1. Controller and Contact
The controller responsible for processing personal data through this website is:
IMed Solutions GmbH
Schubertstrasse 31
88214 Ravensburg
Germany
Telephone: +49 751 35 978 150
Email: email@imed-solutions.de
For privacy inquiries or to exercise your rights, please contact us using these details.
2. Website Hosting and Server Logs
Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.
When you visit our website, the following information may be processed automatically: your IP address, date and time of access, requested URL or page, browser type and version, operating system, referring website, and server response status, where recorded by our hosting server.
We process this information to deliver the website, maintain its stability and security, and investigate technical faults or misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Server log files are deleted automatically by our hosting provider after a maximum of five (5) days, unless particular records need to be retained longer to investigate a security incident or establish, exercise or defend legal claims.
Where our hosting provider processes personal data on our behalf, this processing is governed by a data-processing agreement pursuant to Article 28 GDPR.
3. Inquiries and Business Communication
When you contact us by email, telephone or a contact form, we process the information you provide to respond to your inquiry and manage the associated communication. This may include your name, company, contact details and message.
Where processing is necessary to enter into or perform a contract with you personally, the legal basis is Article 6(1)(b) GDPR.
For general inquiries and communication with individuals acting on behalf of businesses or other organisations, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to inquiries and maintaining business relationships.
You are not generally required to provide personal data. However, we need sufficient contact information and details to respond to your request. Required contact-form fields are marked accordingly.
Please do not submit patient information, health data or other sensitive personal information through ordinary email or our website contact form.
4. Retention of Inquiry and Business Data
We retain inquiry data for as long as necessary to handle the inquiry and any resulting follow-up.
Where statutory retention obligations apply, we retain the relevant records pursuant to Article 6(1)(c) GDPR. Depending on the document category, commercial and tax retention periods are generally six, eight or ten years, usually calculated from the end of the relevant calendar year. Applicable exceptions may require longer retention.
Information may also be retained where necessary to establish, exercise or defend legal claims, based on Article 6(1)(f) GDPR.
After the applicable purposes and retention requirements have ended, the data is deleted or anonymised.
5. Cookies and Similar Technologies
Our website uses only technically necessary cookies and similar technologies. These include cookies required for the operation of the website, a cookie that stores your language selection (WPML) and cookies that store your choice in our cookie consent banner (Complianz). We do not use analytics, marketing or other consent-based cookies.
Storage of information on your device, or access to information already stored there, is governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Where a technology is strictly necessary to provide a digital service you expressly request, consent is not required under Section 25(2) TDDDG. Any associated processing of personal data is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
If we introduce technologies that require consent in the future, they will only be used after you have consented. The legal bases are then Section 25(1) TDDDG and, for associated personal-data processing, Article 6(1)(a) GDPR. You can view and change your cookie settings at any time via the “Cookie Settings” link in the footer of our website. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You can also manage cookies through your browser settings. Blocking necessary cookies may affect website functionality.
6. Contact via WhatsApp
You may contact us voluntarily through WhatsApp. Alternatively, you can contact us by telephone or email without using WhatsApp.
Website integration: Our website displays a WhatsApp contact button using the WordPress plugin “Float Menu Lite”, which runs on our own server. The button is a simple link. WhatsApp opens only when you click it. No WhatsApp chat interface, script or cookie is loaded on our website, and no personal data is transmitted to WhatsApp or the plugin provider before you click the button.
When you contact us through WhatsApp, we process your phone number, message content and any profile information or attachments made available to us to handle your inquiry.
For general inquiries and communication with representatives of businesses, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing an additional communication channel and responding to inquiries. Where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you personally, the legal basis is Article 6(1)(b) GDPR.
We do not treat your decision to contact us through WhatsApp as consent to receive newsletters or other marketing messages.
The WhatsApp service used by iMED is the WhatsApp Business app. The provider for users in the European Region is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes personal data under its own terms and privacy information, available at https://www.whatsapp.com/legal/privacy-policy-eea. International transfers are described in Section 8 of this privacy policy.
We retain inquiry information according to Section 4 of this privacy policy. WhatsApp’s own retention practices are described in its privacy information.
Please do not send patient information, health data or other sensitive personal information through WhatsApp.
7. Service Providers and Other Recipients
Where necessary for the purposes described in this policy, personal data may be processed by the following recipients:
– STRATO GmbH, Berlin, Germany (website hosting and email services)
– Ideal Digital Link (website development and maintenance)
– WhatsApp Ireland Limited, Ireland (if you contact us via WhatsApp)
Providers processing personal data on our behalf are subject to appropriate contractual obligations, including data-processing agreements where required.
We may disclose information to competent authorities, professional advisers or other recipients where required by law or necessary to establish, exercise or defend legal claims. Depending on the circumstances, the legal basis is Article 6(1)(c) or Article 6(1)(f) GDPR.
8. International Data Transfers
Our website is hosted in Germany by STRATO GmbH. Contact-form submissions are stored in our website database on STRATO’s servers and sent to us by email via STRATO’s email service.
In the following cases, personal data may be processed outside the European Economic Area (EEA):
– WhatsApp (USA): We use the WhatsApp Business app, provided for users in the European Region by WhatsApp Ireland Limited, Ireland. If you contact us via WhatsApp, data may be transferred to Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA. Meta Platforms, Inc. is certified under the EU–US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Article 45 GDPR).
You may contact email@imed-solutions.de for information about the safeguards relevant to your personal data.
9. Your Rights
Subject to the applicable legal conditions, you have the right to:
- Obtain access to your personal data under Article 15 GDPR.
- Request correction of inaccurate or incomplete data under Article 16 GDPR.
- Request erasure under Article 17 GDPR.
- Request restriction of processing under Article 18 GDPR.
- Receive and transfer eligible data under Article 20 GDPR.
- Withdraw consent at any time under Article 7(3) GDPR.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object at any time for reasons relating to your particular situation. This also applies to profiling based on that provision.
We will then stop processing the relevant data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.
Objection to direct marketing
If we process your personal data for direct marketing, you may object at any time without giving reasons. This includes profiling related to such marketing. We will then stop processing your personal data for those purposes.
To exercise your rights, contact email@imed-solutions.de.
10. Complaints
You have the right to lodge a complaint with a competent data-protection supervisory authority, particularly in the EU Member State of your habitual residence, workplace or the alleged infringement.
The local supervisory authority for our company is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany
Website: https://www.baden-wuerttemberg.datenschutz.de/
11. Updates
We may update this privacy policy to reflect changes in our processing activities or legal requirements. The current version is available on this website.
Last updated: 28 October 2026