Privacy Policy
In the following, we inform you about how we handle personal data.
1. General
Of course, we comply with all legal requirements when processing your personal data, in particular the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications and Telemedia Data Protection Act (TDDG). We protect your personal data. According to Article 4 No. 1 GDPR, this refers to information relating to an identified or identifiable natural person. This includes details such as name, address, telephone number, and usage data.
2. What personal data do we process?
When you access our website, the following information (server log files) is processed:
- Your IP address
- the operating system of your device (e.g. Windows, iOS, Android)
- the type of web browser
- the domain name of your Internet service provider
- the referrer URL and the content accessed
Date and time of the call. When accessing via a mobile device (smartphone or tablet), additionally:
- Device manufacturer and type
If you register, i.e. if you create a customer account in our Resmed online shop, the following personal data will be processed:
- Salutation
- First name/Last name
- Address (street, house number, postcode, city)
- Date of birth
- Email address
- Phone number (optional)
Your self-chosen password.
By registering in the Resmed online shop, you can view your orders (order history). If you order without registration (i.e. as a guest), the above-mentioned personal data will also be processed, with the exception of your password.
If you shop in our online shop, we require further personal data from you to conclude the contract, including the processing of your payment and the shipment of the purchased goods. We store information about your registration and/or order and send you the order details electronically. You can view our General Terms and Conditions here at any time. You can view and track past orders in your customer account, provided you have registered as a customer. Your personal data will also be stored if you contact ResMed via the contact form or by telephone.
The collection, processing and storage of personal data generally only takes place to the extent necessary for the fulfillment of the contract or to answer your inquiry.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6 (1) (f) of the GDPR (processing based on legitimate interests).
3. For what purposes do we process your personal data?
The purpose of processing is to deliver the goods you ordered in the Resmed online shop and to process your payment. When you access our website, general information is automatically collected, even if you do not register or otherwise submit data. For details on what data is collected, please refer to Section 2. The data is processed for the following purposes in particular: to ensure a smooth connection to the website, to ensure the smooth operation of our website, to ensure and evaluate system security and stability, in particular to detect misuse, and for the technically flawless display and optimization of our website. We do not use your data to draw conclusions about your person. However, we reserve the right to retrospectively check the server log files if there are concrete indications of illegal use. The provision of the above-mentioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed.
4. What is the legal basis for processing your personal data?
When registering and placing an order in the ResMed online shop, data processing is carried out on the basis of Article 6 (1) (a), (b) or (f) GDPR. If the data processed is health data, processing is carried out on the basis of Article 9 (2) (a), (b) or (f) GDPR. With regard to access to the website, processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website, as well as in ensuring system security and detecting misuse.
5. Who is the responsible authority?
The data controller is:
ResMed GmbH & Co. KG, Mahatma-Gandhi-Platz 3, 81248 Munich, Germany.
Tel: 0800 2777-000
Email: kontakt@resmed.de
6. How long do we store your data?
ResMed stores your personal data for as long as necessary to fulfill the purpose for which it was collected. Unless there are legal retention obligations, the data will then be deleted. Data collected via cookies or similar technologies will be stored according to the periods specified in our Cookie Policy.
7. Are personal data transferred to third parties?
We collect, process, and store personal data exclusively for the purposes for which it was provided to us. In the course of order processing, it may be necessary to transfer your personal data to companies we commission to fulfill the contract (e.g., transport companies or partners who handle payment processing for us). Personal data will only be disclosed to authorities or other institutions if and to the extent that we comply with our legal disclosure obligations. This also applies if we are obliged to do so by a court order. Our employees and the service providers we commission for order processing are obliged to comply with all data protection regulations and to maintain confidentiality. As part of your registration/ordering process, you will be separately asked to agree to this privacy policy before completing the registration/ordering process.
8. How do we use cookies?
We use cookies and other technologies to improve the user experience on our website. a) Cookies A cookie is a small file created by a website to store data on your device. We use cookies on our website regardless of whether you have registered or logged in to the services we offer. Cookies can collect certain information about you, your device, and your use of our website. This allows your device to be identified when you visit our website again. For example, we may use cookies to store your website preferences, offer you advertising, pre-fill forms, or retrieve your login details. This allows you to stay logged in to our website or we can collect statistical information about navigation on our website. b) How can you adjust cookie settings? You can revoke or adjust your consent to the use of cookies, unless they are strictly necessary, at any time with future effect. The link to the cookie settings can be found via the green cookie icon in the lower left corner of this website or here. If you object to the use of cookies, you may not be able to use some functions of the website you visit or register on.
9. What (analytical) tools do we use?
a) Google Analytics
If you have given your consent, Google Analytics is used on this website. Google Analytics is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so‑called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. Further information on data protection at Google can be found at: https://support.google.com/analytics/answer/6004245?hl=de (support.google.com in Bing)
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.
You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link:
Browser Add‑On to deactivate Google Analytics.
b) Google Tag Manager
The website uses the Google Tag Manager service from Google for analysis. “Google” is a corporate group consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC.
We have concluded a data processing agreement with Google. Google Tag Manager is an auxiliary service and processes personal data only for technically necessary purposes. Google Tag Manager ensures the loading of other components that may themselves collect data. Google Tag Manager does not access this data.
Further information on Google Tag Manager can be found in Google’s privacy policy.
Please note that U.S. authorities, such as intelligence agencies, may potentially gain access to personal data due to U.S. laws such as the Cloud Act. This may affect personal data that is inevitably exchanged with Google when this service is integrated, due to the Internet Protocol (TCP).
c) Google Address Validation
To improve data quality and avoid incorrect entries, we use address validation. For this purpose, an interface from Google (e.g., Google Maps Platform / Address Validation API) may be used.
