Privacy policy
Privacy Policy
Last updated: July 2026
1. Introduction
Aureon Medical is committed to protecting your privacy and handling your personal data in a transparent, secure and lawful manner.
This Privacy Policy explains how Aureon Medical collects, processes, stores, shares and protects personal information when you visit our website, create a customer account, request information, place an order, purchase products or services, subscribe to communications or otherwise interact with our business.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the German Federal Data Protection Act (BDSG), the Digital Services Act (DDG), the Telecommunications Digital Services Data Protection Act (TDDDG) where applicable, and other relevant privacy legislation.
By using our website, you acknowledge that your personal data may be processed as described in this Privacy Policy.
2. Data Controller
The controller responsible for the processing of personal data is:
Aureon Medical GmbH i.G.
Registered Office
Feldmark 12B
46419 Isselburg
Germany
Please note that the above address is the company's registered office and is not a public showroom, retail location or visitor address. Visits are available by appointment only.
At this time, Aureon Medical has not appointed a Data Protection Officer, as no legal obligation currently exists to do so. All privacy-related enquiries may be directed to the email address listed above.
3. Scope of this Privacy Policy
This Privacy Policy applies to all personal data processed by Aureon Medical through its website, online store, customer accounts, quotations, sales activities, customer support, software solutions, ACI services, digital products and business communications.
It also applies whenever you contact Aureon Medical by email or through any communication channel made available by the company.
4. Personal Data We Collect
Depending on your interaction with Aureon Medical, we may process personal information necessary to provide our products and services.
This information may include your name, company name, billing and delivery address, email address, telephone number, order details, quotation requests, invoices, payment status, customer account information, communication history, technical device information, IP address, browser information, website usage data and, where applicable, cookie preferences.
Where payments are processed through external payment providers, Aureon Medical does not store complete payment card numbers or card security codes.
5. How We Collect Personal Data
Personal information is collected directly from you whenever you create an account, request information, submit a quotation request, place an order, contact our customer support team or otherwise communicate with Aureon Medical.
Technical information may also be collected automatically when you visit our website through server logs, cookies or similar technologies.
Where necessary to complete an order, we may receive information from payment providers, logistics partners, fraud prevention providers or other service providers involved in fulfilling your purchase.
6. Legal Basis for Processing
Aureon Medical processes personal data only where a lawful basis exists under the GDPR.
Processing may be necessary to perform or prepare a contract with you, comply with legal obligations, protect the legitimate interests of Aureon Medical or obtain your consent where legally required.
Legitimate interests may include maintaining website security, preventing fraud, improving our services, responding to enquiries, enforcing legal claims and maintaining normal business operations.
Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
7. Website Access and Technical Information
Whenever you access the Aureon Medical website, certain technical information is processed automatically to ensure secure and reliable operation.
This information may include your IP address, browser type, browser version, operating system, requested pages, date and time of access, referring website, device information and other technical data necessary for security, diagnostics and website performance.
This processing is based on Aureon Medical's legitimate interest in providing a secure and stable online service.
8. Shopify Platform
The Aureon Medical online store is hosted and operated using Shopify.
Shopify provides the infrastructure required to operate our online store, including hosting, checkout functionality, customer accounts, order management, security and related services.
When you use our website or place an order, certain personal data may be processed by Shopify on behalf of Aureon Medical. In some circumstances Shopify may also process certain information under its own legal responsibilities.
Where personal data is transferred outside the European Economic Area, appropriate safeguards such as the European Commission's Standard Contractual Clauses are used where required.
Further information regarding Shopify's own privacy practices can be found in Shopify's Privacy Policy.
9. Customer Accounts
Customers may choose to create a personal account to simplify future purchases and manage their relationship with Aureon Medical.
Customer accounts may contain contact information, saved delivery addresses, order history, quotations, account preferences and other account-related information.
