DATA PROTECTION STATEMENT
We, PANATecs® - a brand of Protagen Protein Services GmbH - appreciate your visit to our website and your interest in our company as well as our products and services. We take the protection of your personal data and their confidential treatment seriously.
The processing of your personal data strictly follows the statutory provisions of the data protection law of the European Union, in particular the German General Data Protection Regulation (hereinafter "GDPR") as well as the German Federal Data Protection Act.
As required by these laws, in this document we inform you about the means by which we process your personal data and about your rights as a concerned party in the context of using our website. The [capital] terms used, such as "Personal data" or their "Processing" correspond to the definitions in Art. 4 GDPR.
1. Responsibility and Data Protection Officer
Responsible for data processing in terms of data protection laws is:
PANATecs® - a brand of
Protagen Protein Services GmbH
Tel.: +49 7131-79 70 4-0
You can see our imprint here. http://www.panatecs.com/en/legal-details
If you have any questions or comments about privacy, please feel free to contact us.
2. Subject and purpose of data protection
The subject matter of data protection is personal data. Personal data are all Information that relates to an identified or identifiable natural person (so-called affected person). These include e.g. Information such as name, postal address, e-mail address or telephone number, but also Information that necessarily arises during the use of our website, such as Information on the beginning, end and extent of use and the transmission of your IP address.
We process personal data in compliance with the relevant data protection regulations. This means that your data will only be processed by PPS if there is a consent or a legal permission, e.g. if data processing is required to provide our contractual services (for example, processing of orders) or required by law or due to our legitimate interests within the meaning of Art. 6 (1) lit. f) GDPR (for example our interest in the analysis, optimization and safe operation of our website).
We take state-of-the-art organizational, contractual and technical security measures art to ensure that the data protection regulations are adhered to and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
3. Data processing when accessing our website
The use of our website is generally possible without registration and without providing personal data. Even if you use our website purely for information purposes, however, personal data can be automatically collected and processed. Below you will find an overview of the type, scope, purpose and legal basis of the data processing on our website.
a. Providing our website
When accessing our website through your device, we automatically collect and process the following data in the server log files:
- date and time of access,
- duration of the visit,
- type of device,
- used operating system,
- the features you use
- amount of sent data,
- type of event,
- referrer URL
- domain name
- IP address
We process the data mentioned above on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR, namely for the provision and display of the website, for ensuring technical operation purposes, for the identification and elimination of disruptions as well as for security reasons (for example for the investigation of cases of abuse or fraud). When you visit our website, this data is processed automatically. Without this provision you can not use our website. We do not use this data for the purpose of drawing conclusions about your identity.
The collected data is usually deleted after 60 days, unless we exceptionally need it for the purposes mentioned above. In such a case, we will delete the data immediately after a misuse.
c. Google Analytics
Google will process the information submitted on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offering and to provide us with further services related to the use of our website. In this case, pseudonymous usage profiles of the users can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by your browser will not be merged with other data provided by Google. You can prevent the storage of cookies by setting their browser software accordingly; in addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools. google.com/dlpage/gaoptout?hl=de
For more information about Google's data usage and opt-out and opt-out options, please visit Google's websites at the following link: http://www.google.com/intl/en/policies/privacy/
4. Webshop, contact form
In addition to the purely informational use of our website, we provide various offers and features that you can use if you are interested. In this regard, usually you will need to provide other personal information that we use as described below.
If you want to order in our webshop, you can create a customer account. Regardless of the existence of a customer account, it is necessary for the conclusion of the contract that you provide your personal information that we need for the processing of your order. The mandatory information required for this is marked with a "*", further information is optional. We process the data provided by you to create the customer account and to process your order. For the processing of payment transactions, we can pass on your payment data to a commissioned payment service provider. The data processing takes place for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b) GDPR.
We may also process the contact details you provide in an order to inform you about other products or services from our portfolio that may be interesting (e.g., comparable) based on your previous orders. The data processing takes place on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR for the maintenance of our customer relations by sending product information to existing customers. You may contradict the use of your contact information for this purpose, as described in para. 8 in more detail.
Due to commercial and tax regulations, we are obliged to save your contact, contract and payment data for a period of ten years.
b. Other contact
If you provide us personal information by e-mail or other contact- or online-forms, this will always occur on a voluntary basis. To handle and execute your contact request your information will be processed by us in accordance with Art. 6 para. 1 lit. b) GDPR. In this context, your personal information may also be passed on to affiliated companies or third parties. The information can also be stored by us in our Customer Relationship Management (CRM) system. We will erase the provided information as soon as the purpose of the collection is completely omitted and no further legal basis is taken (for example, further processing of the data is or becomes necessary to fulfill a closed contract). If and as long as the legal storage obligations and periods exist, we will delete the data only after the expiry of the corresponding deadlines.
