Protecting your personal data is important to us, in particular, protecting your personal rights when we process and use your personal data. Below, we inform you about the collection of personal data when you use our Website. The term personal data includes all data relating to you personally, for example, your name, postal address, email address, and user behavior.
2. Automated Data Collection and Processing
2.1 General Data
As with every other web service, our server collects information automatically and stores it temporarily in server log files unless you deactivate such collection. If you view content in our Website, we collect the following data which for technical reasons we need if we are to display the contents of our Website to you and to ensure the stability and security thereof (legal basis: Article 6 (1) f) of the GDPR):
- the IP address of the computer from which the inquiry is sent;
- the file inquired about by the client;
- the http response code;
- the Internet page from which you are visiting (referrer URL);
- the date and time the server inquiry is sent;
- the type and version of the browser used; and
- the operating system on the computer sending the inquiry.
No server log files are evaluated in association with an individual person. The provider is not able to allocate the data to any specific person or persons at any time. The data is not merged with data from any other sources.
2.2 Google Analytics
Our Website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter, “Google”). Google Analytics uses small text files, referred to as cookies, which are saved on your computer to facilitate analysis of your Website use. The information generated by cookies regarding your use of our Website typically is transmitted to and saved on a Google server located in the United States. If and when IP anonymization is activated on our Website, Google will truncate your IP address for transmission among member states of the European Union or to other member states of the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and then truncated. At the request of the operator of the Website, Google will use the information to evaluate your use of this Website, to compile reports on Website activity, and to provide the operator of this Website with other services relating to Website activity and Internet use.
According to Google, the IP address transmitted from your browser as part of Google Analytics will not be merged with any other data held by Google.
You may refuse the saving of cookies by selecting the appropriate settings in your browser software; however, please note that if you do so you may not be able to use the full functionality of our Website. In addition, you can object to Google’s collection of data generated by cookies which data relates to your use of our Website (including your IP address) as well as to Google’s processing of the data. To do so, download and install the browser plug-in available at https://tools.google.com/dlpage/gaoptout.
Our Website uses Google Analytics with the addendum _anonymizeIp(). This means that IP addresses are truncated before being processed and cannot be associated with individual persons. In the event a personal association to you of any data collected in connection with you is possible, such association is excluded without delay and the personal data is erased immediately.
We use Google Analytics regularly to analyze and enhance the use of our Website. The resulting statistics allow us to improve our offerings and make them more interesting for you, the user. In exceptional cases in which personal data is transmitted to the United States, Google is bound by the EU-US Privacy Shield (https://www.privacyshield.gov/eu-us-framework). The legal basis of our use of Google Analytics is Article 6 (1) p. 1 f) of the GDPR.
3. Collection and Processing of Data Provided on a Voluntary Basis
3.1 General Contact Information
Generally, your provision of your personal data to us through our Website (e.g. your last name, first name, email address and/or postal address) is voluntary. This data is used to process your inquiries, as part of our contractual relationship, perform our own market research or opinion polls, and make decisions regarding the advertising materials we send out by mail. Unless necessary to process your inquiries, the personal data you provide will not be shared with third parties; in particular, for advertising purposes. We will erase the data collected from you when saving such data no longer is required or, depending on statutory retention obligations, we will restrict the processing of such data. The legal basis for this is Article 6 (1) b) of the GDPR or Article 6 (1) f) of the GDPR.
3.2 BioMed X Application System
You may register to our BioMed X Application System to apply for a research project or job offer provided by us as described in each individual call for application. During the registration to the BioMed X Application System you are required to provide the following data: name, address, gender, date of birth, email, nationality, country of residence, institution. After your registration you may add additional information relating to your qualification, your CV, publications, patents, profile photo and submit a research project proposal for the respective call for application. The legal basis for this is Article 6 (1) a) of the GDPR, your consent, or Art. 6 (1) b) of the GDPR.
This information will be used to process your application. Therefore, we will share your application with our partners for evaluation. Based on the evaluation, selected applicants will be invited to a job interview or an innovation boot camp. As necessary for the conduction of the job interview or innovation boot camp, the personal data of the applicant will be shared with relevant partners. The legal basis for this is Article 6 (1) a) of the GDPR, your consent.
With your registration, you agree that your data are stored in the BioMed X Application System. General information provided during the registration or later as part of your applicant profile will be stored until you delete your account. Additional information you provide during your application for a specific research project or job offer will only be used as long as it is necessary for the application process. We will delete the data collected when you delete your account or the storage of such data is no longer required or, depending on statutory retention obligations, we will restrict the processing of such data.
4. Transmission to Third Parties
To the extent you provide us with personal data, we will not transmit any such personal data to any third party, except
- to the extent you consented to such transmission (see 3.2 above): when data is collected, you will be informed of the recipient or categories of recipients;
- as part of the processing of your inquiries and your use of our services: to subcontractors commissioned by us to whom we transmit only such data as is required to fulfill the respective assignment and such contractors shall use such data for specific purposes only;
- as part of processing activities pursuant to Article 28 of the GDPR: to external service providers whom we have selected diligently and have commissioned and who are bound by our instructions and by the provisions of the GDPR and are controlled on a regular basis; and
- in compliance with legal obligations: to parties authorized to obtain such personal data.
- transient cookies and
- persistent cookies.
Transient cookies are erased automatically when you close your browser. Transient cookies include, but are not limited to, session cookies, which save session IDs that can be used to associate diverse requests from your browser with one joint session. In this way, your computer is recognized when you return to our Website. Session cookies are deleted when you log out or close your browser.
Persistent cookies are erased automatically after a predefined period of time, which period of time may vary depending on the cookie. You can delete persistent cookies in the security settings of your browser at any time.
You can configure your browser settings to meet your needs such that, for example, acceptance of third-party cookies or of all cookies is refused. Please note that in this case you may not be able to use all the functions of our Website.
6. Your Rights
You have the following rights vis-à-vis us regarding your personal data. You have the right to
- rectify or erase,
- restrict processing,
- object to processing, and
Please forward all inquiries in writing to our above-mentioned contact.
In addition, you have the right to lodge a complaint with a data protection supervisory authority if you are not satisfied with our processing of your personal data.
Data Protection Officer
Dr. Christian Szidzek