Last updated: 8 September 2025

1. Privacy at a Glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data means all data with which you can be personally identified. Detailed information can be found in the sections of this privacy policy below.
Data collection on our website
• Who is responsible? Data processing on this website is carried out by the website operator (see “Controller”).
• How do we collect your data? Some data is collected when you provide it to us (e.g. by e mail or by telephone). Other data is collected automatically by our IT systems when you visit the website (e.g. internet browser, operating system, time of page view, IP address).
• What do we use your data for? Some of the data is collected to ensure error free provision of the website. Other data may be used – with your consent – to analyze user behavior.
Your rights
You have, inter alia, the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to certain processing activities. You also have the right to lodge a complaint with a supervisory authority.

2. Controller and Mandatory Information
Controller
LOSCH Medical GmbH
Hochstraß 5
94377 Steinach
Phone: +49 9428 90190 0
E mail: info@losch-medical.de
Definitions
“Personal data” means any information relating to an identified or identifiable natural person (Art. 4(1) GDPR). “Processing” means any operation performed on personal data (Art. 4(2) GDPR).
Security of data transmission
This site uses TLS encryption to protect the transmission of confidential content (recognizable by “https://” and the lock symbol in the browser). Despite encryption, complete security on the internet cannot be guaranteed.
Legal bases
Where we obtain your consent for processing operations, the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG (for setting/reading non essential cookies or similar technologies). For performance of a contract or pre contractual measures Art. 6(1)(b) GDPR, for compliance with legal obligations Art. 6(1)(c) GDPR, and for legitimate interests Art. 6(1)(f) GDPR.
Storage period
Unless a more specific storage period is stated in this policy, we process personal data only for as long as the purpose of processing exists and/or as long as statutory retention periods require. Thereafter the data is deleted or – where necessary – anonymized.
Recipients / processors
We sometimes engage external service providers (e.g. hosting, support) who process personal data on our behalf (Art. 28 GDPR). We have concluded data processing agreements with these providers.
Data transfers to third countries
When certain services are used, data may be transferred to recipients in countries outside the EU/EEA. Where there is no adequacy decision, transfers take place on the basis of appropriate safeguards (in particular Standard Contractual Clauses). For certified U.S. recipients, transfers may also rely on the EU U.S. Data Privacy Framework. Details are provided with the respective services.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for your habitual residence, place of work or place of the alleged infringement is particularly competent.
Withdrawal and objection
• You may withdraw consent at any time with effect for the future.
• You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).

3. Hosting, Server Logs and Security Measures
Hosting
To provide our online presence we use hosting services (e.g. infrastructure, platform and security services). Processing is based on Art. 6(1)(f) GDPR and – where an external service provider acts on our behalf – on a data processing agreement pursuant to Art. 28 GDPR. The provider is not named here.
Server log files
The provider of the pages automatically collects and stores information in so called server log files which your browser automatically transmits (e.g. browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address). This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technical provision, security and stability of the offering. Log data is stored only for a technically customary period and then deleted or anonymized; longer storage takes place only in cases of security relevant incidents (e.g. for evidence preservation).

4. Cookies, Consent Management & Similar Technologies
We use cookies and similar technologies. Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR. For all others (e.g. statistics, marketing) we obtain your consent via our consent management tool (e.g. Borlabs Cookie) (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG). We currently do not use analytics or marketing cookies. You can change your selection at any time in the cookie settings or withdraw consent.
Borlabs Cookie
A technically necessary cookie (“borlabs cookie”) is set to store the consents you have given. No personal data is processed for this purpose. If you wish to withdraw consents, simply delete this cookie in your browser; upon your next visit you will be asked again.

5. Contact (E mail and Telephone)
If you contact us by e mail or telephone, we process the information you provide solely to handle your request and any follow up questions. The legal basis is Art. 6(1)(b) GDPR (contractual/pre contractual communications) or Art. 6(1)(f) GDPR (general inquiries). We delete the data once processing is complete and no statutory retention obligations prevent deletion.

6. Analytics / Statistics
We currently do not use any analytics or statistics tools that process personal data.

7. Integration of Third Party Services and Content
We currently do not embed external content on our website (e.g. maps, captchas, remotely hosted fonts or icon CDNs). If we link to external offerings (e.g. to our profiles on YouTube or LinkedIn), data is transmitted to the respective provider only when you click the link and access the provider’s site. From that point, the provider’s terms of use and privacy policy apply.

8. Our Social Media Presences
We maintain publicly accessible profiles on YouTube and LinkedIn. When you visit our profiles, personal data is processed by the respective platform operators; in some cases we are joint controllers for so called “Insights”/statistics. On our website, we merely place links to these profiles; we do not use social plugins or embed content.
Legal basis
Our presences serve up to date external communication and public relations (Art. 6(1)(f) GDPR). Where a platform uses cookies/tracking, this is based on your consent to the platform.
Storage period
Data we collect directly is deleted once the purpose ceases to apply; otherwise, please refer to the information provided by the respective platforms.
YouTube
Provider: Google Ireland Limited. When using YouTube, data may be transferred to Google LLC in the United States (DPF/SCCs). Details are provided in Google/YouTube’s privacy notices.
LinkedIn
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For Page Insights there is joint controllership with LinkedIn (Page Insights Joint Controller Addendum). LinkedIn processes data inter alia to create page statistics and for advertising purposes. Settings/opt out options and details can be found in LinkedIn’s privacy policy.

9. Applications by E mail
If you apply by e mail to info@losch-medical.de, we process your application data (e.g. contact and communication data, CV, certificates, notes from interviews) for the purpose of reviewing your application and deciding on the establishment of an employment relationship. Legal bases are Art. 6(1)(b) GDPR and Section 26 BDSG.

10. Updates and Changes to this Privacy Policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services (e.g. introduction of new services). The new privacy policy will then apply to your subsequent visit.

11. Contact for Privacy Matters
If you have any questions about data protection, please contact us using the details provided for the Controller above.