Privacy Policy

Our company is committed to the protection of personal data and respects your desire for privacy. In the following we inform you about the collection of personal data when using our website.


The controller in terms of the general data protection regulation (GDPR) is:
Jan Medical,
Inc.800 W El Camino Real Suite 180Mountain View,
CA 94040 USA

Legal Bases of Our Processing

The processing of personal data can be based on various legal bases. If we need your data to fulfil a contract with you or to answer your inquiries regarding a contract, the legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR. If we obtain your consent for a specific data processing, the legal basis is Art. 6 para. 1. p. 1 lit. a GDPR. We carry out some data processing on the basis of our legitimate interest, always balancing your interests worth protecting with our legitimate interests. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Insofar as the processing is necessary to fulfill a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR.
In the following, we explain how we process personal data via our website.

Data Processing when Opening the Website

When using the website purely for informational purposes, i.e. when you do not register or otherwise provide us with information (e.g. via a contact form), we collect the following technical information (log file data):

  • Operating system of the terminal device with which you visit our website
  • Browser (type, version & language settings)
  • the amount of data requested
  • the current IP address of the terminal device with which you visit our website
  • Date and time of access
  • the URL of the previously visited website (referrer)
  • the URL of the (sub)page you are visiting on the website
  • the Internet service provider of the accessing system

The collection of this data is technically necessary to display our website and to ensure stability and security. We (and our service provider) regularly do not know who is using an IP address. We do not merge the data listed above with other data.

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. Since the collection of data for the provision of the website and the storage in log files is absolutely necessary for the operation of the website and for protection against misuse, our legitimate interest in data processing prevails at this point.

Data Security

We have taken extensive technical and operational measures to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

Data Transfer

Your personal data will not be transferred to third parties, unless we are legally obliged to do so, or the transfer of data is necessary for the fulfilment of a contractual relationship, or you have expressly consented to the transfer of your data.

External service providers and partner companies such as online payment providers or a shipping company commissioned with deliveries will only receive your data to the extent necessary to process your order. In these cases, however, the amount of data transmitted is limited to the necessary minimum. As far as our service providers process your personal data on our behalf, we ensure within the scope of order processing in accordance with Art. 28 GDPR that they comply with the provisions of the data protection laws in the same way. Please also note the data protection information of the respective providers.

We attach great importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient prior to the transfer of your personal data:

What are Cookies?

Cookies are data that are stored on your computer by a website you visit and allow your browser to be re-identified. Cookies transmit information to the site that uses the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or your entries made there. This avoids, for example, that you have to re-enter required form data each time you use the website. The information stored in cookies can also be used to identify preferences and to arrange content according to areas of interest.

There are different types of cookies: Session cookies are amounts of data that are only temporarily stored in the main memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via the settings of your browser.

First-party cookies are set by the website you are visiting. Only this website may read information from these cookies. Third party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used by marketing companies, for example.

The legal basis for the processing of personal data by means of cookies and their storage period may vary. If you have given us your consent, the legal basis is Art.6 para.1 p.1 lit.a GDPR. If the data processing is based on our predominant legitimate interests, the legal basis is Art. 6 para. 1 p.1 lit.f GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach and – with your consent – to tailor our services to preferred areas of interest.

You can find an overview of the cookies implemented on this website in the Cookie Declaration.

This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

Cookies are small text files that can be used by websites to make a user’s experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Please state your consent ID and date when you contact us regarding your consent.

Your consent applies to the following domains:

You can delete cookies already stored on your terminal device at any time. If you want to prevent cookies from being stored, you can prevent this by changing the settings in your Internet browser. You can find instructions for common browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that some functions of our website may not work if you have deactivated the use of cookies.

When visiting our website, all users of our website are also informed by an info banner about the use of cookies by us and are referred to this privacy policy. In doing so, you as a user will also be asked for your consent to the use of certain cookies that are relevant, in particular for the personalization of services and for marketing measures. Once you have given your consent, you can revoke it at any time with effect for the future by clicking on “Change your consent” in the Cookie Declaration.

