Privacy Policy

It is important for as to inform you about the confidential and secure handling of personal data.

Controller
Ottobock SE & Co. KGaA
Max-Näder-Straße 15
37115 Duderstadt, Germany

Data Protection Officer
Data Protection Officer of the Legal Entity: confidentially via contact form. (https://corporate.ottobock.com/en/forms/gdpo-contact-form/)

Use of our website

Secure provision of the website
If you visit our website, we temporarily collect and process the following information in order to serve the website and store it in so-called server log files:

Categories of data processed

  • browser type and browser version

  • Operating system used

  • referrer URL

  • browser string

  • Host name of the accessing computer

  • Time of the server request and

  • IP address

Purposes
The purpose of the processing is to ensure a secure and functional operation of the website. The data logged in the server log files are used in particular for the purposes of data security, to defend against attempted attacks on our web servers.

Recipients:
The processing of the aforementioned data is carried out on our instructions by our website hoster Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521.

Legal basis
The processing of this data is based on Art. 6 para. 1 f DSGVO: We have a legitimate interest in realising the purposes described above and, in particular, in ensuring data security and smooth operation.

Storage periods or criteria for determination
The server log files are deleted after 180 days at the latest.

Contact form and contacting us

You can address your requests directly to the specialists at SUITX by Ottobock. For this purpose, we offer various contact channels on our website. For example, you can write us an e-mail or use our contact form.

When you contact us, we process the following categories of data, for example:

Contact information

  • First name, last name

  • Email address

  • Telephone number

  • Postcode

  • Country name

  • Company name

  • Job title

  • Address (private, practice or business address)

  • Telephone number

  • Email address

  • Company address (incl. city, country)

Topic-specific information

  • Concerns

  • How you heard about us

We mark mandatory information in contact forms that is absolutely necessary to answer your request accordingly.

Purposes
The purposes of the processing are to answer and ensure a prompt reaction to your request in accordance with the quality standards of SUITX by Ottobock. This includes the recording, allocation and processing of the enquiry by the relevant company divisions.

Recipients
The processing of the aforementioned data is carried out on our instruction by XIMA MEDIA GmbH, Sudhausweg 9, 01099 Dresden, Germany, and the salesforce.com Germany GmbH, Erika-Mann-Str. 31 80636 München, Germany.

Legal basis
The processing of the data is based on Article 6(1)(f) of the GDPR: We have a legitimate interest in processing this data for the purpose of handling your request. If you wish to initiate a contract with your request, the legal basis is Article 6 (1) (b) GDPR.

Storage periods or criteria for determination
If you send us a request, this data will be stored until your request has been answered. If your request is made in the context of a contractual relationship, the storage period is based on the storage periods applicable to this. In this case, we may also have a legal obligation to retain data.

Promotion/Newsletter

If you are interested in news about our products and services - in particular innovations and interesting campaigns and promotions from SUITX by Ottobock - you can consent to receiving advertising and in particular our newsletter.
In order to send you information that is as suitable as possible for you in the ordered advertising, we process the following categories of data, for example:


Consent data

  • Email address

  • Time of consent

  • Time of the double opt-in

  • IP address

Usage data

  • Metadata (e.g., device ID, IP address)

  • Information about your usage (e.g., access times, opening of the newsletter, links opened, etc.)

Contact information

  • Email address

Purposes
The processing is used to send you the newsletter and to analyze your use of the newsletter and, if appropriate, to tailor the newsletter to your interests. In addition, we process your consent information in order to comply with our obligation to provide evidence under Article 7 GDPR.

Recipients
The processing of the aforementioned data is carried out on our instruction salesforce.com Germany GmbH, Erika-Mann-Str. 31 80636 München, Germany.

Legal basis
The data is processed for sending and analyzing as well as personalizing the newsletter on the basis of your consent. The processing is thus based on Article 6 (1) (a) GDPR.

The processing of your consent data is in our legitimate interest to comply with our obligation to verify compliance with all applicable provisions (Article 6 (1) (f) GDPR).

Withdrawal of your consent
You have the option to withdraw your consent at any time. You can exercise the withdrawal by sending an informal message to SUITX by Ottobock by email to exoskeletons@ottobock.com. You can also unsubscribe directly by using the unsubscribe" function in the newsletter. Please note that any data processing that took place until the withdrawal remains unaffected by this.

Storage periods or criteria for determination
We process your data as long as you receive our newsletter and have not withdrawn your consent.

Use of services and tools and integration of third-party content

We use services on our website in order to carry out usage analyses or to be able to show you advertising. We also integrate third-party content, such as videos or map extracts.

