Privacy policy

Ottobock’s success depends not only on the global flow of information that is linked between the Ottobock companies, employees, customers and patients, but above all on the confidential, secure handling of personal data.

Controller

Ottobock SE & Co. KGaA
Max-Näder-Straße 15, 37115 Duderstadt, Germany

Data Protection Officer

Data Protection Officer of the Legal Entity: confidentially via contact form.

Secure delivery of the website

When you visit our website, the web server temporarily collects the following information in order to deliver the website contents and saves it in what are called server log files:

Categories of processed data:

• Browser type and browser version

• Operating system used

• Referrer URL

• Browser string

• Hostname of the accessing computer

• Time of the server request and

• IP address

Purposes:

Ottobock has an interest in the secure and functional operation of the website. The logged data are used, in particular, for the purpose of data security and to defend against attempted attacks on our web servers. We reserve the right to analyse anonymised data sets for statistical purposes.

Legal basis:

We have a legitimate interest in ensuring data security and smooth operation.

Retention periods and criteria for determination:

Data are erased within no more than 180 days.

Since it is not possible to address all requests immediately and completely with the information provided on our website, we give you the option of submitting an enquiry directly to the specialists at Ottobock. We offer various contact channels for this purpose on our website.

When you contact us, we process the following categories of data, for example:

• Contact information

  • First name, last name

  • Address (private, practice or business address, customer number)

  • E-mail address

  • Phone

• Information on specific topics

  • Medical field

  • Your relationship with Ottobock (e.g. interested party, user, medical supply company, etc.)

• Contents of your enquiry

  • Information specific to the enquiry

We use an asterisk* to label and identify mandatory information in contact forms that is essential in order to respond to your enquiry.

Purposes:

Ensuring that your enquiry is handled efficiently according to Ottobock’s quality standards. This includes recording, assigning and handling of the enquiry by the respective company departments.

Legal basis:

We have a legitimate interest in processing these data to handle your enquiry.

When you use the contact form to indicate to us that you are interested in procuring our products and services, this is an enquiry with contractual relevance.

Insofar as you disclose special categories of personal data in your enquiry, e.g. data concerning health, processing is based on fitting or treatment in the healthcare sector.
Retention periods and criteria for determination:

When you submit a contact request to us, these data are stored by us for the duration of handling the enquiry. Whether subsequent storage is required depends on separate retention obligations related to your enquiry.

In the following, we wish to inform you about the personal data we ask you to provide when you register for or attend one of our events, and how we process the data. We regret that we cannot process your registration unless you provide us with the details we have marked as mandatory.

Categories of processed data:

The following categories of personal data, for example, are processed for this purpose:

With registration using the contact form

• Contact information

  • Name

  • Company/institution

  • Country

  • E-mail address

• Other contents of your enquiry

  • Questions specific to your enquiry

We use an asterisk* to label and identify mandatory information in contact forms that is essential for registration.

Additionally in the course of execution (especially for online events)

• Your user data and profile pictures where applicable

• Usage data

• Chat messages
  

Purposes:

Registration for events and their execution (including sending the login data and other event updates leading up to the event, managing the presentations, technically enabling your attendance and participation, providing summaries and other event-related information after the event).

Legal basis:

The processing of your personal data required with regard to your registration for the event and its execution is based on your contract enquiry and booking of the event.

Retention periods and criteria for determination:

We erase your data when they are no longer needed in order to register you for our event or to enable you to attend our event, provided we are not required by law to store your data (in particular, if statutory or contractual retention periods apply; retention periods generally last for 10 years after the event).

If you are interested in news in the field of medical devices or in our products and services – especially innovations and interesting Ottobock campaigns and promotions – you may consent to receive promotional materials and, in particular, subscribe to our newsletter.

