Data Protection Declaration and Information according to Art. 13 DS-GVO

Thank you for visiting our website and your interest in our services. We attach ultimate importance to the protection of your personal data and privacy of the users of our Internet resource. We treat with confidentiality all data, and strictly adhere to the data protection laws when collecting, processing and using data. This applies particularly to the processing of your personal data.

Name and contact details of the responsible company and person

Company: CRO Dr. med. Kottmann GmbH & Co. KG
Representative: Aso Arif
Street: Beverstr. 64
Post Code / City: 59077 Hamm
Telephone: 0 23 82/ 987-44-0
Fax: 0 23 81 / 902 43 45


Contact details of the data protection administrator

Name: Eva Sachner
Telephone 0 23 82 /987-44-0
Fax 0 23 81 / 902 43 45


Purposes for which your personal data are processed and the legal basis for processing:

Purposes of processing

Legal basis

When visitors to our website fill out the online contact form to reach the responsible person

Art. 6 para. 1 lit. b DS-GMO (required for the fulfilment of pre-contractual measures)

Uploading Files

The legal basis depends on the type of files uploaded. Possible legal bases can be:

Art. 6 para. 1 lit. b DS-GMO (required to fulfil a contract or to carry out pre-contractual measures)

Art. 88 DS-GMO in conjunction with 26 Paragraph 1 BDSG (Establishment of an employment relationship)

Conducting user behavior evaluations with Google Analytics

Art. 6 para. 1 lit. f DS-GMO (legitimate interest of the responsible party)

Processing of technical information in order to provide the needed services, and to optimize the display of the information retrieved by the visitor on the respective terminal device of the visitor from our website resource.

Art. 6 para. 1 lit. f DS-GMO (legitimate interest of the responsible party)

Integration of external fonts from Google

Art. 6 para. 1 lit. f DS-GMO (legitimate interest of the responsible party)

Use of maps service „Google Maps“

Art. 6 para. 1 lit. f DS-GMO (legitimate interest of the responsible party)

Execution of external code using JavaScript framework "jQuery"

Art. 6 para. 1 lit. f DS-GMO (legitimate interest of the responsible party)

Control of the website and needed services are designed to process information efficiently using cookies

Art. 6 para. 1 lit. f DS-GMO (legitimate interest of the responsible party)


Your personal data are protected in accordance with the legitimate interests of the person responsible in pursuant to Art. 6 para. 1 lit. f DS-GVO during processing. The legitimate interests are constantly analyzed in other to improve the website and to optimize the friendliness of the user-interface. If audience outreach measurement techniques are used, you will be notified separately with regard to privacy policy and you will be given an opportunity to object. Our legitimate interest in measuring our website usage serves to analye, optimise the economic advantage and competitiveness of our website operation.

Categories of processed personal data

When using our website, the following data is processed for organizational and technical reasons:

  • IP addresses of visitors

  • Name of the pages visited

  • Date and time of access

  • Name of the browser used

  • Name of the search engine or the external link

  • Name of the downloaded files

If you provide us your data via our online forms, the personal data you transferred will be processed to fulfil the above mentioned respective purposes.

Unless you have objected to tracking by Google Analytics as well as the use of cookies, we however, evaluate the use of our website. These include:

  • Called-up pages

  • Drop or bounce rate

  • Duration of stay on the respective page

We do not know the identity of users, nor do we take any other measures to obtain such information. We evaluate this technical data anonymously and for statistical purposes, only in other to be able to continuously optimize our website and make our internet service even more attractive and user friendly. This anonymous data is stored separately from personal information on a secure systems. Your personal data and your privacy are therefore protected at all times.

Recipients of your personal data

Your personal data will only be passed on to third parties, if you have given your consent or if it is legally permitted. Your personal data will only be transferred to government institutions and authorities entitled to receive the information within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees are bound to stringent confidentiality and to comply with the provisions of data protection laws. For the technical implementation of the services provided, we have commissioned specialized companies to process your personal data on our behalf. These are:


Service rendered

Venne Media, Beelen

Website hosting

Data center with location in Germany

Leasing and operation of virtual servers as part of order processing in pursuant to Art. 28 DS-GVO

Google Ireland Ltd.

Webtracking with Google


Use of Cookies

This website uses so-called cookies. These are small text files that are sent from our web server to your browser and stored on your computer's hard drive. No personal data is stored, only an individual pseudonym. This information is used, for example, to recognize you during navigation on our web pages and to make browsing easier for you.

