Privacy Policy

This policy informs you about which personal data we process when you visit this website, the legal basis for doing so, and the rights you are entitled to.

Last updated: 10.08.2026

Table of contents

  1. Controller and contact details
  2. Your rights
  3. Provision of the website and server log files
  4. Consent management
  5. Cookies and similar technologies
  6. Contacting us
  7. Newsletter
  8. Job applications
  9. Recipients and transfer to third countries
  10. Storage duration
  11. Data security
  12. Changes to this policy

1. Controller and contact details

The controller for the purposes of the General Data Protection Regulation (GDPR) is:

asia-med GmbH
Kirchplatz 1
82049 Pullach
Germany

Represented by the Managing Directors: Dr. Klaus Teichert, Hans-Martin Buhlmann
Email: dsgvo@asiamed.com
Commercial Register: Munich District Court, HRB 229216

We have not appointed a data protection officer, as the requirements of Section 38 of the German Federal Data Protection Act (BDSG) are currently not met. For all data protection inquiries, you can reach us at the address mentioned above or by email at dsgvo@asiamed.com.

2. Your rights

Regarding your personal data, you have the following rights against us:

  • Access (Art. 15 GDPR): You may request information about whether and which data we process about you.
  • Rectification (Art. 16 GDPR): You may have inaccurate data corrected and incomplete data completed.
  • Erasure (Art. 17 GDPR): You may request the deletion of your data, provided there are no legal retention obligations to the contrary.
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR): You may receive the data you have provided in a structured, commonly used, and machine-readable format.
  • Withdrawal of consent (Art. 7(3) GDPR): You may withdraw your consent at any time with future effect. The lawfulness of processing based on consent before its withdrawal remains unaffected.

Right to object pursuant to Art. 21 GDPR

Where we process data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If we process your data for the purpose of direct marketing, you may object at any time without providing a reason. Your data will then no longer be used for this purpose.

Exercising your rights

Simply send a message to dsgvo@asiamed.com. We will respond without undue delay, at the latest within one month of receiving your request. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests; in such a case, we will inform you of the extension and the reasons for it.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach
https://www.lda.bayern.de

3. Provision of the website and server log files

When you access this website, your browser automatically transmits data to our hosting provider. This includes, in particular:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file accessed
  • Referrer URL
  • Browser type and version
  • Operating system
  • Volume of data transferred and notification of successful retrieval

This processing is technically necessary to deliver the website, ensure its stability and security, and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and trouble-free operation of the website.

Hosting

The website is operated by Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA. Webflow processes the aforementioned data on our behalf as a data processor in accordance with Art. 28 GDPR; the basis for this is Webflow's Data Processing Addendum. Webflow is certified under the EU-U.S. Data Privacy Framework; the European Commission has determined that there is an adequate level of data protection for certified companies. In addition, standard contractual clauses apply.

Images and editorial content on this website are delivered via Webflow's content management system and content delivery network. In this process, your IP address may be transmitted to server locations outside the European Union, as this is technically necessary to deliver the content to your browser.

Privacy Policy: https://webflow.com/legal/eu-privacy-policy
Data Processing Agreement (DPA): https://webflow.com/legal/dpa

Server log files are deleted after 30 days at the latest.

4. Consent Management

When you first visit our website, you will see a notice allowing you to decide on the use of cookies and similar technologies. All services that are not technically necessary will only be loaded after you have given your consent.

To document your choice, we store the time of your decision, the categories you selected, and the version of the notice. The associated cookie has a lifespan of 12 months; we retain proof of your decision for twelve months. The legal basis is Art. 6 (1) (c) GDPR in conjunction with our obligation to provide proof under Art. 7 (1) GDPR.

You can change or revoke your decision at any time via the "Cookie Settings" link in the footer of every page.

The legal basis for storing information on your device and accessing it is Section 25 (1) of the TDDDG (consent) or Section 25 (2) of the TDDDG, insofar as storage is strictly necessary to provide a service you have explicitly requested.

We use the consent management tool Cookiebot to manage consent. The provider is Usercentrics A/S, Kongens Nytorv 22, 1050 Copenhagen, Denmark.

Cookiebot stores the following data to document your consent: your partially truncated (anonymized) IP address, the date and time of consent, browser and device information (user agent), the URL visited, an anonymous, randomly generated key (consent ID), and your consent status. For this purpose, the "CookieConsent" cookie is set with a lifespan of twelve months; we retain proof of your consent for twelve months.

The legal basis is Art. 6 (1) (c) GDPR in conjunction with our obligation to provide evidence under Art. 7 (1) GDPR. Cookiebot's servers are located within the EU; no data is transferred to a third country.

Further information: https://www.cookiebot.com/de/privacy-policy/

5. Cookies and similar technologies

We use cookies and similar technologies such as localStorage in two categories.

