Last updated: 19.08.2026
 

Controller

The controller responsible for data processing on this website is:

MTS Medical AG
Robert-Bosch-Str. 18
78467 Konstanz, Germany
Phone: +49 (0)7531 36185-0
Email: info@mts-medical.com

The controller decides, either alone or jointly with others, on the purposes and means of processing personal data (e.g. names, contact details or similar information).
 

Data Protection Officer

You can contact our Data Protection Officer by email at datenschutz@mts-medical.com or by post at the address above with the addition "For the attention of the Data Protection Officer".

​

Withdrawal of your consent to data processing

Some data processing operations are only possible with your express consent. You may withdraw consent already given at any time. An informal notification by email is sufficient for this purpose. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.
 

Right to lodge a complaint with the competent supervisory authority

As a data subject, you have the right to lodge a complaint with a supervisory authority in the event of a data protection violation. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, either yourself or through a third party. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only be carried out where technically feasible.
 

Right of access, rectification, restriction of processing and erasure

Within the scope of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, where applicable, a right to rectification, restriction of processing or erasure of this data. For this purpose, and for any other questions relating to personal data, you may contact us at any time using the contact details above.

​

Information on the online services offered on this website Server log files

Our hosting provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:

• Page visited on our domain

• Date and time of the server request

• Browser type and browser version

• Operating system used

• Referrer URL

• Host name of the accessing computer

• IP address

This data is not merged with other data sources. Server log data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically error-free provision of our website and in preventing and investigating misuse and security incidents. The log data is deleted as soon as it is no longer required for these purposes.

​

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our services more user-friendly, effective and secure.

Some cookies are "session cookies". These cookies are automatically deleted at the end of your browser session. Other cookies remain on your device until you delete them yourself. Such cookies help us recognise you when you return to our website.

Modern web browsers allow you to monitor, restrict or prevent the setting of cookies. Many web browsers can be configured to delete cookies automatically when the program is closed. Disabling cookies may restrict the functionality of our website.

Technically necessary cookies and comparable storage or access operations that are strictly necessary to provide a digital service expressly requested by you are used on the basis of Section 25(2) TDDDG. Where personal data is processed in this context, the processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the technically secure and functional provision of our website.

For all cookies and comparable technologies that are not technically necessary, we obtain your consent before they are used. In these cases, the storage of information on your device or access to information already stored on your device is based on Section 25(1) TDDDG; the subsequent processing of personal data is based on Art. 6(1)(a) GDPR. You may withdraw or change your consent at any time with effect for the future via the cookie settings.

​

Usercentrics (Cookie Consent Management)

We use the Usercentrics consent management platform (CMP) on our website to obtain, manage and verifiably document our users' consent to cookies and other tracking technologies. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

When you access our website, the following data is processed: date and time of access, browser and device information, IP address, your cookie preferences and the URL of the page visited. The processing is carried out to fulfil our legal obligation to provide evidence under Art. 7(1) GDPR, for which Art. 6(1)(c) GDPR provides the legal basis; without this processing, the functionality of our cookie banner cannot be ensured.

Usercentrics processes personal data as our processor in accordance with Art. 28 GDPR. Under the Data Processing Agreement concluded with Usercentrics, processing generally takes place within the EU/EEA. Where subprocessors or processing activities in third countries are used in individual cases, this takes place only in compliance with the requirements of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards such as the Standard Contractual Clauses of the European Commission. You may change or withdraw your cookie preferences at any time via the cookie settings icon on our website. Further information can be found in the Usercentrics privacy policy: https://usercentrics.com/de/datenschutzerklaerung/.

​

Hosting and email delivery

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services used by us to operate this online offering.

In this context, we or our hosting provider process master data, contact data, content data, contract data, usage data, metadata and communication data of customers, interested parties and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
 

Wix

Our website is created and operated using the Wix website builder provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel. When you use our website, Wix may process, in particular, IP addresses as well as technical usage and communication data. We have entered into a data processing agreement with Wix in accordance with Art. 28 GDPR.

The processing is based on our legitimate interest in the technically secure, stable and appealing provision of our online offering pursuant to Art. 6(1)(f) GDPR. Data transfers to Wix.com Ltd. in Israel are covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR. Where data is transferred to Wix.com Inc. in the USA, the transfer is based on the EU-US Data Privacy Framework to the extent covered by the certification; in addition, the group-internal protection mechanisms and appropriate safeguards implemented by Wix apply. Further information: https://www.wix.com/about/privacy.

​

Wix Analytics

With your consent, we use Wix Analytics, a statistics function provided by Wix.com Ltd. (see "Wix" above), to understand how visitors use our website. Wix Analytics processes information such as device type and operating system, browser type and version, pages visited and time spent on them, traffic sources and approximate geographic location based on a shortened IP address. We use this information to improve the performance, content and usability of our website.

