Data Privacy

We appreciate your interest in our website. Protecting your personal data is very important to us. This Privacy Policy explains how we process personal data when you visit this website, contact us, or use our online services. “Personal data” means any information relating to an identified or identifiable natural person within the meaning of the EU General Data Protection Regulation (GDPR).

Sonovum GmbH
Deutscher Platz 4
04103 Leipzig
Germany

We process personal data exclusively in accordance with the GDPR. Depending on the specific processing operation, we rely on the following legal bases:

-Art. 6 Sec. 1 lit. a GDPR – consent, where you have given us your explicit permission to process data for specific purposes (e.g. analytics cookies).
-Art. 6 Sec. 1 lit. b GDPR – performance of a contract or steps prior to entering into a contract (e.g. handling concrete enquiries via our contact form).
-Art. 6 Sec. 1 lit. c GDPR – compliance with a legal obligation (e.g. statutory retention obligations under commercial or tax law).
-Art. 6 Sec. 1 lit. f GDPR – legitimate interests pursued by us or a third party, provided that your interests or fundamental rights and freedoms do not override those interests (e.g. ensuring the security and technical operation of our website).

Where processing is based on consent, you may withdraw your consent at any time with effect for the future.

When you visit our website, your browser automatically transmits certain information to our web server. This information is temporarily stored in server log files:

-browser type and version
-operating system used
-referrer URL (previously visited page)
-hostname of the accessing device
-time of the server request
-IP address

We process this data to ensure a smooth connection setup and the technical security of our website, to evaluate system stability and to detect and remedy malfunctions.

The legal basis for this processing is our legitimate interest pursuant to Art. 6 Sec. 1 lit. f GDPR in the secure and efficient operation of our website. Log files are generally stored for a short period (normally no longer than 7 days) and then deleted or anonymised, unless longer storage is required in connection with security incidents or legal obligations.

If you contact us by email or via a contact form on our website, we process the data you provide (e.g. name, contact details, content of the enquiry) in order to handle your request and to respond to you.

If your enquiry relates to the initiation or performance of a contract, processing is based on Art. 6 Sec. 1 lit. b GDPR. For other enquiries, the legal basis is our legitimate interest in effective communication with (potential) customers and other interested parties pursuant to Art. 6 Sec. 1 lit. f GDPR.

We store the data from your enquiry for as long as necessary to process your request and for any follow‑up questions, or for the duration of applicable statutory retention periods.

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device by your browser.

6.1 Essential Cookies
Essential (necessary) cookies are required for the technical functioning of the website and to provide basic features (e.g. language settings, cookie consent management). These cookies cannot be deactivated in our systems.

The legal basis for processing using essential cookies is our legitimate interest in providing a secure and user‑friendly website pursuant to Art. 6 Sec. 1 lit. f GDPR.

6.2 Non‑Essential Cookies (Analytics)
Non‑essential cookies, in particular analytics cookies, are only used with your prior consent via our cookie banner (opt‑in). The legal basis for data processing in this context is your consent pursuant to Art. 6 Sec. 1 lit. a GDPR.

You can adjust or withdraw your consent at any time with effect for the future using the “Cookie settings” link provided on our website or by changing your browser settings.

We use the open‑source web analytics tool Matomo to analyse the use of our website and to improve its content and user experience.

Matomo uses cookies that allow us to recognise your browser and to collect information about your website usage (e.g. accessed pages, time spent on the page, click paths). Your IP address is shortened (anonymised) before storage so that it can no longer be directly linked to you. The data is stored exclusively on servers under our control and is not shared with third parties.

Matomo is only activated if you consent to the use of analytics cookies via our cookie banner. The legal basis for this processing is your consent in accordance with Art. 6 Sec. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future by adjusting your cookie preferences via the “Cookie settings” link on our website. If you withdraw your consent, no further analytics cookies will be set and future visits will no longer be tracked.

We use web fonts and other design resources to ensure a consistent and visually appealing presentation of our website.

Where possible, fonts are hosted on our own servers so that no connection to external font providers is necessary. If, in individual cases, external resources are loaded from third‑party servers (e.g. CDNs), your browser may transmit technical data such as your IP address and browser type to these providers. This is done to deliver the requested content in a technically efficient and secure manner.

The legal basis for this is our legitimate interest in an attractive and technically reliable presentation of our website pursuant to Art. 6 Sec. 1 lit. f GDPR. Where such resources are not strictly necessary and involve tracking technologies, they are only activated after you have given consent via the cookie banner (Art. 6 Sec. 1 lit. a GDPR).

We only transfer your personal data to third parties if:

- you have expressly consented (Art. 6 Sec. 1 lit. a GDPR);
-the transfer is necessary for the performance of a contract with you (Art. 6 Sec. 1 lit. b GDPR);
-we are legally obliged to do so (Art. 6 Sec. 1 lit. c GDPR); or
-the transfer is necessary for the purposes of our legitimate interests and there is no reason to assume that you have an overriding interest in the non‑disclosure of your data (Art. 6 Sec. 1 lit. f GDPR).

We may use carefully selected service providers (processors) for hosting, maintenance, support, and the operation of analytics tools. These processors are contractually bound under Art. 28 GDPR to process personal data only in accordance with our instructions and to implement appropriate technical and organisational measures to protect your data.

We store personal data only for as long as necessary to fulfil the purposes for which it was collected or as long as required by statutory retention obligations.

​-Server log files are generally deleted or anonymised after a short retention period (normally no longer than 7 days), unless further storage is required in connection with security incidents or legal obligations.
-Data from contact enquiries is stored for the duration of processing and any follow‑up communication, and beyond that only if required by statutory retention periods or to assert, exercise or defend legal claims.

When the respective purpose no longer applies and there are no legal retention obligations, data will be deleted in accordance with our deletion routines.

As a data subject, you have the following rights under the GDPR with regard to your personal data:

​-Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not we process personal data concerning you, and where that is the case, access to this data and additional information.
-Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data and the completion of incomplete data.
-Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data where the legal requirements are met.
-Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing under certain conditions.
-Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine‑readable format, and to have that data transmitted to another controller where technically feasible.
-Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 Sec. 1 lit. e or lit. f GDPR. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
-Right to withdraw consent (Art. 7 Sec. 3 GDPR): Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future.
-Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.

To exercise your rights, you can contact us at any time using the contact details.

There is generally no legal or contractual obligation to provide personal data when visiting our website. However, certain data (e.g. server log files, essential cookies) is necessary for technical reasons to display our website and to ensure its secure operation. If you do not provide such data, you may not be able to use our website or certain functionalities.

​For contact enquiries, it may be necessary to provide certain information (e.g. name, email address) so that we can respond to you. Without this information, we may not be able to process your request.

We do not use automated decision‑making, including profiling, within the meaning of Art. 22 GDPR in connection with your use of this website.

We may amend this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements. The current version is always available on this website and is indicated by the date at the end of the policy.

Last updated: January 2026