Privacy Policy

1. Scope

This Privacy Policy applies to the use of the website (hereinafter, the “Website”) and the services offered through the Website. This Website is provided by BioMed X GmbH, Im Neuenheimer Feld 515, 69120 Heidelberg, Germany, email (hereinafter, “BioMed X” or “we”) as the controller as defined in Article 4 of the EU General Data Protection Regulation (hereinafter, the “GDPR”). You can contact our data protection officer Dr. Christian Szidzek at TÜV SÜD Akademie GmbH, Westendstr. 160, 80339 München, Germany, email

Protecting your personal data is important to us, in particular, protecting your personal rights when we process and use your personal data. Below, we inform you about the collection of personal data when you use our Website. The term personal data includes all data relating to you personally, for example, your name, postal address, email address, and user behavior.

2. Automated Data Collection and Processing

2.1 General Data

As with every other web service, our server collects information automatically and stores it temporarily in server log files unless you deactivate such collection. If you view content in our Website, we collect the following data which for technical reasons we need if we are to display the contents of our Website to you and to ensure the stability and security thereof (legal basis: Article 6 (1) f) of the GDPR):

  • the IP address of the computer from which the inquiry is sent;
  • the file inquired about by the client;
  • the http response code;
  • the Internet page from which you are visiting (referrer URL);
  • the date and time the server inquiry is sent;
  • the type and version of the browser used; and
  • the operating system on the computer sending the inquiry.

No server log files are evaluated in association with an individual person. The provider is not able to allocate the data to any specific person or persons at any time. The data is not merged with data from any other sources.

2.2 Google Analytics

Our Website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter, “Google”). Google Analytics uses small text files, referred to as cookies, which are saved on your computer to facilitate analysis of your Website use. The information generated by cookies regarding your use of our Website typically is transmitted to and saved on a Google server located in the United States. If and when IP anonymization is activated on our Website, Google will truncate your IP address for transmission among member states of the European Union or to other member states of the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and then truncated. At the request of the operator of the Website, Google will use the information to evaluate your use of this Website, to compile reports on Website activity, and to provide the operator of this Website with other services relating to Website activity and Internet use.

According to Google, the IP address transmitted from your browser as part of Google Analytics will not be merged with any other data held by Google.

You may refuse the saving of cookies by selecting the appropriate settings in your browser software; however, please note that if you do so you may not be able to use the full functionality of our Website. In addition, you can object to Google’s collection of data generated by cookies which data relates to your use of our Website (including your IP address) as well as to Google’s processing of the data. To do so, download and install the browser plug-in available at

Our Website uses Google Analytics with the addendum _anonymizeIp(). This means that IP addresses are truncated before being processed and cannot be associated with individual persons. In the event a personal association to you of any data collected in connection with you is possible, such association is excluded without delay and the personal data is erased immediately.

We use Google Analytics regularly to analyze and enhance the use of our Website. The resulting statistics allow us to improve our offerings and make them more interesting for you, the user. In exceptional cases in which personal data is transmitted to the United States, Google is bound by the EU-US Privacy Shield ( The legal basis of our use of Google Analytics is Article 6 (1) p. 1 f) of the GDPR.

Information regarding the third-party provider is as follows: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001; terms of use:; privacy policy:

3. Collection and Processing of Data Provided on a Voluntary Basis

3.1 General Contact Information

Generally, your provision of your personal data to us through our Website (e.g. your last name, first name, email address and/or postal address) is voluntary. This data is used to process your inquiries, as part of our contractual relationship, perform our own market research or opinion polls, and make decisions regarding the advertising materials we send out by mail. Unless necessary to process your inquiries, the personal data you provide will not be shared with third parties; in particular, for advertising purposes. We will erase the data collected from you when saving such data no longer is required or, depending on statutory retention obligations, we will restrict the processing of such data. The legal basis for this is Article 6 (1) b) of the GDPR or Article 6 (1) f) of the GDPR.

