Privacy Policy

Introduction

The following information is intended to provide you with an overview of the processing of your personal data and your rights under data protection laws. It is generally possible to visit this website without entering personal data. If you wish to use special functions, e.g. within the scope of web applications such as bone-rads.com, processing of personal data is required, among other things, for registration and assignment of a user interface. If the processing of personal data is required and there is no legal basis for such processing, bone-rads.com will generally obtain your consent.

The processing of personal data, such as your name, address or email address, is carried out in accordance with the German General Data Protection Regulation (GDPR). This privacy policy is intended to inform you about the scope and purpose of the personal data collected, used and processed.

As the party responsible for processing your data, technical and organizational measures are implemented to ensure the most comprehensive protection possible of the processed personal data. Nevertheless, internet-based data transmissions and data management can fundamentally have (unknown) security gaps, so absolute protection cannot be guaranteed. Providing your personal data is voluntary and no disadvantages will arise from not providing it.

Responsibility

Responsible within the meaning of the GDPR:

bone-rads.com

Contact:

Definitions

This privacy policy is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). This privacy policy should be easy to read and understand for you. To ensure this, the terms used should be explained.

Personal Data

Personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number or ID number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data Subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

Processing

Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of Processing

Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Pseudonymization

Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third Party

Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Legal Basis

Art. 6 para. 1 lit. a GDPR serves bone-rads.com as the legal basis for processing operations. In this context, bone-rads.com predominantly obtains consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are party, as is the case, for example, with processing operations necessary for the supply of goods or the provision of any other service or consideration (including free of charge), the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about specific products or services.

If bone-rads.com is subject to a legal obligation requiring the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR.

In rare cases, the processing of personal data may become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured during a project meeting and as a result their name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third parties. The processing would then be based on Art. 6 para. 1 lit. d GDPR.

Finally, processing operations could be based on Art. 6 para. 1 lit. f GDPR. Processing operations not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the purposes of the legitimate interests pursued by bone-rads.com or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Such processing operations are permitted in particular because they have been specifically mentioned by the European legislator. In this regard, it considered that a legitimate interest could be assumed if a relevant and appropriate relationship exists between the data subject and the controller, e.g. if the data subject is a customer (or user of services) of the controller or is in their service (Recital 47 sentence 2 GDPR).

Technology

SSL/TLS Encryption

bone-rads.com uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as login data or contact requests. You can recognize an encrypted connection by the fact that the address line of the browser shows "https://" instead of "http://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to bone-rads.com cannot be read by third parties.

Data Collection When Visiting bone-rads.com

When using the bone-rads.com website for informational purposes only, i.e. if you do not register or otherwise transmit information, only the data that your browser transmits to the server (in so-called "server log files") is collected. With each page accessed by you or an automated system, bone-rads.com collects a series of general data and information. This general data and information is stored in the server log files. The following may be collected:

  • browser types and versions used
  • the operating system used by the accessing system
  • the website(s) from which an accessing system reaches our website (so-called referrers)
  • the sub-websites accessed via an accessing system on our website
  • the date and time of access to the website
  • an Internet Protocol address (IP address)
  • the Internet service provider of the accessing system

When using this general data and information, no conclusions can be drawn about your person. Rather, this information is needed to:

  • deliver the content of the website correctly
  • optimize the content/functions and services of the website
  • ensure the permanent functionality of the IT systems and the techniques of the website
  • provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack

This collected data and information is therefore evaluated statistically and with the aim of increasing data protection and data security in order to ultimately ensure an optimal level of protection for the processed personal data. The data from the server log files is stored separately from all personal data provided by a data subject. The legal basis for this type of data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest follows from the purposes listed above for data collection.

Disclosure of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

bone-rads.com only passes on your personal data to third parties if:

  • you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is permissible to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
  • in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR
  • this is legally permissible and pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR is necessary for the processing of contractual or user relationships with you

Cookies

General Information About Cookies

bone-rads.com uses cookies on its website. These are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit bone-rads.com. Cookies do not cause any damage to your device, do not contain viruses, trojans or other malware.

Information is stored in the cookies that arises in connection with the specific device used. This does not mean that bone-rads.com thereby gains immediate knowledge of your identity.

The use of cookies serves on the one hand to make the use of the bone-rads.com website more pleasant for you. So-called session cookies are used to recognize that you have already visited individual pages of the website or have successfully logged in or out. These can also remain stored in your browser for a set time after leaving the website in order to recognize you more quickly on a subsequent visit.

The data processed by cookies is necessary for the aforementioned purposes to protect the legitimate interests of bone-rads.com and third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all functions of bone-rads.com.

Your Rights as a Data Subject

Right of Confirmation

You have the right to request confirmation from bone-rads.com as to whether personal data concerning you is being processed.

Right of Access Art. 15 GDPR

You have the right to receive free information about the personal data stored about you at any time as well as a copy of this data from bone-rads.com.

Right to Rectification Art. 16 GDPR

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

Right to Erasure Art. 17 GDPR

You have the right to request that personal data concerning you be erased without undue delay, provided that one of the legally prescribed grounds applies and insofar as processing is not necessary.

Restriction of Processing Art. 18 GDPR

You have the right to request bone-rads.com to restrict processing if one of the legal requirements is met.

Data Portability Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to bone-rads.com, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from bone-rads.com, provided that the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated means.

Furthermore, when exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, you have the right to have personal data transmitted directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

Right to Object Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e (data processing in the public interest) or f (data processing on the basis of a balance of interests) GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

If you object, bone-rads.com will no longer process your personal data unless bone-rads.com can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

In addition, you have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out by bone-rads.com for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by automated means using technical specifications.

Withdrawal of Consent to Data Processing

You have the right to withdraw consent to the processing of personal data at any time with effect for the future.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority responsible for data protection about the processing of personal data in connection with the use of bone-rads.com.

Routine Storage, Erasure and Blocking of Personal Data

bone-rads.com processes and stores your personal data only for the period necessary to achieve the storage purpose or insofar as this has been provided for by the legal provisions to which bone-rads.com is subject.

If the storage purpose ceases to apply or a prescribed storage period expires, the personal data is routinely blocked or deleted in accordance with the legal provisions.

Duration of Storage of Personal Data

The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.

Currency and Amendment of the Privacy Policy

This privacy policy is currently valid and has the status of January 2026.

Due to the further development of the bone-rads.com website and its offerings, or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed at any time on the website at

https://bone-rads.com/privacy

by you at any time.