Privacy Policy

1. Controller and contact details

The body responsible for the data processing is the company Biomol GmbH (hereinafter referred to as the “Controller”); it processes the data provided by the data subject (hereinafter referred to as the “Customer”) in accordance with the provisions of the European General Data Protection Regulation (hereinafter referred to as the “GDPR”).

The contact details of the Controller are as follows:

Address: Kieler Straße 303a, 22525 Hamburg, Germany
Phone: +49 (0)40 / 85 32 60 0
Fax: +49 (0)40 / 85 32 60 22
Email: info@biomol.de

2. Data Protection Officer

The Controller’s Data Protection Officer is Dr. Martin Bahr.

The contact details of the Data Protection Officer are:

Address: Dr. Bahr Consulting GmbH, Mittelweg 41a, 20148 Hamburg, Germany
Phone: +49 (0)40 / 555 98 300
Email: datenschutz@biomol.de

3. Purpose and legal basis

The processing of the personal data of the Customer is necessary in order to perform a contract to which the Customer is a party, or to implement pre-contractual measures which are taking place at the request of the Customer. This specifically also includes the subscription to our newsletter. The legal basis for this processing is Art. 6 (1) (b) GDPR.

If the Customer uses the contact form or otherwise contacts the Controller, particularly by email, telephone, fax or post, the personal data of the Customer are only used to process his or her enquiry. The legal basis for this processing is the Customer’s consent pursuant to Art. 6 (1) (a) GDPR.

In all other cases in which personal data are processed, processing takes place in order to safeguard the legitimate interests of the Controller, namely for the purpose of analysing use of the website through Google Analytics and Google Remarketing or in order to recognise, limit or rectify malfunctions or errors on the website. The legal basis for this processing is Art. 6 (1) (f) GDPR. The Controller expressly draws attention to the Customer’s right to object. Section 9 of this declaration contains further information for Customers on this point.

4. Recipient

The personal data of the Customer provided to the Controller are disclosed to the following recipients in the following manner:

4.1. Contract performance or implementation of pre-contractual measures:

In order to perform the contract or implement pre-contractual measures, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

• In the case of payment by bank transfer: HypoVereinsbank/Unicredit, Graskeller 2, 20457 Hamburg, Germany and Postbank Hamburg, Überseering 26, 22297 Hamburg, Germany
• In the case of payment by invoice: HypoVereinsbank/Unicredit, Graskeller 2, 20457 Hamburg, Germany and Postbank Hamburg, Überseering 26, 22297 Hamburg, Germany
• Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
• Shipping service provider: AWU Gesellschaft für Absatzförderung, Werbung und Unternehmensberatung mbH, Kleine Bahnstr. 10, 22525 Hamburg, Germany
• Email service provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
• Telephone provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany
• Fax provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany
• Web hosting provider: Compositiv GmbH, Hammer Deich 30, 20537 Hamburg, Germany
• In case of newsletter subscription: Sendinblue GmbH, Köpenicker Str. 126,10179 Berlin, Germany
• Internet agency: Net Inventors GmbH, Stahltwiete 23, 22761 Hamburg, Germany

In the absence of written consent by the Customer, personal data are not disclosed to any other third parties, unless this is required by legal order.

4.2. Use of the contact form and where contact is established in other ways:

If the contact form is used, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

• Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
• Email service provider: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany
• Telephone provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany
• Fax provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany
• Web hosting provider: Compositiv GmbH, Hammer Deich 30, 20537 Hamburg, Germany
• Internet agency: Net Inventors GmbH, Stahltwiete 23, 22761 Hamburg, Germany
• Data technology: Andatec Gesellschaft für angewandte Datentechnik mbH, Ruwoldtweg 15, 22309 Hamburg, Germany
• Inventory management programming: OSC Smart Integration GmbH (SAP Business One Support), Tesdorpfstraße 8, 20148 Hamburg, Germany and Olaf Schröder, EDV Beratung & Support, Kalleby 37, 24972 Steinbergkirche, Germany

If a bulk purchase enquiry is made via the contact form, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

• Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
• Email service provider: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany
• Telephone provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany
• Fax provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany
• Web hosting provider: Compositiv GmbH, Hammer Deich 30, 20537 Hamburg, Germany
• Internet agency: Net Inventors GmbH, Stahltwiete 23, 22761 Hamburg, Germany
• Data technology: Andatec Gesellschaft für angewandte Datentechnik mbH, Ruwoldtweg 15, 22309 Hamburg, Germany
• Inventory management programming: OSC Smart Integration GmbH (SAP Business One Support), Tesdorpfstraße 8, 20148 Hamburg, Germany and Olaf Schröder, EDV Beratung & Support, Kalleby 37, 24972 Steinbergkirche, Germany

If contact is made by email, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

• Email service provider: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany
• Web hosting provider: Compositiv GmbH, Hammer Deich 30, 20537 Hamburg, Germany
• Data technology: Andatec Gesellschaft für angewandte Datentechnik mbH, Ruwoldtweg 15, 22309 Hamburg, Germany

If contact is made by telephone, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

• Telephone provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany

If contact is made by fax, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

• Fax provider: QSC AG, Mathias-Brüggen-Straße 55, 50829 Cologne, Germany

If contact is made by post, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

• Shipping service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
• AWU Gesellschaft für Absatzförderung, Werbung und Unternehmensberatung mbH, Kleine Bahnstr. 10, 22525 Hamburg, Germany

In the absence of written consent by the Customer, personal data are not disclosed to any other third parties, unless this is required by legal order.

4.3. Website analysis:

For the purpose of analysing use of the website, the personal data of the Customer provided to the Controller are disclosed to the following recipients:

Matomo

This website uses Matomo Analytics of InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand to analyze the use of the website. Matomo uses cookies, which are text files placed on the customer's computer, to help the website analyze how users use the site.

The data processing takes place on the legal basis of Art. 6 Para. 1 lit f (legitimate interest) of the EU Data Protection Basic Regulation (EU-DSGVO). Our legitimate interest lies in the optimisation of our online offer and our web presence. Since the privacy of our visitors is particularly important to us, Matomo anonymizes the IP address as soon as possible. Matomo does not use it for any other purpose, combine it with other data or pass it on to third parties.

You can object to the aforementioned data processing at any time if it is personal. Your objection has no negative consequences for you.

Google Remarketing

This website uses the remarketing function of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland. Google uses “cookies” ‒ text files that are stored on the Customer’s computer and enable an analysis of the use of the website by the Customer. The information generated by the cookie about the use of this website is generally transmitted to a Google server and stored there. Google will use this information on behalf of the operator of this website in order to analyse use of the website, compile reports on website activity, and provide further services related to website and internet use to the website operator.

Customers may permanently deactivate the use of cookies by Google by installing the following plug-in: http://www.google.com/settings/ads. Alternatively, Customers may prevent the setting of cookies by configuring their browser software settings accordingly.

In the absence of written consent by the Customer, personal data are not disclosed to any other third parties, unless this is required by legal order.

5. Cookies

The Controller uses cookies on a number of sites in order to make a visit to the website more attractive and enable the use of particular functions. Cookies are small text files which are placed on the user’s computer. Most of the cookies used by the Controller are deleted from the user’s hard drive at the end of the browser session (so-called session cookies). Other cookies will remain on the user’s computer and enable the Controller to recognise the user’s computer at the next visit (so-called permanent cookies). Customers may of course reject the cookies at any time, provided the browser used allows them to do so.

6. Duration of storage

Upon completion of the contract, including full payment of the agreed remuneration, the Customer’s data which must be kept for legal reasons are blocked. These data are then no longer available for further use. When the legal reason for retention no longer applies, these blocked data are deleted.

If the Customer uses the contact form, makes a bulk purchase enquiry or makes contact with the Controller in other ways, the personal data are used for the duration of the processing of the enquiry. Subsequently, the data that have to be kept for legal reasons are blocked. These data are then no longer available for further use.

