We, Protagen Protein Services GmbH (hereinafter referred to as "we" or "PPS"), appreciate your visit to our website and your interest in our company as well as our products and services. We take the protection of your personal data and their confidential treatment seriously.

The processing of your personal data strictly follows the statutory provisions of the data protection law of the European Union, in particular the German General Data Protection Regulation (hereinafter "GDPR") as well as the German Federal Data Protection Act.

As required by these laws, in this document we inform you about the means by which we process your personal data and about your rights as a concerned party in the context of using our website. The [capital] terms used, such as "Personal data" or their "Processing" correspond to the definitions in Art. 4 GDPR.

1. Responsibility and Data Protection Officer

Responsible for data processing in terms of data protection laws is:

Protagen Protein Services GmbH

Inselwiesenstraße 10

74076 Heilbronn

Germany

Tel.:  +49 7131 74 50 40

E-Mail:

 

You can see our imprint here. Imprint

 

If you have any questions or comments about privacy, please feel free to contact us.

 

Our data protection officer can be reached as follows:

 

2. Subject and purpose of data protection

 

The subject matter of data protection is personal data. Personal data are all Information that relates to an identified or identifiable natural person (so-called affected person). These include e.g. Information such as name, postal address, e-mail address or telephone number, but also Information that necessarily arises during the use of our website, such as Information on the beginning, end and extent of use and the transmission of your IP address.

 

We process personal data in compliance with the relevant data protection regulations. This means that your data will only be processed by PPS if there is a consent or a legal permission, e.g. if data processing is required to provide our contractual services (for example, processing of orders) or required by law or due to our legitimate interests within the meaning of Art. 6 (1) lit. f) GDPR (for example our interest in the analysis, optimization and safe operation of our website).

 

We take state-of-the-art organizational, contractual and technical security measures art to ensure that the data protection regulations are adhered to and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

 

3. Data processing when accessing our website

 

The use of our website is generally possible without registration and without providing personal data. Even if you use our website purely for information purposes, however, personal data can be automatically collected and processed. Below you will find an overview of the type, scope, purpose and legal basis of the data processing on our website.

 

a. Providing our website

When accessing our website through your device, we automatically collect and process the following data in the server log files:

 

- date and time of access,

- duration of the visit,

- type of device,

- used operating system,

- the features you use

- amount of sent data,

- type of event,

- referrer URL

- domain name

- IP address

 

We process the data mentioned above on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR, namely for the provision and display of the website, for ensuring technical operation purposes, for the identification and elimination of disruptions as well as for security reasons (for example for the investigation of cases of abuse or fraud). When you visit our website, this data is processed automatically. Without this provision you can not use our website. We do not use this data for the purpose of drawing conclusions about your identity.

 

The collected data is usually deleted after 60 days, unless we exceptionally need it for the purposes mentioned above. In such a case, we will delete the data immediately after a misuse.

 

b. Cookies

When you visit our website, so-called cookies, in form of small text files, can be stored on your device in order to offer you a comprehensive range of functions, to make the usage more comfortable and to optimize our offers. If you do not want to use cookies, you can prevent the storage of cookies on your device by means of appropriate settings of your Internet browser or use separate conflicting options. Please note that the functionality and functionality of our website may be restricted. For detailed information on the nature, scope, purposes, legal bases and possibilities for objecting to the processing of cookies, please refer to the descriptions of the individual functions based on the use of cookies.

 

c. Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there. Data processing is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR, namely our interest in the analysis, optimization and economic operation of our online offer. Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law.

 

Google will process the information submitted on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offering and to provide us with further services related to the use of our website. In this case, pseudonymous usage profiles of the users can be created from the processed data.

 

We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by your browser will not be merged with other data provided by Google. You can prevent the storage of cookies by setting their browser software accordingly; in addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools. google.com/dlpage/gaoptout?hl=de

 

For more information about Google's data usage and opt-out and opt-out options, please visit Google's websites at the following link: http://www.google.com/intl/en/policies/privacy/

 

d. Lead Inspector

For the statistical analysis of visitor access, technologies of Lead Inspector GmbH are used to collect, process and store data for marketing purposes and to recognize web visitors. Lead Inspector GmbH technology performs an address discovery based on this data, but only in those cases where it can ensure that it is a company rather than a single person as a visitor. For this purpose, so-called cookies can be used. Cookies are small text files that are stored on your computer and that allow an analysis of the use of the website by you. The corporate data collected by Lead Inspector GmbH may also contain personal data. Lead Inspector GmbH may use information that is left by visiting the websites to create anonymised user profiles. Insofar as IP addresses are collected, they will be anonymized immediately after collection by deleting the last number block. The data collection and storage by Lead Inspector GmbH for this website may at any time with effect for the future under https://www.leadinspector.de/widerspruch be contradicted.

 

e. Use of SalesViewer® technology:

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests  (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

 

4. Contact form

 

In addition to the purely informational use of our website, we provide various offers and features that you can use if you are interested. In this regard, usually you will need to provide other personal information that we use as described below.

 

We may also process the contact details you provide in an order to inform you about other products or services from our portfolio that may be interesting (e.g., comparable) based on your previous orders. The data processing takes place on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR for the maintenance of our customer relations by sending product information to existing customers. You may contradict the use of your contact information for this purpose, as described in para. 8 in more detail.

 

Due to commercial and tax regulations, we are obliged to save your contact, contract and payment data for a period of ten years.

