What happens with your data?
We, the eobiont GmbH, take the protection of your personal data very seriously. Your data will be solely processed within the framework of current data protection regulations. When we process your data as part of an existing order from and for customers (contractors), we strictly adhere to the agreements made with the respective customer regarding the processing (use) of third-party data that has been given to us by them or has been accessible to us by them. We keep this data strictly separated from data that we have access to directly through our own web presence or other electronic media.
In accordance with the new EU General Data Protection Regulations, we are informing you about the processing of your personal data as follows:
1. Name and address of the responsible processor of your data:
The responsible party as understood in the EU General Data Protection Regulations (EU-GDPR) as the ‘controller’ as well as in other effective data protection laws and regulations as having a data protection character is:
Telephone: +49 (0) 30 440201-30
Telefax: +49 (0) 30 440201-50
Managing Directors: Claudia Groetschel, Daniel Trattler
2. Transferring your data to third parties and the processing of your data by third parties
We, the eobiont GmbH, process all personal data acquired through our own web presence, as well as that acquired through electronic media, ourselves. Your personal data will not be passed on to third parties. We use the personal data provided to us for our own purposes only and will not pass on this information to third parties for their own use, regardless of the means or form.
We make use of technology known as ‘cookies’ for the period a user accesses our website and for the purposes of web analysis. Cookies are small text files that are put on your computer when you are browsing through our web pages. There are two types of cookies that we use: session cookies (temporarily exist for the period the site is accessed) and persistent cookies (which remain on the device).
The general session cookies do not contain any personal data and expire when the session has ended. These are used to enable browsing and navigation on the website in order to provide a more comfortable use of our web service. Persistent cookies that are used for web analysis are stored for statistical purposes and are exclusively used by us, eobiont GmbH, in order to optimize our online service and are evaluated in our web analysis.
The purpose of processing this data serves to deliver the content on our website, to ensure the functionality of our technical information system and to optimize our website. The data from the log files are stored separately from other personal user data. These cookies are then read the next time you visit the respective page on the eobiont GmbH website.
Cookies stored on your personal computer also contain only an identification number and not any personal information. The cookies will not be used to personally identify visitors to our website.
You can configure your web browser so that it will not allow cookies to be stored. More infor-mation about this can be found in your browser’s documents or help files. Please be aware that when you refuse to accept cookies, the usability of some websites or parts thereof may be im-paired.
We only use data provided by cookies for the purposes expressed above and will not provide this data to third parties for their own use, regardless of the means or form.
Integration of Google Maps
On this website, we make use of Google Maps services. In this way, we can provide you with an interactive map directly on our website which allows you to use the convenient map function.
When you visit our website, Google receives information about the web pages that you have ac-cessed. In addition, the information as described in § 3 of this declaration will also be trans-ferred. This occurs regardless of whether the user has a registered Google account on which the user has logged on to, or the user has no such account. If you are logged on to Google, your data will be directly recognized and assigned to your account. If you do not want your Google profile to be associated with your browsing activities, you must log out of Google before activating the but-ton. Google collects your data as a user profile and uses it for the purposes of advertising, market research and / or designing its website to suit user needs. This type of data analysis is conducted (even if you are not a logged-in user) to particularly offer advertising that is more tailored to user needs and to inform other users in the social network about your activities on our website. You have the right to object to this user profile building, however, to exercise this right, you must con-tact Google.
(3) Further information about the purpose and extent of the data that has been collected and its processing through a plug-in service can be obtained in the data protection declaration of the par-ticular service. You can find more information about these rights and configuration possibilities to protect your private sphere under: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework
Use of Google Analytics
(1) This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. When IP-anonymity is activated on this website, Google will shorten IP addresses from countries that are members of the European Union or that are signatories of the EEA Agreement. In excep-tional cases, a full IP address may be transmitted to Google’s US servers where it will then be shortened. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.
(2) Google Analytics will not associate your IP address that has been identified through your browser with any other data held by Google.
(4) This website uses Google Analytics with the extension “_anonymizeIP().” With this extension, IP addresses are only processed in an abbreviated form so that they cannot be directly linked to a particular individual. When the collected data can be associated with a particular individual, the data will be immediately excluded and data with references to particular persons will be duly deleted.
(5) We use Google Analytics to analyze how our website is used in order to regularly improve it. With the resulting statistics, we are able to improve and develop our service to make it more in-teresting for the user. For exceptional cases, where personal data is transferred to the USA, Google is subject to the regulations as set forth in the EU-US Privacy Shield under: https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is set forth in Art. 6 §1 Section 1 point (f) of the GDPR.
(6) Third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Overview of Data Privacy: http://www.google.com/intl/de/analytics/learn/privacy.html
Our website uses embedded videos provided by YouTube which is operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, and is represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In general, your IP address is automatically sent to YouTube when you access pages with embedded videos and cookies are installed. When you click on a video, your IP address is likewise sent to YouTube and YouTube receives information about the video you have watched. If you are logged onto YouTube as a member, then YouTube will automatically assign this information to your YouTube user account (you can avoid this by first logging out of your YouTube account before clicking on the video).
