Privacy Policy

1. Privacy at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator:

MESC International Patient Service GmbH
Danzigerstraße 49a
65191 Wiesbaden
Germany
Email: [email protected]
Phone: +49 611 183 230 47

How do we collect your data?
Your data is collected in part by you providing it to us, for example, by sending us an email. Other data is automatically collected or collected with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system or time of page access).

What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour. When you contact us by email, your data is used to process your enquiry.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

Cloudflare

We host our website with Cloudflare. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter "Cloudflare").

When you visit our website, your personal data is processed on Cloudflare's servers. Personal data may also be transmitted to Cloudflare's servers in the USA. The data processed may include IP addresses, contact enquiries, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

Cloudflare also uses technically necessary cookies to ensure the security and availability of the website (e.g. for protection against DDoS attacks and bot detection).

The use of Cloudflare is based on our legitimate interest in making our website available as reliably and securely as possible (Art. 6(1)(f) GDPR).

Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Information on the Responsible Party

The responsible party for data processing on this website is:

MESC International Patient Service GmbH
Danzigerstraße 49a
65191 Wiesbaden
Email: [email protected]

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

Storage Duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

Note on Data Transfer to the USA and Other Third Countries

We use tools from companies based in the USA or other third countries that are not secure under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. We point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. Where necessary, we have concluded EU Commission Standard Contractual Clauses with the respective providers.

Your Rights as a Data Subject

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether data concerning you is being processed and to obtain information about this data.
• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate data concerning you.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of data concerning you.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR): You have the right to receive the data concerning you in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of personal data concerning you.

To exercise your rights, please contact: [email protected]

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy. The competent supervisory authority is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden

4. Data Collection on This Website

Server Log Files

The provider of the pages (Cloudflare) automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• IP address
• Time of the server request

This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website.

Contact by Email

You can contact us by email at [email protected]. The data you provide (e.g. name, email address, message content) will be processed for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). No third-party services are used for email delivery.

5. Web analytics (Google Analytics)

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable analysis of your use of our website. These cookies are only set with your explicit consent via our cookie banner. The legal basis is Art. 6(1)(a) GDPR (consent). The information generated by the cookie is usually transmitted to a Google server in the USA. We have activated IP anonymisation, so your IP address is truncated within the EU. You can revoke your consent at any time by deleting the cookie_consent cookie in your browser. Further information: Google Privacy Policy.

6. Fonts

This website uses the fonts "Playfair Display" and "Inter". The font files are hosted locally on our server (Cloudflare). No connection to Google servers or other third-party providers takes place. No personal data is transmitted to third parties in connection with the display of fonts.