Implementation of Information Requirements for Website Privacy Policies
1. Website Privacy Policy
We welcome you to our website. We would like to inform you about the man-agement of your personal data in accordance with Art. 13 General Data Protec-tion Regulation (GDPR).
Controller
The controller responsible for the described data collection and processing is named in the imprint.
Storage of Your IP address
We do not store the IP address transmitted by your web browser.
Usage Data
When you visit our website, the data collected from the use of the website is temporarily stored on our web server for statistical purposes in order to improve the quality of our website. This data set contains:
- the page, from which the data is requested
- the name of the data file,
- the date and time of the query,
- the amount of data transferred,
- the access status (file transmitted, file not found),
- a description of the type of browser used,
- the IP address of the requesting computer shortened to such an extent that no reidentification of any persona data is possible.
The listed usage data is stored anonymously.
2. Data Transfer to Third Parties
Data Transfers
We transfer your data to service providers who support us in the operation of our website and the associated processes. This transference is made under the scope of a data processing agreement in accordance to Art. 28 GDPR. Our service providers are bound to us by strict instructions and contractual obligations. We use the following service providers: CleverReach GmbH & Co. KG to send newsletters Google and HFC inter.net GmbH.
In some cases, we may transfer personal data to third countries outside the EU. In each case, we ensure an appropriate level of data protection according to European standards.
In case of Google, your data will be transferred to the USA which is deemed a country without an adequate level of data protection. The transfer is performed based on your consent considering the provision of Art. 49 (1) a GDPR.
3. Cookies
Cookies
We use cookies on our website. Cookies are small pieces of data that are stored and read in your end-device. A distinction is made between session cookies, which are deleted when you close your browser, and permanent cookies, which are stored even after your visit has expired. Cookies may contain data that enables the recognition of the device being used. However, in some cases, cookies only contain information on certain settings which are not personal data.
We use session cookies on our website that are necessary for the use of our site (PHPSESSID as session cookie). The data is processed in accordance to Art. 6 para. 1 s. 1 lit. f GDPR.
Please be aware that you can set your browser to inform you when cookies are being stored or used on the website you are visiting. Thus, any use of cookies is transparent to you. You have the possibility to delete your browser configuration at any time and prevent any use of new cookies. In the event you refuse the use of cookies, please note that our web sites may not be displayed optimally and some functions are then no longer technically available.
4. Trackingtools
Google Analytics
We use Google Analytics to create pseudonymous user profiles for improving and designing our website on demand. Google Analytics is operated by Google. Google Analytics uses “cookies”, which are text files placed on your end device and can be read by us. In this way, we are able to recognize and count returning visitors. This data processing is carried out on the basis of Art. 6 para. 1 s. 1 lit. a GDPR and in the interest of finding out how often our website is viewed by different users.
The information generated by the cookies about your use of the website will be transmitted to and stored by Google on its servers in the United States. We have activated IP-anonymization on this website, your IP address will be truncated within the area of Member States of the European Union. Only in exceptional cases is the whole IP address transferred to a Google server in the USA and truncated there (an adequate level of data protection is ensured according to Art. 45 para. 1 GDPR because Google is a participant in the Privacy Shield Agreement).
We have also concluded a contract with Google for commissioned data processing pursuant to Art. 28 GDPR. Accordingly, Google will solely use collected data for the purposes intended, which are to evaluate the use of the website and to compile reports on website activities.
You can withdraw your consent to the processing at any time. Please use one of the following options:
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link.
As an alternative to opting out from being tracked by Google Analytics you can also click the following link. An opt-out cookie will be stored, which means that no web analysis will take place as long as the opt-out cookie is stored by your browser.
5. Retargeting Google
If you use our website, you agree to the following data processing:
We use Google Retargeting Technologies
We use Google's retargeting technologies (via DoubleClick) in order to offer you advertising, on other websites, that is tailored to your interests. Data processing is carried out on the basis of Art. 6 para. 1 s. 1 lit. a GDPR.
How does remarketing work?
When you visit our website, recognition features of your browser or end device are retrieved, your IP address is evaluated or a recognition feature is stored as a small text file (e. g. so-called third-party cookie) on your end device. Further-more, it is possible that Google connects your visit of our website with your usage behavior which is recorded when you visit various websites. The characteristics are designed pseudonymously. If you are logged in with your Google ac-count, these features can be assigned directly to your profile. Google can link and store your visits to our web pages with your features to display targeted advertising on other Internet sites.
The aforementioned recognition features are pseudonymous and we can use Google to recognize your end device on other internet pages. Your device and your browser will be recognized by Google, e.g. when you visit a page that dis-plays advertisements on Google's behalf.
We can add to our website so called remarketing tags. We may add keywords to our webpages that contain statements about the content of the website, such as offered products. Google receives these keywords which contain neither personal nor sensitive information. When you visit a page with certain keywords related to products, Google stores them and assigns them to your pseudonymous recognition features. Google can use this link to determine whether and, if so, which of our advertisements will be displayed to you.
