Privacy Policy
Data Privacy Statement
Rudolf-Wissell-Str. 28
37079 Göttingen
Germany
Tel. +49 (0) 551-5 06 72-0
Fax +49 (0) 551-5 06 72-181
E-Mail: info@iba-lifesciences.com
Executive Officers: Dr. Mike Rothe (Geschäftsführer)
Commercial register: Göttingen No. B 2068
Data Privacy Officer
Jan N. Machunsky
Mittelbergring 61
37085 Göttingen
datenschutz@iba-lifesciences.com
0551-30541012
Email: datenschutz@iba-lifesciences.com
General Information on Collection and Storing of Personal Data as well as Nature, Purpose and Duration of its Processing
The use of this website is generally possible without entering any personal data. To the extent our website collects personal data (e.g. name, address, email) such collection is performed on a voluntary consent basis, as far as possible.
We process your personal data as collected for proper fulfillment of our contractual duties and to comply with our statutory obligations where applicable e.g. financial and tax requirements. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. b and lit. c GDPR.
If and insofar as you have given us your express consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR, parts of this data may also be used for the purpose of advertising contact and other communication, or where we have an justified interest in the marketing of our products, Art. 6 para. 1 sentence 1 lit. f GDPR.
Only the relevant people in our company will have access to your data.
We only process your data as long as required in each case, so basically depending on the reason for the processing. If the data is not needed any longer, it will be deleted, as far as not provided otherwise below or where there are any statutory obligations requiring us to keep the data even longer. The usual statute of limitations is three years (Sections 195 et seq. BGB) but can be up to 30 years.
For more details and further information see below.
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Server-Log-Files
The provider of this website automatically collects and stores information in so-called server log files which your browser is automatically transferring to us. Such information consists of:
- Type and version of browser
- Used operating system
- Referrer URL
- Host name of the accessing system
- Time of the server request
The above data is used by us for the following purposes:
- proper building and comfortable usage of our website,
- evaluation of the system security and stability, and
- further administrative purposes.
The legal basis for the collection of such data is Art. 6 para. 1 sentence 1 lit. f GDPR (justified interest), as we have an interest being justified by the aforesaid purposes. It is not possible to allocate this data to certain persons. They will be not connected to other data. We reserve the right to assess this data if we get knowledge of any potential right infringement.
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Registration and Purchasing
- Login details (email address and password);
- Personal data (title, name), address (company/institution, country), telephone number and security question.
- delivery and
- invoice address,
- phone number and
- selected payment method (if you select credit card as payment method, your credit card details will not be passed on to Shopware) For credit card payments, we offer Stripe, see below.)
- We offer PayPal, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A.,22-24 Boulevard Royal, L-2449 Luxembourg as a payment method in our webshop. If you select PayPal as payment method, your data (name, company, address, bank details) will be passed on to PayPal.
- We offer Stripe, provided by Stripe Inc, 354 Oyster Point Boulevard, South San Francisco, California, 94080, USA as a payment method in our webshop. If you select credit card as payment method, your data (name, company, address, credit card details) will be passed on to Stripe.
- Email address;
- Personal data (title, name)
- In case of purchasing, CleverReach will also collect the information about your order, shipping and billing address as well as selected payment method (credit card, invoice or papal) without any details about the selected payment method.
Contact Form
If you send an inquiry via the contact form your information as contained in the form as well as your provided contact details will be stored for the purpose of handling your inquiry and to for potential following questions. Your data is processed due to Art. 6 para. 1 sentence 1 lit. a GDPR (voluntary consent) and/or Art. 6 para. 1 sentence 1 lit. b GDPR (implementation of pre-contract measures), as the case may be.
The same applies if you contact us via email or telephone.
Newsletter Data
We only use that data for sending you the requested information.
The legal basis for collecting your data and sending the newsletter is Art. 6 para. 1 sentence 1 lit. a GDPR (voluntary consent).
