PGXperts Logo and Claim

Privacy policy

Your cookie setting

Change cookie settings

The protection of personal information, including your name, telephone number and e-mail or IP address is very important to us.

This privacy policy provides information about the processing of your personal data when visiting the HMG Systems Engineering GmbH website and using the services offered there.

According to the General Data Protection Regulation (GDPR), personal data is any information relating to an identified or identifiable natural person (the “data subject”), e.g. name or e-mail address. An identifiable natural person is one who can be identified directly or indirectly, e.g. via identifiers, location data or even personal characteristics.

We have taken technical and organizational actions to ensure that the regulations on privacy are observed by us as well as by external service providers.

As we continue to develop our services and implement new technologies, it is possible that changes to this privacy policy may become necessary. Therefore, we recommend you review this privacy policy periodically, preferably each time you visit the site.

A. General information

I. Person responsible for handling personal data

HMG Systems Engineering GmbH, Ullsteinstraße 4, 90763 Fürth,

II. Processing purposes and respective legal basis

1. provision of this website; communication via this website.

The provision of our services requires the handling of personal data, such as the IP address for the retrieval of content, when you make inquiries or in our online service areas.

1.1. You also have the option of contacting us via contact form or an e-mail to For this purpose, we collect your e-mail address and your message as well as other data transmitted to us in the contact form or in your inquiry, such as your name.

1.2. We use cookies to provide our website. When a user opens a website, a cookie or other information may be stored in the local memory of the user’s browser. We use cookies that are necessary to enable us to display the website and provide essential basic functions as requested by you. Statistical analysis of usage behavior is also necessary for us.

The legal basis for the storage and reading of these cookies and objects is in each case § 25 para 2 No. 2 TTDSG. You can find more detailed information on this under “B. Special information”.

1.3. The handling of your personal data for the provision of our website and for communication is based on our legitimate interest, Art. 6 para. 1 f) DSGVO. For the provision of this website, it is technically necessary that we process certain personal data (e.g. the IP address). For your communication with us, it is necessary that we handle the personal data mentioned above.

1.4. As part of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in providing this website and contacting you in each case. Your interest in confidentiality takes a lower priority in both cases. Otherwise, we would not be able to provide you with this website (including its functions) or respond to your contact request.

2. contract initiation and fulfillment

The following information on privacy policy applies to personal data of persons with whom we enter into contractual or business relationships, as well as of governing bodies, managing directors, key account managers or other employees of our contractual or business partners, which we process in the context of existing or emerging contractual and business relationships. We primarily process personal data that the data subjects themselves provide to us in the course of contractual and business relationships or that we receive from the respective contractual and business partners (e.g., from your colleagues with whom we are already in contact), for example, in the course of processing an inquiry or an order. In addition, we process personal data that we collect from publicly accessible sources (such as the commercial register, press, Internet) or receive from third parties (e.g. credit agencies, business partners). We will refer separately to any collection of personal data from third-party sources.

This regularly includes the following types of personal data:

  • Master data such as company name / practice name / names, address
  • Contact data such as e-mail address, telephone number, fax number, etc.
  • Content data such as text entries, commercial and business letters (esp. coordination with regard to the provision of services), telephone and other file notes with personal reference
  • Contract or order data, e.g. specific subject matter of the contract, terms, volume, etc.
  • Payment data, e.g. bank details, payment history
  • Billing information such as tax numbers and invoices

    In addition, there may also be other data relating to your person, such as profession, industry, business interests, position, duties and powers, as well as other data comparable with the above categories. The scope of the data processed about a person varies depending on the function in which the person appears to us, such as the position he or she holds with the respective business partner.

