request destruction of data
You have the option to withdraw your consent to processing at any time. You can do this by
unsubscribing from our newsletter. In this case, your personal data will be erased, which
means we can no longer include you in the delivery of our newsletter.
‍
VII. Further data processing on the website »storzmedicalamerica.com«
1. Comment and blog functionality
a. Description and scope
We process your personal data to provide the comment and blog functionality. In order to
defend against any third-party liability claims, your personal data may also be processed if
unlawful comments are posted.
The embedding of the comment and blog functionality involves the processing of the
following personal data:
• name

• content of the comment
• email address.
‍
b. Legal basis
Consent, Art. 6(1)(a) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to provide the comment and blog function and to defend
against third-party liability claims in the event that unlawful comments are posted.
‍
d. Retention period
The duration for which your personal data are stored depends on the continued existence
of your consent.
‍
e. Option to withdraw consent and request destruction of data
You have the option to withdraw your consent to processing at any time. In this case, your
personal data are erased, unless statutory retention periods preclude deletion. The
comment and blog functionality then ceases to be available to you.

VIII. Other data processing alongside our website
1. Facebook Page
‍
a. Description and scope
We process your personal data as part of running our Facebook Page, in order to contact
and interact with users of and visitors to the social network »Facebook«. We also
occasionally publish information about our company and associated obers.
If you contact us directly through our Facebook Page (e.g. through Messenger), the data you
have shared will only be processed for the purpose of recording and answering your
customer/interested party query.
We are also able to generate statistics about visits to our Facebook Page. This information
is collected by Meta (»Facebook Insights«) and enables us to design the marketing of our
activities in a more ebective and targeted way.
With regard to Facebook Insights data, we and Meta Platforms Ireland Limited, 4 Grand
Canal Square, Grand Canal Harbour, Dublin 2, Ireland are the joint controllers for the

purpose of data processing. To this end, we have concluded an agreement with Meta
Platforms Ireland Limited regarding who handles which obligations under the EU-GDPR.
The essential content of this agreement is available to view at:
https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/le
gal/terms/page_controller_addendum
Details of what data Meta uses for analytics in connection with our Facebook Page and
what information Meta provides for the purpose of data processing in connection with the
Facebook Insights functionality can be found here:
https://de-de.facebook.com/legal/terms/information_about_page_insights_data
Other information about processing of your personal data by Meta Platforms Ireland
Limited is available at:

https://www.facebook.com/about/privacy and https://de-
de.facebook.com/legal/terms/information_about_page_insights_data

b. Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to analyse your visitor behaviour on our Facebook Page
and to design our Facebook Page according to your interests and to handle enquiries.
‍
d. Retention period
Information concerning how long your personal data are stored for by Meta Platforms
Ireland Limited is available at:
https://www.facebook.com/about/privacy
‍
e. Option to object to processing and request destruction of data
If you do not wish for your personal data to be collected as part of the running of our
Facebook Page, you have the option at any time to object to future processing of your
personal data as part of the running of our Facebook Page. In this case, we will forward your
objection request to Meta Platforms Ireland Limited.
‍
2. Instagram channel
‍
a. Description and scope

We process your personal data as part of running our Instagram channel, in order to
contact and interact with users of and visitors to the social network »Instagram«. We post
information about our company on this channel.
If you contact us directly through our Instagram channel (e.g. Via a direct message), the
data you have shared will only be processed for the purpose of recording and answering
your customer/interested party query.
We are also able to generate statistics about visits to our Instagram channel. This
information is collected by Meta (»Instagram Insights«) and enables us to design the
marketing of our activities in a more ebective and targeted way.
With regard to Instagram Insights data, we and Meta Platforms Ireland Limited, 4 Grand
Canal Square, Grand Canal Harbour, Dublin 2, Ireland are the joint controllers for the
purpose of data processing. To this end, we have concluded an agreement with Meta
Platforms Ireland Limited regarding who handles which obligations under the EU-GDPR.
The essential content of this agreement is available to view at:
https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/le
gal/terms/page_controller_addendum
Details of what data Meta uses for analytics in connection with our Instagram channel and
what information Meta provides for the purpose of data processing in connection with the
Instagram Insights functionality can be found here:
https://de-de.facebook.com/legal/terms/information_about_page_insights_data
Other information about processing of your personal data by Meta Platforms Ireland
Limited is available at:

https://privacycenter.instagram.com/policy/ and https://de-
de.facebook.com/legal/terms/information_about_page_insights_data

b. Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to analyse the success of our Instagram channel and to
design our Instagram channel according to your interests and to handle enquiries.
‍
d. Retention period

