Data Protection Policy

To Indivumed, the protection of your privacy and your personal data is highly important. We therefore also pay close attention to data protection aspects of our Internet activities.

We observe all relevant statutory regulations when processing your personal data. To make you feel comfortable when visiting our website, we wish to inform you about our collection and use of data below.

By using our information and services, you consent that Indivumed GmbH, Falkenried 88, Bldg. D, 20251 Hamburg, Germany (hereinafter “Indivumed” or “we”/”us”) may collect, process and use your personal data in accordance with the respective legal regulations and the terms and conditions set forth hereinafter.

Insofar as in the following reference is made to the EU-GDPR, this refers to The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

1. General

Our data protection practice conforms with applicable data protection rules and all other legal requirements.

For the best protection of your data against manipulation, loss, deletion, or unauthorized access by others, we employ technical and organizational security measures which are continuously updated to conform to technical and legal requirements.

Personal Data

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural personA.

Anonymized Data

Anonymized data is information which does not relate to an identified or identifiable natural person or to personal data rendered anonymous in such a manner that the data subject is not or no longer identifiable. General information is automatically collected upon any access to our Internet offerings, (e.g. the number of users accessing a certain website and the duration of the respective visits; referring websites; entry and exit pages, operating systems and browser software used, or language preferences). Such data is not personal data as such, and is processed by us strictly in an anonymized format. We merely use such information for statistical purposes and for optimizing our Internet offerings.

2. Collection, Processing and Transfer of Data

We collect personal data from you to provide the offers and services you select. This applies when filling in a form or sending e-mails.

If you are contacting us though one of our email addresses commincated on our website, we collect and store your sender email address for the purpose of asking you for consent, through a so-called double-opt-in procedure, to electrionically provide you with information and messages directed to your sender email address. In case you do not confirm our request for consent, your sender email address will be erased.

The same applies if you are referring to us via the contact form on our website; here, in addition to your email address, the salutation chosen by you, your name, the company you work for, and the message you entered will be processed.

The same also applies if you request a quotation by using our forms “Quote Biospecimen Products”, “Quote Clinical Services” or “QuoteLaboratory Services”. Here, in addition to your email address, also the company you work for, the salutation chosen by you, you name, your telephone number, your fax number, your address and any comments entered will be processed.

By ticking, in any of these forms, the checkbox “Remember my Details”, you consent – save for your confirmation through double-opt-in – to us storing your entry data, and to automatically fill them in with any future use of Indivumed contact forms by your in order to relieve you from additional entry requirements.

The purpose of our company is to perform our own and to support third-party research and development activities in the field of biomedicine and any services related thereto. All collection, processing and use of data pertains to the implementation of this purpose.

Personal data exclusively collected through your visit to this website will be used for providing and improving our media services. When you subscribe to a newsletter, we collect and process your data for gathering and providing the respective content.

If your personal data is collected and processed in connection with the request for a quotation or performance of an order, we use your data within the scope of the contractual purpose to provide the products and/or services concerned and any additional services necessary for such performance. Data may be transmitted to third-party suppliers as needed for the performance of your respective requests.

In these cases, processing of your data occurs for the performance of a contract or contracts with Indivumed to which you are a party, or in order to take steps at your request prior to entering into a contract, Art. 6 Sec. 1 lit. b EU-GDPR and, as far as you have given us consent based on a double-opt-in procedure, on the basis of such consent, Art. 6 Sec. 1 lit. a EU-GDPR.

As far as necessary in order to handle and execute any services commissioned by you, we may transfer your personal data to

  • Indivumed Inc. based on a data processing contract including standard data protection clause in the meaning of Art. 46 Sec. 2 lit. c EU-GDPR; and
  • our banks and insurers with seats in the European Union.

Any collection, processing and use of your personal data for solicitation or market research purposes, or for information on events, shall only be performed in keeping with applicable legal regulations and based on your explicit consent (“double opt-in”). You may object to such use of your data at any time. Namely, in each case of such use of your data, we will notify you of your right to object through e-mail sent to the below contract address or provide a simple means for cancellation (e.g. a hyperlink).

With regard to the subscription of newsletters, we transfer those of your personal data required to perform the service to service companies entrusted with the technical provision of the messages. Regarding the use of online services, personal data may be transferred to our online system service providers, namely operators of hosting services, Internet booking engines, web analysis services, global distribution services, and marketing services. These system service providers help us to continuously improve our offers and services addressed to you.

We are entitled to conflate any data collected from our customers with data from other sources in order to augment and optimize our services towards our customers.