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
With respect to our newsletter subscription we cooperate with the following third party providers:
With respect to the program CleverReach, we cooperate with the provider CleverReach GmbH & Co. KG //CRASH Building, Schafjückenweg 2, 26180 Rastede, Deutschland, where we submit your email address and your names, as far as provided by you, for this purpose. CleverReach is a service used to organize and analyze newsletter distribution. Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. This allows us to analyze, among other things, how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. If you do not want CleverReach to analyze your data, you need to unsubscribe from the newsletter. This can be done via each newsletter received. You can get more information on the data protection by this third party provider on https://www.cleverreach.com/en/privacy-policy/.
To prove the registration in the newsletter list and to be able to defend against the wrong allegation that receipt of the emails was not agreed, the date of your registration as well as your IP address, which was used for the registration, are stored. Apart from that, the following data is stored by the program CleverReach:
- Date of the most recent profile update;
- Localization & time area: On the basis of your email address the program CleverReach will conduct a localization and will thereby identify by using a geolocation service provider information on the IP address (geolocation data and any available location information). The localization is also used to identify the time areas. The result will be used to the simultaneous sending of newsletters at certain times;
- Language information: If the program CleverReach is able to identify your selected language from your browser when subscribing to the newsletter or when opening any links, this data is stored in your profile as well.
The transfer of certain data to the above service provider is permitted under Section 6 para. 1 sentence 1 lit. a. The personal data you provide for the purpose of receiving the newsletter will be stored until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter.
You have the right to withdraw your granted consent to the processing and storage of your data, email address and their usage for the sending the newsletter, at any time, for instance by using the “Unsubscribe” link in the newsletter. For your further rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Customer Surveys
We regularly conduct surveys in our customer and newsletter subscriber base. Insofar, we use the program SurveyMonkey of SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland. For this purpose your email address and, as far as provided by you, your name will be transferred to that company. You may inspect their data privacy statement under https://www.surveymonkey.de/mp/policy/privacy-policy/.
The transfer of data to SurveyMonkey is justified by Section 6 para. 1 sentence 1 lit. a GDPR (voluntary consent).
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Transfer of Data
We only transfer your personal data for the following purposes or where the below legal grounds apply:
- You have expressly approved a transfer, Art. 6 para 1 sentence 1 lit. a GDPR;
- There is a statutory obligation for such transfer, Art. 6 para. 1 sentence 1 lit. c GDPR ;
- The transfer of data is necessary to enforce or defend our rights and there is no reason for us to believe that your interest in a non-transfer is more valuable than the interest of our company, Art. 6 para. 1 sentence 1 lit. f GDPR; and/or
- The transfer is legally permitted and needed for the entering into, fulfillment and/or the termination of contracts, Art. 6 para. 1 sentence 1 lit. b GDPR.
It might be possible that we transfer your data to other companies which assist us in selling our products and in the fulfillment of the contracts as concluded with our customers, especially payment providers and delivery services.
As the servers for our online shop are hosted with a third party provider the personal data being required to process a purchase your order will be transferred to such provider. We have entered into a customary data processing agreement with that provider.
In any event, the transfer of personal data to a country outside the EEA will only take place where necessary to fulfill our obligations and if such country provides for an adequate data protection level in accordance with the GDPR.
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Cookies
This website uses cookies. We use cookies to personalize content and ads, to provide social media features and to analyze our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. You consent to our cookies if, and to the extent, you accept these Cookies via the Cookies’ setting tool on the website and you continue to use our website. The processing is then based on Art. 6 para. 1 sentence 1 lit. a GDPR (voluntary consent).
Cookies are small text files that can be used by websites to make a user's experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration within the Cookie-Settings on our website.
Your consent applies to the following domains: www.iba-lifesciences.com.
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Data Privacy Statement for Usage of Google Analytics
This website uses features of the web analysis service Google Analytics. Provider of that service is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies“. These “cookies“ are text files which will be stored on your computer and allow an analysis of your usage of this website. The information on your usage of this website being created by the cookie will regularly be transferred to a Google server in the US and stored there. Google creates pseudonymized usage profiles by collecting information on:
- Type and version of browser;
- Used operating system;
- Referrer URL;
- Host name of the accessing system; and
- Time of the server request.