Technically necessary

These enable the basic operation of the website, such as saving your language selection and your cookie preferences, as well as cookies set by our hosting provider to secure and deliver the site. They are set without consent, pursuant to Section 25 (2) no. 2 TDDDG; the legal basis for the subsequent processing is Art. 6 (1) (f) GDPR.

Requires consent

All technologies for analysis, reach measurement, and marketing. We only use these with your consent, pursuant to Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. This includes Google Analytics.

An overview of the cookies used, including their name, purpose, and duration, can be found in the cookie settings.

You can also delete cookies in your browser or restrict their storage in general. If cookies are completely blocked, some functions of this website may be limited.

We do not respond to "Do Not Track" signals from your browser, as there is no uniform standard for this. Your decision in the consent notice is the deciding factor.

6. Contacting us

Contact form

When you write to us using the form on our contact page, we process the data you provide:

  • Full name
  • Email address
  • Phone
  • Company
  • Message

We also store the time the message was sent.

The purpose is to process and respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries.

Form submissions are stored in our website backend at Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA, which acts as our data processor in accordance with Art. 28 GDPR. Webflow is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46(2)(c) GDPR apply.

Privacy Policy: https://webflow.com/legal/eu-privacy-policy
Data Processing Agreement (DPA): https://webflow.com/legal/dpa

Email and phone

If you contact us directly via email or phone, we process your contact details and the content of your message for the same purpose and on the same legal basis.

Deletion

We delete your inquiries once they have been fully processed and there are no statutory retention obligations to the contrary, at the latest 24 months after the last contact.

7. Newsletter

When you sign up for our newsletter, we process your email address to send you information about our services and content.

Registration uses the double opt-in process: after signing up, you will receive an email containing a confirmation link. We will only add you to our mailing list once you have confirmed. To verify your consent, we store the time of registration, the time of confirmation, and the IP address used.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 7(2) No. 2 of the Act Against Unfair Competition (UWG).

You can unsubscribe from the newsletter at any time, for example by using the unsubscribe link at the end of every email. Once you unsubscribe, we will remove your email address from our mailing list. We retain proof of your consent until any potential claims have expired.

8. Job applications

When you apply for a position with us, we process the data you provide—specifically contact details, your CV, certificates, and other documents—exclusively for the purpose of conducting the application process.

The legal basis is Section 26(1) of the Federal Data Protection Act (BDSG) in conjunction with Art. 88 GDPR and Art. 6(1)(b) GDPR.

If you are not hired, we will delete your documents six months after the conclusion of the process. This period is for the purpose of defending against potential claims under the General Equal Treatment Act (AGG); the legal basis for this is Art. 6(1)(f) GDPR.

If you would like us to consider your application for future positions as well, we will obtain your separate consent to do so.

9. Recipients and transfers to third countries

We do not sell, rent, or share your personal data with third parties for their own commercial purposes.

Access to your data is restricted to:

  • those employees of our company who require the data to perform their duties,
  • the service providers mentioned in this policy, whom we have engaged as data processors in accordance with Article 28 of the GDPR,
  • Authorities and courts, insofar as we are legally obligated to provide information.

Transfers to third countries

Some of the service providers we use are based outside the European Union, primarily in the USA. For providers certified under the EU-U.S. Data Privacy Framework, the European Commission confirmed an adequate level of protection in its decision of July 10, 2023. In all other cases, we base the transfer on standard contractual clauses pursuant to Article 46(2)(c) of the GDPR and, where applicable, on your explicit consent pursuant to Article 49(1)(a) of the GDPR.

Please note that third countries may not offer a level of data protection fully comparable to that of the EU, and access by government authorities cannot always be ruled out.

Details regarding which service providers we use, where they are based, and the legal basis for the respective transfer can be found in Section 3 and Section 6.

Business transfers

Should we be involved in a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring party. We ensure that this is done while maintaining confidentiality and will inform affected individuals in advance via our website or email.

10. Retention period

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations.

For documents relevant to tax or commercial law, the retention periods stipulated in Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB) apply. Once the respective period has expired, we delete the data or restrict its processing.

The specific retention periods for individual processing activities can be found in the respective sections of this policy.

11. Data security

Data transmission between your browser and our website is encrypted via TLS. You can identify this by the address bar in your browser.

We implement technical and organizational measures pursuant to Article 32 of the GDPR to protect your data against unauthorized access, loss, and alteration, and we continuously update these measures in line with the latest technology. Complete protection against all conceivable attacks is technically impossible.

In the event of a personal data breach, we will fulfill our reporting and notification obligations in accordance with Articles 33 and 34 of the GDPR.

12. Changes to this policy

We update this privacy policy whenever our processing activities or legal requirements change. The version published on this page is the one currently in effect. We will provide additional notification of significant changes on our website or via email.

If you have any questions, please contact us at dsgvo@asiamed.com.