Data Protection Policy

To Indivumed, the protection of your privacy and your personal data is highly important. We therefore also pay close attention to data protection aspects of our Internet activities.

We observe all relevant statutory regulations when processing your personal data. To make you feel comfortable when visiting our website, we wish to inform you about our collection and use of data below.

By using our information and services, you consent that Indivumed GmbH, Falkenried 88, Bldg. D, 20251 Hamburg, Germany (hereinafter “Indivumed” or “we”/”us”) may collect, process and use your personal data in accordance with the respective legal regulations and the terms and conditions set forth hereinafter.

Insofar as in the following reference is made to the EU-GDPR, this refers to The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

 

1. General

Our data protection practice conforms with applicable data protection rules and all other legal requirements.

For the best protection of your data against manipulation, loss, deletion, or unauthorized access by others, we employ technical and organizational security measures which are continuously updated to conform to technical and legal requirements.

Personal Data

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

This Data Protection Statement applies to data processing for purpose of any services and respective declaration that refer to it.

 

2. Collection, Processing and Transfer of Data

We collect personal data from you to provide the offers and services you select. This applies when contacting us (e.g. via contact form, e-mail, telephone or via social media).

The purpose of our company is to perform our own and to support third-party research and development activities in the field of biomedicine and any services related thereto. All collection, processing and use of data pertains to the implementation of this purpose.

If your personal data is collected and processed in connection with the request for a quotation or performance of an order, we use your data (your company e-mail address, the company you work for, position, the salutation chosen by you, your name, your telephone number, your fax number, your address, payment data, purchase history) within the scope of the contractual purpose to provide the products and/or services concerned and any additional services necessary for such performance.

In these cases, processing of your data occurs for the performance of a contract or contracts with Indivumed to which you are a party, or in order to take steps at your request prior to entering into a contract, Art. 6 Sec. 1 lit. b EU-GDPR, and as far as necessary for compliance with legal obligations to which Indivumed is subject to, based on 6 Sec. 1 lit. c EU-GDPR.

Provision of these data is a requirement necessary to enter into a contract, which otherwise cannot be entered into.

We only transfer personal data as far as legally permissible, and only as far as necessary to execute your request or transact the connected payments. Personal data will only be collected and transferred to governmental institutions and authorities based on mandatory legal requirements, Art. 6 Sec. 2 lit. e EU-GDPR. We expressly do not sell personal data, such as addresses, to third parties.

As far as necessary in order to handle and execute any services commissioned by you, we may transfer your personal data to

  • Indivumed Inc. based on standard data protection clause according to Art. 46 Sec. 2 lit. c EU-GDPR; and
  • our banks and insurers with seats in the European Union
  • third-party suppliers or our collaboration partners, as needed for the service performance.

In addition, your e-mail address, obtained from you in the course of performance of your order, might be used for purposes of marketing and optimization, which allow us to offer you improved customer support and services and continue to optimize our offers (such as surveys) in accordance with §6 Sec 1. Lit. f, § 21 GDPR, as far as you have not objected to your data processing for such purpose.  You may object to such use of your data at any time, by sending an informal to a provided e-mail address. If you participate in one of our customer surveys, this is done on a purely voluntary basis.

Otherwise, collection and use of your personal data for solicitation, newsletter or for any information on events, products and services, shall only be performed in keeping with applicable legal regulations and based on your explicit consent, in accordance with §6 Sec. 1 lit. a EU-GDPR (through “double opt-in”, if appropriate). You may withdraw your consent at any time. This shall not affect the lawfulness of processing based on consent before its withdrawal. In addition, you have the right to object to use of your data at any time, if applicable.

In such case, we use your e-mail address solely for the purpose of asking you for consent, to store your data and to electronically send you the information about the Indivumed products, services and relevant events (marketing purposes). In case you do not confirm our request for consent, your sender e-mail address will be erased.

When you subscribe to a newsletter, we collect and process your data for gathering and providing the respective content. In such case, we may transfer those of your personal data required to perform the service to service companies entrusted with the technical provision of the messages. Regarding the use of online services, personal data may be transferred to our online system service providers, namely operators of hosting services, Internet booking engines, web analysis services, global distribution services, and marketing services. These system service providers help us to continuously improve our offers and services addressed to you. Any use of your personal data by third parties based on your consent will strictly be performed as commissioned data processing in keeping with all applicable laws.