DoubleClick by Google

We use on our website continues to use the online marketing tool DoubleClick by Google. DoubleClick uses cookies to display ads relevant to users, to improve campaign performance reports, or to prevent users from seeing the same ads more than once. Google uses a cookie ID to help identify which ads are shown in which browser. This ensures that the same ad is not shown more than once. DoubleClick may also use cookie IDs to track conversions related to ads. For example, if a user sees a DoubleClick ad and later visits the advertiser’s site on the same browser to make a purchase, DoubleClick will use the cookie ID to track the conversion.

When you visit a page that uses DoubleClick and where DoubleClick script is enabled, your browser automatically connects directly to Google’s server. We as the website operator have no influence on the scope and further use of the data collected by Google through the use of this tool. We inform you according to our state of knowledge: By integrating DoubleClick, Google receives the information that you have opened a part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it.

You can prevent the collection by this tracking procedure by not giving your consent in the cookie consent banner.

For more information about DoubleClick by Google, please visit and, and for general information about privacy at Google, please visit Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) Controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The usage includes the operating mode Universal Analytics. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous User-ID and thus to analyze the activities of a user across devices.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

The personal data is transferred to the USA on the basis of standard contractual clauses.

The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. These purposes also include our legitimate interest in data processing via Google Analytics.

The data sent by us and linked to cookies or user IDs (e.g. user ID) are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

You can prevent the collection by this tracking procedure by not giving your consent in the cookie consent banner or by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by using the opt-out cookie

Opt-out cookies prevent future collection of your personal data when you visit this website. To prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems in use. For more information about Google Analytics’ terms of use and Google’s privacy policy, please visit respectively at

Google Tag Manager

For reasons of transparency we would like to point out that we use the Google Tag Manager of the provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager itself does not collect any personal data. The Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are small pieces of code that are used to measure traffic and visitor behavior, measure the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites, among other things. We use the Tag Manager for the Google Analytics service. If you have deactivated the service, the Google Tag Manager will take this deactivation into account. For more information about the Google Tag Manager see:

a) Google Web Fonts (Online Version)

For the uniform display of typefaces on our website we use web fonts from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you visit our website, the necessary data is loaded into your browser cache to display text and fonts correctly. This requires a connection to the servers of Google and may involve the transmission of personal data, in particular the IP address, to the servers of Google LLC. in the USA. Google web fonts are transferred to the cache of your browser to avoid multiple loading. If your browser does not support web fonts or prevents access, a standard font from your computer will be used.

The legal basis for data processing is your consent, see Art. 6 Abs. 1 lit. a GDPR. If data is also transferred to Google LLC. based in the USA in this context, standard contractual clauses will be used.

More information about Google Web Fonts can be found at and in the privacy policy of Google:


We use services on our website from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a Google Inc. company, Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the enhanced privacy option provided by YouTube to protect your personal information. When you visit a page that has a YouTube video embedded, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser. However, according to YouTube, in “enhanced privacy mode”, data is only sent to the YouTube server when you actively launch the video. If you are logged in to YouTube at that time, the information about the videos you watch will be associated with your YouTube membership account. You can prevent this by logging out of your member account before visiting our site.

More information about YouTube’s privacy policy is available from Google at the following link:

Transfer of data subjects personal data to third parties outside the EU:

Many of our external third parties are based outside the European Economic Area (EEA) so their processing of data subjects’ personal data will involve a transfer of data outside the EEA. Whenever we transfer a data subject’s personal data to external third parties based outside of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:


When you contact us by e-mail or via our contact form, the data you provide (your e-mail address, your name and your telephone number, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR. As far as we ask for input via our contact form that is not necessary for contacting you, we have always marked this as optional. This information serves us to concretize your inquiry and to improve the processing of your request. Any communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para. 1 sentence 1 lit. a GDPR. If this information concerns communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel in order to answer your request. You can of course withdraw this consent for the future at any time.

Your data, which we have received in the course of contacting you, will be deleted as soon as it is no longer required for the purpose of its collection, your request is fully processed and no further communication with you is necessary or desired by you.

