Privacy Policy

1 General Information

The following statement informs you about the types of personal data we collect as the data controller, the purposes for which we collect this data, and the extent to which this data is made available to third parties.

1.1 Data Controller, and Data Protection Officer

i3 Membrane GmbH

Christoph-Seydel-Straße 1, 01454 Radeberg

Germany

Phone: +49 40 2576748-0

Email: info@i3membrane.de

 

Data Protection Officer

Carola Sieling

Technologiewerft Compliance GmbH

Deichstraße 1, 20459 Hamburg

info@technologiewerft.de

 

1.2 Rights of the Data Subject

You have the right to access the personal data we hold about you. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data (if it was not collected by us), as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.

Under the provisions of the law, you also have the right to rectification of inaccurate data, restriction of processing, data portability, and erasure of your personal data. To exercise these rights, please send us an email with the subject line “Data Protection.”

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates legal provisions.

 

For reasons arising from your particular situation, you may object at any time to our processing of your personal data based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions (Article 21 of the GDPR). If the legal requirements are met, we will no longer process your personal data.

 

In the case of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

Your objection will result in the personal data no longer being processed for these purposes.

 

If you have given your consent, you have the right to withdraw it at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.

 

We do not currently carry out any automated decision-making, including profiling.

If you exercise any of the aforementioned rights as a data subject, we will process the personal data collected in this context to respond to your request. The processing of your personal data is carried out to fulfill a legal obligation.

In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or your personal data is necessary for the establishment, exercise, or defense of legal claims.

 

1.3 Retention Period for Personal Data

Unless we have provided specific storage information regarding particular items, the following applies: We store personal data for the duration of the applicable statutory retention period or for as long as the purpose of collection remains valid. Upon expiration of the retention period, the data is routinely deleted, unless it is necessary for the initiation or fulfillment of a contract. If user data is not deleted because it is required for other legally permissible purposes, its processing will be restricted as much as possible. Accordingly, the data will be blocked where possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.

 

2 Contractual Processing

If you enter into a contractual relationship with us or request one, we generally collect the following data: title, first and last name, email address, mailing address, telephone/cell phone number, and information necessary for the execution and initiation of the contract.

 

We need this data to identify you as a contractual partner, to execute the contract, to contact you, and for billing purposes. Data processing is carried out at your or our request or on our behalf and is necessary for the aforementioned purposes to fulfill mutual obligations arising from the contractual relationship.

 

We may also process data based on a legitimate interest, e.g., when asserting or defending claims arising from the contractual relationship. The personal data collected will be stored until the end of the contractual relationship and then deleted, unless we are required by law to store it for a longer period due to tax and commercial law retention and documentation obligations (under the German Commercial Code (HGB), the German Criminal Code (StGB), or the German Fiscal Code (AO)).

 

We use the data of our (future) contractual partners and employees (first name, last name, and, if applicable, address) to conduct checks against so-called sanctions lists. Sanctions lists are centrally compiled and maintained lists of individuals, associations, or companies against whom government economic or legal restrictions have been imposed. Various regulations require us to take measures to prevent support from being provided to business partners, suppliers, and our (potential) employees if they appear on these lists. We use the data solely to ensure that these individuals are not listed on any sanctions lists. We require this information to fulfill our legal obligations and to avoid potential sanctions. This is also in our legitimate interest.

 

Data Exchange

Data with a regional connection to the United States of America is processed by us in Germany in compliance with applicable data protection laws and regulations. Data exchange regarding the aforementioned data takes place between i3 Membrane Corporation (13801 Reese Blvd West, Ste 310, Huntersville, NC 28078, USA) and i3 Membrane GmbH. Data with a regional connection to Germany is processed exclusively in Germany. The U.S. market is served by i3 Corp. and supported in its implementation from Germany by i3 Membrane GmbH, whereby data exchange is necessary for business operations. In doing so, we ensure that all necessary measures are taken to protect personal data in order to guarantee its security, confidentiality, and integrity. Our processing is carried out in accordance with the General Data Protection Regulation (GDPR) and other relevant German data protection regulations.

