Black & Blue Medical
Frank Gerlach
Hauäcker 4
71720 Oberstenfeld, Germany

We process personal data for the following purposes:

• Procurement of securities on the international market (point (a) of Article 6(1) GDPR)
• Contract performance or fulfilment of contractual obligations or obligations prior to entering into a contract (point (b) of Article 6(1) GDPR)
• Compliance with legal obligations (point (c) of Article 6(1) GDPR)
• Protection of the vital interests of data subjects (point (d) of Article 6(1) GDPR)
• Performance of tasks carried out in the public interest or in the exercise of official authority (point (e) of Article 6(1) GDPR)

In order to carry out our securities procurement services on the international market, the following personal data is processed as required: company name, first name, surname, address, date of birth, contact details, marital status, bank details, insurance details, matter to be handled, third parties involved in the matter: e.g. your tax adviser, your legal representative, your bank adviser or trustee, and matter-related documents. We also process this possible data for other third parties involved in the service, such as banks, etc.

This data is provided voluntarily by you for the required services to be carried out and is processed on the basis of the data subject’s consent.

Personal data is kept in accordance with statutory retention periods. Where you have provided your consent, your personal data will be kept indefinitely (point (a) of Article 13(2) GDPR).

With regard to the processing of personal data, a data subject always has the following rights to be met by the controller (points (b) and (c) of Article 13(2) GDPR):

• confirmation of the processing of personal data
• information on stored personal data
• correction of incorrect personal data
• addition to incomplete personal data
• restriction of processing of personal data
• erasure of stored personal data
• transfer of personal data to another controller

In the event of infringements of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy (point (d) of Article 13(2) GDPR).

Personal data is provided by data subjects voluntarily. In the event of performance of a contract, fulfilment of contractual obligations or obligations prior to entering into a contract, provision of personal data is contractually necessary or arises from statutory provisions. Where required personal data is not provided, we are unable to carry out our services and consulting, to deal with your enquiries or fulfil contracts, contractual or pre-contractual obligations (point (e) of Article 13(2) GDPR).

In relation to our securities procurement services on the international market or the handling of your enquiries, no profiling takes place. There is no automated decision-making (point (f) of Article 13(2) GDPR).

Personal data is used only for the purpose for which consent has been given by the data subject. If there is another purpose for further processing personal data that has already been collected, the data subject will be informed of this or separate consent will be obtained (Article 13(3) GDPR).

This website uses cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make the site more user-friendly, more effective and more secure. Cookies are small text files that are placed on your computer and stored in your browser.

Most of the cookies used are known as ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain on your device until you delete them. These cookies allow your browser to be recognised when you visit our website again.

You can configure your browser to notify you about the setting of cookies and to allow cookies only in an individual case, to reject cookies in certain cases or in general, and to automatically delete cookies when you close your browser. The functionality of this website may be restricted if cookies are disabled.

The website provider automatically collects and stores information in ‘server log files’, which your browser transmits automatically to us. This data includes: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of server request.

This data cannot be attributed to any individual and is not combined with other data sources. We reserve the right to subsequently check this data, if we have specific reason to suspect unlawful use.

This data is collected on the basis of point (f) of Article 6(1) GDPR. The website provider and the website operator have a legitimate interest in the website being displayed without technical error and in its optimisation – the server log files are collected for this purpose.

If you send enquiries to us using the contact form, the information you provide on the form including your contact details will be stored by us for the purpose of dealing with your enquiry and in the event of follow-up questions. We will not share this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (point (a) of Article 6(1) GDPR). You can withdraw this consent at any time. To do so, you can simply send us a message by email. If you withdraw your consent, this has no effect on the lawfulness of data processing operations that took place before your withdrawal.

We keep the data you entered on the contact form until you ask for it to be deleted, withdraw your consent to it being saved or the purpose for storing the data ceases (e.g. once your enquiry has been dealt with). Mandatory statutory provisions – in particular periods of retention – remain unaffected.

If you contact us by email, phone or fax, your enquiry, including any personal data resulting therefrom (name, enquiry, ...) will be stored and processed by us for the purposes of dealing with your enquiry. We will not share this data without your consent.

This data is processed on the basis of point (b) of Article 6(1) GDPR, where your enquiry is in relation to the performance of a contract or is necessary to perform measures prior to entering into a contract. In all other cases the processing is based on your consent (point (a) of Article 6(1) GDPR) and/or on our legitimate interests (point (f) of Article 6(1) GDPR) because we have a legitimate interest in effectively dealing with enquiries directed to us.

We keep the data you send to us in the contact form until you ask for it to be deleted, withdraw your consent to it being saved or the purpose for storing the data ceases (e.g. once your enquiry has been dealt with). Mandatory statutory provisions – in particular statutory periods of retention – remain unaffected.

For reasons of security and to protect the transfer of confidential content, such as any enquiries that you send to us in our capacity as website operator, this website uses SSL encryption. You can recognise an encrypted connection by the change in the address line of your browser from ‘http://’ to ‘https://’ and by the lock symbol in your browser address line.

When SSL encryption is active, data that you send to us cannot be accessed by third parties.

The use of contact details published in the mandatory legal notice for unsolicited advertising and promotional material is hereby rejected. In our capacity as operator of this website, we expressly reserve the right to take legal steps in the event that we are sent advertising information, for example, spam emails, without this being requested.

Data privacy and the underlying legislation on which it is based are constantly changing and we have to adapt our company work processes, the information we provide, data security and other data privacy-related components to these changes. All significant changes concerning data privacy will be published here at the appropriate time.