Privacy Policy

General information

Pro-Cure Solutions GmbH would like to inform you about how we handle your personal data. The protection of your privacy and your personal data is an important concern for us.

We only wish to collect and process personal data about you with your knowledge or consent. You will learn which information we may store and for which purposes we use it.

This privacy policy may be amended from time to time. Please use this page to keep yourself informed, as we will post any changes here.

The legal basis for data protection can be found in the current version of the Federal Data Protection Act (BDSG), the EU General Data Protection Regulation (GDPR) and the Telecommunications Telemedia Data Protection Act (TTDSG).

When using terms such as “personal data,” we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

The Pro-Cure Solutions website may contain links to websites of other providers, to which this privacy policy does not extend. In this respect, we refer to the provisions on the linked pages of other providers.

We point out that the use of contact data published within the imprint or comparable information — such as postal addresses, telephone and fax numbers, and email addresses — by third parties for the purpose of sending information that has not been expressly requested is not permitted. We reserve the right to take legal action in this regard.

Name and address of the controller

Pro-Cure Solutions GmbH Lietzenburger Str. 93-95 10719 Berlin, Germany

Email: info@pro-cure-solutions.com Tel.: +49 (0) 30 403 683 777 Fax: +49 (0) 30 375 923 115

Data protection officer

Rodney Wiedemann Consultant for Data Protection and Information Security

T. +49 621 121847-64 rw@althammer-kill.de

Althammer & Kill GmbH & Co. KG Kaiserring 10-16 68161 Mannheim

Data protection, information security and IT compliance www.althammer-kill.de

Any data subject can contact our data protection officer directly at any time with all questions and suggestions regarding data protection.

Basic categories of personal data affected by the processing

Personal data is information that can be used to identify a person or that describes their behavior — that is, information that can be traced back to a person. This includes, among other things, the name, the email address or the telephone number, but also data such as the IP address or websites visited.

Customers (address data, contact data including telephone, fax and email data, contract data, support information including customer development, statistical data, billing and performance data).

Employees, applicants (including application data, information on professional career, training and qualifications; contract, master and billing data; contact information; employee status; qualifications; data for personnel administration and management; working-time recording data; emergency contact data).

Business partners and suppliers (address, billing and performance data), insofar as these are necessary to fulfill the purposes stated under “Purpose of processing.”

Purpose of processing

In accordance with the principles of the GDPR, personal data is only processed for a specific purpose. These include, among others:

• Provision of consulting and purchasing services for the customers of Pro-Cure Solutions GmbH
• Storage and data processing of personal data on behalf of and in the name of business partners, customers and cooperation partners in accordance with the respective applicable agreements
• Provision of the online offer, its content and functions
• Provision of contractual services, service and customer care
• Answering contact inquiries and communicating with users
• Marketing, advertising and market research
• Security measures
• Applications (recruiting)
• Employee data processing

Transmission to third countries

If Pro-Cure Solutions GmbH processes data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the course of using third-party services or disclosing or transmitting data to third parties, this only takes place if it is necessary to fulfill our contractual or pre-contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests.

Subject to legal or contractual permissions, we process or have data processed in a third country only where the special requirements of Art. 44 et seq. GDPR are met. Processing therefore takes place, for example, on the basis of an adequacy decision pursuant to Art. 45 GDPR (e.g. for the USA under the EU-U.S. Data Privacy Framework), on the basis of suitable safeguards within the meaning of Art. 46 GDPR (e.g. EU standard contractual clauses), and provided that enforceable rights and legal remedies result therefrom.

Access data / server log files

When the website is accessed, the servers automatically store various data about the accessing system. This includes the browser type used, the browser version, the operating system used, the website from which our website is accessed (referrer), the subpages of this website that are accessed, the date and time of access, the Internet Protocol address (IP address), and the Internet service provider.

This data is used to make the website accessible, to detect and remedy any technical problems that may arise, and to prevent — and, where necessary, pursue — misuse of our offer.

The legal basis for processing this data is Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest in the secure provision of the website).

External hosting

This website is hosted by WP Engine (WP Engine, Inc.). The personal data collected on this website is stored on the host’s servers. The servers for our website are located in Belgium (EU).

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1) lit. f GDPR).

Our host will only process your data insofar as this is necessary to fulfill its performance obligations, and will follow the instructions of Pro-Cure Solutions GmbH with regard to this data.

Cookies

Our websites use so-called cookies. Cookies are small text files that are placed on your device and stored by your browser.

Technically necessary cookies (e.g. session cookies) are set on the basis of Art. 6 (1) lit. f GDPR in conjunction with § 25 (2) TTDSG, as they are required for the operation of the website. Session cookies are automatically deleted when the browser is closed.

Non-necessary cookies (e.g. for analysis or marketing purposes) are only set after you have given your express consent via our cookie consent tool (Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TTDSG). You can revoke your consent at any time with effect for the future by adjusting your cookie settings via our cookie consent tool “Real Cookie Banner.”

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and comparable technologies to analyze the use of our website.

The information generated by these technologies about your use of this website is generally transmitted to a Google server and stored there. A transfer to Google LLC in the USA may take place. Google is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.

