Privacy Policy 

1. General Information 

The protection of your personal data is important to us. This Privacy Policy explains how TopMed Advisory processes personal data in accordance with the General Data Protection Regulation (GDPR). 

​

2. Controller 

TopMed Advisory 
Carsten Buchmüller 

Angermunder Str. 237
47269 Duisburg
Germany 

Email: info@topmedadvisory.com 
Phone: +49 170 5055880 

​

3. Collection and Processing of Personal Data 

We process personal data only to the extent necessary to provide a functional website and our services. 

Personal data may be processed when you: 

• visit this website, 

• contact us via email or contact form, 

• schedule an introductory call. 

​

When you use the contact form, the information you provide is transmitted to us and stored for the purpose of processing your inquiry and for potential follow-up questions. The submission of the contact form is voluntary.

​​

4. Types of Data Processed 

The following categories of personal data may be processed: 

• Name 

• Company name 

• Email address 

• Message content 

• Technical data (e.g. IP address, browser type, access time) 

​

5. Purpose of Processing 

Personal data is processed for the following purposes: 

• Communication with interested parties and clients 

• Responding to inquiries 

• Scheduling and conducting advisory conversations 

• Ensuring the technical operation and security of the website 

​

6. Legal Basis for Processing 

Personal data is processed on the following legal bases: 

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures 

• Art. 6(1)(f) GDPR – legitimate interest in professional communication and website security 

​

7. Data Storage and Deletion 

Personal data is stored only for as long as necessary to fulfill the purpose for which it was collected or as required by law. 

​

8. Disclosure to Third Parties 

Personal data will not be disclosed to third parties unless: 

• disclosure is required by law, or 

• it is necessary for the fulfillment of contractual obligations. 

• Personal data may be disclosed to service providers (processors) engaged for website hosting and security, provided that appropriate data protection agreements are in place.

​​

9. Website Hosting 

Our website is created and hosted using the Wix website platform.

The provider is:

Wix.com Ltd.
40 Namal Tel Aviv St.

Tel Aviv 6350671

Israel

​

Wix processes personal data collected when you visit and use our website, including for the provision, security and technical operation of the website.

This may involve the processing of personal data outside the European Union (EU) or European Economic Area (EEA). Wix provides appropriate data protection mechanisms for such transfers.

Further information about the processing of personal data by Wix can be found in Wix's Privacy Policy.

​

​10. Contact, Contact Form and Google reCAPTCHA

If you contact us via the contact form or by email, we process the personal data you provide, in particular:

• Name

• Company

• Email address

• Telephone number, if provided

• Content of your message

• ​

The processing is carried out to respond to your enquiry, communicate with you and, where applicable, prepare for or perform a contract or consultation.

Depending on the nature of your enquiry, the legal basis for processing may be Article 6(1)(b) GDPR (pre-contractual measures or performance of a contract) or Article 6(1)(f) GDPR (legitimate interest in processing enquiries).

​

To protect our contact form against spam and misuse, we use Google reCAPTCHA.

The provider is:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland

​

Google reCAPTCHA is used to determine whether an entry in our contact form has been made by a natural person or by an automated system.

For this purpose, reCAPTCHA may process information about user behaviour and technical information, such as IP address, browser information, time spent on the website or interactions with the website.

The use of reCAPTCHA is subject to the consent settings configured in our cookie and consent management system, where such consent is legally required.

The processing may involve the transfer of data to Google or processing outside the EU/EEA.

​

Further information can be found in Google's Privacy Policy.

​

11. Website Visits and Server Log Files

When you access our website, technically necessary data may be processed by our hosting and website service provider. This data may include:

• IP address

• Date and time of access

• Pages and content accessed

• Browser type and version

• Operating system

• Referrer URL

This processing is carried out to ensure the technical provision, stability and security of the website and to detect and prevent misuse.

The data is generally stored only for as long as necessary for these purposes or as required by applicable legal retention obligations.

​

12. Cookies, Tracking and Similar Technologies

Our website uses cookies and similar technologies.

Technically necessary cookies are used where they are required for the operation and basic functionality of the website.

Additional cookies or technologies, for example for analytics, marketing or other purposes, are only used after obtaining the required consent.

You can view the services and cookies currently used on our website at any time via the cookie settings and change your preferences there.

​

If additional tools (such as analytics or scheduling tools) are implemented in the future, this Privacy Policy will be updated accordingly.

(If tools such as Google Analytics, Calendly, or similar are added later, this section must be updated.) 

​

Cookie Banner and Consent Management (Usercentrics)

We use Usercentrics to manage cookies and similar technologies on our website.

The provider is:

Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany

Usercentrics enables us to obtain, document and manage the consent of website visitors to the use of certain cookies and similar technologies.

The following information may be processed in this context:

• Consent status

• Date and time of consent

• Information about the services and technologies selected

• Technical information about the browser and device used

The processing serves, in particular, to comply with data protection requirements and to document consent that has been granted or withdrawn.

You can change or withdraw your consent at any time via the cookie settings available on our website.

​

13. Download of Product Information

Our website provides product information, in particular information relating to the AGISEAL® HF Surgery Systems, as PDF documents for download.

When accessing or downloading such a document, technical information such as the IP address, time of access and other technical connection data may be processed. This may occur in particular through the hosting and delivery of the file.

The download is provided solely to make the requested product information available to you.

​

14. Disclosure of Personal Data to Third Parties

Personal data is generally only disclosed to third parties where there is a legal basis for doing so.

We use service providers to support us, in particular with the operation, hosting and protection of our website. Where these service providers process personal data on our behalf, appropriate data processing agreements are concluded where legally required.

The services used may include, in particular:

Wix
Usercentrics
Google reCAPTCHA

15. Data Retention

We retain personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Enquiries submitted via the contact form or by email are deleted once they are no longer required for processing and subsequent communication, unless statutory retention obligations apply.

​

​16. Your Rights 

You have the right to: 

• access your personal data 

• rectification of inaccurate data 

• deletion of your personal data 

• restriction of processing 

• data portability 

• object to data processing 

Requests can be sent to the contact details listed above. 

​

17. Right to Lodge a Complaint 

You have the right to lodge a complaint with the competent data protection authority if you believe that the processing of your personal data violates the GDPR. 

​

18. Data Security 

We apply appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, or misuse. 

​

19. Changes to this Privacy Policy 

This Privacy Policy may be updated to reflect changes in legal requirements or website functionality.