    Data processing is carried out for the execution of contracts concluded with you or your employment company or for the execution of pre-contractual measures (Art. 6 para. 1 lit. b DSGVO); this includes, in particular, service contracts, namely subscriptions to our services (e.g. processing/creating and viewing of corresponding offers and inquiries; authentication of contractual partners, preparation and signing of contractual documents, processing of payments; sending of information letters);

    Further data processing is carried out on the basis of legal requirements (Art. 6 para. 1 lit. C DSGVO): for example, to fulfill tax and other legal control and reporting obligations, as well as audits by tax or other authorities and to comply with legal retention periods;

    In addition, we process your data to protect our legitimate interests (Art. 6 (1) (f) DSGVO); namely for the following purposes:

    • Contact management and acquisition efforts, also regarding the employees of our business partners.
    • Optimization of our business processes, such as by maintaining a database of interested parties, also within the framework of a so-called customer relationship management tool
    • Centralization or outsourcing of corporate functions
    • Assertion and defense of legal claims
    • Further development of products and services
    • Press releases
    • Invitations to events
    • Networking with people, companies and authorities involved in the fields of health and health policy
    • Market research purposes

      In the case of customers, the e-mail address may also be used to provide information about similar goods and services, Section 7 (3) UWG. In these e-mails, a purely statistical evaluation is made of how many recipients open the electronic mail and which links in it are clicked on and how often. For this purpose, your IP address is stored for a short moment and then immediately shortened so that it can no longer be traced back to your Internet connection. The evaluation is carried out in order to determine the basic interest of the readership in the content and to recognize which topics are well received. We have a legitimate interest in this data processing; the legal basis is Art. 6 (1) lit. F DSGVO.

      3. advertising consent

      If you give us your advertising consent, then we will handle your personal data for our own advertising purposes. For example, if you have subscribed to our email newsletter via the double opt-in process, we will send you emails from time to time to inform you about our products, services, news and any promotions.
      Your declaration of consent pursuant to Art. 6 (1) a) DSGVO is the legal basis for our handling of your personal data in this regard. You can revoke your consent at any time with prospective effect. You can unsubscribe from an email newsletter, for example, by sending us an email with your unsubscribe request and/or by clicking on the “unsubscribe” or “unsubscribe” link contained in every email newsletter.”

      III. Criteria for the storage period of personal data, deletion periods

      We delete your personal data when the respective purpose of storage ceases to apply and no statutory provision requires retention. Statistical evaluations are only performed in anonymous form.

      When you visit our website, the IP address is shortened immediately after the page is delivered, thus removing any reference to a person. An assignment to the requesting client is therefore no longer possible. Other cookies on our site are session cookies, i.e. they remain stored for the duration of the open browser session and are then deleted. The remaining cookies are stored for a maximum of 18 months.

      If you contact us via contact form or e-mail, we check whether further storage is necessary or whether there are storage obligations for the e-mails (inquiries via the contact form also arrive at us as e-mails) at the end of each year. Depending on this, the collected data will be further stored or deleted.

      We delete transaction-related information (e.g. relating to a specific contractual or order relationship) after completion of the respective transaction, e.g. fulfillment of a subscription contract, with a period of three years after the end of the respective calendar year, unless these are subject to longer statutory retention obligations (e.g. the six or ten year retention period in accordance with Section 257 (4) of the German Commercial Code (HGB), Section 147 (3) of the German Tax Code (AO)); in such a case, the data concerned will be blocked for any further processing.

      If you are not our contractual partner yourself, we will process your personal data for the duration of your employment with one of our business partners, but no longer than until the final termination of the respective business relationship between us and your employment company. Prospect data that has not become customer data is deleted after four years. The period begins with the end of the calendar year in which the respective data was collected.

      If a deletion of individual data and data records is only possible with a disproportionate effort, related to the extraction and separation of the different data processing operations (e.g. on the one hand e-mails, which represent commercial letters, as well as on the other hand e-mails, which represent organizational documents) with regard to different deletion periods, these data will be limited uniformly after the termination of the contractual relationship and deleted in each case after the expiry of 10 years after their date of origin.

      IV. Your rights as a data subject

      In accordance with the DSGVO, you may at any time demand that we

      • provide you with information about the personal data concerning you that we process (Art. 15 DSGVO)
      • Correct personal data concerning you that is inaccurate (Art. 16 DS-GVO),
      • delete (Art. 17 DSGVO), block (Art. 18 DSGVO) and/or surrender/transfer (Art. 20 DSGVO) your personal data stored by us.

      You can revoke your consent at any time with prospective effect.

      Please contact us at the above contact details to assert your rights and to revoke your consent.

      If you assert your rights against us, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (Art. 6 para. 1 p. 1 lit. c DSGVO).