That data is used by Google to evaluate the usage of the website, to create marketing re-ports, and to provide other services related to advertisement and market research. It is possible that such information is transferred to third parties if allowed by applicable law or where third parties are engaged as subcontractors to Google.
The data collection and processing is founded by Art. 6 para. 1 sentence 1 lit. f GDPR as our interest in evaluating and optimizing the usage and design of our website is a legitimate and prevailing interest.
However, if the IP anonymization is activated on this website your IP address will be shortened by Google within the European Union or the European Economic Area. Only in exceptional cases the complete IP address will be transferred to a Google server in the US and shortened there. On behalf of the operator of this website Google will use that information to evaluate your usage of this website in order to compose reports on website activities and to perform further services being connected to the usage of this website and the internet towards the operator of this website. The IP address which is transferred by your browser within the context of Google Analytics will not be connected to other Google data.
You can prevent the storage of the cookies by the respective settings in your browser software; however, we would like to point out that, in such case, you will not be able to use all features of this website completely. In addition, you may prevent the collection of the data being created by the cookie and relating to your usage of this website (including your IP address) as well as the processing of that data by Google by downloading and in-stalling the browser plugin as available on http://tools.google.com/dlpage/gaoptout?hl=en.
You may also prevent the data collection by Google Analytics by clicking on the following Link. Then, an opt-out-cookie will be placed which shall avoid the future collection of your data when visiting this website: deactivate Google Analytics
Further information on Google’s terms and conditions of usage and Google’s data privacy can be obtained on http://www.google.com/analytics/terms/ and https://www.google.de/intl/en/policies/. We would like to inform you that on this website Google Analytics is extended with the code „anonymizeIp“, in order to allow an anonymized collection of IP addresses (so-called IP masking).
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Data Privacy Statement for Usage of Google Analytics Marketing Features
This website features the Google Analytics marketing functions of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In the connection to Google Analytics we have activated the following four Google Analytics marketing functions: “Remarketing with Google Analytics”, “Reports on impressions in the Google Display Network”, “Integration of the Double-Click platform” and “Google Analytics reports the performance with respect to demographic characteristics and interests”. By way of this activation further access data will be collected via a Google cookie for advertisements preferences, which are beyond the regular standard implementation of Google Analytics.
The processing of your data is a justified interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR as we need the data to advertise our products.
The user may deactivate the Google Analytics marketing features and exercise his/her right of objection, e.g. via http://www.google.com/settings/ads (in German language). Alternatively, the user may deactivate the usage of cookies for Google Analytics marketing functions under assistance of the so-called advertisement network initiative by following the (English language) instructions under http://www.networkadvertising.org/managing/opt_out.asp.
If these technical measures are not available on the terminal device, the user may exercise his/her objection right against the usage of Google Analytics in total.
By using our website you agree with the processing of your data as collected by Google in the kind and manner described herein and for the purpose mentioned. We herewith in-form you that Google has its own data privacy policies which are independent form ours. We do not take any responsibility or liability for those policies and processes. Further in-formation on Google’s Analytics marketing features and the Google data privacy statement can be obtained from https://privacy.google.com/intl/en/index.html#.
Finally, we refer to the information as provided in the section “Data Privacy Statement for Usage of Google Analytics”. In particular, the user may also exercise his/her objection right by the Opt-Out features and, respectively, may change the settings of his/her browser to protect his data, as described therein.
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Data Privacy Statement for Usage of Google Remarketing
This website features the web remarketing tool of Google Inc., 1600 Amphitheatre Park-way, Mountain View, CA 94043, USA. This tool serves to present interest-related advertisements from third parties, including Google, to the visitor of this website and our online services within the Google advertisement network. This remarketing tool uses so-called „cookies“. These „cookies“ are text files which will be stored on your computer and allow your recognition when you visit websites which are member of the Google advertisement network. On this website target-oriented advertisements will be presented to the visitor, which relate to a third party’ website content as already viewed by the visitor earlier, where such third party website uses the Google web remarketing tool. In addition, by this tool a user who has already visited this website and our online services and has been interested in our products, will be approached again by target-oriented advertisement within the Google advertisement network.
