Source: https://www.brain-biotech.de/en/data-protection-statement
Timestamp: 2019-04-19 17:28:18+00:00

Document:
You can reach our data protection officer at privacy@brain-biotech.de or at our postal address with the addition “data protection officer”.
(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We also specify the defined criteria for the storage period.
(1) This website uses the web analysis service Matomo to analyse and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f GDPR.
(3) This website uses Matomo with the setting “AnonymizeIP”. This shortens the processing of IP addresses and prevents direct personal contact. The IP address transmitted by your browser using Matomo will not be merged with other data collected by us.
(4) The Piwik program is an open source project.
(1) With your consent you can subscribe to our newsletter, with which we inform you about us and our Investor Relations news.
(3) The only mandatory information for sending the newsletter is your e-mail address. After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
(5) We point out to you that we evaluate your user behaviour when sending the newsletter. For this analysis, the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files stored on our website. The data is collected exclusively pseudonymised. During the evaluation we record whether a newsletter has been viewed and which links have been clicked on, whereby there is no link to your data.
The information is stored for as long as you have subscribed to the newsletter. Tracking of the newsletters viewed and the links clicked on is also not possible if you have deactivated the display of images in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above tracking takes place.
(1) This website uses the timeline (plugin) of the Twitter service. This feature is provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
By accessing the part(s) of this website containing the timeline, the browser establishes a direct connection with the servers of Twitter. The content of the Twitter timeline is transmitted by Twitter directly to the user’s browser. Therefore we do not have an influence on the amount of data that Twitter collects with the help of this plugin and inform the users according to our knowledge. According to our knowledge only the IP address of the user and the URL of the respective website when visiting the timeline are transmitted.
(2) When integrating the icons of social networks such as Twitter, XING, and LinkedIn, we only make reference to these networks with an external link. In some cases, the link takes you to a share function of the network in question. This means that you can share our website, which you called up, with other users directly using the page of the social network to which the sharing button belongs.
The use of these web fonts represents a legitimate interest of our company in the sense of a consistent and appealing presentation of our online offer according to art. 6 para. 1 f of the GDPR.
The individual web font services used on our website are listed below.
Our website uses fonts from Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe), which are provided by the Adobe Typekit service on the website.
When you visit our website, your browser loads the required web fonts into your browser cache to display them in the correct way. This is done by connecting your browser to the Adobe servers in the USA.
Our website uses fonts provided by Monotype Imaging Inc, 600 Unicorn Park Drive, Woburn, MA 01801, USA (Monotype) through the Fonts.com service on the website.
When you visit our website, your browser loads the required web fonts into your browser cache to display them correctly. This is done by connecting your browser to Monotype’s servers in the USA.
The transmission of this data serves the logging of the use and/or the call of the corresponding web page, the counting of the calls (counter) and the prevention of the abuse of the counter. These data are stored in the form of log files and deleted after 30 days, so that the corresponding data can no longer be processed.
(1) We process the candidate data only for the purpose and in the context of the recruitment process in accordance with the legal requirements. The processing of the applicant data takes place in order to fulfil our (pre)contractual obligations in the context of the application procedure according to Art. 6 para. 1 lit. b. GDPR and Art. 6 para. 1 lit. f. GDPR if data processing becomes necessary for us, e.g. within the framework of legal procedures (in Germany also § 26 of the German Federal Data Protection Act “BDSG”).
(2) The recruitment process requires that candidates provide us with personal data. Necessary candidate data are personal information, postal and contact addresses and the documents belonging to the job application, such as cover letter, curriculum vitae and certificates. In addition, candidates may voluntarily provide us with additional information.
(3) By submitting the application to us, candidates agree to the processing of their data for the purposes of the recruitment process in accordance with the nature and scope set out in this data protection declaration.
(4) Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated within the scope of the recruitment procedure, they are additionally processed in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, e.g. severely disabled status or ethnic origin). If special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from candidates during the application procedure, they are additionally processed in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data, if these are required for the exercise of the profession).
(5) Candidates can send us their applications by post or by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and that the candidates themselves must ensure that they are encrypted. We can therefore accept no responsibility for the transmission of the application between the sender and the reception on our server. If the candidate is concerned about the security of sending the application documents by e-mail, we recommend sending the application documents by post.
(6) The data provided by the candidates can be further processed by us in the case of a successful employment relationship. Otherwise, if the application for a job offer is not successful, the candidates’ data will be deleted. Candidates’ data will also be deleted if an application is withdrawn, which the candidates are entitled to do at any time.
(7) Candidates will be deleted after a period of six months, subject to justified revocation, so that we can respond to any follow-up questions to the application and meet our obligations under the Equal Treatment Act.
In the case that you have agreed to further storage of your personal data, we will add your data to our applicant pool. The data will be deleted there after a period of two years.
If you have been awarded a job during the application process, the data will be transferred from the applicant data system to our personnel information system and deleted 10 years after termination of employment.
Invoices for any reimbursement of travel expenses are archived in accordance with tax regulations.

References: Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 § 26
 Art. 9
 Art. 9
 Art. 9
 Art. 9