This Privacy Policy applies to the processing of data by SRTD Biotech („Controller“, „we“ or „us“) when you visit our website „https://srtd-biotech.com/“ („Website“).
When you use our Website, we process your personal data. Personal data is any information relating to an identified or identifiable natural person. When we process personal data, this means that we collect, store, transmit, delete or otherwise use this data. When processing your personal data, we comply with the applicable data protection laws, in particular the General Data Protection Regulation („GDPR“) and the Federal Data Protection Act („BDSG“).
With the following data protection information, we inform you about the type, scope and purposes of the collection, use and other processing of personal data when using our Website.
If there are changes with regard to the data processing carried out by us, we will adapt our data protection information. We therefore ask you to regularly inform yourself about the content of our privacy policy. If the change requires an act of cooperation on your part, such as consent, or other individual notification, we will inform you.
Responsible for the processing of your data when using our Website is:
Arena Biotech GmbH
Huthmacher Straße 20
52428 Jülich
Soon to be renamed to:
SRTD Biotech GmbH
Huthmacher Straße 20
52428 Jülich
E-Mail: dataprotection@srtd-biotech.com
For all questions on the subject of data protection or the exercise of your rights under section 7 of this privacy policy in connection with the use of our Website, you can contact us at any time. We can be reached at the above postal address (“Attn: Data Protection”) and at the following e-mail address: dataprotection@srtd-biotech.com.
In the following, we inform you about which personal data we process when you use our Website. We will also explain the purpose for which we process your data and the legal basis on which we do so. If the processing of personal data is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, the purposes mentioned also represent our legitimate interests.
2.1. Visiting the Website
When you visit our Website for informational purposes, we collect, store and process so-called „log data“. We store these temporarily and anonymously as so-called server log files on our web server in order to guarantee the display of our Website and its stability and security.
This applies, for example, to:
The processing is carried out on the basis of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, which always takes your interests into account.
2.2. Contact Form
If you use our contact form on our Website, we collect the following data from you:
The data will only be used to answer your questions. Unless explicitly stated in this privacy policy, the data will not be passed on to third parties. We process the aforementioned data in order to answer the questions or inquiries submitted through the contact form. The legal basis of the data processing is therefore our legitimate interest according to Art. 6 para. 1 lit. f) GDPR.
2.3. Data processing for personal addressing by e-mail
If you give us your express consent, we will occasionally send you press releases or information about company developments by e-mail. For this purpose, we process your name and e-mail address as well as your company name. When you register for the sending of aforementioned information, we use the so-called double opt-in procedure. This means that after you have registered with your e-mail address, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you actually wish to receive the information.
The legal basis for sending our information is Art. 6 para. 1 lit. a) GDPR.
2.4. Website Optimisation and Website Analysis
(a) Functional Cookies
Our Website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer. The cookie contains a string of characters that allows your system to be uniquely identified when you return to the Website.
Most of the cookies we use („Session Cookies“) and the data stored and transmitted in them are automatically deleted at the end of your visit. Other cookies („Persistent Cookies“) remain stored on your end device until you delete them.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. You can delete cookies that have already been saved at any time. If you deactivate cookies, the functionality of the Website may be limited.
Some elements of our Website require that the calling browser can be identified even after a page change. Cookies may be stored for this purpose, which enable us to recognise your browser on your next visit.
If personal data are processed by the cookies, we process them on the basis of a balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, which always also takes your interests into account.
(b) Analysis and Marketing Cookies
When you visit our Website, cookies are also set that enable an analysis of your use of the Website for reach measurement („Analysis Cookies“).
We use Analysis Cookies exclusively on the basis of your consent in accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 subpara. 1 lit. a GDPR via our cookie banner. You can also access further information about the cookies we use via our cookie banner. You can also use the cookie banner to revoke your consent to the processing of your data through Analysis Cookies at any time.
(c) Google Maps
We use Google Maps on our Website, a service of the Google LLC group, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). The integration serves to ensure you a better user experience for the website. If Google Maps collects data from you via cookies to facilitate correct map display, this will only be done based on your explicit consent within the meaning of Art. 6 para. 1 lit. a) GDPR or § 25 TTDSG.
For more information about the processing of user data by Google Maps please refer to Googles Privacy Policy at https://policies.google.com/privacy?hl=en-US.
(d) Applied Services
We use Analysis Cookies from the following services:
For the analysis of your use of our Website, we use „Google Analytics“ a service of the Google LLC group, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“), on the basis of a contract on commissioned data processing pursuant to Art. 28 GDPR.
Google Analytics uses cookies. The information generated by cookies about your use of our Website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on your express consent in accordance with Art. 6 para. 1 lit. a) GDPR. Your consent can be revoked at any time.