We have no knowledge of the possible types of personal data collected or used by YouTube and therefore, have no influence over this. You can find more information about YouTube’s data protection policy under: www.google.de/intl/de/policies/privacy/
5. Possibilities to contact eobiont and the security of your communication
At eobiont GmbH, we know how important the discrete treatment and protection of the infor-mation that you have provided to us over the internet is. The data security of our internet presence is one of our highest priorities. We have made great efforts to ensure that our data safety measures are effective. Moreover, we take the confidentiality of the information and private data that you have transmitted to us very seriously.
5.1 Contacting us via contact form
You can contact us via a contact form that can be used to contact us online and is provided on our home page that is also operated by eobiont. In this way, the personal data that you have transmit-ted to us will be stored automatically. In addition, your log file data as described above under Nr. 3 will be compiled and a cookie will be installed at the same time. The stored data will solely be used to process your request and / or to contact you. This data will expressly not be transferred to a third-party to use for their own purposes.
5.2 Contacting us via an open email
You can contact us via an already established email address and the personal data as well tech-nical transfer data (in the header) will be stored automatically. The stored data will only serve the purpose of processing your email and your concerns and / or to contact you. This data will ex-pressly not be transferred to a third-party to use for their own purposes.
Please be aware that, in general, it cannot be ruled out that unencrypted emails could be read by unauthorized parties during transmission. Therefore, we advise you to not use unencrypted emails when they contain personal or other sensitive data. When in doubt, use the post or call us directly at: +49 (0) 30 44 02 01 30
6. Routine deleting and blocking of personal data
We will process and store your personal data only as long as it is needed to fulfill the purpose for which it was saved; in particular, as long as it takes to perform the agreed upon service. Further storing is permitted when it is in accordance with European Union or national laws or other regu-lations that we, as the responsible processing party, are obliged to observe.
The stored personal data will be routinely blocked or deleted as soon as the storage purpose is no longer valid or the stipulated mandatory storage period has expired.
7. Your rights as a data subject
When your personal data has been processed by us, you are a “data subject” as understood in the General Data Protection Regulation of the European Union and as such, you are afforded the fol-lowing rights from us as the responsible processors of your personal data, i.e. controller. In accordance with our obligation as set forth in the EU-GDPR, we advise you of your following rights also in relation to the use and processing of your data that we have not undertaken ourselves and also has not been allowed to be undertaken by third parties, e.g. profiling (see 8.9).
7.1 Right of access by the data subject
You have the right to request a confirmation from us as to whether your personal data has been processed by us.
In the case that such a processing has taken place, you can request the following information from us:
a. the purposes for which your personal data is being processed;
b. the categories of your personal data that have been processed;
c. the recipients or categories of recipients to whom your personal data has been disclosed at the time of your request or to whom the personal data will be disclosed to in the future;
d. the planned period of storage of your personal data or if not possible, the criteria used to determine that period;
e. the existence of the right to request rectification, erasure or restriction of processing of personal data concerning you as the data subject or to object to such processing;
f. the right to lodge a complaint with a supervisory authority;
g. the right to any available information about the source of the data in the event that per-sonal data has not been collected from you as the data subject;
h. the existence of automated decision-making, including profiling as referred to in Article 22 §1 and §4 and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you as the data subject.
Furthermore, you also have the right to request information from us as to whether your stored or collected personal data has been transferred to a third country or international organization. In this context, you have the right to request an appropriate guarantee pursuant to Article 46 EU-GDPR and in relation to this, to be advised of such transference.
7.2 Right to rectification
You have the right to require us to rectify and complete the data you have provided as the respon-sible processor of your data when the processed personal data that concerns you is incorrect or incomplete. In this case, we will immediately undertake the necessary rectifications.
7.3 Right to restriction of processing
Under the following conditions, you have the right to request that the processing of your personal data as a data subject be restricted:
a. where the accuracy of the personal data is contested by the data subject for the period of time that it takes us to verify the accuracy of the personal data;
b. the processing is unlawful and the data subject opposes the erasure of the personal data and instead requests a restriction of its use;
c. the processor no longer requires the personal data for the purposes of processing, but the data is needed by the data subject for the establishment, exercise of defense of legal claims; or
d. where a request for the processing of personal data to be restricted has been made under Article 21 §1 EU-GDPR and it is not clear whether the legal grounds for the processing by the responsible controller override those of the data subject.
When the processing of the data subject’s personal data has been restricted, with the exception of storage, such personal data shall only be processed with the express consent of the data sub-ject or used to establish, exercise or defend legal claims or for the protection of the rights of an-other natural or legal person or for reasons of important public interest of the EU or one of the member states.
When the data subject has obtained a restriction of processing under the above-mentioned condi-tions, the controller shall inform the data subject before the restriction of processing is lifted.
