Data protection declaration for the respio cloud
In the following, we would like to inform you about the processing of your personal data as part of providing the respio cloud and your rights under the GDPR.
Overview:
  1. Use of the cloud by the organization
  1. Technical provision of the cloud
1. Use of the cloud by the organization
The controller in accordance with the GDPR is the organization. The organization is therefore responsible for meeting the requirements of the GDPR concerning the transfer of data to the respio GmbH and the use of data within the cloud.
This applies to the use of data to invite users and to the entry of data and health data of clients. In this context, the organization as the controller is responsible for fulfilling the rights of data subjects according to the GDPR.
Respio GmbH is providing the respio Cloud for evaluating the training with the hypoxicator as processor in accordance with Art. 28 GDPR. The processing of data is carried out on behalf of the organization.
2. Technical provision of the cloud
The controller in accordance with data protection for the provision of the cloud is
respio GmbH
Konrad-Zuse-Platz 11
81829 München
Germany
phone: +49 89 2000 8313-0
e-Mail: info@respio.com​
We have appointed a data protection officer at our company. You can contact them via the following address:
ComFor-IT® GmbH & Co. KG
Datenschutz
Bahnhofstraße 6
84405 Dorfen
phone: +49 8081-60499-50
e-mail: datenschutz@comfor-it.de
Internet: www.comfor-it.de
Data gathering and recording
The following data is transferred to us when you access our website:
  • Date and time of the request
  • Name of the requested site
  • Site from which the sub-site was requested
  • Access status (site transferred; site not found etc)
  • Web browser and operating system used
  • IP-address of the requesting computer
  • Transferred data quantity
The data is stored for reasons connected to technical security in order to prevent attempted attacks against our server. The processing is based on Art. 6 (1) lit. f GDPR.
The personal data collected on our website is stored on the servers of our external service provider. Our service provider processes your data only insofar as this is necessary for the fulfilment of its service obligations and in accordance with our instructions.
Getting in touch and help centre
You can contact us via email, telephone or the ticket system within the cloud. The information of the user will be processed in order to respond to the enquiry. This data processing is based on Art. 6 (1) lit. b GDPR to provide support for the cloud.
Use of cookies
It is possible for us to deposit so-called "cookies" on your computer when you visit our website. Cookies are text files which are received by your Internet browser, and which are stored on your computer.
There is a difference between so-called session cookies and analysis cookies.
Necessary session Cookies, which are essential for the operation and functionality of the website, cannot be restricted, or parts of the website will not work. Analysis Cookies serve the purpose of analysing user behaviour on the website in order to obtain information concerning number of visitors and to improve the website and can be restricted.
You can prevent the saving of cookies by setting your browser software accordingly. However, we wish to point out that in such a case, you may not be able to fully use all functions of this website.
Place of data processing and storage duration
The processing of your data takes place in Germany or within the European Union or the states of the European Economic Area. Processing in other countries is only permitted if an adequacy decision of the EU Commission according to Art. 45 (3) GDPR is available or an adequate level of data protection is ensured by other suitable guarantees within the meaning of Art. 46 (2) GDPR.
We process your personal data as long as this is necessary for our business relationship or for the fulfilment of contractual obligations or if consent has been given. In addition, we are subject to various legal obligations, for example the German Commercial Code and the German Fiscal Code.
Finally, the storage period also depends on the limitation periods according to Division 5 of the German Civil Code.
Due to internal and organizational considerations data in backups may still be available for a longer period of time.
Data recipients
We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or for purposes of our legitimate interest.
Your personal data is also processed on our behalf by service providers based on Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation.
Among other things, we use service providers who provide services for us in connection with web hosting and cloud administration. We have concluded order processing contracts with the respective service providers, which ensure that the respective service providers do not process the data for their own purposes, but only within the scope of our instructions and on our behalf.
Otherwise, data will only be passed on to third parties if this is required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, or if you have given us your consent to do so.
Your rights as a “data subject”
According to Art. 15 GDPR you have the right to obtain information about your personal data processed by us. According to Art. 16 GDPR you have the right to obtain the rectification of inaccurate personal data without undue delay or the completion of your personal data stored with us. You have the right according to Art. 17 GDPR to obtain the erasure of your personal data stored with us and according to Art. 18 GDPR you have the right to obtain the restriction of the processing of your personal data.
Pursuant to Art. 20 GDPR you have the right to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format or to obtain the transmission to another data controller.
When your data is processed based on Art. 6 (1) lit. f or e GDPR, you have the right to object to processing on grounds relating to your particular situation pursuant to Art. 21 (1) GDPR.
According to Art. 7 (3) GDPR you have the right to withdraw the consent given to us at any time. This means that in future we may no longer continue to process the data as based on this consent.
You also have the right according to Art. 77 GDPR to lodge a complaint with a supervisory authority. The address of the data protection supervisory authority which has jurisdiction over us is:
Data Protection Authority of Bavaria:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 27 91522 Ansbach