You can find more detailed information on the purposes, recipients, legal basis and storage period in our Consent Management Tool, which you can access via the following link:

Consent management

Many of the services just mentioned, as well as technologies for storing information on your terminal device or for accessing this information (see below), are only used with your express consent. To obtain this consent, we use a consent management tool that allows us to store and manage your consent. In doing so, we process a pseudonymous user ID as well as your selected consent preferences.

Purposes
The processing is carried out for the purpose of obtaining and storing your consent in a legally secure and compliant manner. In addition, we want to fulfil our obligation to provide proof from Art. 7 GDPR.

Legal basis
The legal basis for the processing Article 6 (1) (f) GDPR, whereby our legitimate interest is to store and manage your consent preferences and to meet our obligation to provide evidence.

Recipients
The processing of the aforementioned data is carried out on our instructions by Usercentrics GmbH Sendlinger Str. 7, 80331 Munich, Germany.

Storage periods or criteria for determination
We store the data for a period of 12 month and delete it afterwards.

When and how we share data with third parties

Information on the specific recipients of your personal data can be found above. In general, we may also share data with other processors, i.e. companies that Ottobock entrusts with the processing of data within the scope provided by law (Art. 28 GDPR), in particular technical service providers. In this case, Ottobock remains responsible for the protection of your data. Our processors are carefully selected, are bound by our instructions, and are regularly monitored by us. We only commission processors who provide sufficient guarantees that appropriate technical and organizational measures are taken in such a way that the processing is carried out in accordance with the requirements of the GDPR and ensures the protection of your rights.

In the context of the functions described above, we use the services of dotSource GmbH, Goethestraße 1, 07743 Jena, Germany, and SYCOR GmbH, Heinrich-von-Stephan-Str. 1–5, 37073 Göttingen, Germany.

To government bodies to which we transfer certain data due to legal obligations.

Transfer of personal data to countries outside the EU and EEA.

We may transfer your data to bodies whose registered office is outside the European Union or the European Economic Area. In this case, we ensure before the transfer that, outside of exceptional cases permitted by law, either an adequate level of data protection exists at the recipient (e.g., through an adequacy decision of the European Commission, through suitable guarantees such as the agreement of so-called EU standard data protection clauses of the European Commission with the recipient) or your express consent has been given. Information on appropriate safeguards is available at our contact address. Where we use standard contractual clauses, you can download a copy of the current standard contractual clauses from this link.

Information about the storage of and access to information on your terminal device (cookies and other technologies)

Purposes
We store or access information on your terminal device for various purposes. This is done using technologies such as cookies or local storage.

We store or access information for the following purposes:

  • Where it is strictly necessary to provide you with our website ("Essential").

  • To provide you with optional additional features on our website, e.g., embedded videos or other third-party content ("Functional").

  • To analyse your use of our website and to improve our website and offers or to conduct market research ("Analytcs").

  • To display advertisements about our products and services to you on our website or on other sites and to measure the success of our advertising campaigns (“Marketing”).

Legal basis
The storage of and access to information is thereby - except in cases of absolutely necessary storage or access - only carried out with your express consent (§ 25 para. 1 TTDSG), which you can give us or revoke via our Consent Management Tool

Consent and further information on recipients and storage duration
You can access the Consent Management Tool via the following link. It can also be accessed at any time via the footer of our website: Cookie Settings

Under the link you will also find more detailed information on the services we use and the personal data processed in each case when they are used, as well as the specific cookies used and how long they are stored.

Withdrawal
You can withdraw your consent at any time via the Consent Management Tool. This does not affect the lawfulness of the storage of or access to information and the processing of personal data carried out until the withdrawal.

Your Rights

You have the right to,

a) request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right to access to the personal data (Art. 15 GDPR).

b) request the correction or completion of incorrect or incomplete data (Art. 16 GDPR);

c) withdraw consent given at any time with effect for the future.
(Art. 7 (3) GDPR);

d) in certain cases (Art. 17 GDPR), to demand the deletion of data;

e) under certain conditions, to request the restriction of processing; (Art. 18 GDPR);

f) under certain conditions, to data portability, i.e. to receive your data that you have provided to us in a structured, common and machine-readable format or to have it transferred to another controller (Art. 20 GDPR);

g) file a complaint to a supervisory authority (Art. 77 GDPR).

Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the GDPR. This also applies to profiling based on these provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for the purposes of direct advertising, the personal data will no longer be processed for these purposes.

Changes to this privacy policy

We revise this data protection notice when changes are made to this website or on other occasions that make this necessary. You will always find the current version on this website.

Last Update: 5 October 2023