 

Data with a regional connection to Austria, Switzerland, and the Czech Republic is processed in Germany by i3 Membrane GmbH in compliance with applicable data protection laws and regulations. Data exchange regarding the aforementioned data takes place between i3 Membrane GmbH in Austria and i3 Membrane GmbH in Germany. The non-German market is served by i3 Membrane GmbH in Austria and supported in its implementation by i3 Membrane GmbH in Germany, whereby data exchange is necessary for business operations.

 

For data with a regional connection to the United Kingdom, the data exchange applies accordingly with i3 Membrane Ltd. (Piccadilly Business Centre, Blackett Street, Manchester, M12 6AE, United Kingdom).

 

3 Application Data

When you apply for a position with us, we receive data from you. We process the data you have sent us in connection with your application to assess your suitability for the position and to conduct the application process. Please note that your data is accessible to our Human Resources department and to the departments relevant to the position to be filled. For data protection reasons, we ask that you provide only the data necessary for the application. The legal basis for processing your personal data in the application process is Section 26 of the German Federal Data Protection Act (BDSG) or Article 6(1)(b) of the GDPR. Accordingly, the processing of data necessary in connection with the decision regarding the establishment of an employment relationship is permitted. Should the data be required for legal proceedings after the application process has been completed, data processing may take place on the basis of the requirements under Article 6(1)(f) of the GDPR, for the purpose of pursuing legitimate interests. Our interest in such cases consists of asserting or defending claims.

 

Data from applicants will be deleted no later than 6 months after a rejection. If you have consented to the continued storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years. If you have been offered a position as part of the application process, the data will be stored permanently for the purpose of carrying out the employment relationship. You may have your application modified or deleted at any time and may revoke any consent you have given at any time.

 

Information searches from publicly available sources

As part of the application process, in addition to the application documents you have submitted, we may also review publicly available information based on our legitimate interest, to the extent necessary to assess your professional suitability and qualifications. Our legitimate interest lies in the proper selection of suitable candidates for the position to be filled.

In doing so, we consider only data that you yourself have published for professional purposes (e.g., on platforms such as XING, LinkedIn, or—where applicable—on your own professional website). We generally do not use information from social networks that are primarily intended for private communication (e.g., Facebook, Instagram, TikTok) or from general search engine queries outside of a professional context.

 

If information is collected from publicly accessible professional sources, this is done exclusively for the purpose of assessing your suitability for the advertised position. The data is not processed for any other purposes. It is not disclosed to third parties. To the extent that such information was not collected directly from you, it originates from generally accessible internet sources.

Irrelevant or excessive information is not stored and is not included in the decision-making process.

 

4 i3 track App

We offer you the option to use our i3 track app for a digital and efficient filter change. Filter changes are planned, implemented, and documented within the app. When designing the app, we implemented all settings in a privacy-friendly manner and store the data on a server in Germany.

 

Scope and Purpose of Data Collection

We store the user’s username and email address. Additionally, an email address can be entered in the app to receive reports. In addition to user data, we store information about the company or hospital and the department.

The data is processed exclusively to enable the app’s functions.

 

Data retention period

All data collected in the course of filter change documentation is automatically deleted after 10 years. User data such as email address(es) and password(s) are deleted upon termination of the collaboration, provided there are no further retention obligations or legal justifications.

 

5 Data processing in connection with the website

5.1 Log files, hosting

Server statistics automatically store data that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called “log files”).

Specifically, this includes the following data:

• Language and version of the browser software
• Operating system used and its interface
• Referrer URL (the previously visited page)
• Hostname of the accessing computer (IP address)
• Date and time of the server request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Amount of data transferred
• Access status/HTTP status code

We are generally unable to associate this data with specific individuals. This data is not combined with other data sources. Furthermore, the data is deleted within 7 days following statistical analysis. Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.

We utilize hosting services. These are used to provide infrastructure and platform services, computing capacity, storage space, and database services, as well as security and technical maintenance services to maintain the operation of this online offering.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data, and communication data from customers, prospective customers, and visitors to this online service based on our legitimate interests in the efficient and secure provision of this online service.

5.2 Contacting Us

When you contact us via email or through a contact form, we store your information in order to answer your questions.

