Privacy Policy
Thank you for visiting our homepage. This Privacy Policy applies to our online presence at www.intercabin.com and www.interflex-ulm.de. The information provided here is intended to inform you about how data protection is handled in our company and to show you that we take the legal requirements for data protection seriously and comply with them.
1. Subject of Data Protection
Data protection is intended to safeguard personal data and thus the right of individuals to determine how their own data is used. Personal data includes, for example: name, postal address, email address, or telephone number, as well as usage data such as your IP address. In other words, any individual pieces of information that can be used to identify a person or establish a connection to a person.
2. Controller and Data Protection Officer
The controller responsible for data processing within the meaning of data protection regulations is:
Interflex Medizintechnik GmbH
Im Lehrer Feld 9
89081 Ulm, Germany
Email:
Phone: +49 731 400 177-0
You can reach our Data Protection Officer (Group Data Protection Officer of the Simon Hegele Group) by email at
3. Legal Basis for the Processing of Personal Data
If we obtain consent from the data subject for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
If we process personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
If processing personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In cases where vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not outweigh that legitimate interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.
4. Deletion of Data and Storage Duration
We delete or block personal data of data subjects as soon as the purpose for storing the data no longer applies. Storage may also continue beyond the original purpose if this is required by legal provisions to which we are subject. Data is also blocked or deleted when a legally prescribed retention period expires, unless further storage is necessary for the conclusion or fulfillment of a contract.
5. Provision of the Website and Creation of Log Files
a) Description and scope of data processing
When you access our website, our system automatically collects data and information from the computer system you use to visit our site. The following data is collected:
(1) Information about the browser type and version used
(2) The user’s operating system
(3) The user’s internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system reaches our website
(7) Websites accessed by the user’s system via our website.
This data is also stored in so‑called log files in our system. We store this data separately from any other personal data relating to you and do not combine it with such data at any time.
b) Legal basis for data processing
The temporary storage of data and log files is based on Article 6(1)(f) GDPR.
c) Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files ensures the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing under Article 6(1)(f) GDPR. The data is not evaluated for marketing purposes in this context.
d) Duration of storage
The data is deleted as soon as the purpose for which it was collected has been fulfilled and it is no longer required. In the case of data collected for the provision of the website, this is the case when you leave our website. In the case of data stored in log files, this occurs after no more than seven days. Longer storage is possible. In such cases, the IP addresses of users are deleted or anonymized so that assigning the accessing client is no longer possible.
e) Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. For this reason, the user has no possibility to object.
6. Use of Cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can also be identified after a page change.
The following data is stored and transmitted in the cookies:
(1) Language settings
(2) Log-in information
We also use cookies on our website that enable an analysis of users’ browsing behavior.
The following data may be transmitted in this way:
(1) Entered search terms
(2) Frequency of page views
(3) Use of website functions
The data collected in this way is pseudonymized through technical measures. Therefore, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users. When accessing our website, users are informed by an info banner about the use of cookies for analysis purposes and are referred to this privacy policy. In this context, information is also provided on how the storage of cookies can be prevented in the browser settings.
b) Legal basis for data processing
For the processing of personal data using technically necessary cookies, Article 6(1)(f) GDPR applies (optional cookies: Article 6(1)(a) GDPR based on your consent).
c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected through technically necessary cookies is not used to create user profiles. The use of analysis cookies serves the purpose of improving the quality of our website and its content. Through analysis cookies, we learn how the website is used and can continuously optimize our offering. These purposes also constitute our legitimate interest in processing personal data according to Article 6(1)(f) GDPR.
e) Duration of storage, objection and removal options
Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, you as the user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
(1) First and last name
(2) Email address
You may also voluntarily provide the following data:
(1) Address
(2) Place of residence
(3) Telephone number
As soon as you send us a message via the contact form, the following data will also be transmitted and stored:
(1) IP address
(2) Date and time of submission
Before you can send us a message via the contact form, your consent to the transmission and storage of your data is obtained as part of the submission process. In this context, we refer to this privacy policy.
Alternatively, you can also contact us via the email address provided. In this case, we store the personal data transmitted with the email. We use this data exclusively for communication with you. It will not be passed on to third parties under any circumstances.
b) Legal basis for data processing
The legal basis for processing the data is Article 6(1)(a) GDPR when consent has been given. The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR.
c) Purpose of data processing
The personal data from the input form is used solely for processing the contact request. If you contact us by email, our legitimate interest in processing the data lies in handling the communication. All other personal data transmitted during the submission process serves to ensure the security of our IT systems and to prevent misuse of the contact form.
d) Duration of storage
The data is deleted as soon as the purpose for which it was collected has been fulfilled and it is no longer required. For personal data from the contact form input fields, this is the case when the respective conversation with the user has ended. This is deemed to be the case when the circumstances indicate that the matter in question has been conclusively resolved.
All other personal data collected via the contact form or email will be deleted no later than seven days after contact.
e) Use of our online services
To use our online services (registering your Intercabin / requesting service), additional data is required, some of which may be personal (e.g., name and contact details of the contact person). This data is entered via an encrypted online form and transmitted to us so that we can process the corresponding request.
Use of our online services is voluntary; you may also contact us through traditional means.
8. Links
Please note that this privacy policy does not apply to other websites that you may access via links displayed on our website. We have no influence on whether other providers comply with data protection and security regulations. Please therefore also consult the privacy policies provided on the websites of other providers.
9. Rights of the data subject
Data subjects have the following rights regarding their personal data:
-
Right of access to the personal data concerned (Art. 15 GDPR)
-
Right to rectification (Art. 16 GDPR)
-
Right to erasure (Art. 17 GDPR)
-
Right to restriction of processing (Art. 18 GDPR)
-
Right to object to processing if the data is processed on the basis of Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR); see also the following notice on the right to object under Art. 21 GDPR
-
Right to data portability (Art. 20 GDPR)
-
Right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal, if data processing is based on consent under Art. 6(1)(a) or Art. 9(2)(a) GDPR
You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us (Art. 77 GDPR).
10. Objection or withdrawal regarding the processing of your data
A. Right to object based on your particular situation
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data that is carried out on the basis of Art. 6(1)(e) (public security) or Art. 6(1)(f) (data processing based on a balancing of interests) GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
B. Right to object to direct marketing
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such advertising purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
C. Exercising the right to object
The right to object can be exercised informally, for example by post to Interflex Medizintechnik GmbH, Im Lehrer Feld 9, 89081 Ulm, or by email to
11. Subcontractors and recipients of personal data
We use subcontractors in the processing of personal data and conclude data processing agreements with these processors in accordance with the requirements of Art. 28 GDPR. As a subcontractor for hosting the website, DDM - Donau Digital Manufaktur GmbH, Ulm is used.
Your personal data is not transferred to any companies other than those already mentioned.
12. Data protection supervisory authority and right to lodge a complaint
The data protection supervisory authority responsible for us, where you may (among other options) also lodge a complaint regarding a violation of data protection law, is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Public-law institution
Lautenschlagerstraße 20
70173 Stuttgart
Tel.: 0711/615541-0
Fax: 0711/615541-15
Email:
13. Updates to this privacy notice
From time to time, it is necessary to update the content of this privacy notice. We therefore reserve the right to change it at any time. We will send the updated version of the privacy notice to registered users by email before it takes effect and publish it in the same location as this privacy notice.
Status: 17.02.2026
DE