According to Google, Google does not collect any personal data. If you do not want the Google remarketing tool, you may are able to deactivate it in general, by changing the respective setting under http://www.google.com/settings/ads (in German language). Alternatively, you are free to deactivate the use of cookies for interest-related advertisement via the so-called advertisement network initiative by following the (English language) instructions under http://www.networkadvertising.org/managing/opt_out.asp.
The collection and processing of your data is permitted under Art. 6 para. 1 sentence 1 lit. f GDPR due to our legitimate interest to market our products.
By using our website you agree with the processing of your data as collected by Google in the kind and manner described herein and for the purpose mentioned. We herewith in-form you that Google has its own data privacy policies which are independent form ours. We do not take any responsibility or liability for those policies and processes. Further in-formation on Google’s remarketing tool and the Google data privacy statement can be obtained from https://privacy.google.com/intl/en/index.html#.
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Data Privacy Statement on the Usage of YouTube
Data Privacy Statement for Usage of Microsoft Bing Ads Remarketing
This website features the web remarketing tool of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This tool serves to present interest-related advertisements from third parties, including Microsoft, to the visitor of this website and our online services within the Bing ads advertisement network. This remarketing tool uses so-called „cookies“. These „cookies“ are text files which will be stored on your computer and allow your recognition when you visit websites which are member of the Bing ads advertisement network. On this website target-oriented advertisements will be presented to the visitor, which relate to a third party’ website content as already viewed by the visitor earlier, where such third party website uses the Bing ads web remarketing tool. In addition, by this tool a user who has already visited this website and our online services and has been interested in our products, will be approached again by target-oriented advertisement within the Bing ads advertisement network.
According to Microsoft, Bing ads does not collect any personal data. If you do not want the Bing ads remarketing tool, you may are able to deactivate it in general, by changing the respective setting under http://choice.microsoft.com/en-us/opt-out. Alternatively, you are free to deactivate the use of cookies for interest-related advertisement via the so-called advertisement network initiative by following the (English language) instructions under http://www.networkadvertising.org/managing/opt_out.asp.
The processing of your data is allowed in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR as we have a legitimate interest to advertise our products.
By using our website you agree with the processing of your data as collected by Bing ads in the kind and manner described herein and for the purpose mentioned. We herewith in-form you that Microsoft has its own data privacy policies which are independent form ours. We do not take any responsibility or liability for those policies and processes. Further information on Microsoft’s remarketing tool and the Microsoft data privacy statement can be obtained from
https://advertise.bingads.microsoft.com/en-gb/resources/policies/privacy-and-data-protection-policies
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Data Privacy Statement for Usage of LinkedIn
Our website uses features of the network LinkedIn, whose provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
The usage of this plugin is justified as it serves to make or company and its products more popular. This legitimate marketing interest is therefore based on Art. 6 para. 1 sentence 1 lit. f GDPR. Only LinkedIn is responsible for the compliance of its platform with data privacy requirements.
When visiting our websites, which contain LinkedIn features, a connection to LinkedIn servers will be established. LinkedIn will be informed that you have visited our website with your IP address. If you click on the "Recommend-Button" when logged-in in LinkedIn, LinkedIn can connect your visit of this website with your personal LinkedIn account. As provider of this website, we would like to point out that we have no knowledge of the data content as well as its usage by LinkedIn.
If you do not want LinkedIn to connect the information as collected during your visit of this website to the already existing LinkedIn data, if any, you must log out before using this website.
Further information can be obtained from LinkedIn’s data privacy statement on: https://www.linkedin.com/legal/privacy-policy (for English language you must select English at the bottom of the website).