 

Other contact

If you provide us personal information by e-mail or other contact- or online-forms, this will always occur on a voluntary basis. To handle and execute your contact request your information will be processed by us in accordance with Art. 6 para. 1 lit. b) GDPR. In this context, your personal information may also be passed on to affiliated companies or third parties. The information can also be stored by us in our Customer Relationship Management (CRM) system. We will erase the provided information as soon as the purpose of the collection is completely omitted and no further legal basis is taken (for example, further processing of the data is or becomes necessary to fulfill a closed contract). If and as long as the legal storage obligations and periods exist, we will delete the data only after the expiry of the corresponding deadlines.

 

5. Recipient of personal data

 

Within our company, only those individuals have access to personal information who need it for their particular purposes outlined above. We only forward your personal data to external third parties if this is necessary for the handling or processing of your request, if another legal permission exists or if we have your permission for this.

 

In particular, external recipients may be affiliates or external service providers that we use to provide services as our processors, for example, in the areas of technical infrastructure and maintenance of our website. These processors are carefully selected and regularly reviewed by us. You may only use the data for the purposes specified by us and according to our instructions.

 

For legal reasons it is also possible, that we may transfer personal information to public authorities and governmental institutions such as prosecutors, courts or tax authorities. The transfer takes place on the basis of Art. 6 para. 1 lit. c) GDPR.

 

Furthermore, we may disclose your personal information to third parties if we offer sales action, sweepstakes, contracts or similar services together with partners or service providers (such as transport service providers). The transfer of data in these cases on the basis of a consent, to carry out a contract with you or to safeguard our legitimate interests in accordance with. Art. 6 para. 1 lit. a), b) and / or f) GDPR. You will receive further information insofar as you provide your personal data in connection with the specific processing operation.

 

6. Data processing in third countries

 

If a data transmission takes place in locations whose domicile or place of data processing is not located in a member state of the European Union or in another contracting state to the agreement on the European Economic Area, we ensure before the transfer to the recipient either, outside in exceptional cases permitted by law, an adequate level of data protection exists (e.g. through a European Commission adequacy decision, through appropriate safeguards such as self-certification of the EU-US Privacy Shield beneficiary or the so-called EU standard contractual clauses with the beneficiary) or your consent to the data transfer exists.

 

7. Storage duration

 

The storage time of personal data, please refer to the respective description of the corresponding offer or service above. In addition, or as far as not otherwise indicated in the respective description of the offer or service, the following applies in general: We store your personal data only as long as this is necessary for the fulfillment of the processing purposes or - in the case of consent - as long as you do not revoke the consent. In the event of an objection, we will delete your personal data, unless its further processing is permitted in accordance with the relevant statutory provisions. We delete your personal data even if we are obliged to do so for legal reasons. If and as long as statutory retention requirements exist, we will delete the data only after expiration of the appropriate deadlines.

 

8. Affected rights

 

As a data processing concerned individual, you have numerous rights. In detail these are:

 

Right to information:

You have the right to obtain information about the data we have stored about you.

 

Right of rectification and cancellation:

You may require us to correct incorrect data and delete your data.

 

Restriction of processing:

You may require us to restrict the processing of your data.

 

Data portability:

If you have provided us with data based on a contract or consent, you may request that you receive the data you provide in a structured, common and machine-readable format, or that we may transfer it to another person in charge.

 

Objection to data processing in the case of legal basis "legitimate interest":

You have the right, for reasons arising from your particular situation, to contradict at any time to the processing of data by us, insofar as this is based on the legal basis "legitimate interest". If you make use of your right to contradict, we will stop processing your data, unless we can prove compelling legitimate reasons for further processing, which outweigh your rights.

 

Revocation of consent:

If you have given us your consent to the processing of your data, you can revoke it at any time with effect for the future. The lawfulness of the processing your data until the revocation remains unaffected.

 

Complaints to the regulatory authority:

You can also submit a complaint to the competent regulatory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority, which is responsible for your place of residence or your country, or the data protection authority responsible for us.

 

Data protection in applications and in the application process:

The responsible person collects and processes the personal data of applicants for the purpose of handling the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the responsible person by electronic means, for example by e-mail or via a web form. If the responsible person concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the candidate by PPS, the application documents will be automatically deleted six months after the announcement of the rejection decision, unless deletion precludes other legitimate interests of the responsible person. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).

 

The rights described above are only available to you under the condition that the applicable statutory requirements are met, even if this is not explicitly mentioned in the above description.

 

If you have any questions regarding the processing of your personal data, your rights and any consent given, you can contact us free of charge. To exercise all of your aforementioned rights, please contact our data protection officer (for contact details, see above under paragraph 1). Please make sure that we can clearly identify you.

 

9. Links to and integration of offers from third parties

 

a. Links

Websites and services of other providers, which are linked by our website, are provided by the respective service provider. We have no influence on the design, content and function of these third party services. We explicitly dissociate ourselves from all contents of all linked offers of third parties. Please note that third-party offers linked from our website may install your own cookies on your device or collect personal data. We have no influence on this. If necessary, please inform yourself directly to the providers of these linked third-party offers.

 

b. Services and content of third parties

Within our online offer, we rely on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR, namely our interest in the analysis, optimization and economic operation of our online offer, third-party content or service offerings in order to provide their content and services, e.g. Include videos (hereinafter collectively referred to as "Content"). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only those content whose respective providers use the IP address only for the delivery of the content.

 

c. Last status change

From time to time it may be necessary to adjust the content of this privacy policy. We reserve the right to change it at any time. We will also publish the amended version of the privacy policy at this site. In each case, the current version of our privacy policy applies during your visit to our website.

 

August 2018