We are entitled to conflate any data collected from our customers with data from other sources in order to augment and optimize our services towards our customers.

Your personal data will be stored in adherence to all applicable legal regulations, including purpose and storage limitation in terms of GDPR. Your personal data are stored as far as necessary in relation to the purposes for which they were collected or otherwise processed, such as performance of your contract with Indivumed (Art. 6 Sec. 1 lit. b EU-GDPR), and as far as necessary for compliance with legal obligations to which Indivumed is subject to, based on 6 Sec. 1 lit. c EU-GDPR (such as e.g. accounting or taxation purposes). As far as we transfer data to our service partners and/or affiliated companies in connection with services described hereinabove, they are contractually bound to data protection agreements in addition to being subject to mandatory laws.

Should it not be possible to erase your data in individual cases, such data processing shall be restricted to necessary purpose.

 

3. Information on Cookies Used by Indivumed and Third Parties

Cookies are small files that are saved to your computer`s "hard drive" by your web browser. They can be deleted by you at any time, or not be accepted by your browser if the respective options have been checked. Most browsers accept cookies automatically. There are two types of cookies: 1. session cookies are used by us to facilitate navigation through our website. Session ID cookies expire when you close your browser; 2. permanent cookies stay on your hard drive for a longer period, depending on the duration or “lifetime” of the specific cookie, as well as your browser settings.

Most internet browsers are initially set up to automatically accept cookies. 

If you do not want our websites to store cookies on your device, you can change your browser settings on each device, by following the instructions provided by your browser’s “help” files. You can adjust your settings so that you receive a warning before certain cookies are stored, so that your browser refuses most of our cookies or only certain cookies from third parties. You can also withdraw your consent to cookies by deleting the cookies that have already been stored by clicking on the Adjust cookie preferences button on the beginning of this web page.

However, this might disable or impair the use of our website. You may still use our website without accepting any or all cookies; however, functionality and/or comfort may be impaired, e.g. the loading time may be slowed, logins may not be kept, and so called “pop-unders” may be displayed twice.

Some cookies are essential for running and maintaining our website (“Technically necessary” cookies) and used for the purposes of safeguarding system stability. These cookies are not subject to your prior consent.

Apart from that, Indivumed uses “Statistics” cookies exclusively in order to facilitate your activities and experience on our website and web analysis. They do not identify you as an individual and are not used as a preparatory measure for the processing of personal data. If you consent to these cookies, such data are evaluated for statistical purposes with the aim of optimizing our website and our services and not used to draw any conclusions about your personal identity.

You can withdraw your consent by clicking on the button “Adjust cookie preferences” on the beginning of this web page anytime.

Such data may be transferred to third parties (e.g., IT service providers, marketing agencies) for purpose of operating, securing and optimizing our websites and its functionalities, based on our legitimate interest (Art. 6 (1) f GDPR), your consent, or to comply with legal obligations, as it might be applicable. Such third parties are contractually bound to data protection agreements in addition to being subject to mandatory laws.

Different service providers may themselves place cookies on your hardware via our Internet services (third-party cookies). You can manage these third-party cookies by following the instructions provided by your browser’s “help” files, as further described below.

 

4. Web Analytics Services

This website uses Google Analytics, a web analysis service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google“).

By accepting “Statistics” cookies, certain information about your visit to this website are collected, such as pages you have visited, newsletter registrations, downloads, user behavior (e.g. clicks, length of stay), approximate location (region), your IP address in abbreviated form, technical information about your browser and the end device, internet provider, the referrer URL (via which website you came to this website).

Therefore, we entered into the Data Processing Agreement with Google. Google Analytics uses so-called “cookies.” The information on your use of this website generated by this cookie will be processed by Google and generally transferred to, and stored on, a Google server in the U.S. and hence might be accessible to U.S. public authorities.

