Data Privacy Statement

On this site we will inform you about data privacy when using our website „probiogen.de“ its subdomains (hereinafter “website”) and our social media:

1. General information, Controller

Identity and contact details of the controller: ProBioGen AG (Herbert-Bayer-Str. 8, 13086 Berlin, Germany, Phone: +49 (0) 30 3229 35 100, Fax: +49 (0) 30 3229 35 400, Email: cdmo@probiogen.de) (hereinafter also „we“ and „us“).

Contact details of the data protection officer: Phone: +49 (0) 30 3229 35 100, Fax: +49 (0) 30 3229 35 400, Email: privacy@probiogen.de, Postal: ProBioGen AG – data privacy officer / strictly confidential –, Herbert-Bayer-Str. 8, 13086 Berlin, Germany.

You have the right to lodge a complaint with a supervisory authority. You may have the choice among several supervisory authorities. The supervisory authority competent based on our registered office in Berlin is the supervisory authority on data protection and freedom of information of Berlin (in German: “Berliner Beauftragte für Datenschutz und Informationsfreiheit”).

If not otherwise specified in this document or in more specific documents (e.g. on a banner on our website) the following applies:

There is a right of access by the data subject (Art. 15 GDPR) and a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or a right to restriction of processing (Art. 18 GDPR). If you give your consent or if data is processed to fulfill the contract, you also have the right to data portability (Art. 20 GDPR).
If we process personal data relating to you on the basis of legitimate interests (Art. 6 I lit. f GDPR), you have the right to object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR); this also applies to profiling based on these provisions. An objection can be filed using the contact details given above or by means offered in connection with the specific data processing.
If you consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal.
We erase the processed personal data immediately after the end of the processing, unless otherwise stated below or in more specific documents. If you request erasure beforehand, the data will be erased immediately, unless there is another legal basis for processing.
Unless otherwise stated below or in a more specific document, the provision of personal data by you is neither required by law nor by contract or required for the conclusion of a contract. You are not obligated to provide the data. A possible consequence if you do not provide the data is that you cannot fully use the specific service and might have to choose an alternative.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

2. Visiting our Website

We are processing your IP address for the purpose of being able to receive your request and to send you the contents of our websites. The legal basis for the processing is our legitimate interest (Art. 6 I lit. f GDPR) as well as taking steps at the request of you prior to entering into a contract (Art. 6 I lit. b GDPR).

The legitimate interest (Art. 6 I lit. f GDPR) is based on the technical setup of the internet and the requirement to involve intermediaries while sending the contents of a website to you. E.g. this is your internet service provider (ISP). Without these intermediaries it is technically impossible to send the contents of our website to you. Only intermediaries who are directly connected in the communication with you are involved.

We will erase personal data without undue delay as soon as the personal data is no longer necessary to provide you with the services of our website, i.e. after you leave our website, unless stated otherwise below. If you ask us to erase the data before that time, we will do so without undue delay, unless there is another legal basis for processing the data.

In order to connect our website with the internet (i.e. the hosting of our website) we make use of a third party, which carries out this part of the data processing on our behalf. This third party (our processor) is: Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany. This processor acts on our behalf and is strictly bound by our instructions. We have entered into a data processing agreement with this processor.

In order to connect our website with the internet (i.e. the hosting of our landing pages) we make use of a third party, which carries out this part of the data processing on our behalf. This third party (our processor) is: HubSpot, provided by HubSpot Inc. 25 Street, Cambridge, MA 02141 USA, (hereinafter “HubSpot”). This processor acts on our behalf and is strictly bound by our instructions. We have entered into a data processing agreement with this processor. Further details on the DPA can be found here: https://legal.hubspot.com/dpa. Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield and https://legal.hubspot.com/dpa.

You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing. The right to object concerns the processing of data based on our legitimate interest (Art. 6 I lit. f GDPR).

The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to provide to you the contents of our website.

3. Using Storage on your Device, Cookies

Please also take note of the additional information regarding cookies in connection with our website through a banner directly on our website.

If we are asking you for your consent in this banner the legal basis for storing and retrieving information from your device is your consent (§ 25 I TTDSG). You are completely free to give or withhold your consent. If you give your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal. One option to withdraw you consent is in the same way you have given your consent: by using the consent banner, which is available by clicking the “fingerprint image” available on all our websites (cf. no. 4).

