E-ssentials MedDev Blog

Regulatory updates for the medical device industry

We at TÜV SÜD are pleased to welcome you to our blog, and thank you for your interest in our information. Protection of the personal data you entrust to us is a priority for us, and we want you to feel safe and secure when you visit our blog or use our online offers. It is important to us that you are fully informed about the personal data that we collect when you use our online offers and services and how we use them.


Collection and processing of personal data

We do not usually collect any personal data when you visit the TÜV SÜD blog. We only collect personal data that you provide voluntarily when you make an enquiry or online appointment or when you order information material or
newsletters. We generally need your data to support you requested. We sometimes use service providers that process data on our behalf (e.g. for mailing campaigns). These service providers are contractually bound to a range of requirements, including protection of all personal data and its use solely for the purpose agreed with TÜV SÜD. We will not sell your data to third parties or otherwise share it for commercial purposes.


Right to information and public register of processing operations

You are entitled to request free information about the type of personal data we hold about you at any time or to request the
correction, deletion or blocking of your personal data, provided the requirements of Section 35 of the Federal Data Protection Act
(Bundesdatenschutzgesetz, BDSG) are fulfilled. Please address any such requests to TÜV SÜD Product Service GmbH.
Our public register of processing operations summarizes the information required in accordance with Section 4e BDSG.


Data protection

TÜV SÜD takes appropriate technical and organizational measures to protect any personal data you provide to TÜV SÜD from accidental or intentional manipulation, loss, destruction or access by unauthorized parties.
This also applies to any external services purchased. We verify the effectiveness of our data protection measures and continuously improve them in line with the state of the art. Any personal data entered is encrypted during transfer using a secure encryption process.



For a user-friendly website experience and to tailor our web application’s operations to your needs, some areas of our website may use cookies.
A cookie is a small file that is stored locally on your computer when you visit a website. When you revisit the website on the same device, the cookie will indicate, for example, that you are a repeat visitor. Cookies also allow us to analyses the use of our website. They do not include any personal information and cannot identify you on third-party websites – including those of analytics providers.

You can accept or decline cookies – including those used for website tracking – by selecting the appropriate settings of your browser. You can set your browser to notify you when you receive a new cookie, or to decline cookies altogether. However, if you choose to decline cookies you may not be able to use all features of our website (e.g. for orders). Your browser also offers you the option to delete cookies (e.g. via the Clear Browsing History function). For further information, please refer to the user help function under Settings in your web browser.


Anonymized website tracking

To align this website better to our customers’ needs, we analyses how our customers interact with the site. We anonymize your IP address (and possibly similar information that your computer or device exchanges with our site during standard Internet use) and then use it to analyses data such as the pages at tuev-sued.de visited by your browser and your computer. Again, we use cookies for this purpose. Our cookie merely contains one unique number by which we can re-identify you on our websites – but not, however, on third-party websites. We use the stored data for statistical purposes only. In particular, the IP address will not be associated with any individual user. The data will not be shared with third parties.


Google Universal analytics – terms and conditions of use

This website uses Google Universal Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Universal Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

IP anonymization is supplemented on this website. Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en-GB.

You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website:  Disable Google Analytics

Further information concerning the terms and conditions of use and data privacy can be found at http://www.google.com/analytics/terms/gb.html or at https://www.google.de/intl/en_uk/policies/. Please note that on this website, Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking).


Embedding of social plugins

Our website uses buttons for the following social networks

  • facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
  • Google+, Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Twitter, Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA
  • Xing, XING AG, Gänsemarkt 43, 20354 Hamburg, Germany
  • YouTube, LLC, 901 Cherry Ave., San Bruno CA 94066, USA

The buttons show the logos of the individual social networks. However, the buttons are not standard social plugins, i.e. plugins provided by social networks, but links styled as buttons. These buttons are only activated by deliberate action (clicking). As long as you do not click the buttons, no data will be transferred to your social networks. By clicking the buttons, you accept communication with the servers of the social network, thereby activating the buttons and establishing the link.