Please note that for this website, we have supplemented Google Analytics by the code “gat._anonymizelp()” to ensure an anonymized collection of IP addresses (so called “IP masking”). Therefore, your IP address will be truncated by Google prior to the transfer if your computer is located in the European Union or a member state of the European Economic Area. Only in exceptional cases will the IP address be transferred to a Google server in the U.S. and truncated there. As commissioned by the operator of this website, Google will use this information to analyze your use of this website, to aggregate reports on website activities, and to render the website operator for additional services related to website and Internet operations. Through the DPA it was ensured that Google receives this data as a processor and is therefore not allowed to use this data for its own purpose. The IP address collected by Google Analytics through your browser will not be combined with other data stored by Google.

The storage of such data is set to 14 Months and they are automatically deleted once a month, after expiration of the retention period.

You can withdraw your consent by clicking on the button “Adjust cookie preferences” on the beginning of this web page anytime.

Nevertheless, you can control the information collected by Google (for more information see https://policies.google.com/technologies/partner-sites). You can prevent the storage of data through cookies by choosing the respective settings for your browser. You may also prevent the collection of data related to use of the website (including to your IP address) and its transfer to Google by downloading and installing the browser plugin software accessible under the hyperlink https://tools.google.com/dlpage/gaoptout?hl=en.

For further information on Google’s privacy policy, please revert to https://policies.google.com/privacy?hl=en-DE&fg=1.

 

5. LinkedIn and LinkedIn Ads

On our website we are using the conversion tracking technology and the retargeting-feature of LinkedIn Corporation. This technology allows for personalized ads on LinkedIn being displayed to visitors of this website. The technology also provides the ability to generate anonymous reports on ad performance and information on website interaction. For these purposes, the LinkedIn Insight-Tag is embedded in this website which creates a connection to the LinkedIn server when you visit this website and at the same time are logged in to your LinkedIn account.

Please see LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy for more information on data collection and use and the choices and rights you have to protect your privacy. If you are logged in to LinkedIn, you can opt-out of having your data collected at any time by following this link: https://www.linkedin.com/psettings/enhanced-advertising.

 

6. Customer Rights

Insofar as we process your personal data based on your consent, you are entitled to withdraw your consent at any time, based on Art. 7 Sec. 3 EU-GDPR. This shall not affect the lawfulness of processing based on consent before its withdrawal.

Upon request, under the conditions of the §15-21 GDPR, you are entitled to the right to request from us access to and rectification or erasure of your personal data, or to the restriction of processing concerning the data subject, right to data portability, right to object your data processing on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), as it might be applicable.

Should your personal data (e-mail Address) be processed for the direct marketing purposes, you have the right to object to such use of your data at any time without giving a reason, as described above.

Deletion may be barred by statutory regulations, especially where required for settling, accounting or taxation purposes in accordance with 6 Sec. 1 lit. c EU-GDPR.

 

7. Data Processing Entity, Data Protection Officer and supervisory authority

The company
Indivumed GmbH
represented by its managing director (Geschäftsführer) Prof. Dr. Hartmut Juhl
Falkenried 88, Bldg. D
20251 Hamburg
Germany

Phone: +49 (40) 41 33 83 0
Fax: +49 (40) 41 33 83 14
E-mail: info@indivumed.com

is the service provider of all content on the website indivumed.com, and the Controller in the meaning of the EU-GDPR of the collection, storage, and processing of all personal data collected through this website.

The data protection officer of Indivumed GmbH is

Visnja Mrdovic

mrdovic.visnja@Indivumed.com

For additional information on the company, please refer to our site notice on this website.

You have the right to lodge a complaint with the supervisory authority, which is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str 22, 7. OG
20459 Hamburg

Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-mail mailbox@datenschutz-hamburg.de

Please note that this data protection policy is subject to reviews and amendments made from time to time in order to conform it to any extended services or changed legal requirements. Please visit this webpage from time to time to make yourself familiar with any changes, especially before submitting personal data to us.

This Data Protection Statement applies primarily to the data processing of the Indivumed´s website visitors and, to the extent applicable, Indivumed`s customers, partners and service providers. Processing of the personal data for purpose of research and development activities is subject to special data protection concept and applicable policies.

If you have requests, desires or comments regarding data protection at Indivumed, please feel free to also contact the data protection officer at Indivumed GmbH.

June, 2021