Otherwise the legal basis for storing and retrieving information from your device is their necessity to render the services to you (§ 25 II no. 2 TTDSG).

We may further process the data stored within cookies. As far as personal data is concerned please refer to the other sections in this document and the information banner on our website regarding the processing of this personal data.

4. Consent Banner

We will give further information on data privacy and ask for data privacy consents through a banner directly on our website. This banner is provided by Usercentrics GmbH (Rosental 4, 80331 Munich, Germany).

Usercentrics GmbH is our data processor and acts on our behalf and is strictly bound by our instructions. We have entered into a data processing agreement (“DPA”) with this processor.

5. Cookies on our Website

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

You can configure your browser to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

You will be informed in more details about the individual cookies and there properties directly on our website through our banner.

If no other or more specific information is given in our consent banner, we provide you with the following information:

The legal basis for our processing of the data is our legitimate interest (§ 25 (2) no. 2 TTDSG and Art. 6 I lit. f GDPR). If we are asking for your consent on our website through the consent banner, the legal basis for our processing of the data is your consent (§ 25 (1) TTDSG and Art. 6 lit. a GDPR).
The legitimate interest (§ 25 II no. 2 TTDSG and Art. 6 I lit. f GDPR) is our interest to provide you with a state of the art experience on our website.
The duration of the cookie is specified within the consent banner. You can also manually delete the cookie in your browser.
You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing. The right to object concerns the processing of data based on our legitimate interest (Art. 6 I lit. f GDPR).
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data (i.e. setting the cookie) some parts of our website will not function correctly.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

Please refer to other sections of this document and the banner on our website for further information about such cookies.

6. Contact Form

We provide a contact form e.g. in our “Contact” section as well as on the bottom of most of our webpages. For these contact forms, we provide you with the following information:

We are processing your data for the following purpose: You can reach us (cf. no. 1 above) via the contact form. This is an alternative to sending us an email. Afterwards we would like to reply to you. Personal data being collected and processed include all the data that you have provided in the contact form itself in addition to your IP address as well as the date and time of you sending the form contents to us. The legal basis for our processing of the data is that these are necessary steps taken at your request prior to entering into a contract (Art. 6 I lit. b GDPR) and – regarding intermediaries like your Internet Service Provider (ISP) – our legitimate interest (Art. 6 I lit. f GDPR).
The legitimate interest (Art. 6 I lit. f GDPR) is based on the technical setup of the internet and the requirement to involve intermediaries while sending the contents of a website to you and sending the contents of a contact form back to us. E.g. this is your internet service provider (ISP) or your email provider. Without these intermediaries it is technically impossible to send the contents of our website to you or a message from you to us. Only intermediaries who are directly connected in the communication with you are involved.
We will erase personal data without undue delay as soon as the contact with you is finished, unless stated otherwise below. If you ask us to erase the data before that time, we will do so without undue delay, unless there is another legal basis for the processing of the data.
You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing. The right to object concerns the processing of data based on our legitimate interest (Art. 6 I lit. f GDPR).
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to receive your request or to reply to your request and you will have to contact us in some other way.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

7. Google Analytics

Purpose:

We will ask for your consent to use Google Analytics during your visit on our website. Google Analytics is a web analytics service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Analytics uses cookies, which are stored on your computer. This allows an analysis of your use of the website. This website uses Google Analytics only with the "_anonymizeIp()" extension for IP address anonymization. This means that your IP address will be shortened before being sent to Google. Google will use this information on our behalf to evaluate your use of the website and to compile reports on the website activities for us.

Consent, that we will ask you for on our website:

You consent that we may collect, analyze and transmit data about your visit on our website (i.e. sites visited, interactions made, duration and source of your visit) to Google in order to analyze the general behavior of our website visitors and to further improve our website and services. See no. 1 of our data privacy policy for further details.

You are free to give or withhold your consent. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal.

