Privacy notice

Ottobock SE & Co KGaA
Max-Näder-Strasse 15, 37115 Duderstadt, Germany

Data Protection Officer of the Legal Entity: confidentially via contact form.

Secure provision of the website

In case you visit our website, the web server temporarily collects the following information to display the website and stores such information in so-called server log files:

Processed categories of data:

• Browser type and version,

• operating system used,

• Referrer URL,

• browser string

• Hostname of the accessing computer,

• Time of the server request and

• IP address.

Purposes:
Ottobock's interest is the secure and functional operation of the website. The logged data is used in particular for the purposes of data security, to defend against attempts of attack on our web servers. We reserve the right to carry out statistical evaluation of anonymous data records.

Legal basis:
The processing of this data is based on Art. 6 para. 1 f GDPR: We have a legitimate interest in ensuring data security and trouble-free operation.

Storage periods or criteria for determination:
The data will be deleted after 180 days at the latest.

Contact form or contact

Since not all questions may be served immediately and conclusively by the explanations on our website, we would like to provide you with the opportunity to address your concerns directly to Ottobock experts. For this purpose, we offer various contact channels on our website.

In case you contact us, we process the following categories of data, for example:

• Contact information

  • First name, last name

  • Address (private, practice or business address, customer number)

  • Email address

  • Phone

• Topic-specific information

  • Medical field

  • Your relationship to Ottobock (e.g. interested party, user, medical supply store, etc.)

• Content of your inquiry

  • Inquiry specific information

Mandatory data in contact forms, whichare absolutely necessary to answer your request, are marked with an asterisk *.

Purposes:
Ensuring that your inquiry is processed quickly in accordance with Ottobock's quality standards. This includes record, allocation and processing of the inquiry by the relevant company departments.

Legal basis:
The processing of the data is based on Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in processing this data for the purpose of processing your request.If you use the contact form to convey an interest in purchasing our products and services, this is a contract-relevant inquiry based on Art. 6 Para. 1 lit. b GDPR.If you provide special categories of personal data in the context of your query, e.g. health data, the processing is based on Art. 9 para. 2 lit. h GDPR (care or treatment in the healthcare sector).

Storage periods or criteria for determination:
In case you send us a contact request, we will store this data for the duration of processing your request. Further storage may be necessary, depending on separate storage obligations with regard to your query.

Events - registration and attendance

This document explains which personal details we ask you to provide when you register for or attend one of our events, and how we process your personal data. We regret that we cannot process your registration unless you provide us with the details we have marked as mandatory.

Categories of processed data:
For example, we process the following categories of personal data for this purpose:When you register using the contact form

• Your contact details

  • Name

  • Company / Institution

  • Country

  • Email address

• Other content of your enquiry

  • Questions relating to your enquiry

We use an asterisk * to indicate mandatory fields in contact forms. Without this information, we cannot process your registration.

Additional information when attending events (particularly online events)

• Your user details and, where applicable, your profile picture

• Usage data

• Chat messages

Purposes:
To enable you to register for and attend an event (e.g., sending you login details or other updates prior to the event; navigating the presentations; providing the technological framework for you to attend and participate; providing summaries and other event-related information after the event).

Legal basis:
The personal data you are required to provide when you register for and attend an event will be processed in line with Article 6, paragraph 1 b of the GDPR.

Retention periods / criteria for action:
We delete your data when we no longer need it in order to register you for our event or to enable you to attend our event, provided we are not required by law to store your data (in particular, if statutory or contractual retention periods apply; retention periods generally last for 10 years after the event).

Promotional Material / Newsletter

If you are interested in news in the field of medical devices or in our products and services - in particular innovations and interesting campaigns and actions driven by Ottobock, you may agree to receive advertising and in particular to receive our newsletter.

To send you the most suitable information in the requested promotional materials, we process the following categories of data, for example

• Newsletter technology

  • Meta Data (e.g. Device-ID, IP-Address)

  • Usage Data (e.g. access time, interests)

• Contact information

  • Name

  • email address

  • Professional position (job title)/ company affiliation (company name)

  • Postal address, or telephone contact

• Interest-specific information

  • Selection of the product section you would like to receive information on (e.g. Prosthetics, Orthotics and Human Mobility)

  • Your relationship with Ottobock (interested party, user, medical supply store, etc.)

  • Raffles

  • Surveys

  • Invitations to exhibitions

  • Clinical studies/ evaluations/ testing probation

  • Comment

Data and Information in such order forms, that are absolutely necessary are marked with an asterisk*.