5. Recipient of personal data
Within our company, only those individuals have access to personal information who need it for their particular purposes outlined above. We only forward your personal data to external third parties if this is necessary for the handling or processing of your request, if another legal permission exists or if we have your permission for this.
In particular, external recipients may be affiliates or external service providers that we use to provide services as our processors, for example, in the areas of technical infrastructure and maintenance of our website. These processors are carefully selected and regularly reviewed by us. You may only use the data for the purposes specified by us and according to our instructions.
For legal reasons it is also possible, that we may transfer personal information to public authorities and governmental institutions such as prosecutors, courts or tax authorities. The transfer takes place on the basis of Art. 6 para. 1 lit. c) GDPR.
Furthermore, we may disclose your personal information to third parties if we offer sales action, sweepstakes, contracts or similar services together with partners or service providers (such as transport service providers). The transfer of data in these cases on the basis of a consent, to carry out a contract with you or to safeguard our legitimate interests in accordance with. Art. 6 para. 1 lit. a), b) and / or f) GDPR. You will receive further information insofar as you provide your personal data in connection with the specific processing operation.
6. Data processing in third countries
If a data transmission takes place in locations whose domicile or place of data processing is not located in a member state of the European Union or in another contracting state to the agreement on the European Economic Area, we ensure before the transfer to the recipient either, outside in exceptional cases permitted by law, an adequate level of data protection exists (e.g. through a European Commission adequacy decision, through appropriate safeguards such as self-certification of the EU-US Privacy Shield beneficiary or the so-called EU standard contractual clauses with the beneficiary) or your consent to the data transfer exists.
7. Storage duration
The storage time of personal data, please refer to the respective description of the corresponding offer or service above. In addition, or as far as not otherwise indicated in the respective description of the offer or service, the following applies in general: We store your personal data only as long as this is necessary for the fulfillment of the processing purposes or - in the case of consent - as long as you do not revoke the consent. In the event of an objection, we will delete your personal data, unless its further processing is permitted in accordance with the relevant statutory provisions. We delete your personal data even if we are obliged to do so for legal reasons. If and as long as statutory retention requirements exist, we will delete the data only after expiration of the appropriate deadlines.
8. Affected rights
As a data processing concerned individual, you have numerous rights. In detail these are:
- Right to information: You have the right to obtain information about the data we have stored about you.
- Right of rectification and cancellation: You may require us to correct incorrect data and delete your data.
- Restriction of processing: You may require us to restrict the processing of your data.
- Data portability: If you have provided us with data based on a contract or consent, you may request that you receive the data you provide in a structured, common and machine-readable format, or that we may transfer it to another person in charge.
- Objection to data processing in the case of legal basis "legitimate interest": You have the right, for reasons arising from your particular situation, to contradict at any time to the processing of data by us, insofar as this is based on the legal basis "legitimate interest". If you make use of your right to contradict, we will stop processing your data, unless we can prove compelling legitimate reasons for further processing, which outweigh your rights.
- Revocation of consent: If you have given us your consent to the processing of your data, you can revoke it at any time with effect for the future. The lawfulness of the processing your data until the revocation remains unaffected.
- Complaints to the regulatory authority: You can also submit a complaint to the competent regulatory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority, which is responsible for your place of residence or your country, or the data protection authority responsible for us.
- The rights described above are only available to you under the condition that the applicable statutory requirements are met, even if this is not explicitly mentioned in the above description.
If you have any questions regarding the processing of your personal data, your rights and any consent given, you can contact us free of charge. To exercise all of your aforementioned rights, please contact our data protection officer (for contact details, see above under paragraph 1). Please make sure that we can clearly identify you.
9. Links to and integration of offers from third parties
Websites and services of other providers, which are linked by our website, are provided by the respective service provider. We have no influence on the design, content and function of these third party services. We explicitly dissociate ourselves from all contents of all linked offers of third parties. Please note that third-party offers linked from our website may install your own cookies on your device or collect personal data. We have no influence on this. If necessary, please inform yourself directly to the providers of these linked third-party offers.
b. Services and content of third parties
Within our online offer, we rely on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR, namely our interest in the analysis, optimization and economic operation of our online offer, third-party content or service offerings in order to provide their content and services, e.g. Include videos (hereinafter collectively referred to as "Content"). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only those content whose respective providers use the IP address only for the delivery of the content.
c. Last status change
Stand August 2018