1. General Information

Responsible within the meaning of the General Data Protection Regulation and the other data protection laws of the legal representative as well as other data protection rights is:

SCINTOMICS Molecular, 
Applied Theranostics Technologies GmbH
Lindach 4
82256 Fuerstenfeldbruck
Germany

Phone:    +49 8141 15055-0
Fax:          +49 8141 15055-15
E-mail:     info@sci-att.com
Website:  www.sci-att.com

General Manager: Andrea Maugg
Vat-ID-No.: DE 815 782 939
Commercial register: HRB 243 135
Place of venue: Munich

2. Name and address of the data protection officer

Contact details of data protection officer:

IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 Munich
Germany

Phone: +49 89 1891 7360
E-mail: email@iitr.de

3. General data processing information

3.1 Affected data

In principle, we only process personal data of our users if this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

3.2 Legal basis

As we obtain the consent of the data subject for the processing of personal data, Article 6, §1 (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is required to fulfill a contract to which the data subject is a party, Article 6, §1 (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. As the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6, §1 (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6, §1 (d) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6, §1 (f) GDPR serves as the legal basis for the processing.

3.3 Website Log Files

When you visit our websites, your browser transmits certain data to our web server for technical reasons. The following data are recorded during an ongoing connection for communication between your internet browser and our web server:

• • Date and time of your request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Type and version of the browser and the operating system you use
  • Full IP address of the requesting computer
  • Quantity of data transferred

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session. Our legitimate interest in data processing according to Article 6, §1 (f) GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user.

4. Use of Cookies

4.1 Description and scope of data processing

Our website uses cookies. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after changing pages. The legal basis for the processes of personal data using cookies is Article 6, §1 (f) GDPR.

4.2 Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages. The user data collected by technically necessary cookies are not used to create user profiles. Our legitimate interest in the processing of personal data in accordance with Article 6, §1 (f) GDPR lies in these purposes.

4.3 Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transferred from there to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent. The transmission of Flash cookies cannot be prevented via the settings of the browser, but by changing the settings of the Flash Player.

5. Contact form and email contact

5.1 Description and scope of data processing

A contact form is available on our website with which you can contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and saved. These dates are

(1) First and last nam
(2) Telephone number
(3) Email
(4) Message

Your consent will be obtained for the processing of the data during the dispatch process and reference will be made to this data protection declaration.

Alternatively, you can contact us at the email address given. In this case, the user’s personal data transmitted with the email will be saved. In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.

If the user has given his / her consent, the legal basis for processing the data is Article 6, §1 (a) GDPR. The legal basis for the processing of the data that is transmitted in the course of sending an email is Article 6, §1 (f) GDPR. If the aim of the e-mail contact is to conclude a contract, the additional legal basis for processing Article 6, §1 (b) GDPR

5.2 Purpose of data processing

The processing of personal data from the input mask is only used to process the contact. If you contact us by email, there is also the necessary legitimate interest in processing the data. The other personal data that are processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

5.3 Duration of storage

The data will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be concluded from the circumstances that the matter in question has been finally resolved. The additional personal data collected during the sending process will be deleted after seven days at the latest.

5.4 Possibility of objection and removal

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. In this case, all personal data that was saved when you contacted us will be deleted.

5.5 Right to object

You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation, based on Article 6, §1 or (f) GDPR; This also applies to the creation of profiles on the basis of these provisions. The responsible person will no longer process the personal data concerning you unless they can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you are processed for the operation of direct mail, you have the right to object to the processing of the personal data concerning you for the purpose of this advertising at any time. This also applies to the creation of a profile insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. In connection with the use of information society services – regardless of Directive 2002/58 / EC – you have the option of exercising your right of objection through automated processes that use technical specifications. You also have the right to object to the processing of personal data for scientific or historical research purposes or for statistical purposes in accordance with Article 4 for reasons that arise from your particular situation. Article 89, §1 GDPR. Your right of objection can be restricted to the extent that it is likely that the research or statistical purposes will be impossible or seriously impaired, and the restriction is necessary for the fulfillment of the research or statistical purposes.

5.6 Right to revoke the declaration of consent under data protection law

You have the right to revoke your data protection declaration of consent at any time. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.

5.7 Automated decision in individual cases including profiling

You have the right not to be subject to any decision that is based solely on automated processing – including profiling – that has legal effects on you or that significantly affects you in a similar manner. This does not apply to the decision

(1) is necessary for the conclusion or performance of a contract between you and the responsible person,

(2) is permissible on the basis of the legal provisions of the Union or of the member states to which the responsible person is subject, and these legal provisions contain suitable measures to safeguard your rights and freedoms and your legitimate interests

(3) takes place with your express consent.

