1. General Information about Data Processing
In principle, we collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of the personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for factual reasons and processing of the data is permitted by law.
1.1 Legal Basis for the processing of your data:
- Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.
- In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual steps.
- Insofar as the processing of personal data is necessary in order to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
- In the event that the vital interests of the data subject or any other natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
- If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
1.2 Legitimate interests may include, in particular:
- answering inquiries;
- implementation of direct marketing measures;
- provision of services and/or information intended for you;
- processing and transfer of personal data for internal or administrative purposes;
- operation and administration of our website;
- provision of technical support to users;
- prevention and detection of fraud and crime;
- protection against payment defaults when soliciting credit reports in the case of requests for deliveries and services; and or
- safeguarding of network and data security, to the extent that such interests are consistent with applicable law and the rights and freedoms of the user.
2. Usage Data / Server Log Files
Each time our websites are accessed, our systems automatically collect data and information from the computer system of the calling computer. The following types of data are collected here: browser type, version used, user’s operating system, Internet service provider, IP address of the user, date and time of request, web pages from which the user’s system has accessed our website or which the user accesses from our website. The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR with the legitimate interests mentioned above. The temporary storage of the IP address by the system is necessary to allow for delivery of the website to the user’s computer. For this, the user’s IP address must be stored for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data are used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest also lies in the data processing for these purposes. The data will be deleted as soon as their storage is longer necessary for the purpose for which they were collected. This is the case when data are collected for the provision of the website and the respective session has been ended. Furthermore, we reserve the right to check the files if, on the basis of concrete evidence, there is legitimate suspicion of unlawful use or a specific attack on the web pages. In this case, our legitimate interest is processing for the purposes of investigating and prosecuting such attacks and illegal uses.
Legal basis for data processing using cookies: Art. 6 (1) (f) GDPR forms the legal basis for the processing of personal data using cookies. Art. 6 (1) (f) GDPR forms the legal basis for the processing of personal data using cookies required for technical reasons. When the user’s consent is obtained, Art. 6 (1) (a) GDPR forms the legal basis for the processing of personal data using cookies for analysis purposes.
4. General Statements about Web Beacons / Tracking Pixels
Web beacons are invisible graphics the size of one pixel. These are used by partner companies, in particular for the purpose of tracking a user through various web pages to form a profile of use for user-customized advertising (targeting). A pixel embedded in the web page is loaded by the partner company’s server when the web page is called up. The partner receives your IP address, along with information about your browser and its version as well as browser plugins utilized (browser fingerprint), about your operating system and about your network operator.
5. Contents of External Providers
You can protect yourself, among other things, against further tracking through these providers’ use of tracking pixels by disabling the acceptance of third-party cookies in your browser’s settings.
6. Contact Forms and E-Mail Contact
On our Internet pages, there is the possibility to contact us electronically using various forms. If a user takes advantage of this possibility, the data entered in the input mask is transmitted to us and stored. These data are usually Your name and your e-mail address. In addition, depending on the type of form, your telephone number, your postal address, information on the country, as well as the name of the company for which you work, may be requested. You can find the necessary (mandatory) information in the respective contact form. At the time of sending the message, the following data will also be saved: Your IP address, date and time. In order to process the data, your consent will be obtained in accordance with Art. 6 Para. 1 lit. a) GDPR and reference will be made to this data protection declaration.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.
Your data will be treated as strictly confidential and will not be passed on to third parties, but may be passed on to the companies and dsitributors of R-Biopharm AG for the purpose of processing your enquiry.
The legal basis for the processing is:
For the processing of data transmitted in the course of sending an e-mail, Art. 6 para. 1 lit. f) GDPR with the above-mentioned legitimate interests.
If the e-mail contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR.
The processing of the personal data from the input mask serves us solely to process the contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serves to prevent misuse of the contact forms and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer required for the purpose for which they were collected. This is the case for the personal data from the input mask of the contact forms and those sent by e-mail when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the possibility to revoke his consent to the processing of the personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued.
Some of our websites allow you to subscribe to a free newsletter. If you give us your separate consent, we will send you an e-mail newsletter with promotional information (hereinafter “newsletter”). Our newsletters contain information about our services, promotions, events, competitions, job offers and articles.
After registering, the user receives a confirmation e-mail containing an activation link that must be clicked on in order to complete the registration. This is the Double Opt-In procedure, which ensures that the user is not registered by a third party for the newsletter and for documentation purposes. The consent to receipt of the newsletter can be revoked by e-mail at the e-mail address given in the imprint or by clicking on the unsubscribe link within the newsletter.
News without promotional information that is sent as part of our contractual or other business relationship is not, however, included in the newsletter. These include, for example, the dispatch of service e-mails with technical instructions and queries regarding orders, events, contest notifications or comparable messages.