Customer accounts may be deleted upon request unless Aureon Medical is legally required to retain certain information for accounting, tax or legal purposes.
10. Orders, Quotations and Contract Performance
Whenever you request a quotation, purchase products or enter into a business relationship with Aureon Medical, personal information is processed to prepare, execute and administer the agreement.
This processing may include contact information, billing information, delivery details, product information, payment status, invoices, tax information, shipment details and communication regarding your order.
This processing is necessary to fulfil contractual obligations and comply with applicable legal requirements.
11. Business Customers
Aureon Medical primarily supplies professional customers, healthcare institutions, distributors, repair centres, manufacturers and other business organizations.
Where Aureon Medical processes professional contact details belonging to employees or representatives of business customers, suppliers or service providers, such processing is carried out for the purpose of maintaining business relationships, providing customer support, managing contracts and conducting normal commercial activities.
12. Payment Processing
Payments are processed through the payment methods made available during checkout.
Depending on the selected payment method, payment information may be processed by external payment providers including Shopify Payments, Stripe, PayPal, Klarna, credit card providers or financial institutions.
Aureon Medical receives only the information necessary to confirm successful payment and fulfil the order. Complete payment card details are processed exclusively by the selected payment provider and are not stored by Aureon Medical.
Payment providers process personal information under their own privacy policies where applicable.
13. Shipping and Logistics
To deliver purchased products, Aureon Medical shares the information necessary for shipment with trusted logistics partners and shipping providers.
This information may include your name, delivery address, company name, telephone number where required, email address, shipment contents, tracking information and delivery status.
Shipping providers process this information solely for the purpose of delivering your order and fulfilling their contractual obligations.
14. Contact Forms and Customer Support
Whenever you contact Aureon Medical by email, contact form or any other communication channel, we process the personal information you voluntarily provide in order to respond to your enquiry, provide customer support, prepare quotations, fulfil contractual obligations or improve our services.
Communication may be retained for as long as reasonably necessary to answer your request, maintain the business relationship, comply with legal obligations or protect the legitimate interests of Aureon Medical.
15. Newsletter and Marketing Communications
If you subscribe to our newsletter or choose to receive marketing communications, Aureon Medical may process your email address, name, communication preferences and subscription history.
Marketing communications are sent only where permitted under applicable law. Where consent is required, communications will only be sent after valid consent has been obtained.
You may withdraw your consent or unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting Aureon Medical directly.
16. Cookies and Similar Technologies
Our website uses cookies and comparable technologies to ensure the proper operation of the website, improve user experience, analyse website performance and, where permitted, provide personalised content and marketing.
Cookies are small text files stored on your device that enable certain website functions and remember your preferences during future visits.
Essential cookies are necessary for the operation of the website and online store. These cookies cannot be disabled because they are required for security, checkout functionality, user sessions and other core website features.
Where legally required, non-essential cookies are placed only after obtaining your consent.
You may manage your cookie preferences at any time through the cookie settings available on our website.
17. Cookie Consent Management
Where a cookie consent platform is implemented, Aureon Medical records your consent preferences to demonstrate compliance with applicable privacy legislation.
This may include the date and time of consent, consent status, selected cookie categories, browser information, anonymised device information and technical identifiers required to remember your preferences.
Consent records are stored only for as long as necessary to demonstrate legal compliance.
18. Website Analytics
To improve the performance, usability and reliability of our website, Aureon Medical may use website analytics tools.
These technologies help us understand how visitors interact with our website by providing information regarding page visits, navigation behaviour, session duration, device characteristics, browser information, approximate location and website performance.
Where required by applicable law, analytics technologies are used only after obtaining your consent.
19. Google Analytics, Google Tag Manager and Similar Services
Where implemented, Aureon Medical may use Google Analytics 4, Google Tag Manager or comparable analytical technologies.
These services may process technical information such as page views, user interactions, browser information, approximate geographical location, device information and anonymous identifiers in order to improve website performance and customer experience.
