Thank you for your interest in our website. The protection of your personal data is important to us. Here you can find out what data we collect, how we use it, and what rights you have.

1. Data controller

implantcast GmbH
Lüneburger Schanze 26
21614 Buxtehude
Germany

Email: info@implantcast.de 
Data Protection Officer: datenschutz@implantcast.de 

2. General information

Protecting your personal data is important to us. We process your data exclusively in accordance with the applicable data protection legislation.

3. Visiting our website

When you access our website, server log files are collected automatically (anonymised IP address, date, time, pages accessed, referrer and browser information). This serves to ensure system security and stability. The legal basis is Article 6(1)(f) GDPR.

4. Contact enquiries

If you contact us, we process the information you provide (name, email address, telephone number where applicable, and the content of your enquiry) for the purpose of handling your enquiry.
Retention period: generally 30 days.
Legal basis: Article 6(1)(b) GDPR.

5. Processing of personal data in connection with custom-made devices

In connection with the ordering and manufacture of custom-made devices, we process personal data and, where applicable, patient data.

Purposes:
- Handling the enquiry
- Manufacturing individual medical devices
- Complying with regulatory requirements (MDR)

Categories of data:
- Contact details
- Product and specification data
- Patient data, where applicable

Legal bases:
- Article 6(1)(b) GDPR
- Article 6(1)(c) GDPR
- Article 9(2)(h) GDPR

Retention period:
10 years; for implantable products, up to 15 years.

Roles:
The entity transmitting the data acts as controller for the transfer of the data. implantcast processes the data solely for technical implementation.

6. Applications

We process application data for the purpose of conducting the selection procedure.
Retention period: 6 months after completion of the procedure.

7. Cookies and tracking

We use technically necessary cookies as well as Matomo for anonymised analysis. Legal basis: Article 6(1)(f) GDPR.

8. Recipients of personal data

Recipients may include internal specialist departments, IT and hosting service providers, production partners and public authorities. All recipients are contractually or legally required to comply with applicable data protection requirements.

9. Transfers to third countries

Transfers to third countries take place only where appropriate safeguards are in place (e.g. standard contractual clauses).

10. General retention period

Personal data is stored only for as long as is necessary for the respective purposes or as required by statutory retention obligations.

11. Data security

We use technical and organisational measures, in particular:
- SSL/TLS encryption
- Access restrictions
- Data backups

12. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability. You may also lodge a complaint with a supervisory authority.

13. Changes

This Privacy Notice is reviewed and updated regularly. The current version is dated 1 June 2026.