We can therefore commission Google to place advertisements on other websites based on the pages you visited. If you visit another website that participates in Google's display network, Google can use recognition features and keywords stored for this purpose to determine whether and, if so, which of our ads should be displayed.
For more information on how Google Remarketing technologies work, visit https://www.google.com/policies/technologies/ads/.
What does cross-device remarketing mean?
If you sign in to Google services with your own credentials or use one or more of your own Google accounts, Google may link the recognition features of different browsers and devices. So once Google has created a unique identifier for the laptop, desktop, smartphone or tablet you are using, you can associate those identifiers with one another by using or having used your sign-in information to use a Google service. In this way, Google can also play our advertising cam-paigns beyond the end device in a targeted manner. However, Google will only do this if you have agreed to this data processing in your dealings with Google.
You Have the Option to Define Advertising Settings
You can object to this form of advertising at any time. To do this, please visit https://support.google.com/ads/answer/2662922 and deactivate personalized advertising. Please note that these settings may not affect all devices and browsers. Further information is also available at https://support.google.com/ads/answer/2662922.
6. Social Media Links
For data protection reasons, we do not integrate any social media plugins di-rectly into our Site. Therefore, when you access our webpages, no data is trans-ferred to social media services such as YouTube, Kununu, Indeed and Facebook. Regarding the processing of your personal data of our social media pages, please check our Social Media Privacy Policy.
7. Google Maps Link
This page links to the map service Google Maps. Provider is Google. For´data protection reasons, we do not use an API/interface that requires the storage your IP address. You can find more information about how Google processes your data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
8. Explanation of Data Security Measures
Data Security
To avoid unauthorized access to your data, we have implemented technical and organizational measures. We use encryption technologies on our website. Your data will be transferred to our servers and back again via a connection that is protected by a TLS encryption technology. You can recognize that you are browsing on an encryption secured website by the lock-symbol shown in the address bar of your browser and by the address bar starting with https://.
9. Rights as a User
Your Rights as a User
As a website user, the GDPR grants you certain rights when processing your personal data.
1. Right of access (Art. 15 GDPR):
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case to obtain access to the personal data and the information specified in Art. 15 GDPR.
2. Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.
You also have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the intended purpose.
3. Right to restriction of processing (Art. 18 GDPR):
If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.
4. Right to data portability (Art. 20 GDPR):
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.
5. Right to object (Art. 21 GDPR):
If the data is processed pursuant to Art. 6 para. 1 s. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.
6. Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you in-fringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
You can reach the competent authority in Lower Saxony under the following contact details: the State Commissioner for Data Protection of Lower Saxony, Postfach 221, 30002 Hannover, Germany, Website: https://lfd.niedersachsen.de/.
10. Contact Details of the Data Protection Officer
Contact Details of the Data Protection Officer
Please contact our data protection officer if you have any further questions, suggestions or wishes regarding data protection:
FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Tel.: +49 (0) 421 69 66 32 80
Fax: +49 (0) 421 69 66 32 81
E-Mail: datenschutz@biochem.net
10.1. Newsletter
Newsletter
On our website we provide the opportunity to subscribe to our newsletter. If you consent to this processing separately, this processing is pursuant to Art. 6 para. 1 s. 1 lit. a GDPR.
If you are our customer, we have received your e-mail in connection with the sale of goods or services and use it only for the direct advertising of our own products. You have also not objected to their use. You can object to the use of your e-mail at any time by clicking on the "Unsubscribe newsletter" button without having to pay any costs other than the transmission costs according to the basic tariffs. The legal basis for the processing is the EU Directive 2005/29/EC which has be to implemented to your local law. If the directive has not been implemented to your local law, the only admissible legal basis of processing shall be consent.
If you wish to receive the newsletter, you agree that we may include a newsletter tracking pixel with which we can recognize when the newsletter sent to you was retrieved or opened. However, this is also only permitted on a legal basis to do so.
Your consent can be withdrawn at any time or you can object to the processing without affecting the lawfulness of the prior processing. If the legal basis ceases to exist, we will stop the corresponding data processing including link and opening tracking.
You may unsubscribe from the newsletter at any time, e.g. via an email sent to info@biochem.net or via the link to unsubscribe from the newsletter, which you will find in every newsletter email.
10.2. Contact Form
Contact Us
You can contact us. In order to use our offer, you can contact our contact per-sons via phone and e-mail. We require your name and your email-address. You may provide us with further information, but you are not obligated to do so.
The information you provide to us when contacting us will be used on the basis of Art. 6 Abs. 1 S. 1 lit. f GDPR in the interest of answering your enquiry as simply, promptly and in a customer-friendly manner as possible. We use your data exclusively for the processing of your request and it will be deleted after a period of 6 months. Your personal data will not be passed on to third parties.