Information concerning how long your personal data are stored for by Meta Platforms
Ireland Limited is available at:
https://privacycenter.instagram.com/policy/
e. Option to object to processing and request destruction of data
If you do not wish for your personal data to be collected as part of the running of our
Instagram account, you have the option at any time to object to future processing of your
personal data as part of the running of our Instagram channel. In this case, we will forward
your objection request to Meta Platforms Ireland Limited.
‍
3. LinkedIn page
‍
a. Description and scope
We process your personal data as part of running our LinkedIn page, in order to contact and
interact with users of and visitors to the professional social network »LinkedIn«. We post
information about our company on this page.
If you contact us directly through our LinkedIn page (e.g. via a message), the data you have
shared will only be processed for the purpose of recording and answering your query.
We are also able to generate statistics about visits to our LinkedIn page. This information is
collected by LinkedIn (»Page Insights«) and enables us to design the marketing of our
activities in a more ebective and targeted way.
With regard to Page Insights data, we and LinkedIn Ireland Unlimited Company, Wilton
Place, Dublin 2, Ireland, are the joint controllers for the purpose of data processing. To this
end, we have concluded an agreement with LinkedIn Ireland Unlimited Company regarding
who handles which obligations under the EU-GDPR.
The essential content of this agreement is available to view at:
https://legal.linkedin.com/pages-joint-controller-addendum
Details of what data LinkedIn uses for analytics in connection with our LinkedIn page and
what information LinkedIn provides for the purpose of data processing in connection with
the Page Insights functionality can be found here:

https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-
overview?lang=de

Other information about processing of your personal data by LinkedIn Ireland Unlimited
Company is available at:

https://de.linkedin.com/legal/privacy-policy
‍
b. Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to analyse the success of our LinkedIn page and to
design our LinkedIn page according to your interests and to handle enquiries.
‍
d. Retention period
Information concerning how long your personal data are stored for by LinkedIn Ireland
Unlimited Company is available at:
https://www.linkedin.com/legal/privacy-policy
‍
e. Option to object to processing and request destruction of data
If you do not wish for your personal data to be processed by LinkedIn, you have the option
at any time to object to future processing of your personal data as part of the running of our
LinkedIn page.
Other information about processing of your personal data by LinkedIn is available at:
https://de.linkedin.com/legal/privacy-policy
‍
4. YouTube channel
‍
a. Description and scope
We manage a YouTube channel, which is operated by Google Ireland Limited, Gordon
House, Barrow Street, Dublin 4, Ireland. As the owner of YouTube, Google Ireland Limited
collects and processes personal data within the scope described in its privacy policy.
Information about processing of your personal data by Google Ireland Limited is available
at:
https://policies.google.com/privacy?hl=en&gl=en
If you contact us directly through our YouTube channel (e.g. via a message or a comment),
the data you have shared will only be processed for the purpose of recording and answering
your query.

We are also able to generate statistics about visits to our YouTube channel. This
information is collected by YouTube through the »Analytics« service and enables us to
design the marketing of our activities in a more objective and targeted way.
Details of what data YouTube uses for analytics in connection with our YouTube channel
and what information YouTube provides for the purpose of data processing in connection
with the Analytics functionality can be found here:
https://support.google.com/youtube/answer/9002587?hl=en
‍
b. Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to analyse your behaviour when visiting our YouTube
channel, to analyse the success of the videos we have uploaded and to handle enquiries.
‍
d. Retention period
Information concerning how long your personal data are stored for by Google Ireland
Limited is available at:
https://policies.google.com/privacy?hl=en&gl=en#inforetaining
‍
e. Option to object to processing and request destruction of data
If you do not wish for your personal data to be processed by Google Ireland Limited, you
have the option at any time to object to future processing of your personal data as part of
the running of our YouTube channel. In this case, we will forward your objection request to
Google Ireland Limited.
‍
5. Service provider and supplier system, running of calls for tender
‍
a. Description and scope
Within the scope of repeat instructions for services, the procurement of products and the
running of calls for tender, we manage a database in which we process not only the
company name, but also the names and business contact details of relevant contact
partners, in particular. We process the following personal data in our database:
• last name
• first name
• practice/clinic name

• business telephone number
• business email address
• business address.
‍
b. Legal basis
Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
c. Purpose
The purpose of data processing is the internal provision of suitable suppliers and service
providers including their contact partners for future instructions, purchases and running of
calls for tender.
‍
d. Retention period
Your personal data are stored until the purpose no longer exists. This is generally the case
when a future instruction or a future purchase will no longer go ahead or the contact
partner in question is no longer available as the contact partner.
‍
e. Option to object to processing and request destruction of data
You can object at any time to future processing of your personal data as part of the service
provider and supplier system.

