Source: https://en.cellkeeper.eu/privacy-notice/
Timestamp: 2020-08-12 12:57:08
Document Index: 109186568

Matched Legal Cases: ['Art. 6', 'Art. 9', 'Art. 6', 'Art. 7', 'Art. 9', 'Art. 9', '§ 22', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 7', 'Art. 9', 'Art. 9', '§ 22', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 9', '§ 22', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6']

Privacy Notice – CellKeeper English
Sergros GmbH
info@cellkeeper.eu
https://www.cellkeeper.eu/impressum
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
We process the data of our patients and prospective clients and other clients or contractual partners (uniformly referred to as “patients”) in accordance with Art. 6 para. 1 lit. b) GDPR in order to provide them with our contractual or pre-contractual services. The data processed, the nature, scope and purpose and necessity of their processing are determined by the underlying contractual relationship. The processed data basically includes stock and master data of the patient (eg, name, address, etc.), as well as the contact data (eg, e-mail address, telephone, etc.), the contract data (eg, services used, purchased products, costs, names of contact persons) and payment details (eg, bank details, payment history, etc.).
As part of our services, we can also special categories of data gem. Art. 9 (1) GDPR, in particular information on the health of patients, possibly related to their sexual life or sexual orientation. For this we get, if necessary, gem. Art. 6 para. 1 lit. a., Art. 7, Art. 9 (2) lit. a. DSGVO expressly consent of the patients and process the special categories of data otherwise for purposes of health care on the basis of Art. 9 (2) (h). DSGVO, § 22 Abs. 1 Nr. 1 b. Federal Data Protection Act.
If required or required by law to perform the contract, we disclose or transmit patient data in the context of communicating with healthcare professionals, those required or typically required to perform the contract, such as, but not limited to, third parties. Laboratories, billing agencies or comparable service providers, as far as the provision of our services acc. Art. 6 para. 1 lit b. DSGVO serves, legally gem. Art. 6 para. 1 lit c. DSGVO is prescribed to our interests or those of patients in an efficient and cost-effective health care as a legitimate interest. Art. 6 para. 1 lit. F. DSGVO serves or gem. Art. 6 para. 1 lit d. DSGVO is necessary. to protect vital interests of patients or another natural person, or in the context of consent in accordance with. Art. 6 para. 1 lit. a., Art. 7 GDPR.
The data is deleted if the data for the fulfillment of contractual or statutory duties of care and handling of any warranty and similar obligations is no longer required, with the necessity of keeping the data every three years is checked; otherwise the statutory storage obligations apply.
We process the data of our clients and interested parties and other clients or contractual partners (uniformly referred to as “clients”) in accordance with Art. 6 para. 1 lit. b) GDPR in order to provide them with our contractual or pre-contractual services. The data processed, the nature, scope and purpose and necessity of their processing are determined by the underlying contractual relationship. The processed data basically includes stock and master data of the clients (eg, name, address, etc.), as well as the contact data (eg, e-mail address, telephone, etc.), the contract data (eg, services used, Fees, names of contact persons, etc.) and payment details (eg, bank details, payment history, etc.).
As part of our services, we can also special categories of data gem. Art. 9 para. 1 GDPR, in particular regarding the health of the clients, possibly related to their sexual life or sexual orientation, ethnic origin or religious or ideological convictions. For this we get, if necessary, gem. Art. 6 para. 1 lit. a., Art. 7, Art. 9 (2) lit. a. DSGVO expressly consent of the clients and process the special categories of data otherwise for purposes of health care on the basis of Art. 9 (2) (h). DSGVO, § 22 Abs. 1 Nr. 1 b. Federal Data Protection Act.
If required or required by law for the performance of the contract, we disclose or transmit client data in the context of communication with other professionals, those required or typically required to perform the contract, such as third parties, such as third parties. Billing agencies or comparable service providers, as far as this is the provision of our services acc. Art. 6 para. 1 lit b. DSGVO serves, legally gem. Art. 6 para. 1 lit c. DSGVO is prescribed to our interests or those of clients in an efficient and cost-effective health care as a legitimate interest. Art. 6 para. 1 lit. F. DSGVO serves or gem. Art. 6 para. 1 lit d. DSGVO is necessary. to protect the vital interests of clients or any other natural person, or in the context of consent in accordance with. Art. 6 para. 1 lit. a., Art. 7 GDPR.
We use external payment service providers whose platforms allow users and we to make payment transactions. These payment service providers may include, in each case with a link to the privacy policy: Paypal (https://www.paypal.com/web/sapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de / privacy /), Skrill (https://www.skrill.com/en/foot- line/privacy-policy/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https: / /www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/en/content/privacy- policy-statement.html), Stripe (https://stripe.com/en/privacy).