Further information:

With Google having registered offices in Ireland but also affiliated companies in the USA (California), the data may be transferred to a country outside of the European Union. This data transfer to the USA is based on standard data protection clauses (Art. 46 II lit. c GDPR). Refer to this site for further information and a copy: https://privacy.google.com/businesses/controllerterms/mccs/ and https://policies.google.com/privacy/frameworks?hl=en
The personal data will be erased as soon as the general statistic, in which your data will not be identifiable anymore, is created. If, prior to this, you request that your data be removed, we will erase the data without undue delay, unless there is another legal basis for the data processing.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to include your data into our general statistic for our website usage and thus cannot include your usage of our site to improve our website.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.
Further information about the processing of data through Google Analytics can be found here: https://support.google.com/analytics/answer/6004245?hl=en.

8. Google Analytics Event Tracking

The section above for Google Analytics also applies to Google Analytics Event Tracking.

9. Google Tag Manager

Purpose:

We make use of the Google Tag Manager, a service provided by Google (cf. no. 7 above). Google Tag Manager is a framework that allows us to integrate third party tools in our website without changing the programming of the website itself. By using Google Tag Manager Google learns about your IP address and the fact that you are visiting our website.

Consent, that we will ask you for on our website:

You consent that we may transmit data (your IP address, time and fact or your visit on our website) to Google for the above-mentioned purposes, i.e. in order to easily integrated third party tools into our website. See no. 7 of our data privacy policy for further details.

You are free to give or withhold your consent. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal.

Further information:

The purpose of the processing of data is our interest to easily and dynamically integrate software tools in our website. The legal basis for the processing is your consent (Art. 6 I lit. a GDPR) that we will ask for through a banner directly on our website.
Google (cf. no. 7 above) will receive the data as explained above.
With Google having registered offices in Ireland but also affiliated companies in the USA (California), the data may be transferred to a country outside of the European Union. This data transfer to the USA is based on standard data protection clauses (Art. 46 II lit. c GDPR). Refer to this site for further information and a copy: https://privacy.google.com/businesses/controllerterms/mccs/ and https://policies.google.com/privacy/frameworks?hl=en.
The personal data will be erased as soon as the tool is integrated in your instance of our website through Google Tag Manager. If, prior to this, you request that your data be removed, we will erase the data without undue delay, unless there is another legal basis for the data processing.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to include your data into our general statistic for our website usage and thus cannot include your usage of our site to improve our website.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.
Further information about the processing of data through Google Analytics can be found here: https://support.google.com/analytics/answer/6004245?hl=en.

10. Analyzing your Interactions on our Website

Purpose:

We want to be able to better tailor marketing campaigns and marketing measures to our customers and potential customers interests, e.g. by being aware of your interactions with you on our website and our other channels (e.g. email, website downloads, social media and phone calls). The data collected can be analyzed and used for providing information about ProBioGen and its services that are more specific to your interest (if you have consented into receiving such information separately). E.g. you may visit our website, download a product brochure and click on a link in a newsletter and we may deduce from these interactions an interest in a certain area resulting in us sending you an email (provided you have consented into receiving such emails separately) with more information about this area or us asking you to allow us to give you a call.

We will ask for your consent directly on our website. This consent includes:

You consent that we may collect and store data about your interaction on our website (e.g. sites visited) and further channels (i.e. social media) in a dataset (cf. no. 18) in order to analyze your behavior and interests.

You are free to give or withhold your consent. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal.

Further information:

The legal basis for processing the data is your consent in accordance with Art. 6 I lit. a GDPR.
We may use the service HubSpot, provided by HubSpot Inc. 25 Street, Cambridge, MA 02141 USA, (hereinafter “HubSpot”) on our website. HubSpot is a so called customer relationship management (“CRM”) system. Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield and https://legal.hubspot.com/dpa.
We have entered into a data processing agreement (DPA) with HubSpot. As such, HubSpot acts as a data processor on our behalf and is strictly bound by our instructions. Further details on the DPA can be found here: https://legal.hubspot.com/dpa
We will erase the data when you withdraw your consent.
The provision of personal data by you is neither required by law nor by contract or required for the conclusion of a contract. You are not obligated to provide the data. A possible consequence if you do not provide the data is that we cannot tailor our services, offers and advertisements to your needs and interests. Also, we cannot incorporate your interests when further enhancing our website and services.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

11. SalesForce

We also use salesforce.com, inc., The Landmark @ One Market Street, San Francisco, CA 94105, USA (hereinafter referred to “SalesForce”) as our customer relationship management (“CRM”) system.

