Source: http://path-biobank.org/index.php/en/contact-path/disclaimer-englisch
Timestamp: 2019-04-20 19:01:47+00:00

Document:
The information contained in this website is for general information purposes only. The information is provided by PATH Biobank and while we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.
Through this website you are able to link to other websites which are not under the control of PATH Biobank. We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.
Every effort is made to keep the website up and running smoothly. However, PATH Biobank takes no responsibility for, and will not be liable for, the website being temporarily unavailable due to technical issues beyond our control.
We only process personal data of our users if this is necessary for the provision of a functional website as well as contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases where prior consent cannot be obtained as a matter of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Par. 1 S. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 Par. 1 S. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 Par. 1 S. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Par. 1 S. 1 d GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 Par. 1 S. 1 f GDPR serves as the legal basis for processing.
You can ask the person responsible to confirm whether your personal data is processed by us.
the existence of automated decision-making including profiling in accordance with Art. 22 Par. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have a right of rectification and/or completion towards the person responsible if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.
Your right to correction may be limited to the extent that it is likely to make it impossible or seriously impair the realisation of research or statistical purposes and the limitation is necessary for the fulfilment of research or statistical purposes.
Your right to limitation of processing may be limited to the extent that it is likely to make it impossible or seriously impair the realisation of research or statistical purposes and the restriction is necessary for the fulfilment of research or statistical purposes.
you revoke your consent, on which the processing was based pursuant to Art. 6 Par. 1 S. 1 lit. a or Art. 9 Par. 2 lit. a GDPR, and there is no other legal basis for the processing.
the personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 Par. 1 GDPR.
If the person responsible has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 Par. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
If you have exercised your right to have the person responsible to correct, delete or limit the processing, he/she is obliged to inform all recipients, to whom the personal data concerning you have been disclosed, about this correction or deletion of the data or the restriction on processing, unless this proves impossible or involves a disproportionate effort.
You shall have the right to be informed about such recipients by the person responsible.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the person responsible..
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Art. 6 Par. 1 S. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
You have the option to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
You also have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Par. 1 GDPR for reasons arising from your particular situation.
You have the right to revoke the consent you gave in connection with data protection regulations and processing at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 Par. 1 GDPR, unless Art. 9 Par. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
In the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state the own position and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside or work or the place suspected of the infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority to which the complaint has been filed shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
The legal basis for the temporary storage of data and log files is Art. 6 Par. 1 S. 1 lit. f GDPR.
Our legitimate interest in data processing in accordance with Art. 6 Par. 1 S. 1 lit. f GDPR also lies in these purposes.
The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection by the user.
You can contact us via the email address provided on our website. In this case, the user's personal data transmitted by e-mail will be stored.
The legal basis for the processing of data is Art. 6 Par. 1 lit. a GDPR if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Par. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 Par. 1 lit. b GDPR.
If you contact us via e-mail, this serves as the legitimate interest in the processing of your data.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data sent by email, this is the case when the conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 6
 Art. 9
 Art. 8
 Art. 17
 Art. 6
 Art. 89
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6