Data protection is of a particularly high priority for the management of the antibodies-online GmbH, the company that operates antibodies-online.com („antibodies-online”or „we”).The following privacy policy provides you with information about the personal data that is collected and how it is processed and used.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Subject matter of this Privacy Policy
This Privacy Policy applies to all services which are offered under the domains:
- www.host-cell-proteins.com
Unless stated otherwise, this Privacy Policy exclusively regulates how antibodies-online treats your personal data. In case you make use of services provided by third parties, the privacy policy conditions of these third parties apply exclusively. antibodies-online does not revise the privacy policy conditions of third parties.
Responsible contact
antibodies-online GmbH
Schloß-Rahe-Str. 15
52072 Aachen
Germany
Contact of the Data Protection Officer:
datenschutz@antikoerper-online.de or
privacy@antibodies-online.com
Your Rights under the General Data Protection Regulation (GDPR)
You shall have the right granted by the European legislator to obtain the confirmation as to whether or not personal data concerning you are being processed. You shall have the right to obtain free of charge information about your personal data stored at any time in writing and to obtain a copy of the personal information stored or processed. In addition you shall have the right of rectification of inaccurate personal data concerning yourself without undue delay. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. You shall have the right of restriction of processing of your personal data and the right of the erasure of personal data. Furthermore, in exercising your right to data portability pursuant to Article 20(1) of the GDPR, you shall have the right to have personal data transmitted directly from us to another company, where technically feasible and when doing so does not adversely affect our rights, duties or freedoms or those of others. On grounds relating to your particular situation, at any time, you shall have the right to object to processing of personal data yourself.
In order to exercise the above stated rights, you may directly contact the Data Protection Officer by E-Mail to datenschutz@antikoerper-online.de or privacy@antibodies-online.com.
Above and beyond you may lodge a complaint with the data protection supervisory authority.
Voluntary Disclosure of personal data
Generally, you can access our web services without disclosing any personal data to us. It is always your choice whether or not to provide us with your personal data.
General Remarks concerning the storage of personal data
Your personal data will be stored on specifically secured servers. Access to these servers and the data contained thereon is restricted to a handful of specifically authorized personnel, dedicated to operate and maintain our websites and services. This personnel in their employment contracts has committed to maintain highest care in complying with all relevant data protection regulation and legislation (e.g. GDPR).
General Remarks concerning Cookies
Cookies are text files that are stored in a computer system via an Internet browser. Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate your individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID. Through the use of cookies, we can provide the users of our websites with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our websites can be optimized with the user in mind. Cookies allow us, as previously mentioned, to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website. The website user that uses cookies, e.g. does not have to enter access data each time the website is accessed, because this is taken over by the website, and the cookie is thus stored on the user’s computer system. Another example is the cookie of a shopping cart in an online shop. The online store remembers the articles that a customer has placed in the virtual shopping cart via a cookie.
You may, at any time, prevent the setting of cookies through our websites by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.
Overview on Data Storage and Processing Processes
- Provision of personal data as statutory or contractual requirement
- Contacting us
- Server-Logfiles
- Content Delivery Network
- Google reCaptcha
- Other services
1. Provision of personal data as statutory or contractual requirement
For the purchase of our products or pre-sales services such as providing offers, it may be necessary in order to conclude the contract or provide adequate advice that you provide us with personal data, which must subsequently be processed by us. We will use personal data such as but not limited to your name, age, E-Mail address and payment information.
Legal basis for the processing
If the processing of personal data is necessary for the performance of a contract to which you or your employer are party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other services, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.
Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period required by German trading and tax regulations (§§ 147 AO and § 257 HGB) and is 10 (ten) years. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.
2. Contacting us
If you contact us e.g. by e-mail or via a contact form, the personal data transmitted are automatically stored. Such personal data transmitted on a voluntary basis by you are stored for the purpose of responding to your request or follow-up requests. There is no transfer of this personal data to third parties.
Legal basis for the processing
The data processing operations when contacting us are based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the user which require protection of personal data. You may object to the use of your personal data at any time by directly contacting the Data Protection Officer by E-Mail to datenschutz@antikoerper-online.de or privacy@antibodies-online.com.
Period for which the personal data will be stored
Your personal data will be stored until your request has been completely answered or resolved and if it can be reasonably assumed that the contact request or any information related to it will not become relevant in the future.
3. Server Log files
We collect a series of general data and information upon each call up of our websites. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
We do not draw any conclusions about you or combine this data with any other personal data provided when using our websites. Rather, this information is needed to (1) deliver the content of our website correctly, (2) ensure the long-term viability of our information technology systems and website technology, and (3) to prevent cyber-attacks and to provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.
Legal basis for the processing
The data processing operations when contacting us are based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the user which require protection of personal data. You may object to the use of your personal data at any time by directly contacting the Data Protection Officer by E-Mail to datenschutz@antikoerper-online.de or privacy@antibodies-online.com.
Period for which the personal data will be stored
Our Server Log files will automatically be deleted after 30 days. We reserve the right to temporarily extend the storage of this data if this is required to serve above stated purposes, specifically if we have evidence or suspicion of e.g. an illegal attack on our servers. Anonymized and aggregated data will be stored permanently for statistical purposes.
4. Content Delivery Network
We use Content Delivery Networks (CDNs) to ensure the stability of our websites and to optimize page load times. All requests to our servers to load content to your browser, specifically the IP-address of the visitor, will be forwarded to the CDN-Serviceproviders we use. Serviceproviders store this data in an aggregated format for statistical purposes. As Serviceproviders we use
- DataCamp Limited, 207 Regent Street, London, UK. We are operating under a data servicing agreement that ensures, that personal data is processed according to the regulatory and legal requirements in the EU.
- Amazon CloudFront – Content Delivery Network. Amazon Web Services, Inc., 410, Terry Avenue North, Seattle WA 98109, United States. More information on the use of personal data by Amazon CloudFront can be retrieved from the corresponding data privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.
Legal basis for the processing
The data processing operations when using CDN Service Providers are based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the user which require protection of personal data. Amazon is certified under the privacy shield agreement and therefore guarantees to be compliant with EU data regulations. (https://aws.amazon.com/de/compliance/eu-us-privacy-shield-faq/)
8. Google reCaptcha
Our Websites are using the Google Service „reCaptcha” to differentiate web traffic and form input generated by human beings from server requests generated by computer programs („bots”). The service is provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES. Google uses the following data to assess whether the user input is generated by a computer or by a human being:
Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) your Google account if you are logged-in with Google. reCaptcha also uses specific user tasks and tracks your solution to those tasks such as mouse movement and recognition of images.
Legal basis for the processing
The data processing operations when using Google „reCaptcha” are based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the user which require protection of personal data.
Further information and the actual data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/. Google Inc. is certified under the privacy shield agreement and therefore guarantees to be compliant with EU data regulations. (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
9. Other Services
Our Websites are using other services and tools from third parties to provide technical functionality or a specific user experience that may track, store and if required for the technical performance of the service or tool transmit personal data to servers hosted by these third parties. We will ensure conformity with GDPR of the respective third parties by contractual agreement on data processing and security proceedures.