Wix Analytics is activated only after you have given your consent via our consent management platform. The legal basis for accessing information on your device is Section 25(1) TDDDG; the subsequent processing of personal data is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings. Information on data transfers to Wix can be found in the "Wix" section above.

​

Contact form

Data submitted via the contact form, including your contact details, is stored so that we can process your enquiry or be available for follow-up questions. This data will not be disclosed without your consent.

The processing of data submitted via the contact form depends on the content of your enquiry. If your enquiry relates to the initiation or performance of a contract, Art. 6(1)(b) GDPR is the legal basis. For other enquiries, processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in properly processing and responding to your enquiry. Where we expressly obtain consent for individual processing activities, Art. 6(1)(a) GDPR is the legal basis; consent granted may be withdrawn at any time with effect for the future.

Data submitted via the contact form will remain with us until you request erasure, withdraw your consent to storage or the purpose for storing the data no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.

HubSpot forms

We use forms from the provider HubSpot on our website. The provider is HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA; HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland, also operates in Europe. The data you enter into forms, in particular your name, email address and other voluntary information, is processed for handling contact and prospective-customer enquiries.

Depending on the content of the enquiry, processing is based on Art. 6(1)(b) GDPR or, where consent is obtained, on Art. 6(1)(a) GDPR. We have entered into a data processing agreement with HubSpot in accordance with Art. 28 GDPR.

HubSpot, Inc. is certified under the EU-US Data Privacy Framework. To the extent a transfer to HubSpot, Inc. is covered by this certification, it is carried out on the basis of the European Commission's adequacy decision pursuant to Art. 45 GDPR. In addition, the HubSpot Data Processing Agreement provides for appropriate safeguards. Further information is available at https://legal.hubspot.com/privacy-policy.

​

Integration and use of third-party services and content

General information on the integration of third-party services and content

Within our online offering, we use content or service offerings from third-party providers in order to integrate their content and services, such as videos or maps (collectively referred to below as "content"). Where the integration requires access to your device or is not technically necessary, we only load the content after you have given your consent via our consent management platform; the specific legal bases are stated in the sections below.

Integrating such content always requires the third-party providers to receive the users' IP address, as they would otherwise be unable to send the content to the users' browsers. The IP address is therefore required to display this content. We endeavour to use only content whose respective providers use the IP address solely for delivering the content. Third-party providers may also use pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. Pseudonymous information may also be stored in cookies on users' devices and may include technical information about the browser and operating system, referring websites, visit times and other information on the use of our online offering, and may also be linked to such information from other sources.

​

YouTube

Videos from the YouTube service are embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Embedded YouTube content is activated only after you have given your consent via our consent management platform. Upon activation, your IP address, device and usage information in particular may be transmitted to Google, and cookies or comparable technologies may be used. The legal basis for accessing information on your device is Section 25(1) TDDDG; the subsequent processing of personal data is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings.

Data transfers to certified US recipients of Google may take place on the basis of the European Commission's adequacy decision for the EU-US Data Privacy Framework; in addition, appropriate safeguards, in particular Standard Contractual Clauses, may be used. Further information is available at https://policies.google.com/privacy.

​

Google Maps

We integrate maps from the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Maps is activated only after you have given your consent via our consent management platform. Upon activation, your IP address and, if you allow this in your device settings, your location data may be transmitted to Google, and cookies or comparable technologies may be used. The legal basis for accessing information on your device is Section 25(1) TDDDG; the subsequent processing of personal data is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings.

Data transfers to certified US recipients of Google may take place on the basis of the European Commission's adequacy decision for the EU-US Data Privacy Framework; in addition, appropriate safeguards, in particular Standard Contractual Clauses, may be used. Privacy policy: https://policies.google.com/privacy; opt-out: https://adssettings.google.com/authenticated.

​

Links to social networks

Our website contains only external links to our profiles on social networks and platforms, namely LinkedIn, Facebook, Instagram and YouTube. We do not use social media plugins, Like buttons or comparable embedded functions from these providers on our website.

Accordingly, merely visiting our website does not result in personal data being transferred to the respective social networks as a result of these links. Only when you click such a link do you leave our website, and the privacy provisions of the respective platform provider then apply.

​

Google Ads and Google conversion tracking

Our website uses Google Ads, an online advertising service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

How Google Ads and conversion tracking work: After you click an advertisement placed by Google, a cookie is set for conversion tracking. These conversion cookies expire after 30 days and are not used to personally identify users. Google and we can use the cookie to determine that you clicked on an advertisement and were redirected to our website. Each Google Ads customer receives its own cookie; these cookies cannot be tracked across the websites of other Google Ads customers. As an Ads customer, we learn how many users clicked on our advertisement and were redirected to a page with a conversion tracking tag. However, we do not receive any information that enables us to personally identify users.