We have activated the IP anonymisation function. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Google will use this information on our behalf for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing other services relating to Website activity and Internet usage.
You have the option to prevent the storage of cookies by changing the settings of your browser software accordingly. You can also prevent the collection of data generated by the cookie and related to your use of the Website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the processing of user data by Google Analytics, please refer to Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en.
In order to process your personal data, we also use the service of an external service provider in addition to the service providers mentioned in section 2.4.
We store the data we process on servers operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (“IONOS”). We store data that you enter yourself on our website (data you share in the contact form) as well as data that we automatically collect from you when you visit our website (such as your IP address). We have concluded an order processing agreement with IONOS in accordance with Art. 28. GDPR. Your personal data is stored exclusively on servers in Germany and is therefore not transferred to data recipients outside the European Union. For more information on data protection at IONOS, please visit https://www.ionos.de/terms-gtc/terms-privacy.
We use appropriate technical and organisational security measures to protect stored personal data against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. In particular, we ensure that sensitive personal data is stored exclusively on servers hosted in the EU that are certified in accordance with DIN ISO/IEC 27001 (as amended).
5.1 In the course of our business relationships, your personal data may be transferred or disclosed to third party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. This concerns the use of the following services:
5.2. In the context of the transfer of personal data to a third country, we will regularly ensure through appropriate guarantees, for example by concluding the standard contractual clauses of the European Commission, that a transfer of data to a third country only takes place on the basis of a level of protection that complies with the GDPR.
5.3. If data mentioned under section 5.1 is transferred to a third country, in particular the USA, for which there is no adequacy decision by the commission, this will be done on the basis of standard contractual clauses pursuant to Art. 46 para. 2 lit. c) GDPR in conjunction with appropriate technical and organisational measures to protect your data.
5.4. A copy of the standard contractual clauses or further information on the standard contractual clauses used can be downloaded from the respective websites of the service providers we use:
We delete your data when it is no longer needed for the purposes for which it was originally collected or if you request us to pursuant to the exercise of your rights under section 7 of this privacy policy.
In relation to our processing of your personal data, you have the following rights free of charge:
7.1. Right to Information pursuant to Art. 15 GDPR
You have the right to receive information from us about whether and what data we process about you. This includes information on how long and for what purpose we process the data, the source of the data and the recipients or categories of recipients to whom we pass on the data. We can also provide you with a copy of this data.
7.2. Right to Rectification pursuant to Art. 16 GDPR
You have the right to request that we rectify information about you that is not or no longer accurate without delay. In addition, you can request that we complete your incomplete personal data. If required by law, we will also inform third parties of this rectification if we have disclosed your personal data to them.
7.3. Right to Erasure pursuant to Art. 17 GDPR
You have the right to request that we erase your personal data without delay in one of the following cases:
Your right to erasure may be restricted on the basis of statutory provisions. This includes in particular the restrictions listed in Art. 17 GDPR and section 35 BDSG.
7.4. Right to Restriction of Processing pursuant to Art. 18 GDPR
You have the right to request us to restrict the processing of your personal data if one of the following reasons applies:
If you have requested a restriction on processing in accordance with the above list, we will inform you before the restriction is withdrawn.
7.5. Right to Data Portability pursuant to Art. 20 GDPR
You have the right to obtain personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to others. The exercise of this right does not affect your right to erasure.
7.6. Right to Object pursuant to Art. 21 GDPR
According to Art. 21 GDPR, you have in particular the right to object to the processing of your data at any time for reasons arising from your particular situation, if we base this processing on legitimate interests pursuant to Art. 6 (1) lit. f) GDPR. If you object, we will no longer process your personal data, except in two cases:
In particular, if we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your data for the purposes of such marketing. If you object to the processing of your data for direct marketing purposes, we will no longer use your personal data for this purpose.
7.7. Right to withdraw Consent pursuant to Art. 7 GDPR
You can withdraw your consent given to us at any time with effect for the future. This withdrawal can be made in the form of an informal communication to the above contact addresses. If you revoke your consent, the legality of the data processing carried out up to that point will not be affected.
7.8. Right to complain to the Supervisory Authority
If you believe that the processing of your data by us violates applicable data protection law, you have the right to lodge a complaint with one of the competent supervisory authorities. The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen:
Bettina Gayk
Kavalleriestraße 2-4
40213 Düsseldorf
Telephone: 02 11/384 24-0
E-Mail: poststelle@ldi.nrw.de
In addition, you can complain to the data protection supervisory authority responsible for you at your place of residence. You can find an overview of data protection supervisory authorities at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
We do not process your data for automated decisions in individual cases, including profiling within the meaning of Art. 22 GDPR.