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Data Privacy Statement on the Usage of Salesforce
We use a CRM system (Customer Relationship Management system) provided by the company Saleforce.com Germany GmbH, Erika-Mann-Straße 31, 80636 Munich, Germany (“Salesforce”).
This CMR system enables us, among other things, to manage our customers and customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyze our internal customer-related processes.
The usage of the CMR system is based on Art. 6 para. 1 sentence 1 lit. f GDPR, as it serves our legitimate interest to have the most efficient customer management and customer communication system possible.
By using the CMR system, the data of our customers (especially name, address, contact details and order information) will be stored and transferred on Salesforces’ servers. Such relevant servers are, according to information provided by Salesforce, primarily located within Germany, France and within other countries of the European Union.
Salesforce might also transfer these data to other affiliated entities, especially its parent company, Salesforce.com Inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA. For the transfer of such data to countries outside of the European Union, Salesforce has adopted Binding Corporate Rules in accordance with Art. 46 para. 2 lit. b and Art. 47 GDPR that have been approved by the French data protection authority. These are binding corporate rules that legitimize corporate data transfers to third countries outside the European Union. More information on such Binding corporate Rules can be found at: https://compliance.salesforce.com/en/salesforce-bcrs
You can find more detailed information on Salesforces’ privacy statement, available at: https://www.salesforce.com/company/privacy/
For your rights regarding the processing of your personal data, please be referred to the bottom of this policy.
Data Privacy Statement on the Usage of Twitter
On our website you will find features of the service Twitter. Those services are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The various Twitter buttons can be found on https://publish.twitter.com/#. Twitter is exclusively responsible for the compliance of its platform.
The usage of this plugin and the related data processing is justified as it serves to make our company and its products more popular. This marketing purpose is therefore based on Art. 6 para. 1 sentence 1 lit. f GDPR.
By using Twitter and the feature "Re-Tweet" the visited websites will be connected to your Twitter account; in addition, other users will be informed on these websites. Some data will be transferred to Twitter as well. As provider of this website we do not have any knowledge of the content of the transferred data and its usage by Twitter. You will find further information about the content and scope of Twitter#s data collection, processing and usage in the data privacy statement of Twitter on https://twitter.com/en/privacy
You can change your Twitter data privacy settings in your account settings on http://twitter.com/account/settings.
To prevent Twitter from connecting your data as collected when visiting this website to your Twitter profile, you must log out before visiting this website.
Your rights as Concerned Individual
- to request information as to whether or not your personal data is being processed; the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored (where possible) or, if not possible, the criteria used to determine that period; the existence of the right to request from us rectification or erasure of personal data or restriction of processing of your personal data or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source (Art. 15 GDPR);
- to obtain from our company without undue delay the rectification of inaccurate personal data. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement (Art. 16 GDPR);
- to request us to erase your personal data concerning without undue delay for certain reasons given that your personal data is not required for exercising the right of freedom of expression and information; for compliance with a legal obligation applying to us; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; or for the establishment, exercise or defense of legal claims (art. 17 GDPR);To obtain restriction of processing where the accuracy of the personal data is contested by you; the processing is unlawful and you opposes the erasure of the personal data and requests the restriction of their use instead; we no longer need your personal data for the purposes of the processing, but you need them for the establishment, exercise or defense of legal claims; or you have objected to processing pursuant to Art. 21 para. 1 GDPR (Art. 18 GDPR);
- to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller where the processing is based on consent or on a contract pursuant, or the processing is carried out by automated means (Art. 20 GDPR);
- to withdraw your voluntarily given consent at any time whereas such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal (Art. 7 para. 3 GDPR); and
- To lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence if you are of the opinion that the processing of your personal data infringes the GDPR (Art. 77 GDPR).
Objection Rights
Data Security Measures
Changes to our Privacy Policy
We reserve the right to change our Privacy Policy if this becomes necessary due to technical developments or changes in legislation or jurisdiction. In such cases, we will also update our Privacy Policy accordingly.