Once clicked, the button functions as a share plugin. The social network then obtains information about the site you have visited, which you can share with your friends and contacts. You need to be logged in to “share” information. If you are not logged in, you will be forwarded to the login page of the social network you have clicked, thereby leaving the pages of tuev-sued.de. If you are logged in, your “like” or recommendation of the article in question will be transferred.

When you activate the button, the social networks will also receive the information that you accessed the respective page of our website and when you did so. In addition, information such as your IP address, details about the browser you used and your language settings may be transmitted. If you click the button, your click will be transferred to the social network and used according to their data policy.

For details of the purpose and scope of data collection and further processing and use of the data by the respective social network and for your rights and privacy settings, please consult the information provided by

Facebook: http://www.facebook.com/about/privacy/ .
Google: http://www.google.com/intl/de/policies/privacy
Twitter: http://twitter.com/privacy/
Xing: https://www.xing.com/privacy/
YouTube: http://www.youtube.com/t/privacy_at_youtube

If you do not wish social networks to obtain data about you, do not click the button.


Use of MailChimp email marketing provider

We send two types of newsletter: the “news alert”, which informs you on request as soon as a new article is published, and a newsletter, which summarizes the articles published in the previous three months.

We will only send you either of these newsletters after you have actively registered for them in a double-opt-in procedure. In other words, following your registration we will send you an email which will ask you to confirm your registration. All you have to do to register for the newsletter is to enter your email address, together with your field of interest if you wish to limit information about new articles to those in specific categories.

The newsletters are sent by MailChimp, a newsletter marketing platform from US provider Rocket Science Group. Your email address and any fields of interest you have specified will be saved on MailChimp’s servers in the US.

The newsletters include a “web beacon,” a pixel-sized file which is accessed by the MailChimp server whenever you open the newsletter. This feature is for statistical purposes only, i.e. to find out whether the newsletters are opened and if so when, and to identify which links are clicked.

You can unsubscribe from our newsletter and/or the news alert at any time, i.e. withdraw your consent. At the end of each newsletter you will find a link to unsubscribe or to change your registration data.


Data Protection Officer

Please address any questions regarding the processing of your personal data, requests for information, applications or complaints directly to our data protection officer, who will be happy to be of service.

Peter Walko
TÜV SÜD Business Services GmbH
Westendstr. 199
80686 Munich
Phone: +49 (0)89 5791-2798


Public register of notifications

Article 4g of the German Data Protection Act (BDSG) stipulates that the Data Protection Representative must make the following information, specified in Article 4e of the above Act, available for inspection by members of the public in a suitable manner.

  1. Name and Address of data-controlling unit:

TÜV SÜD Product Service GmbH
Ridlerstr. 65
D-80339 Munich

  1. Management

Dr. Peter Havel (Sprecher)
Dr. Jens Butenandt
Holger Lindner

  1. Appointed Data Controller

Stefan Domsch

  1. Purposes of data recording, processing or use

TÜV SÜD is a leading service company active in the industry, product and transport sectors. Its range of services embraces consultancy, inspections, tests and expert opinions as well as certification and training. Our objectives are reliability, safety and quality as well as environmental protection and cost effectiveness. Data is recorded, processed and used for the above purposes.

  1. Description of the circle of persons affected and
    associated data and data categories

Data of customers, employees and suppliers in as far as these are required to fulfill the purposes stated under Article 4 above.

  1. Recipients or categories of recipients to which such
    data may be disclosed

Public bodies in cases involving overriding legal regulations, external customers in line with Article 11 German Data Protection Act (BDSG) and external and internal units of TÜV SÜD to fulfill the purposes stated above under 4

  1. Data retention periods prescribed by law

The legislator has laid down various retention periods and duties. After expiry of these periods, the data in question will be routinely deleted. Any information not governed by these stipulations, will be deleted when the purposes stated above under Article 4 cease to apply.

  1. Planned data transfer to third countries:

Currently the transfer of data to third countries is not planned, should this become necessary, suitable legal provisions will be drawn up.


last update: 01.01.2018