SalesForce is our data processor and acts on our behalf and is strictly bound by our instructions. We also have entered into a data processing agreement with SalesForce.

Data is sent to SalesForce in the USA on the basis of standard data protection clauses adopted by the Commission of the European Union. These clauses and further details are available here: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf.

Further information regarding SalesForce’s data privacy is available here: https://www.salesforce.com/eu/company/privacy/

12. LinkedIn Insight Tag / Retargeting

Purpose:

We utilize LinkedIn’s Insight Tag, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”).

By using the LinkedIn Insight Tag data about your visit to our website is sent to LinkedIn. If you are also logged into LinkedIn and based on the configuration of your LinkedIn account, LinkedIn may connect your LinkedIn account to your visit on our website. LinkedIn in turn provides us with a summary. This summary does not include your individual interaction with our website but only aggregated information about all visits from all of our website visitors in a specific timeframe. The summary shown to us mainly includes grouped information about job title, career level, country, location, industry and company size. Also we can measure the success of posts and advertisements by seeing if visitors coming from LinkedIn interacted with our website in a certain way, e.g. by downloading a product brochure. In this manner we are able to track the success of marketing campaigns. This tracking may happen independently of the devices a visitor is using.

We may also use the information gathered by using the LinkedIn Insight Tag for showing certain ads to people who have visited our website before later on, e.g. by showing advertisements on LinkedIn or other websites to these visitors (“retargeting”).

As part of the LinkedIn Insight Tag LinkedIn itself gathers information about the interactions of visitors. LinkedIn may collect the information for LinkedIn’s own purposes which are of advertising and statistical nature. These information includes (your IP address, device and browser properties, time of access, URL and possible referrer URL) as well as the connection to your LinkedIn account. According to LinkedIn the information is pseudonymized after seven days and erased after 180 days. Further details may be found at LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Consent, that we will ask you for on our website:

You consent that we may collect and transmit data about your interaction with our website (e.g. the fact that you have visited our website based on an LinkedIn ad) to LinkedIn in order to receive data about customer behavior and in order to receive a summary across all our potential customers as well as being able to ask LinkedIn to show our previous visitors (based on certain criteria like company size and the fact that a product brochure has been downloaded) posts or advertisements later on. You also consent into LinkedIn using the data for LinkedIn’s own marketing purposes. See no. 12. of our data privacy policyfor further details.

You are free to give or withhold your consent. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal.

Granular configuration of your consent:

LinkedIn members are able to configure the use of their data for promotional purposes in their LinkedIn account settings.

Besides withholding your consent, you are able to disable LinkedIn’s tracking, analysis and retargeting in your LinkedIn account settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Further information:

The legal basis for processing the data is your consent in accordance with Art. 6 I lit. a GDPR.
LinkedIn is based in Ireland but may make use of servers and LinkedIn affiliated companies based in the USA. Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/eu-sccs.
We have entered into a data processing agreement (DPA) with LinkedIn. As such, LinkedIn acts as a data processor on our behalf and is strictly bound by our instructions. Further details on the DPA can be found here: https://www.linkedin.com/legal/l/dpa
We will erase the data when the marketing campaign is finished. If, prior to this, you request that your data be removed, we will erase the data without undue delay, unless there is another legal basis for the data processing.
The provision of personal data by you is neither required by law nor by contract or required for the conclusion of a contract. You are not obligated to provide the data. A possible consequence if you do not provide the data is that we cannot tailor our services, offers and advertisements to your needs. Also we cannot incorporate your interests when further enhancing our website and services.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists

13. Google Ads Remarketing / Retargeting

Purpose:

We will be asking you to consent into us using Google Ads Remarketing, provided by Google (cf. no. Fehler! Verweisquelle konnte nicht gefunden werden.). Google Ads Remarketing enables us to assign people interacting with our website in a certain way to certain groups (e.g. a group interested in a certain branch of our company based on product brochures downloaded by the website visitor). Later on we can decide to have further promotional material displayed to this group using the advertising network offered by Google (also called “retargeting”). This may happen across different devices (e.g. different browsers on a desktop computer, mobile and tablet computer) as well as over an extended period of time.