In order to provide you with the most appropriate information for you in the requested promotional materials, we process the following categories of data, for example:

• Newsletter technology

  • Metadata (e.g. device ID, IP address)

  • Usage data (e.g. access times, interests)

• Contact information

  • First and last name

  • E-mail address

  • Occupation (job title)/company affiliation (company name)

  • Mailing address/phone number

• Information on specific topics

  • Selection of the product segment for which you want to receive information (e.g. Prosthetics, Orthotics and Human Mobility)

  • Your relationship with Ottobock (interested party, user, model, medical supply company, etc.)

  • Contests

  • Surveys

  • Invitations to trade shows

  • Study/evaluations/test subject

  • Comments

We use an asterisk* to label and identify fields that are required for the delivery of promotional materials.

Purposes:

Ensuring the proper delivery of promotional materials and contacting you for promotional purposes. We also use your data to verify the validity of your e-mail address and to tailor the promotional materials to you with appropriate information.

Furthermore, we process your data to comply with legal obligations that apply to us.

Legal basis:

The data are processed based on your consent .

Insofar as we process your data concerning health, we do so on the basis of your consent for the processing of special categories of personal data.

To the extent we process data to meet legal obligations that apply to us, data processing is based on these legal obligations.

Revocation of your consent:

You may revoke your consent at any time. An informal notice by e-mail to info@ottobock.com is sufficient to exercise your revocation right vis-à-vis Ottobock. You may revoke your newsletter subscription using the corresponding “unsubscribe” function directly in the newsletter. Please note that lawful data processing up to revocation remains unaffected.

Retention periods and criteria for determination:

Data are erased as soon as they are no longer required for our purposes or you revoke your consent and no other legal basis exists. In the latter case, we erase the data when the other legal basis ceases to exist.

You can use our job portal for purely informational purposes, but you may also register on our job portal to apply for vacant positions at Ottobock and take advantage of extended services.

There is no automated decision-making.

When you use the job portal, we process the following data:

• Master data such as your first and last name

• Address and contact information as well as

• education, qualification and CV data and,

• in special cases, information for special categories of data such as an existing severe disability

Purposes:

We process the personal data provided by you for your application. We process your data within the scope of the job portal to find suitable applicants for vacant positions. You need to create a candidate profile to use our job portal. The candidate profile allows you to apply for specific positions and activates the receipt of notifications regarding suitable vacant positions that meet your search criteria (“job alert”).

If you indicate that we may also consider you for other positions within the Ottobock Group, we may ask for your consent to remain in contact with us for a longer period of time (candidate pool).

Providing your personal data is not required by law or contract. However, it is necessary to provide your personal data if you want to apply for a specific position using our job portal, so that Ottobock can make a decision regarding your application and ultimately also about hiring you. Using the functions mentioned above and in the following (job alert, candidate pool) is voluntary but providing your data is necessary.

Legal basis:

Within the scope of a specific application, we process your data to make a decision regarding the establishment of an employment relationship. We process information pertaining to your disability, where applicable, to meet our obligations pursuant to employment, social security and social protection laws .

If you create a candidate profile in the job portal, join the candidate pool to set up a job alert, when we share your application with other Ottobock Group companies or when you voluntarily provide us with additional personal data, we process your data in this context based on your previously provided consent.

Revocation of your consent:

You may revoke your consent at any time. Submit your notice of revocation to the Global Data Privacy Office using the [contact form] mentioned above or configure the desired settings directly in your candidate profile. Please note that lawful data processing up to revocation remains unaffected.

Who receives your application data?

Within Ottobock, access to your personal data is generally provided only to those departments that must have the data to decide on the establishment of an employment relationship or for processing your e-recruiting candidate profile (for example, HR, the works council, persons in charge of specialist departments).

In the course of creating your candidate profile, you can also make your profile visible for recruiters and persons in charge of specialist departments in all companies of the Ottobock Group in your country or for recruiters and persons in charge of specialist departments in
all Ottobock Group companies. You can also enable or restrict the visibility of your candidate profile later on in your account. If you consent to the release of your profile to recruiters at other Ottobock companies, your profile data may be accessed by companies outside the EU (known as third countries). For such cases, Ottobock ensures that these companies maintain an appropriate level of data protection. Further information about this and the appropriate guarantees can be requested from the Data Protection Officer.

