Privacy Policy

1. General
1.1 What is personal data

Personal data is information that may disclose or disclose the identity of a natural person (“data subject”). 

Natural persons can be identified directly or indirectly, in particular by reference to an identifier. An identifier may be a name, an identification number, location data, an online identifier to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. 

As far as possible we do not collect personal data. 

1.2 Handling of personal data

Nevertheless, the usage of personal data is necessary for several purposes:

  • Personal data are used exclusively for establishing a contract, content, execution or execution of the contractual relationship (Art. 6 I b DSGVO). 
  • In addition, personal data will only be processed if we have obtained your consent (Art. 6 I a DSGVO). They are not passed on to third parties, unless stated otherwise. 
  • In order to process payments, the necessary payment data will be forwarded to the credit institution commissioned with the payment and, if applicable, to the commissioned and chosen payment service provider. 
  • The processing of your personal data takes place exclusively within the EU.
1.3 Usage data

The website collects a number of general data and information when the website is accessed by natural persons or automated systems.
Basis for this data processing is Art. 6 para. 1 lit. f DSGVO which allows the processing of data for the performance of a contract or pre-contractual measures.

This general data and information are stored in server log files. The collection may contain

(1)  the browser types and versions used,
(2)  the operating system used by the accessing system, 
(3)  the website from which an accessing system reaches our website (so-called referrers), 
(4)  the sub-websites, 
(5)  the date and time of access to the Internet site, 
(6)  an Internet protocol address (IP address), 
(7)  the Internet service provider of the accessing system, and 
(8)  any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, the SurgCongress AG does not draw any conclusions about you as a user. Rather, this information is needed to 

(1)  deliver the content of our website correctly, 
(2)  optimize the content of our website,
(3)  ensure the long-term viability of our information technology systems and website technology, and
(4)  provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. 

Therefore, the SurgCongress AG may analyze anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

1.4 Registration Data

For the full use of the functions of our website registration is required. The registration data are collected through your respective input and used for the specific purpose specified in accordance with your consent (Art. 6 I a DSGVO).

1.5 Duration of storage

We store your personal data after the end of the purpose for which the data was collected, only as long as required by law (in particular tax law).

1.6 Analysis tools and third-party tools

When you visit our website your surfing behavior can be statistically evaluated. This happens mainly with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous. The surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. 
You can object to this analysis. We will inform you about the possibilities of objection in this privacy policy. (See 5.1)

2. Your rights
2.1 Information

You can ask us for information as to whether we process your personal data. As far as this is the case, you have a right to information about this personal data and to the other information mentioned in Art. 15 GDPR.

2.2 Right to rectification

You have the right to correct incorrect personal data relating to you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to cancellation

You have the right to demand that the personal data concerning you be deleted immediately. We are obliged to delete them immediately, especially if one of the following reasons applies:

  • Your personal information is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You revoke your consent to the processing of your data and there is no other legal basis for processing.
  • Your data was processed unlawfully.

The right to delete does not exist if your personal data is necessary for the assertion, exercise or defense of our legal rights.

2.4 Right to restriction of processing

You have the right to require us to restrict the processing of your personal data if

  • You deny the accuracy of the data and we therefore check the accuracy,
    the processing is unlawful and you refuse the deletion and instead demand the restriction of use
  • We no longer need the data, but you need it to assert, exercise or defend your rights,
  • You have lodged an objection to the processing of your data, and it is not yet clear whether our legitimate reasons outweigh your reasons.
2.5 Right to Data Portability

You have the right to receive the personal information that you have provided us in a structured, common and machine-readable format and you have the right to transfer this data to another person without hindrance from us, provided the processing is based on your consent or a contract and processing is done by us using automated procedures.

2.6 Right of withdrawal

As far as the processing of your personal data is based on a consent, you have the right to revoke this consent at any time.

2.7 General and the right to complain

The exercise of your above rights is basically free of charge. You have the right to contact the responsible supervisory authority, the state data protection officer, directly in case of complaints.

3. Data security
3.1 Data security

All data on our website is protected against loss, destruction, access, modification and dissemination through technical and organizational measures.

3.2 Sessions and Cookies

The internet pages of use cookies. Cookies are text files that are stored in a computer system via an Internet browser.
Cookies usually contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited internet sites and servers to differentiate the individual browser of the dats subject from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified using the unique cookie ID.
Through the use of cookies, the SurgCongress AG can provide the users of the website with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as previously mentioned, to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website. The website user that uses cookies, e.g. does not have to enter access data each time the website is accessed, because this is taken over by the website, and the cookie is thus stored on the user's computer system. Another example is the cookie of a shopping cart in an online shop. The online store remembers the articles that a customer has placed in the virtual shopping cart via a cookie.
You may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.
The website only uses first party session cookies. So no informed consent is required according to the EU advisory body on data protection.

3.3 SSL or TLS encryption

This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from “http: //” to “https: //” and the lock symbol in your browser line.
If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

4. Newsletter

For sending newsletters we use an external service provider with whom we have a contract for order data processing. This contract regulates the processing of the data, which only takes place on our instructions.

The legal basis for data processing in the newsletter is Art. 6 Para. 1 S. 1 lit. a DSGVO. 

If you subscribe to our newsletter, we will use the information required or separately provided by you to send you regular email newsletters. In order to receive our newsletter, only the e-mail address is a mandatory field. To receive the newsletter, you as a user must agree to the data protection declaration and thus the data storage.

