In the following, we inform you about the collection of personal data when using our website. Personal data within the meaning of Art. 4 No. 1 EU General Data Protection Regulation (GDPR) is all information that can be related to you personally, such as name, address, e-mail addresses, user behavior.

Responsible person and data protection officer

The controller for the processing of personal data within the meaning of the GDPR is

Seracell Pharma GmbH
Schillingallee 68
18057 Rostock
Germany

+49 381 440 761 00
info@seracell.de

You can reach our data protection officer at

Lawyer Christian Krösch
SLK Compliance Services GmbH
Königsbrücker Straße 76
01099 Dresden
Germany

+49 351 89676360
datenschutz@slk-compliance.de

General information on the collection, disclosure and storage period of personal data

The primary purpose of processing your personal data is to provide our website and to establish and implement a contractual relationship with you. If you contact us by e-mail, via a contact form or by telephone, we process the data you provide (e.g. your e-mail address, name, telephone number) in order to process your request. The legal basis for this is regularly Art. 6 para. 1 b) GDPR. Insofar as we ask for your consent for this, Art. 6 para. 1 a) GDPR is relevant. In addition, we process your data if we are legally obliged to do so, for example to fulfill commercial, tax or regulatory obligations. The legal basis is Art. 6 para. 1 c) GDPR. If necessary, we also process your data on the basis of Art. 6 para. 1 f) GDPR to protect legitimate interests. Our legitimate interests lie in particular in ensuring IT and information security (e.g. defence against cyberattacks, logging of access), asserting and defending legal claims, preventing and investigating criminal offences and misuse, protecting against economic risks and payment defaults, carrying out internal administrative and organizational processes (e.g. financial and risk management, compliance, internal audits). internal administrative and organizational processes (e.g. financial and risk management, compliance, internal audits), ensuring smooth business operations and the further development of services and products, approaching existing customers about our own similar offers, insofar as this is legally permissible (Section 7 (1), (3) UWG), conducting market and opinion research as well as measures for customer loyalty and improving our offer, insofar as this is in accordance with data protection and competition law requirements.

In addition, our legitimate interests may also lie in the protection against economic risks and payment defaults, in the use of data for internal analyses, market and opinion research, in the improvement and further development of products and services, in communication and cooperation with customers, suppliers or other business partners and in providing information about our own products and services, including direct advertising, insofar as this is legally permissible.

We only pass on your personal data to third parties if you have given your consent to this in accordance with Art. 6 para. 1 a) GDPR, if the disclosure is necessary in accordance with Art. 6 para. 1 f) GDPR to assert, exercise or defend legal claims or to protect our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, in the event that there is a legal obligation to disclose your data in accordance with Art. 6 para. 1 c) GDPR, there is a legal obligation (e.g. tax authorities) and this is legally permissible and required under Art. 6 para. 1 b) GDPR for the processing of contractual relationships with you (e.g. banks, logistics service providers, IT service providers).

Depending on which services you use on our website or request from us, your personal data may be transferred to a third country. If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection, other appropriate data protection guarantees (e.g. binding corporate data protection regulations or EU standard contractual clauses) are in place or an exception for the transfer pursuant to Art. 49 GDPR exists.

We delete your personal data as soon as it is no longer required for the purposes stated in this data protection information. After termination of the contractual relationship, your personal data will be stored for as long as we are legally obliged to do so. This regularly results from legal obligations to provide evidence and retain data, which are regulated in the German Commercial Code and the German Fiscal Code, among others. The storage periods are up to eight years. In addition, personal data may be stored for the period during which claims can be asserted against us (statutory limitation period of three or up to thirty years).

You only need to provide us with the personal data that is necessary for the provision and use of certain functions of our website or for the establishment and performance of a contractual relationship and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will not be able to provide the website and certain functions of the website and conclude and execute a contract with you.