We only transfer personal data as far as legally permissible, and only as far as necessary to execute your request or transact the connected payments. In all other cases, data is only transferred on an anonymized basis that does not provide an indication of your identity. Personal data will only be collected and transferred to governmental institutions and authorities based on mandatory legal requirements, Art. 6 Sec. 2 lit. e EU-GDPR. We expressly do not sell personal data, such as addresses, to third parties.

Any use of your personal data by third parties based on your consent will strictly be performed as commissioned data processing in keeping with all applicable laws.

Your personal data will be stored in adherence to all applicable legal regulations. As far as we transfer data to our service partners and/or affiliated companies in connection with services described hereinabove, they are contractually bound to data protection agreements in addition to being subject to mandatory laws.

2. Information on Cookies Used by Indivumed and Third Parties

Cookies are small files that are saved to your computer‘s "hard drive" by your web browser. They can be deleted by you at any time, or not be accepted by your browser if the respective options have been checked. Most browsers accept cookies automatically. There are two types of cookies: 1. session cookies are used by us to facilitate navigation through our website. Session ID cookies expire when you close your browser; 2. permanent cookies stay on your hard drive for a longer period. Duration varies and can be up to 25 years. You can delete permanent cookies by following the instructions provided by your browser’s “help” files.

Indivumed uses anonymized cookies exclusively for the purposes of safeguarding system stability and web analysis and not as a preparatory measure for the processing of personal data.

In addition, we work with different service providers. These service providers may themselves place cookies on your hardware via our Internet services (third-party cookies). You can delete these third-party cookies by following the instructions provided by your browser’s “help” files.

Even without cookies, you may still use our website; however, functionality may be partly limited; e.g. the loading time may be slowed, and so called “pop-unders” may be displayed twice. We therefore recommend that you allow cookies when using our website. If you still do not want cookies being stored on your computer, you must modify your browser settings accordingly.

3. Web Analytics Services

This website uses Google Analytics, a web analysis service by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Google Analytics uses so-called “cookies.” The information on your use of this website generated by this cookie will generally be transferred to, and stored on, a Google server in the U.S. However, if you have activated IP anonymization for this website, your IP address will be truncated by Google prior to the transfer if your computer is located in the European Union or a member state of the European Economic Area. Only in exceptional cases will the IP address be transferred to a Google server in the U.S. and truncated there. As commissioned by the operator of this website, Google will use this information to analyze your use of this website, to aggregate reports on website activities, and to render the website operator for additional services related to website and Internet operations. The IP address collected by Google Analytics through your browser will not be combined with other data stored by Google. You can prevent the storage of data through cookies by choosing the respective settings for your browser. You may also prevent the collection of data related to use of the website (including to your IP address) and its transfer to Google by downloading and installing the browser plugin software accessible under the hyperlink tools.google.com/dlpage/gaoptout?hl=en.

For further information on Google’s privacy policy, please revert to https://www.google.de/intl/en/policies/Privacy.

Please note that for this website, we have supplemented Google Analytics by the code “gat._anonymizelp()” to ensure an anonymized collection of IP addresses (so called “IP masking”).

4. Customer Rights

Insofar as we process your personal data based on your consent, you are entitled to revoke your consent towards us at any time, Art. 7 Sec. 3 EU-GDPR.

Upon request, you are entitled to the right to request from us access to and rectification or erasure of your personal data, or to the restriction of processing concerning the data subject or to object to processing, as well as the right to data portability. Deletion may be barred by statutory regulations, especially where required for settling, accounting or taxation purposes.

5. Data Processing Entity and Data Protection Officer

The company

Indivumed GmbH

represented by its managing director (Geschäftsführer) Prof. Dr. Hartmut Juhl

Falkenried 88, Bldg. D

20251 Hamburg

Germany

Phone: +49 (0)40 4133 83-0

Fax: +49 (0)40 4133 8314

E-mail: info @ indivumed.com

is the service provider of all content on the website indivumed.com, and the Controller in the meaning of the EU-GDPR of the collection, storage, and processing of all personal data collected through this website.

The data protection officer of Indivumed GmbH is

Kerstin Linden

Linden@Indivumed.com

For additional information on the company, please refer to our site notice on this website.

You have the right to lodge a complaint with the supervisory authority, which is

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Klosterwall 6 (Block C)

20095 Hamburg

Phone +49.(0)40.4 28 54 40 40

Fax +49.(0)40.4 279 11 811

Email mailbox@datenschutz-hamburg.de

Please note that this data protection policy is subject to reviews and amendments made from time to time in order to conform it to any extended services or changed legal requirements. Please visit this webpage from time to time to make yourself familiar with any changes, especially before submitting personal data to us.

If you have requests, desires or comments regarding data protection at Indivumed, please feel free to also contact the data protection officer at Indivumed GmbH.

May 20, 2018