For the newsletter, only the e-mail address of the user concerned is collected and saved. The legal basis is Art. 6 (1) (f) GDPR with the above-mentioned legitimate interests.
A statistical evaluation of the user’s reading behavior takes place only to the extent that it can be determined whether the recipients have opened the newsletter and clicked on the links. This is a feature that we only use to validate user activity and optimize accordingly. For this purpose, the newsletter contains a web beacon, a pixel-sized file that is retrieved from our server when the newsletter is opened. You can revoke your consent to the storage of the data, of the e-mail address and their use for sending the newsletter at any time. This revocation can be done by clicking on a link in the newsletter itself, (in your profile area) or by sending a message to the contact options below.
8. Adobe Connect
Through our website we offer you the possibility to register for free webinars. To conduct the webinars we use the webinar platform adobe connect, of Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. If you would like to register for one of our webinars, we need your first and last name, your e-mail address and for authentication purposes the name of the company you work for. All your data will be deleted at the end of the webinar. The legal basis for registering for our webinars is the consent given by you in accordance with Art. 6 Para. 1 lit. a) GDPR. The legal basis for the use of the adobe connect webinar platform is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR, which is based on the technically flawless performance of our webinars.
9. Product videos & comprehension test
In our access-protected customer portal we provide you videos about our products and their possible range of applications.
In some cases it is also possible to take a comprehension test after watching a product video. The provision of these videos, as well as the performance of the comprehension test, is usually free of charge.
In order to be able to offer our customers the most comprehensive service possible, it is conceivable that the answers given by you in the comprehension test will be evaluated by R-Biopharm and a telephone contact will be made to discuss the answers. The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
10. Document Downloads
On some of our websites, it is possible to download information in the form of PDF documents. We would like to point out that these documents are generally provided by us free of charge. Furthermore, no personal data is collected from you in the context of the document downloads.
11. Data Transfer
If you communicate personal data to us, then these will only be passed on to third parties if necessary for the settlement of the contractual relationship or if another legal ground legitimizes this transfer. However, we provide certain services with the assistance of service providers. We have carefully selected these service providers and taken appropriate measures to protect your personal data.
12. Registration and registered usage
Some of our websites require or offer a registration. The data collected in the process is used for the purpose of using the respective websites and services, unless otherwise described and explicitly agreed upon during registration. The data collected is derived from the registration form, the processing is based on Art. 6 para. 1 lit. b) GDPR. All other data that you can enter later to complete your profile are optional and voluntary which are based on the legal regulations of Art. 6 para. 1 lit. a) GDPR. After registration, we may inform you about relevant circumstances related to our offer for which you have registered by means of the deposited e-mail address.
13. User-generated content
If you write comments or contributions, upload files to our servers, publish pictures or use other services, your IP address and – if you are logged in – your user data will be stored for our security. Due to the large number of illegal contents that are posted on the internet every day, we reserve the right to use this information for the defence in legal disputes or for criminal prosecution, i.e. also to pass it on to respondents, criminal prosecution authorities and courts. The legal basis for the content provided is Art. 6 para. 1 lit a) and/or b) GDPR, for all other data collected in the process Art. 6 para. 1 lit f) GDPR.
14. Solvency checks
Furthermore, we retain the right, in the case of orders or commissions, to pass on personal data to third parties for creditworthiness information, insofar as this is necessary to ensure the protection of our legitimate interests. In doing so, only the data required for calculating the creditworthiness by means of a mathematical-statistical procedure by the credit agency will be transmitted. We require creditworthiness information in order to be able to decide on the establishment and fulfilment of a contractual relationship while protecting our legitimate interests.
15. Data Retention Periods
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is no longer valid. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the data controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for conclusion of a contract or fulfilment of the contract.
16. Google Analytics
Our website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics may be combined with other data from Google. The legal basis for the processing of personal data of users is Art. 6 para. 1 lit. a) GDPR. We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out using a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “Personal data”.
Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, or Google Analytics of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
You have the right to revoke your consent granted under Art. 6 para. 1 lit. a) GDPR at any time. To do so, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
You can set an opt-out cookie to prevent detection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You must opt-out on all systems and devices in use to be fully effective. Click here to set the opt-out cookie: Disable Google Analytics
17. Google Tag Manager
On this website we use the Google Tag Manager. The Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The tool that implements the tags is a cookie-less domain. This means that the Google Tag Manager does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you disable it at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager. Using Google Tag Manager makes it easier to use our website.
You can find further information on the use of Google Tag Manager in accordance with data protection laws at https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
18. Google Ads Conversion/Google Dynamic Remarketing
We use the offer of Google Ad to draw attention to our services by means of advertising material (so-called Google Ads) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way we pursue the interest to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called “Ad Servers”. For this purpose, we use ad server cookies, through which certain parameters can be measured to measure success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Ads will store a cookie in your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an ads client’s website and the cookie stored on their computer has not expired, Google and the client can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each ad client. Cookies cannot be tracked through the websites of ad clients. We ourselves do not collect and process any personal data in the advertising measures mentioned above. We only receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.