Data is generally not disclosed to third parties unless applicable data protection regulations justify such a transfer or we are legally obligated to do so. You may revoke your consent at any time with future effect. In the event of revocation, your data will be deleted immediately, provided there is no legal exception to further processing. Otherwise, your data will be deleted once we have processed your request or the purpose for storage no longer applies and there are no other conflicting legal exceptions.

5.3 Cookies

Cookies are small text files that are stored on your device and through which the entity that sets the cookie receives certain information. They serve to make the website more user-friendly and effective and/or to facilitate your navigation on our website.

We use cookies that are not strictly necessary only with your consent. You may revoke this consent at any time for future use.

Consent is voluntary, and you can use our website without accepting cookies. You can also configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies, or delete cookies that have already been stored. If you do not accept cookies, please note that in this case our website may not function properly. Unless we provide other information regarding the specific topics mentioned in this Privacy Policy or in the cookie banner, the lifespan of the cookies is 24 months.

You can find out which features on our website use cookies in the individual feature descriptions in our Privacy Policy and in the cookie banner.

 

6 Newsletter and Information for Prospective Customers

6.1 Newsletter

If you would like to receive the newsletter we offer, we need a valid email address from you that allows us to verify that you are the owner of the provided email address or that the owner consents to receiving the newsletter.

After you provide your email address, we will send a confirmation email to the address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data related to the newsletter will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe from the newsletter.

We send newsletters only with your consent or with legal authorization.

You may revoke your consent to the storage of your data, your email address, and their use for sending the newsletter at any time. You will find a link to unsubscribe from the newsletter at the end of each newsletter. If a user has only subscribed to the newsletter and has canceled this subscription, their personal data will be deleted.

Your personal data will not be shared with third parties.

 

6.2 Information for Existing Customers

If you, as our contractual partner, have entered into a contract for our services, we will provide you with further information about our own similar services via the email address provided at the time of contract conclusion (Section 7(3) UWG). You may object to receiving these communications at any time.

These communications are sent based on our legitimate marketing interest.

 

7 Data Disclosure: General and Contractual Purposes

We disclose data to third parties if this is necessary for the fulfillment of the contract and/or if we are legally obligated and/or entitled to do so in individual cases. Data is typically shared with contracted service providers, including, among others, those responsible for hosting, operation, maintenance, and support of IT systems, communication systems, and waste disposal. In addition, your data may also be transmitted to postal or delivery services, your primary bank, tax advisors/auditors, and attorneys.

 

7.1 Use of Audio and Video Conferences

For our communication and the conduct of online meetings, we use and offer online conferencing tools, among other things. This is done based on your consent to participate in online meetings and communications.

When you communicate with us via video or audio conference over the Internet, your personal data is collected and processed by us and the provider of the conference tool.

The scope of the data also depends on what information you provide before or during your participation. The following personal data is subject to processing, depending on the information you provide:

User information: First name, last name, phone number, email address, password, profile picture, department

Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information

For recordings: Video, audio, and presentation recordings; text file of the online meeting chat.

When dialing in by phone: Information regarding the incoming and outgoing phone numbers, country name, start and end times. If applicable, additional connection data, such as the device’s IP address, may be stored.

Text, audio, and video data: You may have the option to use the chat, question, or poll features in an online conference. In this regard, the text you enter is processed to display it in the online conference and, if applicable, to log it. To enable video display and audio playback, data from your device’s microphone and any video camera on the device will be processed accordingly for the duration of the meeting. You can turn off the camera or mute the microphone yourself at any time.

To participate in an online conference or enter the “meeting room,” you must at least provide your name. This can generally be pseudonymized.

For further information on data processing by the conference tools used, please refer to the privacy policies of the respective tools.

 

Transcription of Video Meetings

During video meetings, a transcript of the discussion may be created. The transcript serves to document and follow up on the content and is used exclusively for internal purposes, unless we expressly state otherwise.

Processing is carried out exclusively on the basis of your informed consent. At the beginning of the meeting, all participants are explicitly informed about the transcription.

Participants who do not consent to transcription will not be able to use the video and audio functions during the meeting, but will still be able to communicate via the chat function and listen to the meeting.

Transcripts and, where applicable, recordings are stored only for as long as necessary for the respective purposes (e.g., follow-up, minute-taking) and in accordance with statutory retention periods.