As the controller responsible for data protection, our company has implemented numerous technical and organizational measures to ensure that the personal data processed via this website is protected as effectively as possible. Nevertheless, Internet-based data transmissions can always have security gaps. An absolute protection cannot be guaranteed, in any case the sending of unencrypted e-mails is not secure. We therefore request that sensitive data not be sent by means of unencrypted e-mail, but rather to use either encrypted communication channels (e.g. our contact form) or by mail.

Transfer of personal data
Your personal data may be transferred to the following recipients:

  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
  • Schalk&Friends, Lindwurmstraße 124, 80337 Munich
  • Brainlab AG, Olof-Palme-Straße 9, 81829 Munich
  • Brainlab Corporate Services GmbH, Olof-Palme-Straße 9, 81829 Munich
  • Brainlab Sales GmbH, Olof-Palme-Straße 9, 81829 Munich
  • Brainlab Robotics GmbH, Olof-Palme Straße 1, 81829 Munich
  • Brainlab, Inc., 5 Westbrook Corporate Center, Suite 1000, Westchester, IL 60154 USA

In some cases, we also use service providers for hardware maintenance, software maintenance and provision of technical services, which may then come into contact with your data.

Recipients or categories of recipients
Transfer to public authorities or by court order

At the request of the competent authorities, we must provide information on personal data (inventory data) on a case-by-case basis for the purpose of law enforcement, security, compliance with the statutory functions of the constitutional protection agencies or the Military Shielding Service or for the enforcement of intellectual property rights.

Waiver of social plugins

We waive the integration of social plugins in our website to protect your privacy when visiting our website. We have only integrated graphic links from social network providers (e.g. into our website. This means that your browser is not initially able to establish a direct connection with the server of the social network provider. For information on how to deal with your personal data when using this website, please refer to the respective privacy policy of the provider. Janmedical assumes no liability for the privacy policies and procedures of the linked sites.


You can apply for a job via

We process the data that you have sent us in connection with your application in order to check your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application procedure. There is no exclusively automated decision making process.

The legal basis for processing your personal data in this application procedure is primarily the establishment of the employment. The provisions of the GDPR and, where applicable, national data protection regulations apply to the processing of personal data for the purpose of establishing employment contracts. According to this, the processing of data required in connection with the decision to establish an employment relationship is permissible.

Should the data be required after the application procedure has been completed, if necessary to defend against legal claims, data may be processed on the basis of the requirements of Art. 6 GDPR , in particular to safeguard legitimate interests in accordance with Art. 6 Para. 1 letter f) GDPR. Our interest then consists in the assertion or defence of claims.

There is no legal or contractual obligation to provide personal data. However, if you do not wish to provide personal data, you cannot be considered for the selection procedure.

Data of applicants will be deleted after 6 months in case of a rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our pool of applicants. There the data will be deleted after two years. If you have been awarded a job during the application procedure, the data from the applicant data system will be transferred to our personnel information system.

Duration of Storage

We store your personal data for as long as necessary to fulfil legal and contractual obligations.
If the storage of you data is no longer necessary to fulfil the legal or contractual obligations, we will delete your data unless the transfer is necessary for one of the following purposes:

  • Fulfilment of commercial and tax storage obligations.
  • Preservation of evidence within the framework of the statutory limitation provisions. These statutes of limitations can in some cases be up to 30 years, the regular statute of limitations is three years.

Your Rights

We are pleased to inform you whether and which of your personal data are processed by us for which purposes (Art. 15 GDPR). In addition, you have the right to demand rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal requirements.

You have the right to object to the processing under the legal conditions (Art. 21 GDPR).

In order to exercise your above rights, please contact us by e-mail or by letter to our company address. The exercise of your aforementioned rights is free of charge for you.

Without prejudice to these rights and the possibility of asserting any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of data protection legislation (Art. 77 GDPR).

For US Residents: You authorize Jan Medical to communicate with you in response to your submissions on the website and any other communications.