Legal basis and consent: Google Ads conversion tracking is activated only after you have given your consent via our consent management platform. The legal basis for accessing information on your device is Section 25(1) TDDDG; the subsequent processing of personal data is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings.

Automated decisions: The use of Google Ads may involve automated decisions, for example the delivery of targeted advertisements based on collected data. You have the right not to be subject to a decision based solely on automated processing where that decision produces legal effects concerning you or similarly significantly affects you.

Data transfer to the USA: In connection with the use of Google Ads and conversion tracking, personal data may be transferred to and stored on Google servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission's corresponding adequacy decision. Further information: https://www.dataprivacyframework.gov/. Up-to-date information on data processing by Google can be found at https://policies.google.com/privacy.

​

Google Tag Manager

Google Tag Manager is a solution that enables us to manage website tags through an interface and integrate other services into our online offering. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When Tag Manager is used, technical information, in particular IP address and device information, may be processed and transmitted to Google. Any additional data processed depends on the services integrated via Tag Manager; the relevant sections of this privacy policy apply.

Cookies and data processing: Where Google Tag Manager is used to integrate services, cookies or comparable technologies that are not technically necessary, these are activated only after you have given your consent. In these cases, the legal basis for accessing information on your device is Section 25(1) TDDDG and, for the subsequent processing of personal data, Art. 6(1)(a) GDPR. Technically necessary operations are used without consent only to the extent permitted by law.

Data transfer to the USA: Data collected by tags implemented through Google Tag Manager may be transmitted to Google servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission's corresponding adequacy decision.

Opt-out options: You can change your consent at any time via the cookie settings. You can also configure your web browser to block cookies; disabling cookies may restrict the functionality of our website. Further details: Google Tag Manager use policy.

​

Web fonts

We use web fonts (including Google Fonts) to ensure consistent font display. The required font files are delivered from the servers of our website provider Wix and are not retrieved from Google servers when you visit our website. Therefore, the use of these fonts does not result in the transfer of your IP address or other personal data to Google, and no consent is required for them.

​

Newsletter

The following information explains the content of our newsletter, the registration and delivery process, statistical evaluation procedures and your rights to object. By subscribing to our newsletter, you agree to receive it and to the procedures described.

Newsletter content: We send newsletters, emails and other electronic notifications containing promotional information (hereinafter "newsletter") only with the recipients' consent or on the basis of a statutory permission. Where the content of the newsletter is specifically described during registration, that description is decisive for the user's consent. Our newsletters generally contain information about our products, services and our company.

Mailing service provider: We send our newsletter using HubSpot (see "HubSpot forms" above for provider details, data processing agreement and data transfers).

Double opt-in and logging: Registration for our newsletter uses the double opt-in procedure. This means that after registering, you receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no one registers using another person's email address. Newsletter registrations are logged so that the registration process can be demonstrated in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored with the mailing service provider are also logged.

Registration data: To subscribe to the newsletter, it is sufficient to provide your email address. In individual cases, we may also ask for your name so that we can address you personally in the newsletter.

Legal basis: The newsletter and the related performance measurement are sent on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Art. 7 GDPR in conjunction with Section 7(2) No. 3 UWG or, where consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG. Where personal data is transferred to countries outside the EEA in connection with newsletter delivery, this takes place only in accordance with the requirements of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision of the European Commission (e.g. for certified US recipients under the EU-US Data Privacy Framework) or on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Unsubscribing: You may unsubscribe from our newsletter at any time, i.e. withdraw your consent. An unsubscribe link is included at the end of every newsletter. After unsubscribing, we store your email address for up to three years on the basis of our legitimate interests in order to demonstrate that consent had previously been given. Processing of this data is restricted to the purpose of defending against potential claims. An individual request for erasure may be made at any time, provided that the previous existence of consent is confirmed at the same time.

Newsletter performance measurement

The newsletters contain a so-called "web beacon", i.e. a one-pixel file that is retrieved from our server or, where we use a mailing service provider, from that provider's server when the newsletter is opened. During this retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of retrieval.

This information is used for the technical improvement of the services on the basis of technical data, or for analysing target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times. Statistical analyses also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be associated with individual newsletter recipients. However, neither we nor, where applicable, the mailing service provider seek to monitor individual users. Rather, the analyses help us identify users' reading habits and adapt our content to them or send different content according to users' interests.

It is not possible to withdraw consent separately for performance measurement; in this case the entire newsletter subscription must be cancelled.