Consent, that we will ask you for on our website:

You consent that we may collect and transmit data about your interaction with our website (e.g. the download of a product brochure) to Google in order to build promotional interest groups that we can show further interest-based advertising material to later on and across different devices. See no. 13. of our data privacy policy for further details.

You are free to give or withhold your consent. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal.

Granular configuration of your consent:

Provided you have a Google account, you may disable personalized advertising in your Google account, e.g. by following this link: https://www.google.com/settings/ads/onweb/.

Further information:

With Google having registered offices in Ireland but also affiliated companies in the USA (California), the data may be transferred to a country outside of the European Union. This data transfer to the USA is based on standard data protection clauses (Art. 46 II lit. c GDPR). Refer to this site for further information and a copy: https://privacy.google.com/businesses/controllerterms/mccs/ and https://policies.google.com/privacy/frameworks?hl=en
We will erase the data when the marketing campaign is finished. If, prior to this, you request that your data be removed, we will erase the data without undue delay, unless there is another legal basis for the data processing.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to provide you with promotional material based on your interests.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.
Further information about the processing of data through Google Analytics can be found here: https://policies.google.com/technologies/ads?hl=en.

14. Employment application platform of "rexx Recruitment ER 8 probiogen"

Under "CAREERS" we provide links that lead to the employment application platform of "rexx Recruitment ER 8 probiogen".

Identity and contact details of the controller: ProBioGen AG (see above).

Contact details of the data protection officer: see above

Your job application data is processed for the purpose of reviewing your application and assessing whether you have the suitability, qualifications and professional requirements for the position for which you are applying. The legal basis for the processing is the performance of pre-contractual measures - and in the event of the conclusion of the contract - also the performance of the contract pursuant to Article 6 (1) lit. b of the GDPR and the performance of obligations based on Labor Law, Social Security Law and Social Protection Law pursuant to Article 9 (1) lit. b of the GDPR.

The data is processed via the present application platform "rexx Recruitment ER 8 probiogen" of rexx systems GmbH (Süderstraße 75-79, 20097 Hamburg) and forwarded to us, which we have integrated as a strictly instruction-bound order processor. The information on data protection when using the rexx platform can be found here: https://www.rexx-systems.com/datenschutz/.

rexx systems GmbH in turn integrates its own strictly instruction-bound sub-processors for its service provision, namely HR Excellent GmbH (rexx group, affiliated company of rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg) for consulting and support, GoHiring GmbH (Friedelstraße 40, 12047 Berlin) for multiposting and Noris network AG (Thomas-Mann-Straße 16-20, 90471 Nuremberg) for hosting.

If you indicate under "Saving in the internal talent pool" that you want us to consider your current application for future jobs, we will store your application for twelve months.

The legal basis for this is your consent, which you give directly in the application form under "Saving in the internal talent pool", in accordance with Article 6 (1) lit. a GDPR and Article 9 (2) lit. a GDPR. Your consent explicitly refers to special categories of personal data contained in your documents (e.g. religious or ideological beliefs). The granting of consent is entirely voluntary. You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can declare a revocation, for example, by email to us.

Recipients of the personal data contained in the application documents are the respective responsible personnel managers in the company of the responsible persons.

Your personal data/application documents will be destroyed six months after receipt of the rejection, unless longer storage becomes necessary for the defense of legal claims or another legal basis for processing exists. In the event that your application is considered for a vacancy, you will receive separate information about the storage of your personal data in the context of the employment relationship.

You have a right to information (Article 15 GDPR) as well as a right to rectification (Article 16 GDPR) or erasure (Article 17 GDPR) or restriction of processing (Article 18 GDPR) as well as a right to data portability (Article 20 GDPR).

There is a right to revoke consent at any time without affecting the lawfulness of the processing carried out on the basis of consent until revocation.

There is a right of appeal to a data protection supervisory authority. If necessary, you have the choice between several data protection supervisory authorities. The data protection supervisory authority responsible for our headquarters in any case is the "Berlin Commissioner for Data Protection and Freedom of Information".

