Privacy Policy

1. General

The protection of your personal data is of particular concern to us. We, XRSynergies LLC (company number 527196 p) (“XRS" or "we"), Lagergasse 6/10, 1030 Vienna as controller therefore process your data exclusively on the basis of the statutory provisions (GDPR, DSG, TKG 2003). In this data protection information, we inform you about the information we collect, process and use when you visit and use our website www.xrs-medical.com (“Website").

2. What data do we collect and process from you, for what purposes and on what legal basis?

Contact us
If you send us an enquiry by e-mail to get in touch with us, we process the data you provide (e.g. name, e-mail address, telephone number, subject and content of your message if applicable). We process the data provided when you contact us exclusively to process your enquiry, to contact you on request and to provide you with the requested information. This data processing is therefore necessary to fulfil our (pre-)contractual obligations or due to our legitimate interests in responding to any follow-up enquiries (Art. 6 para. 1 lit. b and f GDPR).

Cookies
Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause anydamage. We use cookies to make our website more user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If you deactivate cookies, the functionality of our website may be restricted. We do not set any analysis or marketing cookies, but only technically necessary cookies based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in a technically meaningful presentation of our content.

3. Will your data be passed on to third parties?

To the extent necessary, we transfer your personal data to the following external service providers (processors) who support us in the provision of our services:
- IT service providers and/or providers of data hosting solutions or similar services;
- other service providers, providers of various tools and software solutions that also support us in the provision of our services and act on our behalf. All our processors process your data only on our behalf and on the basis of our instructions so that we can provide you with our services.

We also transfer your personal data to the following recipients (controllers) to the extent necessary:
- Potential third parties involved in the provision of our services to fulfil our contractual obligations (e.g. other users of our online services, banks for payment
processing, payment service providers);
- external third parties to the extent necessary on the basis of our legitimate interests (e.g. auditors and tax consultants, insurance companies in the event of an insurance claim, legal representatives in the event of a claim)
- authorities and other public bodies to the extent required by law (e.g. tax authorities)

If we process your data in a third country outside the European Union (EU) or the European Economic Area (EEA) or if this is done as part of order processing, this will only happen if it is necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests.

We have established suitable and appropriate measures (guarantees) for these cases to ensure that your data is transferred to the respective third country in compliance with data protection regulations and that it is processed there in compliance with data protection regulations. At your request, we can provide you with a copy of these guarantees if we process or have your data processed in third countries.

4. How long will your data be stored?

We only store your personal data for as long as is necessary for the purposes for which it is processed. In addition, we may be obliged to store your data for longer due to corresponding statutory retention periods. Specifically, we generally store your data in connection with contact with us for six months from the last contact. Access data and log files are stored for a maximum of 500 days and then deleted. We generally store data about your usage behavior for a period of three years from the date of the last access. In addition, we also store your personal data beyond the aforementioned periods in the event of an incident, as long as legal claims can be asserted from the relationship between you and us or until the final clarification of a specific incident or legal dispute. This longer storage period is to protect our legitimate interests in the assertion, clarification and defense of legal claims.

5. Your rights

In principle, you have the rights to information, rectification, erasure, restriction, data portability, cancellation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority www.dsb.gv.at .

You can reach us using the following contact details: hello@xrs-medical.com