7.4 Right to erasure (‘right to be forgotten’)
7.4.1. You have the right to request that we, as the processors of your data, erase your personal data without undue delay. In this case, as the controller, we are obligated to erase your data without undue delay where one of the following grounds apply:
a. the personal data is no longer necessary in relation to the purposes for which it was col-lected or otherwise processed;
b. you withdraw your consent on which the processing is based according to Article 6 §1 point (a) or Article 9 §2 point (a) of the EU-GDPR, and where there is no other legal ground for the processing;
c. you object to the processing pursuant to Article 21 §1 EU-GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 §2 EU-GDPR;
d. the personal data has been unlawfully processed;
e. the personal data has to be erased in order to fulfill a legal obligation in the European Un-ion or member state law to which the controller is subject to;
f. the personal data has been collected in relation to the offer of information society services referred to in Article 8 § 1.
7.4.2. If we, as the responsible party for the processing of your personal data, have made your personal data public and are therefore obligated to erase the personal data pursuant to Ar-ticle 17 §1 EU-GDPR, we will take appropriate measures as far as available technology and the costs of implementation allow, and including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of this personal data.
7.4.3. The right of erasure shall not apply to the extent that processing is necessary:
a. for exercising the right of freedom of expression and information;
b. for compliance with a legal obligation which requires processing in accordance with Euro-pean Union or member state laws to which the controller is subject to or for the perfor-mance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c. for reasons of public interest in the area of public health in accordance with Article 9 §2 points (h) and (i) as well as Article 9 §3 of the EU-GDPR;
d. for archiving purposes in the public interest, scientific or historical research or statistical purposes in accordance with Article 89 §1 EU GDPR in so far as the right referred to in §1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
e. for the establishment, exercise or defense of legal claims.
7.5 Right of notification
If you have exercised the right of rectification, erasure or restriction of processing as the data sub-ject to us as the controller, i.e. responsible party for processing your data, then we are obligated to communicate the rectification, erasure or restriction to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right as data subject to be informed about those recipients by eobiont as the control-ler and we are obligated to do so upon your request.
7.6 Right to technical data portability of your personal data
In as far as you have the right to information as aforementioned in this text, you have the right to receive your personal data that you have provided to us or that we have stored about you in a structured, commonly used and machine-readable format. In addition, you have the right to transmit your data to another controller without hindrance from the controller who originally pro-cessed said personal data, where:
a. the processing is based on consent pursuant to Article 6 §1 point (a) in the EU- GDPR or Article 9 §2 or on a contract pursuant to Article 6 § 1 point (b); and
b. the processing is carried out by automated means.
In exercising this right, you have the further right to have the personal data in question be trans-ferred directly from one controller to another in as far as this technically feasible. The rights and freedoms of third parties shall not be adversely affected thereby.
The right of data portability shall not apply to the processing of personal data that is necessary for the performance of a task that is carried out in the public interest or in the exercise of official au-thority vested in the controller.
7.7 Right to object
You have the right to object to the processing of your personal data on grounds related to your particular situation and at any time, based on Article 6 §1 point (e) or (f), including profiling based on those provisions.
We, as the controller, i.e. the party responsible for collecting and / or storing your personal data, shall no longer process said data in accordance with your right to object unless we can demon-strate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
When you as data subject object to processing your personal data for direct marketing purposes, then your personal data shall no longer be processed for such purposes.
You have the possibility, in the context of the use of information society services ¬– and notwith-standing Directive 2002/58/EC – to exercise your right to object by automated means using tech-nical specifications.
7.8 Right to rescind a data protection declaration of consent
You have the right to rescind your data protection declaration of consent at any time. The legality of the processing of your personal data carried out after you gave your consent until receipt of your revocation remains valid.
7.9 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual resi-dence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the regulations set forth in EU-GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 or the EU-GDPR
8. Lawfulness of processing
In as far as we have obtained your consent to process your personal data, the legal basis for pro-cessing as delineated in Article 6 §1 point (a) of the EU-GDPR shall apply.
For the processing of your personal data necessary for the performance of a contract to which you are a party to, Article 6 §1 point (b) of the EU-GDPR shall apply. This is also valid for processing operations necessary for to carry out pre-contractual measures.
In as far as the processing of your personal data is necessary for compliance with a legal obliga-tion to which eobiont is subject, Article 6 §1 point (c) of the EU-GDPR shall apply.
For cases where the processing of your personal data is necessary in order to protect your vital interests or those of another natural person, Article 6 §1 point (d) of the EU-GDPR shall apply.
For cases where the processing of your personal data is necessary for the purposes of the legiti-mate interests pursued by eobiont or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, Article 6 §1 point (f) of the EU-GDPR shall apply. The rightful interests of our enterprise lie in carrying out our business activities. The rightful interests of third parties that pro-vide services for eobiont lie in carrying out the activities as contractually set down between eobi-ont and such third parties.
9. Period of storage of personal data
Personal data will be stored in accordance with statutory storage time limits. After the expiration of the storage period, a routine deletion of the data is performed as long as the data is no longer necessary for purposes of initiating or fulfilling a contract.