We leverage Google’s cloud and cloud software services (called Software as a Service, such as Google Suite) for the following purposes: document storage and management, calendaring, e-mailing, spreadsheets and presentations, sharing documents, content and information with particular recipients or publication of web pages, forms or other content and information as well as chats and participation in audio and video conferencing.
When using publicly available documents, websites or other content, Google may save cookies on users ‘computers for the purposes of web analysis or to remember users’ settings.
We use Google Cloud services based on our legitimate interests. Art. 6 para. 1 lit. f DSGVO on efficient and secure administrative and cooperation processes. Further, processing is based on a contract processing contract with Google (https://cloud.google.com/terms/data-processing-terms).
For more information, see the Google Privacy Policy (https://www.google.com/policies/privacy) and the Google Cloud Services Security Advisory (https://cloud.google.com/security/privacy/). You may object to the processing of your data in the Google Cloud to us in accordance with legal requirements. Incidentally, the deletion of the data within Google’s cloud services is determined by the other processes in which the data is processed (e.g., deletion of data that is no longer required for storage or storage required for taxation purposes).
We use Microsoft’s cloud and cloud software services (called software as a service, such as Microsoft Office) for the following purposes: document storage and management, calendar management, e-mailing, spreadsheets and presentations, document exchange, content and information with particular recipients or publication of web pages, forms or other content and information as well as chats and participation in audio and video conferencing.
Here, the personal data of the users are processed, as far as they become part of the documents and contents processed within the described services or are part of communication processes. For this, e.g. Master data and contact data of users, data on transactions, contracts, other processes and their contents belong. Microsoft also processes usage data and metadata used by Microsoft for security and service optimization purposes.
When using publicly available documents, web pages or other content, Microsoft may save cookies on users ‘computers for the purposes of web analysis or to remember users’ settings.
We use Microsoft cloud services based on our legitimate interests. Art. 6 para. 1 lit. f DSGVO on efficient and secure administrative and cooperation processes. Further, processing is based on a contract processing contract with Microsoft.
For more information, see the Microsoft Privacy Policy (https://privacy.microsoft.com/en-us/privacystatement) and the Microsoft Cloud Services Security Advisory (https://www.microsoft.com/en-us/trustcenter ). You may object to the processing of your data in the Microsoft Cloud us according to the legal requirements. Incidentally, the deletion of the data within Microsoft’s cloud services is determined by the other processes in which the data is processed (e.g., deletion of data that is no longer required for storage purposes or storage required for taxation purposes).
The Microsoft Cloud Services are offered by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA. As far as processing of data into the US takes place, we refer to Microsoft’s certification under the Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).
We use Dropbox, a cloud storage service, to store documents and other personal content files (collectively referred to as “files”) and share them with other people as part of so-called sharing. Here, the personal data of the user are processed, as far as these are part of the files stored within the Dropbox. For this, e.g. Master data and contact data of users, data on transactions, contracts, other processes and their contents belong.
When users access the files through the Shares, Dropbox also processes the usage data and metadata (such as IP addresses, access times and browser information, and users’ operating systems) for security and service optimization purposes. Dropbox may also store cookies on users ‘computers for the purposes of web analytics or to remember users’ preferences.
We use the Dropbox gem. Art. 6 para. 1 lit. f DSGVO based on our legitimate interests in efficient and secure administrative and cooperation processes.
Within our online offer, we rely on our legitimate interests (i.e., interest in the analysis, optimization and economical operation of our online offer) acc. Art. 6 para. 1 lit. f DSGVO industry-standard tracking measures, as far as these are necessary for the operation of the affiliate system. Below we clarify the users about the technical background.
In conclusion, our online offering requires us to be able to keep track of whether users who are interested in affiliate links and / or the offers available to us, then take advantage of the offers on the affiliate links or on our online platform. For this, the affiliate links and our offers are supplemented by certain values ​​that are part of the link or otherwise, e.g. in a cookie, can be set. The values ​​include in particular the source website (referrer), time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, as well as tracking specific values ​​such as Ad ID, affiliate ID, and categorizations.
The online user IDs used by us are pseudonymous values. That the online identifiers themselves do not contain personal data such as names or e-mail addresses. They only help us determine whether the same user who clicked on an affiliate link or was interested in an offer through our online offer, perceived the offer, i. e.g. has signed a contract with the provider. However, the online identification is personal insofar as the partner company and also us, the online identification together with other user data are available. Only then can the partner company tell us whether the user has taken the offer and we are e.g. can pay the bonus.