Purposes:
Ensuring the proper provision of promotional material and to establish contact with you. We use this data to check the accuracy of your email address and to ensure that the promotional material is correctly tailored with the information that is appropriate for you.

Legal basis:
The data will be processed exclusively on the basis of your consent: The processing is therefore based on Art. 6 para. 1 a GDPR.Where health data is processed, the processing is based on Art. 9 para. 2 a GDPR (consent for special categories of personal data).If we process your data in order to comply with legal obligations, such data processing is based on Art. 6 Para. 1 c GDPR.

Withdrawl of your consent:
You have the right to revoke your consent at any time. You may exercise this right of revocation via informal email notification to info@ottobock.com. You may revoke the receipt of newsletters directly via the corresponding "unsubscribe"-function in the newsletter. Please note that this does not affect the permissible data processing that took place up to the point of withdrawal.

Storage periods or criteria for determination:
As soon as the data is no longer required for the purposes we pursue or you have withdrawn your consent and there is no other legal basis, the data will be deleted. If the latter is the case, we will delete the data where the other legal basis has ceased to apply.

Live Chat

If you use the chat functions on our pages, information is transmitted to the customer service department when the chat is initialized.

In case you use the Live-Chat offered on the website, we process the following data:

• Connection information

  • Browser version,

  • operating system,

  • IP address,

• Chat-specificinformation

  • Selection of the help topic

  • Information about the availability of the chat service

  • Availability of chat partners

• Chat contents

Apart from aforementioned data, no further personal data is collected, unless you provide this information voluntarily inside the chat.

Purposes:
Opportunity for direct exchange with our business partners and customers.

Legal basis:
The data will be processed exclusively on the basis of your consent. The processing is therefore based on Art. 6 para. 1 a GDPR.Where health data is processed, the processing is based on Art. 9 para. 2 a GDPR (consent for special categories of personal data).

Withdrawl of your consent:
You have the right to withdraw your consent at any time. You may exercise your right to withdraw by sending an informal email to info@ottobock.com. Please note that this does not affect the permissible data processing that took place until the withdrawal.

Storage periods or criteria for determination:
We store the communication for the duration of processing or until your consent is withdrawn. If further storage is required, depends on separate storage obligations with regard to our commune chat.

You may use our Job-Portal purely for informational purposes. Additionally, you may register on our Job-Portal to apply for vacant positions in the Ottobock Group and to take advantage of extended services.

Automated decision-making does not take place.

If you use our Job-Portal, we process the following data:

• master data e.g. first und last name,

• address and contact data as well as

• education, qualification and CV-data and, in special cases,

• information on special data categories such as an existing severe disability.

Purposes:
We process the personal data you provide us with to bring forward your application. Thus, we process your personal data as part of the recruiting platform in order to find suitable candidates for open positions. To use our Job-Portal, you have to create a candidate profile. This allows you to apply for specific positions and to enable notifications on suitable open positions that match your search criteria ("Job Alert").

Where you agreed, that we may also consider your application for other jobs of the Ottobock group, we may ask you for your permission to remain in contact with us for a longer period of time (Talent Pool).

The provision of your personal data is neither statutory nor contractually required. If however, you wish to apply for a specific job via our Job-Portal, the provision of your personal data is necessary so that Ottobock may decide on your application – and if applicable, on your employment. The use of the functionalities mentioned above or below (Job Alert, Talent Pool) is voluntary, but the provision of your data is required.

Legal basis:
In the context of your specific application, we process your data in order to make a decision on the conclusion of an employment contract. The legal basis for this is Art. 6 (1) (b) GDPR. We process any information on your existing severe disability on the basis of Art. 9 (2) (b) GDPR.

If you create a candidate profile in the Job-Portal for setting up a job alert, or we invite you to the Talent Pool, or for cases where we share your application with other Ottobock Group companies, or where you voluntarily provide us with additional personal data, we process your data in this context on the basis of your prior consent (Art. 6 (1) (a) GDPR). You may withdraw your consent at any time with effect for the future. You may reach the Global Data Privacy Office confidentially via contact form or control your settings in the candidate profile by yourself.

Who receives your application data?
Within Ottobock, access to your personal Data is granted on a need-to-know basis and in order to make decisions on the conclusion of an employment contract or to process your e-recruiting candidate-profile (e. g. HR, works council, department heads).

When creating your candidate profile, you may activate the visibility of your profile for recruiters and department heads of Ottobock Group companies in your country or for recruiters and department heads of all Ottobock Group companies. You may also activate or restrict the visibility of your candidate profile in your account later. If you agree to your profile being made available to recruiters from other Ottobock companies, this may also allow companies outside the EU (so-called third countries) to access the data in your profile. In these cases, Ottobock ensures that these companies maintain an appropriate level of data protection. Further information on this and information on the appropriate safeguards may be requested from the Data Protection Officer.