      Without prejudice to the rights described vis-à-vis us, you may lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you violates the GDPR (Art. 77 DS-GVO). The data protection supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (Promenade 18, 91522 Ansbach, Germany).

      B. Special information

      1. Security

      We use appropriate technical and organizational security measures to protect the personal data we have under our control against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

      II. Automatically collected information

      1. Use of cookies

      If you allow the use of cookies or analysis tools on your terminal device, then so-called “cookies” are used on our websites. Cookies are data data sets that are stored by a web server on the end device (e.g. computer, smartphone, tablet) of the user. When our website is visited again with the same end device, these are sent back either to our website (“first-party cookie”) or to another website to which the cookie belongs (“third-party cookie”). Through the stored and returned information (e.g. Internet browser and operating system used; domain name of the website from which you came; average time spent on the site, pages viewed), the respective website recognizes that you have already accessed and visited it with the browser of your end device. When you access our websites, information is automatically collected in anonymous form. This enables us to provide the user with a more effective and generally better use of our websites over time by improving the content/content and making it easier to use. The statistical data obtained helps us to improve the performance and attractiveness of our web pages. We use this information to provide you with services and deliver information that are more specifically tailored to your needs. Any storage of personal data beyond the above-mentioned information only takes place with your express consent. Our cookies remain on your terminal device for five years unless you delete them beforehand. Switching off the cookie function in your browser does not restrict the use of our websites and the services offered.

      2. Use of Google Analytics

      The tracking service Google Analytics 4 is integrated on our website. We clarify the specific nature of the integration, use and operation of this service in the following.

      Google Analytics is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (in future: Google). As a service provider, Google Analytics determines the usage behavior of a website and enables us to recognize whether and how we can improve our website and its user guidance, which parts are particularly relevant, which less so. This allows us to optimize the content and functions of the website for you – and for us. For this purpose, Google sets cookies (text files that are stored on the computer and allow an analysis of the use of the website by the user). Google Analytics is integrated via the Google Tag Manager.

      We process the following data using cookies:

      • Browser type
      • length of stay on our website
      • operating system used
      • visited pages of our website
      • source of the visit (other website, advertising material)
      • time of server inquiry

      On our behalf, Google will use the above information for the purpose of evaluating your use of the website and compiling reports on website activity for us. No user ID is activated and used in the process. Cross-device tracking via a user ID is thus not possible.

      In addition, we have prohibited Google from using the data obtained as part of the order processing for its own analysis. Google cannot use our data to analyze and evaluate online behavior for product improvement or benchmarking (industry analysis). Similarly, we have prohibited technical support and key accounts from accessing our data. For more information, please click here:

      This form of data processing is based on legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. We have a legitimate interest in being able to track the basic usage behavior of visitors to our website. This includes being able to recognize which offers are particularly heavily or less heavily frequented by users and from where users come to us. We need these insights to optimize the service on the website in line with user behavior and thus strengthen our own business. Since we – unlike analog exhibitors, for example – do not visually observe visitor flows and can thus recognize which areas of our offering are particularly interesting, we use Google Analytics to carry out this observation and evaluation of visitor flows (not: of individual, identifiable visitors). A conflicting, legitimate, overriding interest of users in having their non-personal usage behavior on the website analyzed is not apparent.

      In individual cases, your data may be transferred to the USA, this is done in accordance with the standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO.


      If you wish to object to this data processing, you can do so specifically in a very simple way:

      Deactivate Google Analytics

      You can object by clicking on this link. By clicking the link, an opt-out information will be stored in your browser. Your wish not to participate in website/reach analysis is only recognizable as long as this information is stored in your browser. Your objection applies in each case only to the browser with which you clicked on the link. If you have multiple devices and/or browsers, you would have to express your objection with each device individually.

      In addition, you can prevent the storage of cookies from Google Analytics (as well as from other cookies) by a corresponding basic setting of the browser software (to be found under “settings” in most browsers).

      You have deactivated Google Analytics. You can reactivate it here.

      III. Transfers to third parties

      Your personal data may be transferred to the following categories of recipients:

      • IT service providers who provide us with the IT infrastructure, databases and tools for our websites and services, such as sending newsletters and informational emails, who create analyses of user behavior on our websites and who process your personal data on our behalf, in accordance with legal requirements.