However, these decisions may not be based on special categories of personal data according to Article 9, §1 GDPR, unless Article 9, §2 (a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests. With regard to the cases mentioned in (1) and (3), the responsible person shall take appropriate measures to protect the rights and freedoms and your legitimate interests, including at least the right to intervene by a person responsible to his / her own point of view and hear about the contestation of the decision.

5.8 Right to complain to a supervisory authority

Without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or at the place of the alleged violation of the opinion that the processing of your personal data violates the GDPR. The supervisory authority to which the complaint was lodged informs the complainant about the status and results of the complaint, including the possibility of a legal remedy in accordance with Article 78 GDPR.

6. Use of a newsletter

When registering for our newsletter, you provide us with your email address and, on an optional basis, other information. We use these data solely for the purpose of sending you the newsletter. We retain the data that you disclose in your newsletter application until you cancel your subscription to our newsletter. You can unsubscribe at any time via the link in the newsletter intended for this purpose, or by sending us the appropriate notification. By unsubscribing, you revoke the use of your email address.

We also use your email address, which we receive in connection with the sale of a product or service, exclusively for direct advertising in the form of our newsletter for products or services that we sell that are similar to the ones you ordered, provided that you have not objected to having your email used in this way. You may object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic rates. Your objection (and thus the cancellation of our newsletter) can be communicated by sending the appropriate message to our email address (see the Legal Notice).

7. Information about other data processing procedures

7.1 Specific information about the application process

Affected data:	Application information
Processing Purpose:	Implementation of application process
Categories of recipients:	Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers:	We do not use processors outside of the European Union.
Duration of data storage:	Application data will generally be deleted within four months after communication of the decision, unless consent has been given for a longer period of data storage.

7.2 Specific information for the processing of customer data/prospective parties’ data

Affected data:	Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose:	Contract execution.
Categories of recipients:	Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers:	We do not use processors outside of the European Union.
Duration of data storage:

7.3 Specific information on the processing of employee data

Affected data:	Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose:	Contract execution.
Categories of recipients:	Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers:	We do not use processors outside of the European Union.
Duration of data storage:	The duration of data storage depends on the statutory storage requirements and is usually 10 years.

7.4 Specific information for the processing of supplier data

Affected data:	Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose:	Contract execution.
Categories of recipients:	Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers:	We do not use processors outside of the European Union.
Duration of data storage:	The duration of data storage depends on the statutory storage requirements and is usually 10 years.

7.5 Specific information on using video conference/webinar software

Affected data:	Data communicated when using video conference software/webinar software (especially first name, last name, email address; optional: audio transmission data; optional: video transmission data; optional: use of chat function); the data your system is technically required to process in order to establish a connection with the provider of the conference software
Processing Purpose:	Conducting video conferences/webinars.
Categories of recipients:	Public agencies where priority legal provisions exist. External service providers or other contractors, e.g., for data processing and hosting. Other external bodies insofar as the data subject has given his or her consent or transmission is permitted due to a prevailing interest.
Third-country transfers:	Contract processors outside the European Union are used (in this case: the United States of America); the appropriate standard contract clauses have been concluded with the service provider
Duration of data storage:	Video conferences can only be recorded if participants have provided documented consent in advance. The technical data will be deleted if they are no longer required. The duration of data storage depends on the statutory storage requirements and is usually 10 years.

8. Third-party provider

8.1. Matomo

We use Matomo, a web analysis service, to optimally design our website. To eval-uate and analyze the use of our website, usage information is transmitted to our servers and stored for analysis. Your IP address will be shortened during this pro-cess and thus anonymized. If you want to prevent your data from being pro-cessed for data analysis purposes, you can object at any time with a mouse click. In this case, an opt-out cookie that does not contain any usage data is stored in your browser. As a result, Matomo will not collect any data from your current visit to our website. Please note: If you delete cookies, this will also delete the opt-out cookie, which you may need to reactivate.

8.2. Google Maps

This website uses Google Maps, a mapping service provided by Google Ireland Limited (“Google”), based on the consent of website visitors. If you have consented to this, Google may place “cookies”, which are text files placed on your computer, in order to analyse your use of the website. The information generated by the cookie is usually also transferred to a Google server in the USA and stored there.

9. Further information and contacts

In addition, you may invoke your rights to correction or deletion at any time, to restrict processing, to object to processing, and to data portability. You will find the option to contact us by email or letter on the website. You also have the right to contact the data protection supervisory authority for complaints.