The data provided by the applicants may be further processed by us in the event of a successful application for employment purposes. Otherwise, if the application for a job offer is not successful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which the applicants are entitled to do at any time. The cancellation is subject to a legitimate revocation of the candidate, at the latest after the expiration of a period of six months, so that we can answer any follow-up questions to the application and meet our obligations under the provisions on the equal treatment of applicants. Invoices for any reimbursement of travel expenses are archived in accordance with tax regulations.
The data of the applicants are based on Art. 6 para. 1 p. 1 lit. b DSGVO processed (application procedure as pre-contractual or contractual relationship). Insofar as in the context of the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR (eg health data, such as disability or ethnic origin) are requested from applicants, so that the person responsible or the person concerned from him / her Employment law and the social security and social protection legislation and can fulfill its obligations in this regard, the processing of which is governed by Art. 9 (2) lit. b. DSGVO, in case of protection of vital interests of the applicants or other persons acc. Art. 9 para. 2 lit. c. DSGVO or for purposes of health care or occupational medicine, for the assessment of the work ability of the employee, for the medical diagnostics, the supply or treatment in the health or social area or for the administration of systems and services in the health or social area acc. Art. 9 para. 2 lit. H. DSGVO. In the case of a communication of special categories of data based on voluntary consent, their processing is based on Art. 9 (2) lit. a. DSGVO.
In the case of the processing of applicant data in Germany, §§ 22, 26 BDSG apply additionally.).
Communication via WhatsApp Messenger
We use the WhatsApp Messenger for communication purposes and ask you to pay attention to the following notes on the functionality, encryption, risks of WhatsApp, use of the metadata within the Facebook group of companies and your contradictions.
You do not need to use WhatsApp and can contact us in alternative ways, e.g. contact via phone or e-mail. Please use the contact information provided to you or use the specified contact options on our website.
WhatsApp WhatsApp Inc.’s WhatsApp Legal 1601 Willow Road Menlo Park, California 94025, USA is a US service, which means that the data you send via WhatsApp can first be sent to WhatsApp in the US, before they are forwarded to us.
However, WhatsApp is certified under the Privacy Shield Agreement, and therefore guarantees to comply with European and Swiss data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG&status=Active).
WhatsApp also warrants that the communications content (i.e., the content of your message and attached images) will be encrypted end-to-end. This means that the content of the messages is not visible, even by WhatsApp itself. You should always use a recent version of WhatsApp to ensure message content encryption.
However, we point out to our communication partners that although WhatsApp does not see the content, it can learn that and when communication partners communicate with us, as well as technical information about the device used by the communication partners and, depending on the settings of their device, also location information (so-called metadata). processed. Except for the encrypted content, it is possible to transmit the data of the communication partners within the Facebook group of companies, in particular for the purpose of optimizing the respective services and security purposes. Similarly, communication partners, at least until they have objected, should assume that their data processed by WhatsApp can be used for marketing or ad serving purposes.
If we ask communication partners for consent before communicating with them via WhatsApp, the legal basis for our processing of their data is Art. 6 para. 1 lit. a. DSGVO. By the way, if we do not ask for your consent and you We will use WhatsApp in relation to our contractual partners as well as within the scope of the contract initiation as a contractual measure in accordance with. Art. 6 para. 1 lit. b. DSGVO and in the case of other interested parties and communication partners based on our legitimate interests in a fast and efficient communication and fulfillment of the needs of our communication partner in communication via Messengern acc. Art. 6 para. 1 lit. f. DSGVO.
For more information about WhatsApp’s purpose, types and extent of processing of your data, as well as related rights and privacy settings, please refer to the WhatsApp Privacy Policy: https://www.whatsapp.com/legal.
You can object to communication with us via WhatsApp at any time. In the event of subscriptions to messages (also known as “broadcasts”) via WhatsApp, you may delete our corresponding telephone number from their contacts and request us to conduct your contact from our directory. In the case of ongoing individual inquiries or communications, you can also ask us not to continue the communication via WhatsApp and to delete the communication content.
In the case of communication via WhatsApp, we will delete the WhatsApp messages as soon as we can assume that we have answered any information from the users, if no reference to a previous conversation is to be expected and the deletion does not conflict with statutory retention requirements.
Furthermore, we point out that we do not transmit to WhatsApp the contact details communicated to us without your consent (for example, through an outgoing contact with you via WhatsApp).
Finally, we would like to point out that for security reasons, we reserve the right to refuse inquiries about WhatsApp. This is the case when e.g. Contractual privacy of special secrecy require or an answer over the messenger the formal requirements does not suffice. In such cases, we refer you to more adequate communication channels.