The Controller is subject to a number of retention and documentation duties, some of which result from the German Commercial Code (Handelsgesetzbuch, HGB) and the German Tax Code (Abgabenordnung, AO). The retention or documentation periods prescribed in these laws amount to two to ten years.

Finally, the duration of storage is also determined by the statutory limitation periods, for instance those stipulated by Sections 195 ff. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), which are usually three years but may be up to thirty years in certain cases.

In all other respects, the personal data are deleted unless the Customer has expressly consented to further processing and use of his or her data.

The personal data required to detect, limit or rectify malfunctions or errors in the website are deleted after seven days at the latest.

7. Privacy rights

Every Customer has the right of information pursuant to Article 15 GDPR, the right of correction pursuant to Article 16 GDPR, the right of erasure pursuant to Article 17 GDPR, the right of restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR and the right of data portability pursuant to Article 20 GDPR. The limitations of Sections 34 and 35 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) apply to the rights to information and erasure. In addition, Customers have the right to complain to a supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

The wording of the relevant laws is available here.

Any enquiries in this respect must be directed to the address specified in Section 1 or to info@biomol.de.

8. Right to object and other rights

If a Customer has consented to the processing of the personal data concerning him or her for one or several specified purposes, the Customer has the right to revoke this content with effect for the future.

In particular, Customers are entitled to object, free of charge, to any processing of personal data for the purpose of website analysis or the detection, limitation or rectification of malfunctions or errors in the website, with effect for the future. An email to info@biomol.de or the address specified in Section 1 suffice for this purpose.

Without prejudice to any other administrative or judicial remedy, any data subject has the right to complain to a supervisory authority, particularly in the member state of their place of residence, their place of work or the place of the alleged violation, if the data subject believes that the processing of the personal data concerning their person breaches this regulation.

A competent authority is, for example, the Commissioner for Data Protection and Freedom of Information of Hamburg, Klosterwall 6 (Block C), 20095 Hamburg, Germany. However, the Customer is free to choose a different authority.

9. Obligation to provide data

The following data must be provided (mandatory information):

9.1. Fulfilment of the contract:

The following data must be provided to enable contract conclusion (mandatory information):

• University
• Company/hospital/organisation
• First and last name
• Address (street, house number, place, postcode, country)
• Email address

The following data must be provided to enable use of the newsletter:

• Email address

All other information is not required to conclude a contract and its provision is therefore voluntary.

If the mandatory information required for contract conclusion is not provided, no contract will be concluded. Failure to provide voluntary information does not impact upon contract conclusion.

9.2. Use of the contact form or processing of any other enquiry:

The following data must be provided to enable the processing of a general enquiry through the contact form (mandatory information):

• First name
• Last name
• Email address
• Message
• Subject

The following data must be provided to enable the processing of an enquiry through the bulk purchase contact form (mandatory information):

• Organisation
• Title
• First and last name
• Address (street, house number, place, postcode, country)
• Email address
• Phone number
• Product number and quantity

The following data must be provided to enable the processing of an enquiry by email (mandatory information):

• Name
• Email address
• The following data must be provided to enable the processing of an enquiry by telephone (mandatory information):
• Name
• Phone number

The following data must be provided to enable the processing of an enquiry by fax (mandatory information):

• Name
• Fax number

The following data must be provided to enable the processing of an enquiry by post (mandatory information):

• Name
• Address

All other information is not required to process an enquiry and its provision is therefore voluntary.

If the mandatory information required to process an enquiry is not provided, the enquiry will not be processed. Failure to provide voluntary information does not impact upon the processing of the enquiry.

9.3. Website analysis:

The provision of the following data is strictly required to detect, limit or rectify malfunctions or errors in the website (mandatory information):

• IP address
• Referrer URL

No other data are required to detect, limit or rectify malfunctions or errors in the website; the provision of such data is therefore voluntary.

If the mandatory information required to detect, limit or rectify malfunctions or errors in the website is not provided, this website cannot be used.

The deactivation of data transmission in the context of Google Analytics and Google Remarketing does not affect the use of this website.

10. Automated decision-making

No automated decision-making, including profiling, takes place.