Privacy Policy
This is a translation for your convenience. In case of any discrepancy, the German version (Datenschutzerklärung) prevails.
1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
SmartMann GmbH
Zur Haidkoppel 4
22395 Hamburg, Germany
Phone: +49 40 855 001 85
Email: info@smartmann-medical.de
2. General
We process personal data only as far as necessary to provide this website, answer your enquiries and comply with legal obligations. The legal bases are the GDPR and the German Federal Data Protection Act (BDSG). We use the analytics service Google Analytics only if you have given your consent via our cookie banner (see sections 4 and 5).
3. Hosting and server log files
This website is hosted by our hosting provider Lima-City. When you visit the website, the server automatically records information sent by your browser (server log files):
- IP address of the requesting device
- date and time of access
- page or file requested
- referrer URL (previously visited page)
- browser and operating system used
- amount of data transferred and status code
Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website and in detecting and preventing attacks. Log files are kept only as long as necessary for these purposes and are then deleted automatically. A data processing agreement under Art. 28 GDPR is in place with the hosting provider.
4. Cookies and consent (cookie banner)
Cookies are small text files stored on your device. We set technically necessary cookies on the basis of Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. All other cookies and similar technologies (e.g. for analytics) are set only with your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. We obtain your consent via the cookie banner “Real Cookie Banner” (devowl.io GmbH, Germany). The banner stores your choice in a cookie so that you are not asked again on every visit. You can change or withdraw your consent at any time via the “Privacy settings” link in the footer of every page; this does not affect the lawfulness of processing carried out before the withdrawal.
Overview of the cookies used:
| Cookie | Provider | Purpose | Storage period | Category |
|---|---|---|---|---|
| real_cookie_banner-* | SmartMann (Real Cookie Banner) | Stores your cookie choice | 1 year | necessary |
| wordpress_*, wordpress_logged_in_*, wp-settings-* | SmartMann (WordPress) | Login of website administrators | session up to 1 year | necessary |
| _ga, _ga_* | Google Ireland Ltd. | Google Analytics: distinguishing visitors and sessions | up to 2 years | statistics (consent) |
5. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics records how visitors use our website (for example pages viewed, time spent, referring page, device, browser and approximate location). IP addresses are shortened in the EU and not stored. Data is generally transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data is deleted automatically after 2 months. More information: policies.google.com/privacy.
6. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.
7. Contacting us by email or phone
If you contact us by email or phone, we process your details (for example name, email address, phone number, company and the content of your enquiry) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures (for example a quotation, demonstration or distribution partnership), and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once your enquiry has been fully dealt with, unless statutory retention periods apply (for example six or ten years for commercial and business letters under Section 257 HGB and Section 147 AO).
8. Reports about our medical devices
As a manufacturer of medical devices, we are legally obliged to record and assess complaints, incidents and feedback about our products and, where required, report them to the competent authorities. If you send us such a report, we process the data it contains on the basis of Art. 6(1)(c) GDPR in conjunction with Regulation (EU) 2017/745 (MDR) and the German Medical Devices Implementation Act (MPDG). Where the report contains health data, processing is based on Art. 9(2)(i) GDPR. Please send us only the health data needed for the report. The data is stored in line with the statutory retention periods for medical devices.
9. Job applications
We process application documents sent to us by email to carry out the application procedure, on the basis of Art. 6(1)(b) and Art. 88 GDPR in conjunction with Section 26 BDSG. Only the persons involved in the selection process have access. If no employment relationship results, we delete your documents six months after the rejection, unless you have consented to a longer storage period.
10. Recipients and transfers to third countries
We only pass on your data where permitted or required by law, for example to IT service providers (hosting, email) acting on our behalf and contractually bound to confidentiality (Art. 28 GDPR), or to authorities as part of statutory reporting obligations. Data is transferred to countries outside the European Union or the European Economic Area only for Google Analytics (section 5) and only with your consent.
11. Your rights
Within the limits of the law, you have the right at any time to
- access the data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, a message to info@smartmann-medical.de is sufficient.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: The Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
12. Obligation to provide data and automated decisions
You are not obliged to provide personal data. Without your details, however, we cannot handle your enquiry. No automated decision-making, including profiling (Art. 22 GDPR), takes place.
13. Changes
We update this privacy policy when our website or the legal requirements change. The version published here applies.
Last updated: October 2026