6. Transmission of your data to our sales partners for conclusion of business
‍
a. Description and scope
To the extent that you contact us in preparation for conclusion of a contract, we transmit
the personal data that you provide to our sales partners:
• last name
• first name
• business email address
• business telephone number
• business address.
Our sales partners look after the preparation, conclusion and execution of the contract.
‍
b. Legal basis

Legitimate interest, Art. 6(1)(f) EU-GDPR.
‍
c. Purpose
The purpose of data processing is to establish contact, according to your preferences, for
the preparation, conclusion and execution of contracts between you and our sales
partners.
‍
d. Retention period
Your personal data are stored until the purpose no longer exists. This is the case once your
data have been transmitted to our sales partners.
‍
e. Option to object to processing and request destruction of data
You have the option to object at any time to future processing of your personal data within
the scope of transmission to our sales partners. In this case, however, we are unable to
forward your request for establishing contact to our sales partners.
‍
IX. Recipient categories
Within our company, personal data is received by those persons and departments that use
them for the above-mentioned purposes. In addition, we sometimes use various service
providers and send your personal data to other trusted recipients. This include, but are not
limited to:
• printers
• lettershops
• scan service
• banking institutions
• IT service providers
• cooperation partners
• lawyers, tax advisers and courts.
‍
X. Transmission to third countries
Within the scope of processing your personal data, we may transmit your personal data to
trusted service providers in third countries. Third countries are countries outside of the
European Union (EU) or the European Economic Area (EEA).

In doing this, we only work with service providers that give us suitable guarantees for the
security of your personal data and are able to guarantee that your personal data will be
processed according to strict EU data protection standards. A copy of these suitable
guarantees is available to view on our premises.
Whenever we transmit personal data to third countries, this is done on the basis of an
‘adequacy decision’ of the European Commission, or if such a decision does not exist, on
the basis of ‘standard data protection clauses’ that are also issued by the European
Commission in addition to the agreement of any further assurances on the protection of
your personal data.
‍
XI. Your rights
You have the following rights in respect of us:
‍
1. Right of access
You have a right of access to information about whether we process your personal data and
what personal data is concerned. In this case, we also provide you with information about
• the purpose of processing
• the data categories
• the recipients of your personal data
• the planned retention period or criteria for the planned retention period
• your other rights
• to the extent that your personal data was not shared with us by you: all available
information about their origin
• if available: the existence of automated decision making and information about the
logic involved, the scope and the intended outcome of processing.
‍
2. Right to rectification
You have a right of rectification and/or completion, to the extent that your personal data
processed by us are inaccurate or incomplete.
‍
3. Right to restriction of processing
You have a right to restriction of processing, to the extent that
• we check the accuracy of your personal data that have been processed by us

• the processing of your personal data is unlawful
• you require your personal data that have been processed by us after the purpose
ceases to exist in order to exercise your rights
• you have filed an objection to the processing of your personal data and we are
reviewing this objection.
‍
4. Right to erasure
You have a right to erasure, to the extent that
• we no longer require your personal data for their original purpose of use
• you withdraw your consent and there is no further legal basis for processing your
personal data
• you file an objection to the processing of your personal data and - unless it concerns
direct marketing - there are no reasons of a higher priority for continued processing
• the processing of your personal data is unlawful
• the erasure of your personal data is required by law
• your personal data as a minor were collected for information society services.
‍
5. Right to notification
To the extent that you have exercised your right to rectification, erasure or restriction of
processing, we will notify all recipients of your personal data of this rectification, erasure or
restriction of processing.
‍
6. Right to data portability
You have a right to receive your personal data processed by us on the basis of consent or
for performance of a contract in a structured, commonly used and machine-readable
format and to transmit them to another controller. You also have the right to have these
data transmitted to another controller directly by us, to the extent that this is technically
feasible.
‍
7. Right to object
Where particular reasons exist, you have the right to object to processing of your personal
data. In this case, we cease to process your personal data, unless we are able to
demonstrate compelling legitimate grounds for the processing.

If your personal data are processed for the purpose of direct marketing, you have the right
to object at any time.
‍
8. Right to withdraw consent
You have the right to withdraw the consent that you gave to us at any time. This does not
abect the lawfulness of processing on the basis of consent up to the time of withdrawing
consent.
‍
9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge
a complaint with the competent supervisory authority, if you believe that the processing of
your personal data by us breaches the EU-GDPR.
‍
XII. Cookies overview

‍If you have any questions, please contact our Data Protection Officer at any time.

‍