Active sourcing

As part of our recruitment efforts, we also actively search social networks, forums and other freely available Internet sources for interesting candidate profiles.

We generally contact such candidates using the messaging function of the network in question. We offer the candidates the opportunity of entering into a personal exchange (consultation) in which we present Ottobock and possible positions. The candidates are free to decide whether they want to subsequently apply for one of the positions using the job portal or a link to the position provided by us. Alternatively, the candidates may also stay in contact with us through this channel in the interest of career orientation regardless of a concrete application. For this further communication option, we ask the candidates for their consent in advance.

There is no automated decision-making.

We process the following data for active sourcing:

In the course of actively searching for candidates, we process only data that were evidently made public by these persons themselves (name data, profile data, contact data if applicable).

Purpose:

Recruitment

What is the legal basis for processing your data?

The search for interesting candidate profiles and communication are based on the usage agreement concluded with the social network or on our legitimate interest in recruiting new talent for Ottobock.

Who receives your data?

Within Ottobock, access to your personal data is generally provided only to those departments that must have the data to decide on the establishment of an employment relationship or for processing your e-recruiting candidate profile (for example, HR, the works council, representative for people with severe disabilities, persons in charge of specialist departments).

For how long do we store your data?

If candidates do not respond to our invitation to apply for a vacancy or to stay in contact with us, we erase their personal data no later than after four months.

When and how we share data with third-party providers

Information on the use of cookies and other technologies

We use cookies and other technologies to ensure the security and proper functioning of our website, and to offer relevant products and services to you. At the end of this page under data protection settings, you will find further information and can amend or revoke your consent at any time.

Hyperlinks to third-party websites

We use hyperlinks to third-party websites on our website. You are transferred to the third-party website only after clicking a link. Your data are processed on such websites by the third-party provider under their responsibility.

You have the right

a) to request confirmation whether we process personal data relating to you. If this is the case, you have the right to information regarding this processing.

b) to request the correction and/or completion of incorrect and/or incomplete data.

c) to revoke consent you have given at any time with future effect.

d) in certain cases, to request the erasure of data.

e) under certain conditions, to request the restriction of processing.

f) under certain conditions, to data portability, i.e. you can receive your data that you have provided to us in a structured, commonly used and machine-readable format or have those data transmitted to another controller.

g) to lodge a complaint with a supervisory authority.

Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you that takes place based on our legitimate interest. This also applies to profiling based on these provisions. We will then no longer process the personal data, unless we can demonstrate compelling legitimate grounds for
processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. When you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

We share data with processors, companies commissioned by Ottobock for the processing of data within the applicable legal framework (service providers). In this case, Ottobock is still responsible for the protection of your data. Our processors are carefully selected, bound by our directives and reviewed by us regularly. We engage only processors that offer sufficient guarantees that suitable
technical and organisational measures are implemented to ensure that processing is in accordance with the requirements of the applicable data protection laws and the protection of your rights is assured.

We share data with private entities that provide services for you under their own responsibility and/or under a contract with Ottobock. This is the case insofar as you request services of private
entities from us, consent to their involvement, or we involve private entities based on legal permission. Insofar as we nevertheless disclose your data to third parties in the course of processing, transfer data to them or otherwise grant them access to the data, this too is based exclusively on one of the aforementioned legal bases.

We share data with government entities to whom we transfer certain data due to legal obligations.

We may transfer your data to entities based outside the European Union and/or the European Economic Area. In this case, we ensure prior to the transfer that, outside of exceptional cases permitted by law, the recipient has either implemented an adequate level of data protection (e.g. through an adequacy decision of the European Commission, suitable guarantees such as the agreement of what are known as EU standard data protection clauses of the European Commission with the recipient) or you have given your express consent. Information about suitable guarantees is available from the Global Data Privacy Officer.

We revise this data privacy statement in case of changes to this website or as warranted on other occasions. The respective current version can always be found on this website.

Privacy policy date: 22 March 2022