Notice to California Residents: The California Civil Code permits California residents to request that we not share your Personally Identifiable Information with third parties for their direct marketing purposes. If you are a California resident, you may contact to request information regarding whether and how we share personally information with third parties for their direct marketing purposes and/or to request that such information not be shared with third parties for such purposes.

Changes to the privacy policy

We reserve the right to change or amend this Privacy Policy at any time in accordance with applicable data protection laws. For inquiries, please contact Any revisions to this Privacy Policy will be effective immediately upon posting. Any material changes in the manner that we use personally identifiable information will apply only to information collected thereafter, unless we provide notice or have other communications with you. Each time you access, use, or browse the website, provide information to Jan Medical online, or click on Jan Medical’s digital advertisements on third party websites or applications, you signify your acceptance of the then-current Privacy Policy. If you do not accept this Privacy Policy, you are not authorized to access, use or browse the website, to provide information to Jan Medical, or to click on Jan Medical’s digital advertisements on third party websites or applications.

No Medical Advice

Jan Medical is not a healthcare institution or medical facility and neither Jan Medical nor the website provides any medical advice. You are solely responsible for all medical decisions, including any diagnosis, use of medical professionals, treatment or treatment plan, made by you as the result of the use of the website or any communications with Jan Medical, regardless of any referral or suggestion made by Jan Medical.

Additional Policies for US Residents:

Governing Law: If you are a resident of the United States, any dispute between you and Jan Medical arising out of or relating to this Privacy Policy, the website or its content shall be governed by, and will be construed in accordance with, the laws of the United States of America, without regard to choice of law principles. You irrevocably agree that the courts located in or for the State of Illinois, Cook County, are the sole and exclusive forum and venue for any dispute, as the most convenient and appropriate to address any disputes, and you agree to submit to the jurisdiction and venue of such courts.

Use and Transfer of Non-Personally Identifiable Information: “Non-Personally Identifiable Information” refers to data stored anonymously in a protocol file, collected by cookies or similar technology, as well as information collected by Google Analytics, AdWords and Jan Medical’s display networks, and any other information that does not personally identify the individual to whom the information relates, such as information that is aggregated by Jan Medical or a third party, or information that is not linked to personally identifiable information of an individual. In addition to the uses discussed above, Jan Medical may use and share non-Personally Identifiable Information in a variety of ways so long as Jan Medical uses such information in its de-identified form. These uses may include, without limitation, uses for website administration; analysis of website trends and how the site is used; improving navigation of the site; analysis of the performance of the website and diagnosis of problems; improving the services we offer; analysis and developing advertisements and advertising campaigns; analysis of website user demographics, interests and preferences. Jan Medical also may use your non-Personally Identifiable Information to present you with targeted content and advertisements (including on third party websites and apps) based on your past visits to the website and your non-Personally Identifiable Information collected over time by us and third parties, optimize and determine the effectiveness of content and advertisements, analyse your interactions with content and advertisements, and how those interactions relate to your visits to the website. Some of our third party partners may participate in the Digital Advertising Alliance’s Self-Regulatory Program for Online Behavioural Advertising and allow consumers the ability to opt-out of targeted advertising based on web activity tracking. For more information regarding the foregoing, please Click here or visit Please note that even if our third party partners participate in this program and you opt-out of targeted advertising based on web activity tracking, you still may receive standard advertisements from us and targeted advertisements from third parties. You may need to re-click the link and follow the instructions provided therein if you delete cookies or similar technology or use a different computer, device or browser.

Children: Jan Medical will not knowingly collect, use or disclose any information submitted by children under the age of majority in the jurisdiction where they reside. Parents are encouraged to educate their children about their use of the Internet, and particularly about security issues regarding the disclosure of personally identifiable information to websites.

Links: You may have the opportunity to follow links on the website to other sites that may be of interest to you. Neither Jan Medical nor its affiliates are responsible for the privacy practices of any other sites or the content provided thereon. Therefore, the privacy policies with respect to other sites may differ from those applicable to the website. We encourage you to review the privacy policies of each other site.