Privacy Policy
Effective Date: February 2025
1. Introduction
Sonoref Healthcare GmbH ("Sonoref", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our services, or otherwise interact with us.
This policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Austrian data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
Sonoref Healthcare GmbH
Julienhöhestrasse 1b
9521 Treffen
Austria
Email: central@sonoref.com
Phone: +43 3135 206 16
3. Categories of Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Technical Data
When you visit our website, we automatically collect certain technical information, including:
- IP address
- Browser type and version
- Operating system
- Referring website
- Pages visited and time spent
- Date and time of access
3.2 Account and Contact Data
When you register for an account, request a quote, or contact us, we collect:
- Company name
- Contact person name
- Email address
- Phone number
- Business address
- VAT identification number
- Customer type (hospital, clinic, distributor, etc.)
3.3 Communication Data
Records of correspondence with us, including emails, phone calls, and messages sent through our website.
3.4 Transaction Data
Details of services provided, orders placed, invoices, and payment information.
3.5 Marketing Data
Your preferences for receiving marketing communications from us.
4. Legal Basis for Processing
- Contract Performance (Art. 6(1)(b) GDPR): Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation (Art. 6(1)(c) GDPR): Processing necessary to comply with legal obligations, such as tax and accounting requirements.
- Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate business interests, such as improving our services, fraud prevention, and direct marketing to existing customers.
- Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent to processing for specific purposes, such as marketing communications or cookies.
5. Purposes of Processing
- To provide our repair, refurbishment, and loaner services
- To process orders and manage customer accounts
- To communicate with you about services, quotes, and deliveries
- To send invoices and process payments
- To respond to inquiries and provide customer support
- To improve our website and services
- To comply with legal and regulatory requirements
- To send marketing communications (with your consent or based on legitimate interest)
- To detect and prevent fraud
6. Data Sharing and Recipients
- Shipping and Logistics Providers: DHL, UPS, FedEx, and other carriers for delivery services.
- IT Service Providers: Hosting, cloud services, and software providers who assist in operating our systems.
- Payment Processors: For secure payment processing.
- Professional Advisors: Accountants, lawyers, and auditors as required.
- Regulatory Authorities: When required by law or to protect our legal rights.
- International Partners: Where necessary for service delivery in your region.
We ensure that all third parties with whom we share data are bound by appropriate data protection agreements.
7. International Data Transfers
- Transfers to countries with an adequacy decision by the European Commission
- Standard Contractual Clauses approved by the European Commission
- Other legally recognized transfer mechanisms
8. Data Retention
- Contract data: For the duration of the business relationship plus statutory retention periods (typically 7 years for tax purposes in Austria).
- Communication records: For 3 years after last contact or as required for dispute resolution.
- Technical data: Typically deleted or anonymized within 12 months.
- Marketing consents: Until consent is withdrawn.
9. Your Rights Under GDPR
- Right of Access (Art. 15): You may request confirmation of whether we process your data and obtain a copy of it.
- Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17): You may request deletion of your data under certain circumstances ("right to be forgotten").
- Right to Restriction (Art. 18): You may request limitation of processing in certain situations.
- Right to Data Portability (Art. 20): You may request to receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): You may object to processing based on legitimate interests, including direct marketing.
- Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at request@sonoref.com.
10. Cookies and Tracking Technologies
- Remember your preferences and settings
- Understand how you use our website
- Improve website functionality and performance
- Provide relevant content
Types of cookies we use:
- Essential cookies: Necessary for the website to function properly.
- Analytics cookies: Help us understand website usage patterns.
- Preference cookies: Remember your settings and choices.
You can manage your cookie preferences through our cookie banner or your browser settings.
11. Data Security
- Encryption of data in transit and at rest
- Secure access controls and authentication
- Regular security assessments
- Employee training on data protection
- Incident response procedures
12. Business-to-Business Services
Important: Customers must ensure that no patient data is transmitted to Sonoref during repair or similar processes. We assume no liability for loss or disclosure of patient data transmitted to us.
13. Children's Privacy
14. Changes to This Privacy Policy
15. Complaints
Austrian Data Protection Authority
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna, Austria
Website: www.dsb.gv.at
16. Contact Us
Sonoref Healthcare GmbH
Julienhöhestrasse 1b
9521 Treffen
Austria
Email: request@sonoref.com
Phone: +43 3135 206 16