Privacy Policy

Last updated: September 2026

1. Controller

The controller responsible for data processing on this website is:

Barwich GmbH
Managing Directors: Alexandra Barwich and Eggert Barwich
Asternweg 12 B
22869 Schenefeld
Germany
Telephone: +49 (0) 172 431 20 44
Email: info@medxonline.de

2. General information

We process personal data only where this is necessary to provide this website, respond to enquiries, or carry out pre-contractual and contractual measures. Personal data is any information relating to an identified or identifiable person.

3. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have concluded a data processing agreement with the provider in accordance with Article 28 GDPR.

When you access the website, the web server processes technically necessary log data. This may include your IP address, date and time of access, the page requested, data volume transferred, referrer URL, browser, operating system and HTTP status code. The processing is necessary for the secure, stable and error-free provision of the website and is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure operation of this website. Server log files are normally deleted after seven days unless longer storage is required to investigate a specific security incident.

Further information: ALL-INKL.COM privacy information.

4. Technically necessary storage and cookies

Under the website’s current technical configuration, we do not use analytics or marketing cookies. Where technically necessary information is stored on or read from your device, this is done solely to provide the website and its essential functions that you have expressly requested. The legal basis is Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional provision of the website.

You can configure your browser to block technically necessary cookies or delete them when the browser is closed. This may restrict individual website functions.

5. Contact form

If you contact us through the contact form, we process the information and contact details you enter in order to handle your enquiry and any follow-up questions. Where the enquiry concerns a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR; our legitimate interest is the appropriate handling of your enquiry.

The data is deleted when it is no longer required for the purpose for which it was collected, unless statutory retention obligations or legitimate reasons require further storage.

6. Contact by email or telephone

If you contact us by email or telephone, we process your information in order to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual measures; otherwise it is Article 6(1)(f) GDPR. The data is deleted when it is no longer required, subject to statutory retention obligations.

7. External links to YouTube

Videos are not embedded directly on our website. A connection to YouTube is established only when you click a clearly identified external link. You then leave our website and the provider is responsible for the subsequent processing. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to third countries, in particular the United States. Further information is available in Google’s Privacy Policy.

8. Recipients and processors

We disclose personal data only where this is permitted or required by law. Service providers that process data on our behalf are contractually bound in accordance with Article 28 GDPR. We do not disclose personal data for advertising purposes.

9. Storage period

Unless a specific period is stated in this policy, we retain personal data only for as long as the relevant purpose continues. The data is then deleted unless statutory retention obligations or legitimate reasons require further storage.

10. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection (Article 21 GDPR). You may withdraw consent at any time with effect for the future.

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Under Article 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact info@medxonline.de.

11. SSL/TLS encryption

This website uses SSL/TLS encryption to protect transmitted content. Nevertheless, completely risk-free transmission of data over the internet cannot be guaranteed.

12. Updates to this Privacy Policy

We will update this Privacy Policy if legal requirements, the website or the processes used change.