Transcription is carried out using the services of the respective provider of the meeting tool. It cannot be ruled out that data may be transferred to third countries (in particular the U.S.). The respective privacy policies of the providers apply.

 

8 Tools Used in Connection with the Operation of the Website and Online Services

In some cases, we use tools and external service providers within the scope of your consent or our legitimate interests regarding the analysis, optimization, and economic operation of the online offering. If you have given your consent for tools that are not necessary for the operation of the website, you may have these settings changed at any time. We list our service providers below.

If your data is to be used for other purposes, we will inform you in advance and will only use the data if you have expressly given your further consent to do so.

 

8.1 Google

With your consent, we use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) for the optimization and efficient operation of our online offering.

Google LLC is certified under the Data Privacy Framework, and EU Standard Contractual Clauses have been concluded, ensuring that appropriate measures have been taken to comply with European data protection law.

8.1.1 Google YouTube

We use YouTube, a service provided by Google, to embed videos.

These videos are stored on www.youtube.com and can be played directly from our site. YouTube uses cookies for data collection and statistical analysis. YouTube uses cookies, among other things, to collect reliable video statistics, prevent fraud, and improve user-friendliness. The information generated by the cookie regarding your use of this website (including your IP address) is transmitted to YouTube servers, including those in the U.S., and stored there.  Your IP address cannot be identified unless you have logged into YouTube or another Google service before visiting the page or are permanently logged in. If you do not wish this to happen, you must log out of your YouTube account and your other Google accounts.

Through YouTube cookies, we receive statistical data regarding the viewing of individual videos embedded on the website without any reference to the respective user.

The embedded YouTube videos are used within the scope of YouTube’s permitted usage, which all users must accept. If you believe your copyrights have been infringed, please report this directly to YouTube. We use embedded YouTube videos in enhanced privacy mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user’s computer under certain circumstances. Please note that as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by YouTube. For more information on YouTube’s official privacy policy, please visit https://www.google.de/intl/de/policies/privacy/ and https://support.google.com/youtube/answer/171780?hl=de

8.1.2 Google Tag Manager

We use Google Tag Manager. This allows us to manage website tags via a single interface and, for example, integrate Google marketing services into our online offering. The Tag Manager itself does not process any personal data of users. For the respective Google services, please refer to the relevant notices and terms of use at https://www.google.com/intl/de/tagmanager/use-policy.html.

8.1.3 Google Web Fonts

Google Web Fonts are used to enhance the visual presentation of various information on this website. When the page is loaded, the web fonts are transferred to the browser’s cache so they can be used for display. If the browser does not support Google Web Fonts or blocks access to them, the text will be displayed in a standard font. No cookies are set on the website visitor’s device when the page is loaded. Data transmitted in connection with the page visit is stored locally by us. No data is forwarded to Google.

Information on the privacy policy of Google Web Fonts is available at: https://developers.google.com/fonts/faq#Privacy General information on data protection is available in the Google Privacy Center at: https://policies.google.com/privacy?hl=de-DE

8.1.4 Google Ads / AdSense

Based on your consent, this website uses Google AdSense or Ads, a service designed to facilitate or enable the placement of advertisements and the evaluation of the success of those ads. The service uses so-called “cookies,” text files that are stored on your computer and enable an analysis of website usage. It also uses so-called web beacons (invisible graphics). These web beacons allow information such as visitor traffic on these pages to be evaluated. The information generated by cookies and web beacons regarding the use of this website (including your IP address) and the delivery of ad formats is transmitted to a Google server in the United States and stored there. This information may be shared by Google with Google’s contractual partners and government authorities. However, Google will not associate your IP address with any other data it holds about you.

For further information on the purpose and scope of data collection and processing by Google, as well as your rights in this regard and settings options for protecting your privacy, please refer to the general privacy policy at https://www.google.com/policies/privacy/, specifically at: https://business.safety.google/privacy/

8.1.5 Google APIs

We use the Google APIs service on our website, an interface software designed to link different applications and securely transfer personal data from one application to another. Business processes run more cost-effectively, faster, and with fewer errors when they are automated via interfaces using software. This allows them to be efficiently integrated into

Integrate business processes. Data will only be processed if you consent to this data processing.

