This English translation of the Privacy Policy is provided for convenience and better understanding only.
In the event of any discrepancies or inconsistencies between the English and German versions, the German version shall prevail.
Only the German version is legally binding.

Privacy Policy

We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, process, and use personal data when you use our website and services, and what rights you have in relation to this data, in accordance with the General Data Protection Regulation (GDPR) and other applicable international privacy laws.

1. Name and contact details of the controller

The controller pursuant to Article 4(7) GDPR and applicable national data protection laws is:

Murrplastik Medizintechnik GmbH
Gewerbering 11
08223 Falkenstein

Email:
Phone: 0 37 45 / 789 79-0

Imprint: https://mpmedizintechnik.com/impressum/

2. Data protection officer

If you have any questions about the processing of your personal data or about your rights under data protection law, please contact our Data Protection Officer at:

Daniel Voigtländer
Zeisigweg 11
71397 Nellmersbach

07195 / 9772959

3. Scope and purpose of processing

We process personal data of users only to the extent necessary to provide a functional website, our content, and services. The processing of personal data of our users is generally carried out only with the user’s consent. Exceptions apply in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by legal provisions.

3.1 Legal basis for processing

Where we obtain consent from the data subject for processing operations of personal data, Article 6(1)(a) GDPR serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for pre-contractual measures.

Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR applies.

If the processing is necessary in order to protect the vital interests of the data subject or of another natural person, Article 6(1)(d) GDPR applies.

If processing is necessary for the purposes of legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for processing.

4. Data deletion and storage duration

The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by European or national legislators in Union regulations, laws, or other provisions to which the controller is subject. Data shall also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

5. Provision of the website and creation of log files

5.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data are collected:

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites accessed by the user’s system via our website

5.2 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

5.3 Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To do this, the user’s IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. In addition, the data serve to optimise the website and to ensure the security of our information technology systems. The data are not evaluated for marketing purposes in this context.

5.4 Duration of storage

The data are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of data collected for providing the website, this is the case when the session ends.

In the case of storage in log files, this is the case after no more than 7 days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymised so that assignment to the accessing client is no longer possible.

5.5 Right to object and to erasure

The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Consequently, the user has no possibility to object.

6. Use of cookies

Edit Cookie-Settings

6.1 Description and scope of data processing

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

In addition, we use cookies on our website that enable an analysis of the user’s browsing behaviour.

6.2 Legal basis for data processing

The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR.
The legal basis for processing personal data using cookies for analytical purposes—if the user has consented—is Article 6(1)(a) GDPR.

6.3 Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

We use analysis cookies to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continuously optimise our offer.

6.4 Duration of storage and options for objection and removal

Cookies are stored on the user’s computer and transmitted to our site. Therefore, as a user you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

For further details regarding cookie management and consent, please refer to our Cookie Consent Tool available on our website.

7. Contact form and e-mail contact

7.1 Description and scope of data processing

A contact form is available on our website which can be used for electronic communication. If a user makes use of this option, the data entered in the input mask are transmitted to us and stored. These data typically include:

• Name
• Email address
• Subject
• Message text
• Any additional information provided voluntarily (e.g., telephone number)

At the time of submission, the following data are also stored:

• The user’s IP address
• Date and time of transmission

Alternatively, contact may be made via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail will be stored.

There is no transfer of data to third parties in this context. The data are used exclusively for processing the conversation.

7.2 Legal basis for data processing

The legal basis for processing the data, where user consent has been obtained, is Article 6(1)(a) GDPR.
The legal basis for processing data transmitted in the course of sending an e-mail is Article 6(1)(f) GDPR.
If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

7.3 Purpose of data processing

The processing of personal data from the input mask serves us solely to process the contact request. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

Other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

7.4 Duration of storage

The data are deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the matter in question has been finally clarified.

7.5 Right to object and to erasure

The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting will be deleted in this case.

8. Newsletter subscription

8.1 Description and scope of data processing

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input form are transmitted to us.

• Email address
• First and last name (if provided)
• Date and time of registration
• IP address of the device used

For the processing of data, your consent is obtained during the registration process and reference is made to this Privacy Policy.

If you purchase goods or services from us and provide your email address, we may subsequently use it to send you a newsletter. In such a case, the newsletter will only contain direct advertising for our own similar goods or services.

8.2 Legal basis for data processing

The legal basis for processing the data after the user subscribes to the newsletter is Article 6(1)(a) GDPR if the user has given consent.
For newsletter distribution following the purchase of goods or services, the legal basis is Article 6(1)(f) GDPR in conjunction with Recital 47 GDPR and § 7 (3) UWG (German Act Against Unfair Competition).

8.3 Purpose of data processing

The collection of the user’s email address serves to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

8.4 Duration of storage

The data are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Accordingly, the user’s email address is stored as long as the newsletter subscription is active.

8.5 Right to withdraw consent and to object

The newsletter subscription may be terminated by the user at any time. Each newsletter contains a corresponding unsubscribe link.
This also enables withdrawal of consent to the storage of personal data collected during the registration process.

9. Use of analytics tools

9.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
Google Analytics uses “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

We have activated IP anonymisation on this website, meaning that your IP address will be shortened by Google within the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website and internet usage to the website operator.

9.2 Legal basis

The use of Google Analytics is based on your consent under Article 6(1)(a) GDPR.

9.3 Purpose of processing

The purpose of using Google Analytics is to analyse the usage of our website and to continuously improve it. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.