Where personal data is transferred outside the European Economic Area, appropriate safeguards are implemented in accordance with the GDPR.
Where legally required, these services are activated only after your consent has been obtained.
20. Advertising and Marketing Technologies
Where Aureon Medical uses online advertising technologies, such as Meta Pixel, Google Ads, LinkedIn Insight Tag or comparable marketing tools, these services may process information regarding your interaction with our website and advertisements.
Marketing technologies are used solely for improving advertising effectiveness, measuring campaign performance and providing relevant content.
These technologies are activated only where legally permitted and, where required, only after valid consent has been obtained.
You may withdraw your consent at any time through the cookie settings on our website.
21. Social Media
Aureon Medical may maintain profiles on social media platforms and may provide links to these platforms through its website.
When you visit one of these external platforms, the respective provider becomes responsible for processing your personal data in accordance with its own privacy policy.
Aureon Medical recommends reviewing the privacy information of each social media provider before interacting with their services.
22. Embedded Content and External Websites
Our website may contain embedded content or links to third-party websites, including videos, documents, product information, maps or other external resources.
When you interact with such content, the external provider may collect personal information according to its own privacy practices.
Aureon Medical has no control over the privacy practices of third-party websites and accepts no responsibility for the processing of personal data by external providers.
23. Google Maps, reCAPTCHA and Similar Security Services
Where implemented, Aureon Medical may use Google Maps, Google reCAPTCHA or comparable services to improve website functionality, prevent abuse and protect our online services.
These technologies may process technical information including your IP address, browser information, device characteristics and interaction with the website.
Such services are used only where legally permitted and, where applicable, after obtaining your consent.
24. Fraud Prevention and Website Security
Protecting customer information and maintaining the security of our online services is one of Aureon Medical's highest priorities.
Personal information may therefore be processed for fraud detection, payment verification, cyber security, abuse prevention, website monitoring, network protection, access management and enforcement of our legal rights.
This processing is carried out only where necessary and proportionate to protect Aureon Medical, its customers and its business partners.
25. Legal Obligations and Record Retention
Certain personal information must be retained to comply with legal obligations under German and European legislation.
This includes accounting records, invoices, commercial correspondence, tax documentation and other records that Aureon Medical is legally required to maintain for statutory retention periods.
Where legal retention obligations apply, deletion of personal information may be postponed until those obligations have expired.
26. Sharing Personal Data
Aureon Medical shares personal information only where necessary to provide its services, fulfil contractual obligations or comply with legal requirements.
Recipients may include hosting providers, Shopify, payment service providers, shipping companies, logistics partners, IT service providers, accounting professionals, legal advisers, tax advisers, communication providers, fraud prevention providers and government authorities where disclosure is legally required.
Personal information is never sold to third parties for commercial purposes.
Where external service providers process personal data on behalf of Aureon Medical, appropriate Data Processing Agreements are concluded in accordance with Article 28 GDPR to ensure that personal information is processed securely, lawfully and only according to our documented instructions.
27. International Data Transfers
Some of the service providers used by Aureon Medical may process personal data outside the European Economic Area (EEA).
Whenever personal data is transferred to countries that do not benefit from an adequacy decision issued by the European Commission, Aureon Medical ensures that appropriate safeguards are implemented in accordance with Chapter V of the GDPR. These safeguards may include the European Commission's Standard Contractual Clauses, supplementary contractual measures or any other lawful transfer mechanism recognised under applicable data protection legislation.
Where international data transfers are necessary to perform a contract, comply with legal obligations or are based on your explicit consent, such transfers will be carried out in accordance with the applicable requirements of the GDPR.
28. Data Retention
Aureon Medical retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.
Customer account information is retained for as long as the account remains active. Order information, invoices, accounting records and other financial documentation are retained for the periods required under German commercial and tax legislation.