Further information can be found in the provider’s privacy policy at the following URL: https://business.safety.google/privacy

8.1.6 Google DoubleClick

We use the Google “DoubleClick” online marketing service to integrate ads into the Google advertising network. DoubleClick is characterized by the fact that ads are displayed in real time based on users’ presumed interests. This allows ads to be displayed more specifically within our online offering, and users are shown only ads that potentially appeal to their interests and in which they have already expressed interest, for example, on other websites in the network. (“Remarketing”). For these purposes, when our website or other websites where the Google advertising network is active are accessed, a Google code is executed directly by Google, and so-called (re)marketing tags are integrated into the website. This sets an individual cookie on the user’s device (comparable technologies may also be used instead of cookies). This records which websites the user visits, what content they are interested in, and which offers the user has clicked on, as well as technical information about the browser and operating system, referring websites, visit duration, and other details regarding the use of the online service.

The user’s IP address is also collected; however, within member states of the European Union or in other signatory states to the Agreement on the European Economic Area, it is truncated and only in exceptional cases transmitted in full to a Google server in the United States, where it is truncated. Google may also combine the aforementioned information with such information from other sources.

User data is processed pseudonymously within the Google advertising network. Thus, from Google’s perspective, ads are not managed and displayed for a specifically identified individual, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google’s servers in the United States.

For more information on Google’s use of data, as well as options for settings and opting out, please refer to Google’s Privacy Policy (https://policies.google.com/technologies/ads)

8.1.7 Google Static

We use the Google Static service on our website as a Content Delivery Network (CDN) to optimize the performance and availability of our website. To do this, Google, which provides this network, processes your IP address as well as information about when you visited our website.

Further information can be found in the provider’s privacy policy at the following URL: https://business.safety.google/privacy

 

8.2 LeadInfo

Based on your consent, we use the lead generation service provided by Leadinfo B.V. (Rivium Quadrant 141, 2909LC Capelle aan den IJssel, Netherlands) and the LeadREBEL service acquired by Leadinfo. This service detects visits by companies to our website based on IP addresses by linking the IP address to the company’s own database and displays publicly available information to us, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to analyze user behavior on our website and processes domains from form submissions (e.g., “leadinfo.com”) to correlate IP addresses with companies and improve the services. Every website visitor is evaluated using a so-called Lead Score, which is based on parameters such as the total duration of the website visit.

For more information on how LeadInfo handles your data, please see the

LeadInfo Privacy Policy: https://www.leadinfo.com/de/datenschutz

 

8.3 eTracker

This website uses eTracker, a web analytics tool provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (“eTracker”). This tool uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of our website. Data is collected and stored for marketing and optimization purposes. User profiles may be created from this data under a pseudonym. The data collected using eTracker technologies will not be used to personally identify visitors to this website without the data subject’s separate consent, nor will it be merged with personal data regarding the holder of the pseudonym. For information on the purpose and scope of data collection, as well as the further processing and use of the data by eTracker, and your related rights and settings options for protecting your privacy, please refer to eTracker’s privacy policy at https://www.etracker.com/de/datenschutz.html.

You may object to the collection and storage of data at any time, with future effect, by changing the settings of your web browser

 

8.4 Cookiebot

This website uses the Cookiebot tool from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to inform you about the cookies used on our website and to obtain your consent to the use of cookies. This is necessary for the administration of consent management. To store your consent, a permanent cookie named “CookieConsent” is stored in your browser.

The following data is automatically logged by Usercentrics:

• The end user’s IP address in anonymized form (the last three digits are set to ‘0’)
• Date and time of consent
• User agent of the end user’s browser
• URL from which the consent was sent
• An anonymous, random, and encrypted key
• The end user’s consent status, which serves as proof of consent

The information generated by the cookie is not used to personally identify visitors to this website and is not combined with personal data about the holder of the pseudonym. The data collected by Usercentrics is stored on servers within the EU.

If you do not consent to the storage of this data, you can object to the storage via the cookie banner at any time. In this case, a so-called opt-out cookie will be stored in your browser, which means that Cookiebot will only provide cookies necessary for the technically error-free and optimized provision of the website. Please note that completely deleting your cookies will also delete the opt-out cookie, which may need to be reactivated by you. For more information, visit https://www.cookiebot.com/de/privacy-policy/