When you enter your address, the address data you provide (e.g., street, house number, postal code, city) is transmitted to Google to verify, complete, or correct the address. The validation helps avoid delivery issues and ensures correct processing of your order.
Processing is carried out on the basis of Art. 6(1)(b) GDPR (processing for the performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient handling of orders).
Google may process personal data in the USA as part of this service. For such cases, Google relies on appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the Standard Contractual Clauses approved by the EU Commission.
Further information on Google’s data processing can be found in Google’s privacy policy: https://policies.google.com/privacy
d) Friendly Captcha
We also use the bot‑protection service Friendly Captcha for our business operations. The service provider is Friendly Captcha GmbH, Am Anger 3‑5, 82237 Woerthsee, Germany.
More information about the data processed through the use of Friendly Captcha can be found in the privacy policy at:
https://friendlycaptcha.com/de/legal/privacy-end-users/
10. Embedding YouTube Videos
We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”).
When you visit a page containing the YouTube plugin, a connection to YouTube’s servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behavior.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s privacy policies. There you will also find additional information about your rights and settings to protect your privacy:
https://policies.google.com/privacy
The provider currently does not offer a simple opt‑out or a way to block data transmission. If you want to prevent tracking of your activities on our website, please withdraw your consent for the corresponding cookie category or for all non‑essential cookies and data transfers in the cookie‑consent tool. In this case, however, you may not be able to use our website at all or only to a limited extent.
11. Integration of the Trusted Shops Trustbadge
To display our Trusted Shops quality seal and any reviews collected, as well as to offer Trusted Shops products for buyers after an order, the Trusted Shops Trustbadge is integrated on this website. This serves to safeguard our overriding legitimate interests in the optimal marketing of our offer in accordance with Art. 6(1) sentence 1 lit. f) GDPR.
The Trustbadge and the services advertised with it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is accessed, the web server automatically stores a so‑called server log file, which contains e.g. your IP address, date and time of access, transferred data volume, and the requesting provider (access data), and documents the access. These access data are not evaluated and are automatically overwritten no later than seven days after your visit to the site.
Further personal data are transmitted to Trusted Shops only if you have given your consent, decide to use Trusted Shops products after completing an order, or are already registered for their use. In this case, the contractual agreement between you and Trusted Shops applies.
12. What are my rights?
You may exercise various rights in relation to your personal data:
- The right to be informed about how your personal data is used.
- The right to obtain access to the personal data stored about you.
- The right to request correction of inaccurate personal data concerning you.
- The right to request restriction of processing of your personal data in certain cases.
- The right to request that we stop processing or collecting your personal data under certain circumstances.
- The right to request deletion of your personal data.
- The right to withdraw any consent given to ResMed for the use of your personal data. You may object to any future use of your data for this purpose at any time. The withdrawal can be made using the contact details provided for the respective responsible entity.
- The right to request that we transfer the data you have provided either to you or to another service provider.
- The right to file a complaint with the competent authority — which is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Email: poststelle@lda.bayern.de
A list of supervisory authorities (for the non‑public sector) with addresses can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
13. An wen kann ich mich wenden um diese Rechte geltend zu machen?
You may request information about the personal data stored about you at any time, free of charge and without providing reasons, or exercise any of your rights listed under Section 12.
For this purpose, or for any other questions regarding data protection, please contact:
Resmed GmbH & Co. KG
Team Datenschutz
Mahatma‑Gandhi‑Platz 3
81248 Munich
Email: Datenschutz@resmed.de
The contact details of our data protection officer are as follows:
Resmed GmbH & Co. KG
Data Protection Officer
Mahatma‑Gandhi‑Platz 3
81248 Munich
Email: DSB@resmed.de
14. Additional Privacy Notice Regarding the Subscription to Marketing Emails
You will receive information about our products and offers through the newsletter, as well as useful insights about our company, such as study results, highlights from trade fairs and events.
If you would like to subscribe to our newsletter, we first require an email address from you. This allows us to verify whether you, as the owner of the email address, agree to receiving the newsletter. After registering, you will receive a confirmation link sent to the email address you provided, enabling you to complete your newsletter subscription (double‑opt‑in procedure).
In addition to your email address, we store the following personal data in connection with your newsletter subscription: salutation, first name, last name, areas of interest; for newsletters aimed at medical professionals, we additionally store function and role; academic title and medical institution/company, if provided.
The processing of the personal data you provide for the purpose of receiving the newsletter is based on your consent (Art. 6(1)(a) GDPR). The data is stored until you unsubscribe from the newsletter. Data processing takes place exclusively within the EU.
You may withdraw your consent to receiving the newsletter at any time with effect for the future. A link for this purpose can be found at the end of every newsletter. After your withdrawal, newsletter delivery will be stopped within 30 days, and the data stored about you in connection with the newsletter will be deleted within 60 days.
We also reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6(1)(f) GDPR, for example in cases of abusive behavior related to newsletter subscription.
Processing of Your Personal Data to Improve and Personalize Your Newsletter
To tailor the newsletter to your interests and preferences as effectively as possible, we collect information about your usage behavior in addition to the personal data mentioned above. We record whether and when the newsletter is opened and which content is clicked.
The legal basis for processing your personal data for this purpose is exclusively your consent, Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. A link for this purpose can be found at the end of every newsletter or in your customer account (for registered users).
15. Termination of Contract / Withdrawal Function (Withdrawal Button)
The provision of the data is required in order to declare the withdrawal via the withdrawal button. Without this information, the withdrawal cannot be processed through this electronic function; other withdrawal options remain unaffected.