You can prevent this tracking procedure in various ways:
a) by adjusting your browser software accordingly, in particular the suppression of third-party cookies means that you will not receive advertisements from third-party providers;
b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “googleadservices.com“, https://www.google.de/settings/ads, although this setting will be deleted if you delete your cookies;
c) by deactivating the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies;
d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for the processing of your data is Art. 6 para. 1 lit. a) GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Standard contractual clauses apply for the exceptional cases in which personal data is transferred to the USA.
Besides Adwords Conversion we use the application Google Remarketing. This is a procedure with which we would like to address you again. This application enables us to display our advertisements on your further internet use after you have visited our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behaviour when visiting various websites. This enables Google to determine your previous visit to our website. According to Google, a combination of the data collected in the course of remarketing with your personal data, which may be stored by Google, does not take place. In particular, according to Google, pseudonymisation is used in remarketing.
19. Google Campaign Manager (formerly DoubleClick by Google)
Because of the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Campaign Manager, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.
You can prevent participation in this tracking procedure in various ways:
a) by adjusting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive advertisements from third-party providers;
b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “googleadservices.com“, https://www.google.de/settings/ads, this setting will be deleted when you delete your cookies;
c) by deactivating the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, this setting being deleted if you delete your cookies;
d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for the processing of your data is Art. 6 para. 1 lit. a) GDPR.
Further information on Campaign Manager by Google is available at https://www.google.de/Campaign Manager and http://support.google.com/adsense/answer/2839090, and on data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
Standard contractual clauses apply in cases where personal data is transferred to the USA.
20. Google Maps
On this website we use the services of Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. Personal data is transmitted to Google (IP address, time of the request, content of the request, amount of data transmitted, website from which the request comes, language and version of the browser, information on the operating system). This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you have to log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The legal basis for data processing is Art. 6 Par. 1 lit. a) GDPR.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s data protection declarations. There you will also find further information on your rights and settings to protect your privacy: http://www.google.de/intl/de/policies/privacy. For the exceptional cases in which personal data is transferred to the USA, standard contractual clauses apply.
21. Google reCAPTCHA
To ensure data security when submitting forms and to protect ourselves from SPAM, we use the reCAPTCHA service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This is primarily to distinguish whether the input is by a natural person or improperly by machine and automated processing. After entering and pressing the corresponding confirm button, your IP address and any other data required for the reCAPTCHA service will be sent to Google. The legal basis for the processing of your IP address and the use of reCAPTCHA is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the secure transmission of form data and the smooth operation of our website.
Standard contractual clauses apply for the exceptional cases in which personal data is transferred to the USA. Furthermore, deviating data protection regulations of Google Inc. apply. You can find further information on the data protection guidelines of Google Inc. at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/.
22. HubSpot/HubSpot Forms
On our website we use the service HubSpot and HubSpot Forms, of HubSpot Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. HubSpot is an integrated software solution to cover various online marketing activities. This includes, for example, our website content management, e-mail marketing, social media publishing & reporting, contact management, as well as the provision of any landing pages and contact forms.
Through our registration service we enable our website visitors to learn more about our company. You can also download content and provide your contact information and other demographic information. This information and the content of our website is stored on servers of our software partner HubSpot and can be used by us to contact our website visitors. We also use the information to determine which of our company’s services are of interest to you.
We use HubSpot on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. We use HubSpot Forms on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR, whereby our legitimate interest lies in the provision of any contact forms and simplified communication with interested parties. We would like to point out that when using HubSpot Forms, there is no personal tracking as with HubSpot itself.
HubSpot is a software company from the USA. In order to legitimise the transfer of data to the USA, HubSpot Inc. relies on EU standard contract clauses: https://legal.hubspot.com/dpa
23. Integration of Facebook Button
This offer uses social plugins from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). The plugins are recognizable by one of the Facebook logos (white “f” on blue tile, the terms “Like” or a “thumbs up” sign) or are marked with the note “Facebook Social Plugin”. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/. When a user pulls up a web page of this offer that contains such a plugin, the user’s browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated into the website. The provider therefore has no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to its level of knowledge: By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his/her Facebook account. If users interact with the plugins, for example, press the Like button or leave a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If a user is not a Facebook member, there is still the possibility that Facebook will find and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options for protecting the privacy of users, can be found in Facebook’s data policy: https://www.facebook.com/about/privacy/. If a user is a Facebook member and does not want Facebook to collect data about him/her via this offer and associate it with his/her member data stored on Facebook, he/she must log out of Facebook before visiting the website. Other settings and types of objections to the use of data for promotional purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads.
24. Integration of Twitter Plugins
25. Integration of XING Button
26. Integration of LinkedIn Button