The provision of personal data by you is neither legally nor contractually required. However, the data concerning your person and your application situation are required within the limits of the German General Equal Opportunity Act (AGG) in order to be able to examine your application and carry out a neutral, equal-opportunity procedure taking into account the other applications; to this extent, the provision of the data is necessary for the conclusion of a contract. However, you are not obligated to provide the data. The possible consequence if you do not provide the data is that no job offer will be made.

There is no automated decision-making or profiling pursuant to Art. 22 GDPR.

Content DownloadWe may offer the download of product brochures and similar content on our website. For some materials we are asking you to provide information about your company and email address.

Further information:

The purpose for this data processing is our interest to provide you with more specific information. The legal basis for this is Art. 6 I lit. b GDPR, i.e. it is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.
We may use HubSpot (cf. no. 10 above) for sending the requested content.
We will erase the data as soon as the contract is terminated or the prospect of entering into a contract ends, unless there is a follow-up legal basis, e.g. a contract being concluded or us having to observe retention periods under statutory law.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to send you the requested material through our online services.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

15. ProBioGen News

Purpose:

You can subscribe to our ProBioGen News, which is an email newsletter being sent on a regular basis and that includes information about our company and our company’s services. If you want to subscribe, you can do so e.g. under “ProBioGen News / Sign Up” on our website.

Personal data being processed:

Your email address, your IP address, the date and time of your subscription as well as further optional information that you can provide while signing up.

We will ask for your consent within the subscription form on our website. This consent will include:

You consent into us contacting you by email for the purpose of advertising our services.
You consent into us storing your data in a newsletter subscriber list, sending you an email newsletter on a regular basis and addressing you by name in that email.
You consent into us using tracking mechanisms to analyze if you open such an email newsletter and which hyperlinks you click within such an email.

You are completely free to consent or withhold your consent. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw e.g. by email: privacy@probiogen.de.

Further information:

We process your personal data for the purposes given above under “purpose”. The legal basis is your consent (Art. 6 I lit. a GDPR).
In order to send you the ProBioGen News we may make use of HubSpot (cf. no. 10 above, also for using standard contractual clauses (SCC) and HubSpot being our data processor) for storing the subscriber list, administrating the subscriber list and technically sending the newsletter.
We may further use SalesForce (cf. no. 11 above, also for using standard contractual clauses (SCC) and SalesForce being our data processor) for storing and administrating the subscriber list.
We will erase personal data without undue delay as soon as you unsubscribe from our ProBioGen News (i.e. withdraw your consent), unless stated otherwise below or in more specific documents. If you ask us to erase the data before that time, we will do so without undue delay, unless there is another legal basis for processing the data.
You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing as well as the right to data portability.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to send you an email newsletter.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

16. Personalized Communication by Email

Purpose:

You can consent into us contacting you individually by email for promotional purposes, i.e. with information about ProBioGen and its services. This is not a general newsletter but individual communication just with you. For this we will also ask you to consent into us using data from a possibly preexisting dataset about you (cf. no. 18).

Personal data being processed:

Your email address, your IP address, the date and time of your consent.

We will ask for your consent separately, e.g. on our website. This consent will include:

You consent into us contacting you by email for the purpose of advertising our services to you.
You consent into us storing your consent in a dataset and using the information from a preexisting dataset (cf. no. 18) about you when contacting you.
You consent into us using tracking mechanisms to analyze if you open such an email and which hyperlinks you click within such an email and storing this in a dataset (cf. no. 18).

Further information:

We process your personal data for the purposes given above under “purpose”. The legal basis is your consent (Art. 6 I lit. a GDPR).
In order to send you emails we may make use of HubSpot (cf. no. 10 above, also for using standard contractual clauses (SCC) and HubSpot being our data processor) for storing the subscriber list, administrating the subscriber list and technically sending the newsletter.
We may further use SalesForce (cf. no. 11 above, also for using standard contractual clauses (SCC) and SalesForce being our data processor) for storing and administrating the subscriber list.
We will erase personal data without undue delay as soon as you withdraw your consent, unless stated otherwise below or in more specific documents. If you ask us to erase the data before that time, we will do so without undue delay, unless there is another legal basis for processing the data.
You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing as well as the right to data portability.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to send you an email newsletter.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

17. Personalized Communication by Phone

Purpose:

You can consent into us contacting you individually by telephone for promotional purposes, i.e. with information about ProBioGen and its services. For this we will also ask you to consent into us using data from a possibly preexisting dataset about you (cf. no. 18).