The deregistration from the newsletter is possible at any time and can be done either by a message to us via the contact options specified in the imprint or via the dedicated link in the newsletter. 
All other data such as name or the possible collection of behavior-based data is voluntary. They can be viewed and changed at any time. 
If you register for the newsletter via the website, data is recorded in log files by default in order to be able to prove your registration. Recorded:

  •      IP address (Internet protocol address) of the accessing computer
  •      the date and time of registration
5. Third party services
5.1 Matomo

For statistical evaluation we will use "Matomo" (formerly "PIWIK") for web analysis on this website in the future. Matomo does not transmit data to servers outside our control.

Matomo uses so-called "cookies". These are text files which are stored on your computer and which enable us to analyse the use of the website. For this purpose, the information obtained through the cookie about the use is transferred to our servers and stored so that the usage behaviour can be evaluated. Your IP will be anonymized by shortening beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a server and shortened there. This means that you remain anonymous as a user. The information generated by the cookie about your use of this website will not be passed on to third parties.

We will only use this analysis to further improve the website and to adapt it even more to your needs.

You can prevent the use of cookies by setting your browser software accordingly. However, it is possible that in this case you will not be able to use all the functions of this website to their full extent.

Here you can decide whether a web analysis cookie may be stored in your browser in order to enable us to collect and analyse statistical data.

As soon as Matomo is installed, you will find a link to deactivate the Matomo cookie.

On behalf of the operator of this website, Matomo will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

For more information about Terms of Use and Privacy, please visit

5.2 Social Media Links and Social Sharing

The website links to Facebook, Twitter, LinkedIn and Youtube on lead to the corresponding platforms. 

As long as you are not logged into any of these accounts, no data will be transmitted to these service providers. However, data may be transferred if you have an account with Facebook, Twitter, LinkedIn or YouTube and you are signed in.


On our website we link to our Facebook presence. The operating company of Facebook is Facebook, Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. The person responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland if a data subject lives outside the USA or Canada.

If you are logged in to Facebook at the same time, Facebook recognizes which specific pages you are visiting each time you visit our Facebook Pages and for the entire duration of your stay. 

If you click a Facebook button in our Facebook presence or post a comment, Facebook assigns this information to your personal Facebook user account and stores this personal data. 

If you do not wish to transmit this information to Facebook, you can prevent this transmission by logging out of your Facebook account before calling up our Facebook presence. However, certain functionalities are then not available on Facebook.

The privacy policy published by Facebook, which is available at and provides information about the collection, processing and privacy policy. It also explains which settings Facebook offers to protect your privacy. 


On our pages, links of the Twitter service are integrated. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. 

Twitter may link this information to your Twitter account and may also use it for its own promotional purposes, in accordance with Twitter's Privacy Policy

A cookie may also be stored on your computer for these purposes. Specific information on conversion tracking and privacy settings for customized ads can be found at


Our website links to our YouTube Channel. YouTube is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,  Irland

In general, you may access this YouTube Channel without being logged in. The videos can also be viewed without any restrictions. 

If you have signed in to your Google Account or subscribed to our YouTube channel, YouTube may collect information that may be used by other Google services.

Information on Privacy Policies can be found here:


LinkedIn is a social network offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland.

In order to use the service and functions, you must be a member. Only if you log in as a user or member will your personalised user data be recorded.

The Privacy Policy of LinkedIn can be found here:

5.3 Data transmission on conclusion of the contract for services and digital content

We only transfer personal data to third parties if this is necessary within the scope of the contract, for example to the bank responsible for processing the payment. A further transmission of the data does not take place or only if you have expressly consented to the transmission. A transfer of your data to third parties without explicit consent, such as for advertising purposes, does not occur.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which allows the processing of data to fulfill a contract or pre-contractual measures.

5.4 Newsletter provider mailingwork

This website uses mailingwork for sending newsletters. Provider is 

mailingwork GmbH
Birkenweg 7, 09569 Oederan
Telefon: +49 (0)371 / 33 71 61-0
Fax: +49 (0)371 / 33 71 61-10

5.4.1 Data analysis by mailingwork

If we send out newsletters with the help of a mailingwork, we can determine if a newsletter message has been opened and which links have been clicked on.

mailingwork also allows us to subdivide the newsletter recipients into different categories (so-called tagging). In this case, the newsletter recipients can be e.g. subdivided by gender, personal preference or customer relationship (e.g., customer or potential customer). In this way, the newsletters can be better adapted to the respective target groups.

If you do not want an analysis by mailingwork, you must indicate this with subscribing to the newsletter or change this via a “preferences-link”, provided in every newsletter. Furthermore, you can unsubscribe from the newsletter viathe dedicated link in the newsletter or by addressing your issue to

5.4.2 Legal basis

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The provider has a legitimate interest in offering you further products and evaluating e-mails to improve their usability.

5.4.3 Storage duration

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us from the newsletter until your subscription and deleted after the unsubscription of the newsletter both from our servers and from the servers of mailingwork. Data that has been stored for other purposes with us (such as e-mail addresses for the members area) remain unaffected.

For further information, please refer to the privacy policy of mailingwork at:

6. Contact

To contact us regarding privacy, please feel free to contact us using the contact information below. Responsible within the meaning of the GDPR:

SurgCongress AG
Davidstrasse 1
CH-9001 St. Gallen
Phone: +41 79 858 47 28