Collection and processing of personal data on our website

Visit our website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server and that is technically necessary for us to display our website and ensure stability and security. These are the IP address, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the operating system of your system. We also record the website from which our site was accessed.

Temporary storage of the IP address by the system is necessary to enable delivery of the website to your browser. For this purpose, your IP address must remain stored for the duration of the session. The other data is processed to ensure the functionality of the website. We also use the data to optimize the website and to ensure the stability and security of our systems. The legal basis is Art. 6 para. 1 f) GDPR, based on a consideration of our legitimate and overriding interests mentioned above.

We transmit the data collected to external service providers (hosting provider, IT service provider, web agency) who support us in data processing for the above-mentioned purposes.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Otherwise, the data will be deleted within 7 days of accessing the website at the latest.

Cookies

When you use our website, we may collect information through the use of cookies or similar technologies (“cookies”). Cookies are small text files that are stored by your browser on your end device to store certain information. If you visit our website again later using the same device, the information stored in cookies is then sent back either to our website or to another website to which the cookie belongs. Through the stored and returned information, the respective website recognizes that you have already accessed and visited it with the browser of your end device. Only the cookie itself is identified on your end device. We use cookies to improve our website, to store information about your preferred activities on the website and thus to tailor our website to your individual interests and to comply with legal requirements.

This website uses the following types of cookies, the scope and function of which are explained below:

• Strictly necessary cookies
  Strictly necessary cookies are cookies without which you cannot use our website as intended or without which we cannot make our website available to you, Section 25 (2) No. 2 TDDDG. These include, for example, functions such as setting and storing your privacy settings, filling in and storing user entries, and security functions. These cookies are used without your consent. However, you have the option of deactivating these cookies via your browser settings. The legal basis for the processing of personal data using strictly necessary cookies is Art. 6 (1) c) GDPR or Art. 6 (1) f) GDPR, based on a weighing of our legitimate and overriding interests in the technically smooth provision of our website and the services offered through it.
  
  

You have the option of deleting all cookies once they have been set via your browser. You can also set your browser so that websites are prevented from saving and reading cookies.

Further information on data processing within and outside our website

Contact and communication

We collect your personal data as a customer, business partner, interested party or supplier if you provide it to us voluntarily by e-mail, via a form / contact form (including a cancellation form) on our website, by post or by telephone. We then record the information that comes about as part of the contact and/or collaboration. This includes, in particular, names and transmitted contact details, date and reason for contacting us (e.g. inquiry, offer initiation, contract termination).

The personal data collected from you will be used for the purpose of providing you with the requested products or services, to process your requests (including any cancellation) and to correspond with you (legal basis Art. 6 para. 1 b) GDPR), to fulfill legal obligations (legal basis Art. 6 para. 1 c) GDPR) or on the basis of legitimate interests of us or third parties (legal basis Art. 6 para. 1 f) GDPR), which are described in this privacy policy.

You are not obliged to provide the aforementioned personal data. However, the data provided may be required for communication, the conclusion of a contract, the execution of a contract or the termination of a contract. Without the provision of the data, it may not be possible to process your request.

The data relevant in each individual case is transferred to public bodies on the basis of statutory provisions or a contractual agreement if overriding legal provisions apply, to external service providers or other contractors and to other external bodies if you have given your consent or a transfer is permitted for reasons of overriding interest.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data provided is subject to retention obligations under tax and commercial law, it will be stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to further storage or further processing of the data is necessary for the assertion, exercise or defense of legal claims (statutory limitation period of three or up to thirty years).

Objection or revocation against the processing of your data

If you have given your consent to the processing of your data, you can withdraw it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details above.

Your rights

In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

In accordance with Art. 16 GDPR, you can request the immediate correction of incorrect or incomplete personal data stored by us. In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

In accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future.

You also have the right under Art. 77 GDPR to complain to a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, about the processing of your personal data by us if you consider that the processing of personal data relating to you infringes the GDPR.