Personal data being processed:

Your telephone number, your IP address, the date and time of your consent.

We will ask for your consent separately, e.g. on our website. This consent will include:

You consent into us contacting you by telephone for the purpose of advertising our services to you.
You consent into us storing your consent in a dataset and using the information from a preexisting dataset (cf. no. 18) about you when contacting you.
You consent into us saving the result of our call with you (e.g. request for an offer by email or further phone call) in a dataset (cf. no. 18).

Further information:

We process your personal data for the purposes given above under “purpose”. The legal basis is your consent (Art. 6 I lit. a GDPR).
We will erase personal data without undue delay as soon as you withdraw your consent, unless stated otherwise below or in more specific documents. If you ask us to erase the data before that time, we will do so without undue delay, unless there is another legal basis for processing the data.
We may use SalesForce (cf. no. 11 above, also for using standard contractual clauses (SCC) and SalesForce being our data processor) for storing and viewing the dataset.
You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing as well as the right to data portability.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to send you an email newsletter.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

18. Data Collection / Dataset

Purpose:

If you interact with us, you expect us to be aware of previous interactions with you. Also you will want to get value from our interactions. We would like to do this by storing certain data about your previous interactions with us, so we are aware of them in the future and can base offers and information about our services based on your requests and interests.

We will ask for your consent separately. This consent will include:

You consent that we may collect and store certain data specified within the consent (e.g. the download of a product brochure) in a dataset and analyze this dataset so that we are able to provide you with information and offers tailored to your interests if you request them.

You are free to give or withhold your consent. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before this withdrawal.

Further information:

The legal basis for processing the data is your consent in accordance with Art. 6 I lit. a GDPR.
We will erase the data when you withdraw your consent.
We may use the service HubSpot, provided by HubSpot Inc. 25 Street, Cambridge, MA 02141 USA, (hereinafter “HubSpot”) for storing and analyzing the dataset. HubSpot is a so called customer relationship management (“CRM”) system. Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield and https://legal.hubspot.com/dpa.
We have entered into a data processing agreement (DPA) with HubSpot. As such, HubSpot acts as a data processor on our behalf and is strictly bound by our instructions. Further details on the DPA can be found here: https://legal.hubspot.com/dpa
We may also use SalesForce (cf. no. 11 above, also for using standard contractual clauses (SCC) and SalesForce being our data processor) for storing and analyzing the dataset.
The provision of personal data by you is neither required by law nor by contract or required for the conclusion of a contract. You are not obligated to provide the data. A possible consequence if you do not provide the data is that we cannot tailor our services, offers and advertisements to your needs and interests. Also, we cannot incorporate your interests when further enhancing our website and services.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

19. Call Request

Purpose:

You can ask us to call you by telephone. For this we will also ask you to consent into us using data from a possibly preexisting dataset about you and saving the result of our call in a dataset (cf. no. 18).

Personal data being processed:

Your telephone number, your IP address, the date and time of your consent.

We will ask for your consent separately, e.g. on our website. This consent will include:

You consent into us contacting you by telephone on the basis of your call request.
You consent into us storing your consent in a dataset and using the information from a preexisting dataset (cf. no. 18) about you when contacting you.
You consent into us saving the result of our call (e.g. request to send an offer or request for a further call) with you in a dataset (cf. no. 18).

Further information:

We process your personal data for the purposes given above under “purpose”. The legal basis is your consent (Art. 6 I lit. a GDPR).
We will erase personal data without undue delay as soon as you withdraw your consent, unless stated otherwise below or in more specific documents. If you ask us to erase the data before that time, we will do so without undue delay, unless there is another legal basis for processing the data.
We may use SalesForce (cf. no. 11 above, also for using standard contractual clauses (SCC) and SalesForce being our data processor) for storing and viewing the dataset.
You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing as well as the right to data portability.
The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. Further, you are not obligated to provide the personal data. As a possible consequence of failure to provide the data we will not be able to send you an email newsletter.
No automated decision-making, including profiling, as referred to in Art. 22 GDPR exists.

20. Note

If you have questions, suggestions or statements please contact us: privacy@probiogen.de

Status: June 2023