How long do we store your application data?
In general, you may change and delete your data yourself within your candidate profile in the Job-Portal at any time. However, we reserve the right to retain data on a specific application as of rejection for a maximum of 6 months following receipt of such rejection in the interests of preserving evidence. If you do not log in for a period of 6 months after completing your last application, your data / candidate profile will be automatically deleted.

If you provided us with your permission for the talent pool, your data/ candidate profile will be deleted after one year.

Where we process your data on the basis of consent, your data will be deleted independently after withdrawal of your consent.

Active Sourcing
For recruiting purposes, we also actively search social networks, forums or other freely available sources on the internet for interesting candidate profiles.

We usually contact the candidates via the direct message function in the relevant network. We offer such candidates the opportunity to join a personal consultation in which we present Ottobock as an employer as well as relevant open positions. In the following, candidates may decide whether they would like to apply for one of the positions via the Job-Portal or a job-link provided by us. Alternatively, candidates may also stay in touch with us regarding career opportunities via this communication channel, independently of a specific application. For this purpose of future touch base, we will ask for the candidate’s prior consent.

Automated decision-making does not take place.

The following data is processed in the course of Active Sourcing:
In the context of this active candidate search, we only process data that is obviously made public by these persons themselves (name data, profile data, contact data if applicable).

Purpose:
Recruiting

On which legal bases do we process your personal data?
The search for interesting candidate-profiles and the initial contact is carried out on the basis of the user agreement with the social network or on the basis of our legitimate interests in recruiting new talents for Ottobock. The legal basis for this are Art. 6 (1) (b) and (f) GDPR.

Who receives your data?
Within Ottobock, access to your personal Data is granted on a need-to-know basis and in order to support the decision-making on the offering of an employment contract or to process your e-recruiting candidate-profile (e. g. HR, works council, representative for severely disabled employees, hiring manager).

How long do we store your data?
Where candidates do not respond to our invitation to apply for a vacant position or to stay in touch with us, the candidate’s personal data will be deleted by us following 4 months at the latest.

You have the right,

a) to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to access information about this processing (Art. 15 GDPR).

b) to demand the rectification or completion of inaccurate or incomplete data (Art. 16 GDPR);

c) to withdraw a given consent at any time with effect for the future (Art. 7 para. 3 GDPR);

d) in certain cases (Art. 17 GDPR) to request the erasure of data;

e) under certain conditions, to request the restriction of processing; (Art. 18 GDPR);

f) under certain conditions to data portability, i.e. you may receive your data, which you have provided us with, in a structured, common and machine-readable format or have it transferred to another controller (Art. 20 GDPR);

g) to complain to a supervisory authority (Art. 77 GDPR).

Right to object (Art. 21 GDPR)

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you (Art. 6 I lit. f GDPR). This also applies to profiling based on these provisions. We will then no longer process the personal data, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Where personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is linked to such direct marketing. If you object to processing for the purposes of direct marketing, your personal data will no longer be processed for such purposes.

To processors – companies that Ottobock commissions with the processing of data within the legally stipulated framework (Art. 28 GDPR - service provider). In this case Ottobock remains responsible for the protection of your data. Our processors are carefully selected, are bound by our instructions and are regularly checked by us. We only commission processors who offer sufficient guarantees that suitable technical and organizational measures are taken in such a way, that processing is carried out in accordance with the requirements of GDPR and guaranteeing the protection of your rights.

To private entities that provide services for you on their own responsibility or in connection with an Ottobock contract. This is the case, if you commission services from private agencies, if you agree to such integrated services or if we integrate private agencies due to legal permission. If, in the course of processing, we nevertheless disclose your data to third parties, transfer it to them or otherwise grant them access to that data, this will also be done exclusively on the basis of one of the legal bases mentioned.

To government agencies to which we transfer certain data due to legal obligations.

We may transfer your data to entities whose registered office is located outside the European Union or the European Economic Area. In doing so, we will ensure prior to the transfer, that apart from exceptional cases permitted by law, either an adequate level of data protection exists at the recipient's end (e.g. through an adequacy decision by the European Commission, through appropriate safeguards such as the agreement of so-called EU standard contractual clauses of the European Commission with the recipient) or your expressed consent has been obtained. Information on suitable safeguards may be obtained from the Global Data Privacy Officer.

We will revise this privacy notice whenever changes are made to this website or other reasons that require it. You will always find the current version on this website.

State of declaration: 26th March 2021