3.2 BioMed X Career Space

You may register at our BioMed X Career Space to apply for a research project or job offer provided by us as described in each individual call for application. During the registration at the BioMed X Career Space, you are required to provide the following data: name, gender, date of birth, email, nationality, country of residence, institution, address, English language skills, current and desired position, primary interest, and how you heard about BioMed X. After your registration, you may add additional information relating to your qualification, your CV, publications, patents, profile photo, and submit a research project proposal for the respective call for application. The legal basis for this is Article 6 (1) a) of the GDPR, your consent, or Art. 6 (1) b) of the GDPR.

This information will be used to process your application. Therefore, we will share your application with our research sponsors and partners for evaluation. Based on the evaluation, selected applicants will be invited to a job interview or an innovation boot camp. As necessary for the conduction of the job interview or innovation boot camp, the personal data of the applicant will be shared with relevant research sponsors and partners. The legal basis for this is Article 6 (1) a) of the GDPR, your consent.

With your registration, you agree that your data are stored in the BioMed X Career Space. General information provided during the registration or later as part of your applicant profile will be stored until you delete your account. Additional information you provide during your application for a specific job offer or research project will only be used as long as it is necessary for the application process. We will delete the data collected when you delete your account, or the storage of such data is no longer required, or, depending on statutory retention obligations, we will restrict the processing of such data.

4. Transmission to Third Parties

To the extent you provide us with personal data, we will not transmit any such personal data to any third party, except

  • to the extent you consented to such transmission (see 3.2 above): when data is collected, you will be informed of the recipient or categories of recipients;
  • as part of the processing of your inquiries and your use of our services: to subcontractors commissioned by us to whom we transmit only such data as is required to fulfill the respective assignment and such contractors shall use such data for specific purposes only;
  • as part of processing activities pursuant to Article 28 of the GDPR: to external service providers whom we have selected diligently and have commissioned and who are bound by our instructions and by the provisions of the GDPR and are controlled on a regular basis; and
  • in compliance with legal obligations: to parties authorized to obtain such personal data.

5. Cookies

Edit your cookie settings

Our Website uses cookies, small text files that are saved locally in your browser’s cache. The following types of cookies, the scope and functionality of which are explained below, are used:

  • transient cookies and
  • persistent cookies.

Transient cookies are erased automatically when you close your browser. Transient cookies include, but are not limited to, session cookies, which save session IDs that can be used to associate diverse requests from your browser with one joint session. In this way, your computer is recognized when you return to our Website. Session cookies are deleted when you log out or close your browser.

Persistent cookies are erased automatically after a predefined period of time, which period of time may vary depending on the cookie. You can delete persistent cookies in the security settings of your browser at any time.

You can configure your browser settings to meet your needs such that, for example, acceptance of third-party cookies or of all cookies is refused. Please note that in this case you may not be able to use all the functions of our Website.

We use cookies to identify you during your ensuing visits to our Website, provided you have set up an account with us. Otherwise, you will be required to log in every time you visit our Website.

Twitter plug-in

We have integrated functions of the social media platform Twitter into this website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. While you use Twitter and the “Re-Tweet” function, websites you visit are linked to your Twitter account and disclosed to other users. During this process, data are transferred to Twitter as well. We must point out, that we, the providers of the website and its pages do not know anything about the content of the data transferred and the use of this information by Twitter. For more details, please consult Twitter’s Data Privacy Declaration at:

The use of Twitter plug-ins is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.

You have the option to reset your data protection settings on Twitter under the account settings at

LinkedIn plug-in

This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Any time you access a page of this website that contains functions of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to this website to your user account. We have to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data and its use by LinkedIn.

The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.

For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at:

7. Your Rights

You have the following rights vis-à-vis us regarding your personal data. You have the right to

  • access,
  • rectify or erase,
  • restrict processing,
  • object to processing, and
  • portability.

Please forward all inquiries in writing to our above-mentioned contact.

In addition, you have the right to lodge a complaint with a data protection supervisory authority if you are not satisfied with our processing of your personal data.

Image of