You can set your browser so that it informs you about the application of cookies. This makes the use of cookies transparent for you. Alternatively, you can also view this website without cookies. You can preset this in your browser. Please note that some functions of the website may then, no longer be available either in part or in full.

Traffic-Analysis by Google Analytics

This website uses Google Analytics, a web analytical service from Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users uses the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymization is activated for this website. Your IP address will be truncated and saved without the last octet. We know from which network a request comes, but not from which computer. As a rule, Google will truncate your IP address within the member states of the European Union or in other signatory states to the Agreement as well as in the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services related to the use of our website and internet usage to the operator of this website. The IP address provided by Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting on your browser software; however, we would like to point out that in this case, you may not be able to use all the functions of this website to the fullest extent possible. You can also prevent Google from collecting the data generated by the cookie in relation to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

Use of external services

Our website uses content from third-party providers. These can be videos, fonts or scripts. The respective purposes and the legal basis on which we use this content are explained in detail in the section "Purposes for which the personal data are processed and the legal basis for processing". For technical reasons, it is necessary to display the content of third-party offers, which means that your IP address is transmitted to the respective provider. We have no control over how each third party uses your personal information. However, we provide you below with an overview of all third-party services used by our website. If available, we will also provide you with the respective link to the data protection declaration of the third party provider so that you can access, first hand, the information for processing your personal data therein, and when possible, also point out an existing possibility for objection

External service

Data protection declaration


External fonts from Google, Inc., ("Google Fonts"). The integration of Google fonts is done by a server call on Google (usually in the US).

Maps services of "Google Maps" provided by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

External code of the JavaScript framework "jQuery", provided by the third-party provider jQuery Foundation,




Links to other websites

Our website contains links to other websites. We have no influence on whether their operators comply with the data protection regulations. Despite careful control of the contents, we assume no liability for the contents of external links. The operators of the linked pages are solely responsible for their content.

Your security

We protect your data by technical and organizational measures against unauthorized access, loss, manipulation or destruction. Our security measures are constantly updated in line with technological advancement. All communication between your terminal device and our servers is exclusively encrypted. These applies to downloaded documents and information that we offer you via our website and to information that you provide to us via the contact form or the application form.

Duration of storage

The personal data that you have made available to us will be automatically deleted, if the purposes of the processing have ceased to apply. Specifically, the following storage periods apply:

Category of stored data

deletion period

Technical data and protocols to ensure the operation of the website

90 days

Webtracking data

Already at the time of web tracking, your IP address is anonymized by deleting the last octet. Therefore, as the analysis proceeds, there will be no processing of personal data.

Content that you send us via the contact or application form.

The storage periods of this content depend on the type of information transmitted and the respective legal retention periods applicable. If an application does not lead to the conclusion of an employment contract, the data will be automatically deleted 6 months after completion of the application procedure. If you request the deletion at an earlier point in time within the scope of your permissible rights to data usage, the data will be deleted immediately upon your request.


Your rights

You have the right to information about the personal data stored about you at any time. You also have the right, in accordance with Articles 16 to 20 of the DS BER, to have an inaccurate data corrected, to have your personal data deleted, to have the processing of your personal data restricted and to have your data transferred.

Right to revoke consent

You have the right to revoke your consent at any time. The revocation applies with immediate effect even for the future. The legality of the processing carried out on the basis of a consent before the revocation is not affected by the annulment.

Right of appeal

If you believe that the processing of your personal data violates the DS GMO, you have the right of appeal to a regulatory authority.

Provision of your personal data

Personal information is information about your identity. These include e.g. Information such as name, address, telephone number or even the e-mail address. For the use of this Internet resource, it is not necessary for you to disclose your personal data. In certain cases, however, we need your name and address and other information so that we can provide the requested services. This applies, for example, the use of our contact form, the sending of information, the answering of individual questions or the use of our form for online applications. Where this is necessary, we will inform you accordingly. In addition, we only store and process data that you voluntarily or automatically provide. If you make use of consulting services, generally only such data is collected as is needed to provide the services. As far as we ask you for more information, the compliance remains voluntary. The personal data you provide will only be processed for the purposes disclosed and succinctly explained to you.

Changes to the data protection regulations

We reserve the right to change the security and data protection measures at any time, especially if this becomes necessary due to technological advancements. Furthermore, we will also adapt this to the latest data protection regulations accordingly. Therefore, please be informed of the current version of the data protection declaration.

Questions, suggestions, complaints

For any other queries or concerns regarding data protection and the handling of your personal data, please, contact our responsible data protection officer directly using the contact details given above.