The newsletters are distributed using MailChimp, a mailing service platform owned by Rocket Science Group, LLC, 675 Ponce De Leon Ave # 5000, Atlanta, GA 30308, USA. The privacy policy of the shipping service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is based on our legitimate interests gem. Art. 6 para. 1 lit. f. DSGVO and a contract processing agreement acc. Art. 28 (3) sentence 1 DSGVO.
The newsletter is sent by means of the shipping service provider [NAME, ADDRESS, COUNTRY]. You can view the privacy policy of the shipping service provider here: [LINK TO PRIVACY POLICY]. The shipping service provider is based on our legitimate interests gem. Art. 6 para. 1 lit. f. DSGVO and a contract processing agreement acc. Art. 28 (3) sentence 1 DSGVO.
We process personal data of the participants of competitions and competitions only in compliance with the relevant data protection regulations and only for the provision, implementation and processing of competitions and contests (6 para 1 lit. b DSGVO).
Participants’ data will only be transmitted to other parties if this is necessary for the conduct of the competitions and competitions (for example, for the purpose of sending profits) or if a Participant has consented to the transmission.
If entries of the participants are published in the context of the competitions or competitions (eg in the context of a vote or presentation of the competition or competition entries, or the winner or reporting on the competition or competition), we point out that the names of the participants in this Context can also be published. The participants can contradict this at any time
If the contests and competitions take place within an online platform or within a social network (for example Facebook or Instagram, hereinafter referred to as “online platform”), then the usage and data protection provisions of the respective platforms apply additionally. In these cases, we point out that we are responsible for the information provided by the participants in the competitions and contests and that we must receive inquiries regarding the competitions and competitions.
The data of the participants will be deleted as soon as the raffle or the competition is over and the data is no longer required to inform the winners or if there are any questions about the raffle. Basically, the data of the participants will be deleted at the latest after 6 months after the end of the competition. Data of the winners can be kept longer, e.g. Answer queries about the profits or fulfill the profit performance; in this case, the retention period depends on the type of profit and is e.g. for goods or services up to three years, e.g. To handle warranty cases. Furthermore, the data of the subscribers may be stored longer, e.g. in the form of reporting on the raffle in online and offline media.
If data was also collected for other purposes in the context of the raffle, its processing and the retention period according to the data protection instructions are directed to this use (for example, in the case of a subscription to the newsletter as part of a raffle).
If we ask users for consent (for example, in the context of a cookie consent), the legal basis of this processing is Art. 6 (1) lit. a. DSGVO. Otherwise, the personal data of the users are processed on the basis of our legitimate interests (that is, interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1) lit. DSGVO).
We use Google Analytics to display the advertisements displayed within Google and its affiliate advertising services, only those users who have shown an interest in our online offering or who have certain characteristics (eg, interest in specific topics or products that they use) Web pages) that we submit to Google (so-called “Remarketing” or “Google Analytics Audiences”). With Remarketing Audiences, we also want to make sure that our ads meet the potential interest of users.
As far as data is processed in the US, we point out that Google is certified under the Privacy Shield Agreement, thereby ensuring compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) .
For more information about Google’s data usage, hiring and opt-out options, please read Google’s Privacy Policy (https://policies.google.com/technologies/ads) and Google’s Ads Ads Settings (https: // adssettings.google.com/authenticated).
On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) we use social plugins (“plugins”) of the social network facebook.com, which operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”).
Within our online offer functions and contents of the service Xing, offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, can be integrated. For this, e.g. Content such as images, videos, or text and buttons that allow users to share content from this online offering within Xing. If the users are members of the platform Xing, Xing can call the o.g. Assign contents and functions to the user profiles there. Xing’s Privacy Policy: https://privacy.xing.com/en/ privacy_policy.
Within our online offering, features and content of the Google+ platform offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) may be incorporated. For this, e.g. Content such as images, videos, or text and buttons that allow users to share content from this online offering within Google. If the users are members of the platform Google+, Google can call the o.g. Assign contents and functions to the user profiles there.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). For more information about Google’s data usage, hiring and opt-out options, please read Google’s Privacy Policy (https://policies.google.com/technologies/ads) and Google’s Ads Ads Settings (https: // adssettings.google.com/authenticated).
We use the privacy-protected Shariff buttons. “Shariff” is designed to allow more privacy on the web and to replace the usual “share” buttons on social networks. In this case, it is not the user’s browser but the server on which this online offer is located that establishes a connection with the server of the respective social media platforms and asks, e.g. the number of likes, etc. The user remains anonymous. More information about the Shariff project can be found at the developers of c’t magazine: www.ct.de.