Legal basis: Google Analytics is only used if you have given your express consent via our cookie consent tool (Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TTDSG). You can revoke your consent at any time with effect for the future.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on activities within this online offer, and to provide us with further services connected with the use of this online offer and internet use.

Further information on data use by Google, as well as settings and objection options, can be found on Google’s websites:

• https://www.google.com/intl/de/policies/privacy/partners
• https://policies.google.com/technologies/ads
• https://myadcenter.google.com/

Google Maps

To make it easier for you to find us, we have integrated map material from the Google Maps service provided by Google Ireland Limited on our contact page via an API. In order to display the content in your browser, Google must receive your IP address.

Legal basis: The integration takes place on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TTDSG. Google Maps is only loaded after you have given your consent via our cookie consent tool. You can revoke your consent at any time.

In this processing, our cooperation with Google takes place on the basis of a joint controllership agreement pursuant to Art. 26 GDPR, which can be accessed at the following link: https://privacy.google.com/intl/de/businesses/mapscontrollerterms/

Further information on data processing by Google can be found in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/.

YouTube

On our website, we embed videos from the YouTube service, which is operated by Google Ireland Limited. We use YouTube in extended data protection mode (youtube-nocookie.com). According to YouTube, no cookies are set and no information about visitors is stored in this mode, unless the video is played.

However, when a video is played, YouTube may set cookies on your device and collect information about your usage behavior. A transfer to Google LLC in the USA may take place. Google is certified under the EU-U.S. Data Privacy Framework.

Legal basis: The integration takes place on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TTDSG. YouTube content is only loaded after you have given your consent via our cookie consent tool. You can revoke your consent at any time.

Further information on data protection at YouTube can be found in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/.

Contact form

When using the contact form, the following personal data is collected: name, telephone number, email address and your message. All entries are mandatory.

Before sending the form, you confirm via a checkbox: “I agree that my details will be stored and processed in order to handle my inquiry.”

Legal basis: Processing takes place on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR and on the basis of our legitimate interest in handling your request pursuant to Art. 6 (1) lit. f GDPR.

This personal data is not passed on to third parties.

The data you enter in the contact form remains with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully handled). Mandatory statutory provisions — in particular retention periods — remain unaffected.

The same applies to contacting us by email, telephone or post. Please note that additional data resulting from the chosen communication channel (email address or transmitted telephone number) may be collected.

Please note that encrypted and/or signed communication may not be possible via the contact channels provided.

Deletion of personal data

We store the personal data of the data subject only for the period necessary to achieve the purpose of storage. If the purpose of storage no longer applies or a storage period expires, the personal data is deleted in accordance with the statutory provisions.

Legal bases

Art. 6 (1) lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

For the processing of personal data necessary to fulfill a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

Security

The data you transmit is protected by us through suitable technical and organizational measures in order to protect it against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously monitored and improved in line with technological developments and organizational possibilities.

Information for applicants (m/f/d)

[pursuant to Art. 13 GDPR – Duty to provide information when collecting personal data from the data subject]

We attach great importance to the protection of your data and the safeguarding of your privacy. Below, we inform you about the collection, processing and use of personal data within the framework of our application procedures.

When you apply to us, we collect and process the personal data that you transmit to us by email as part of your application. This generally includes: first name, last name, address, email address, telephone number, salutation, and information on professional experience, training and qualifications (e.g. CV, references, cover letter).

Legal basis: Processing takes place on the basis of § 26 BDSG in conjunction with Art. 88 GDPR for the purpose of carrying out the application procedure, and on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR.

Your personal data is only collected or processed by persons responsible for handling the application. All employees involved have been obliged to maintain confidentiality.

No information that may not be processed under the General Equal Treatment Act (AGG) is required to process your application. We ask you not to provide any such information.

If we are unable to offer you a position, we will store your data for a maximum of six months after rejection in order to be able to answer any questions that may arise in connection with the rejection. The data is then deleted.

If you send your application documents electronically, you must arrange for encryption yourself.

Data subject rights

Right of access pursuant to Art. 15 GDPR: You have the right to obtain information about your personal data stored and processed by us at any time.

Right to rectification, erasure, restriction pursuant to Art. 16–19 GDPR: You have the right to have inaccurate data corrected and to have personal data erased or its processing restricted (provided that your request does not conflict with a legal obligation to retain data). If you have exercised your right to rectification, erasure or restriction vis-à-vis the controller, the controller is obliged to inform all recipients to whom your data has been disclosed of your request.

Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data stored by us in a structured, commonly used and machine-readable format.

Right to withdraw consent given pursuant to Art. 7 (3) GDPR: You have the right to withdraw consent you have given at any time with effect for the future, without affecting the lawfulness of the processing carried out on the basis of the consent up until the withdrawal.

Right to object pursuant to Art. 21 GDPR: You have the right to object at any time to the processing of personal data concerning you. If you object, your personal data will no longer be processed unless compelling legitimate grounds for the processing are demonstrated that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint pursuant to Art. 77 GDPR: If you are of the opinion that the processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact our data protection officer directly: rw@althammer-kill.de

Competent supervisory authority

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstr. 219 10969 Berlin Tel.: +49 30 13889-0 Fax: +49 30 2155050 Email: mailbox@datenschutz-berlin.de

This privacy policy is dated 2026.

© Pro-Cure Solutions GmbH