Customer communications, quotations and support requests may be retained for as long as reasonably necessary to administer the business relationship, resolve disputes, enforce contractual rights or comply with legal obligations.
Technical log files and security-related information are retained only for the period necessary to maintain the security and integrity of our systems unless a longer retention period is required by law.
Once personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with applicable legal requirements.
29. Data Security
Protecting personal information is one of Aureon Medical's highest priorities.
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures may include encrypted communication, secure hosting environments, access controls, authentication procedures, system monitoring, regular software updates, backup procedures and internal security policies.
Although Aureon Medical continuously works to maintain a high level of information security, no internet-based service or electronic storage system can be guaranteed to be completely secure. Customers are therefore encouraged to avoid transmitting highly confidential information through unsecured communication channels.
30. Your Rights Under the GDPR
Subject to applicable data protection legislation, you may exercise a number of rights regarding your personal information.
These rights include the right to access your personal data, request correction of inaccurate information, request deletion of personal data where legally permissible, request restriction of processing, receive your personal data in a structured and commonly used format, object to certain types of processing and withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection legislation.
Aureon Medical will respond to legitimate requests within the timeframes established under the GDPR.
31. Right to Object
Where Aureon Medical processes personal data based upon its legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing where your particular situation justifies doing so.
Where personal data is processed for direct marketing purposes, you may object at any time without providing a reason. Once such an objection has been received, Aureon Medical will cease processing your personal data for direct marketing purposes.
32. Withdrawal of Consent
Where personal data is processed based upon your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of any processing carried out before the consent was withdrawn.
You may withdraw your consent by updating your cookie preferences, using the unsubscribe function contained within marketing communications or by contacting Aureon Medical directly.
33. Children's Privacy
The Aureon Medical website, products and services are intended for professional users, healthcare organisations and business customers.
Our services are not directed toward children, and Aureon Medical does not knowingly collect personal information from children.
If we become aware that personal data relating to a child has been collected without appropriate legal grounds, such information will be deleted as soon as reasonably practicable.
34. Automated Decision-Making
Aureon Medical does not make decisions based solely on automated processing that produce legal effects concerning individuals or similarly significantly affect them within the meaning of Article 22 GDPR.
Certain payment providers, fraud prevention services or financial institutions may perform automated checks under their own responsibility for payment verification, fraud detection or regulatory compliance.
35. Supervisory Authority
If you believe that Aureon Medical has processed your personal data unlawfully or in violation of applicable privacy legislation, you have the right to lodge a complaint with the competent data protection supervisory authority.
For companies established in the German State of North Rhine-Westphalia, the competent supervisory authority will generally be the relevant authority responsible for data protection matters in that jurisdiction, without prejudice to your right to contact another competent supervisory authority within the European Union.
36. Changes to this Privacy Policy
Aureon Medical may update this Privacy Policy from time to time in response to legal developments, technological changes, operational requirements or improvements to our services.
The most recent version of this Privacy Policy will always be published on our website. The revision date displayed at the beginning of this document indicates when the policy was last updated.
Continued use of our website after publication of an updated Privacy Policy constitutes acknowledgement of the revised version to the extent permitted by applicable law.
37. Contact
If you have any questions regarding this Privacy Policy or wish to exercise your rights under the GDPR, please contact Aureon Medical.
Aureon Medical GmbH i.G.
Registered Office
Feldmark 12B
46419 Isselburg
Germany
Please note that the above address is the company's registered office and is not a public showroom, retail location or visitor address. Visits are available by appointment only.
38. Final Provisions
This Privacy Policy forms an integral part of the Aureon Medical website and should be read together with our Terms of Service, Legal Notice, Shipping Policy, Refund Policy and any other policies published on our website.
Where mandatory data protection legislation grants individuals rights that differ from or exceed those described in this Privacy Policy, the applicable legal provisions shall prevail.
Aureon Medical remains committed to protecting personal data with transparency, integrity and the highest standards of information security.