9.4 Data transfer to third countries

Data may be transmitted to the USA. Google LLC has certified its compliance with the EU-U.S. Data Privacy Framework (DPF).
Further information can be found at:
https://policies.google.com/privacy

9.5 Duration of storage and right to withdraw consent

The cookies used by Google Analytics are stored for up to two years. You may withdraw your consent at any time with effect for the future by adjusting your cookie settings or by deleting the cookies stored on your device.

10. Social media and third-party plugins

10.1 Social media links

We maintain publicly accessible profiles on social networks.
If you visit our profiles, numerous data processing operations are triggered. Your personal data may be collected when you visit our social media pages—regardless of whether you are logged into your social media account or not.

If you are logged in to your account, your visit to our profile can be directly assigned to your account. The social media company may also process the data for its own purposes, particularly for advertising, market research, and to create usage profiles. Please refer to the respective providers’ privacy policies for details.

• Facebook / Meta Platforms Ireland Ltd. – Privacy Policy
• Instagram / Meta Platforms Ireland Ltd. – Privacy Policy
• LinkedIn Ireland Unlimited Company – Privacy Policy
• X Corp. (formerly Twitter) – Privacy Policy

10.2 Legal basis

The processing of users’ personal data is based on Article 6(1)(f) GDPR (legitimate interest) for the purpose of effective communication and presentation of our company to the public.
If you are required to give consent (e.g. by ticking a box or clicking a button), the processing is based on Article 6(1)(a) GDPR.

10.3 Social media plugins (e.g. Facebook Like Button, LinkedIn Share Button)

Our website may integrate plugins of the social networks listed above. When you visit a page that contains such a plugin, your browser establishes a direct connection with the servers of the social network. The plugin content is transmitted directly to your browser by the provider and integrated into the page.

Through this integration, the provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with this provider or are not logged in. This information (including your IP address) may be transmitted directly from your browser to a server of the provider and stored there.

10.4 Purpose of data processing

The use of plugins serves to make our online presence more appealing and to facilitate interaction with our content through social networks.

10.5 Options for objection

If you do not want the social network to associate your visit to our website with your account, you must log out of the respective account before visiting our website.
You can also completely prevent the loading of plugins using appropriate browser extensions such as “NoScript” or “Ghostery”.

11. Processors and third-party data recipients

11.1 Use of processors

We sometimes engage external service providers (so-called “processors”) to process your data on our behalf in accordance with Article 28 GDPR.
Such processors are carefully selected and contractually bound to process personal data solely in accordance with our instructions and under appropriate technical and organisational measures ensuring data security.

11.2 Categories of recipients

Depending on the processing activity, data may be transmitted in particular to the following categories of recipients:

• IT service and hosting providers
• Email and communication service providers
• Payment service providers and banks (for contract execution)
• Shipping and logistics companies (for order delivery)
• Marketing and analytics service providers
• Authorities and public institutions where legally required

11.3 Legal basis for transfer

The transfer of data to processors and third parties takes place on the basis of Article 6 (1) (b) GDPR (contract fulfilment), Article 6 (1) (c) GDPR (legal obligation) or Article 6 (1) (f) GDPR (legitimate interests), provided that there are no overriding interests of the data subject.

12. International data transfers

Where personal data are transferred to recipients located outside the European Union (EU) or the European Economic Area (EEA), such transfer shall only occur if:

• the European Commission has decided that the third country provides an adequate level of protection (Article 45 GDPR);
• appropriate safeguards are provided pursuant to Article 46 GDPR (e.g. standard contractual clauses approved by the European Commission); or
• you have explicitly consented to the transfer after being informed of potential risks (Article 49 (1)(a) GDPR).

Where data are transferred to processors in the USA, we ensure that these entities are certified under the EU-U.S. Data Privacy Framework or that standard contractual clauses are concluded with appropriate supplementary measures.

13. Rights of data subjects

If your personal data are processed, you are a “data subject” within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:

13.1 Right of access (Article 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you are being processed and, where that is the case, access to those data and to further information as specified in Article 15 GDPR.

13.2 Right to rectification (Article 16 GDPR)

You have the right to obtain the rectification of inaccurate personal data and the completion of incomplete data concerning you.

13.3 Right to erasure (Article 17 GDPR)

You have the right to request the erasure of personal data concerning you without undue delay where one of the grounds set out in Article 17 GDPR applies (the “right to be forgotten”).

13.4 Right to restriction of processing (Article 18 GDPR)

You have the right to request restriction of processing where one of the conditions listed in Article 18 GDPR applies.

13.5 Right to data portability (Article 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and to transmit those data to another controller where technically feasible.

13.6 Right to object (Article 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you that is based on Article 6 (1)(e) or (f) GDPR, including profiling based on those provisions.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing for such marketing.

13.7 Right to withdraw consent (Article 7 (3) GDPR)

You have the right to withdraw your consent at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

13.8 Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority—particularly in the Member State of your habitual residence, place of work, or the place of the alleged infringement—if you consider that the processing of personal data relating to you infringes the GDPR.

14. Data security

We use technical and organisational security measures to protect your personal data against manipulation, loss, destruction, or unauthorised access by third parties.
Our security measures are continuously improved in line with technological developments.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries sent to us as the site operator.
You can recognise an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the lock symbol in your browser line.

15. Automated decision-making / profiling

No automated decision-making or profiling pursuant to Article 22 GDPR takes place when you use our website or services.

16. Updates and amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time with effect for the future.
The current version of the Privacy Policy is always available on our website.
Please visit our Privacy Policy regularly to stay informed about updates or changes.

Last updated: Nov. 5 2025