Status: October 2019

 

Life Science Factory respects your privacy

The protection and security of your personal data is important to the Life Science Factory Management GmbH, Otto-Brenner-Straße 20, 37079 Göttingen, Germany (“LSF”). Therefore, LSF processes personal data in compliance with applicable laws on data protection and data security.

 

In the following, we inform you about the processing of personal data when using LSF-Websites. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

 

Table of Contents

1. Data Controller
2. Processing of personal data related to your use of our websites and applications
3. Processing of personal data related to your business relationship with LSF
4. Processing of personal data for direct marketing
5. Transfer and disclosure of personal data
6. Retention periods
7. Withdrawal of your consent
8. Your rights
9. Minors
10. Data Privacy Contact
11. Changes to this Data Privacy Notice

1. Data Controller

Responsible for the processing of your data is:

Life Science Factory Management GmbH

Otto-Brenner-Straße 20

37079 Göttingen, Germany

Email: info@lifescience-factory.com

2. Processing of personal data related to your use of our websites and applications

2.1 Categories of personal data processed, purpose and legal basis

When visiting LSF websites, LSF may process the following personal data about you:

• Personal data that you actively and voluntarily provide within use of LSF websites (e.g., when registering for workshops, contact forms, subscribing for newsletters, contacting us with your inquiries etc.), such as name, e-mail address, telephone number, information submitted as part of a support request etc.; and
• Information that is automatically sent to us by your web browser or device, such as your IP-address, device type, browser type, referring site, sites accessed during your visit, the date and time of each visitor request.

LSF processes your personal data for the following purposes:

• to provide, improve, and develop the services and functions of LSF websites;
• to create and maintain a trusted and safer environment, such as to verify or authenticate information or identifications provided by you, to conduct security investigations and risk assessments;
• to answer and fulfil your specific requests;
• to send you marketing information;
• to provide, personalize, measure, and improve our advertising and marketing;
• to improve and develop our services and products;
• as reasonably necessary to enforce our General Terms and Conditions, to establish or preserve a legal claim or defense, to prevent fraud or other illegal activities, including attacks on LSF information technology systems.

The legal basis for LSF processing your personal data may be:

• Your Consent to us using the personal details you provide to carry out the purposes identified to you in accordance with this Notice (Art. 6 (1) (a) GDPR);
• LSF exercising its rights and performing its obligations in connection with any contract LSF makes with you (Art. 6 (1) (b) GDPR);
• Compliance with LSF’s legal obligations (Art. 6 (1) (c) GDPR); and/or
• Legitimate interests pursued by LSF (Art. 6 (1) (f) GDPR). Generally the legitimate interest pursued by LSF in relation to our use of your personal data is the efficient operation, management and support of the LSF websites.

 

2.2 Cookies

The LSF websites use cookies. Cookies are small text files which are stored on your device by the browser you use and through which certain information flows to the body which sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the online offer more user-friendly and effective.

In the following, we inform you about the cookies and external media we use:

 

Essential

Name: Borlabs Cookie
Provider: Owner of this website
Purpose: Saves the preferences of visitors selected in the cookie box of Borlabs Cookie.
Cookie name: borlabs-cookie
Cookie term: 1 year

 

Name: Okta
Provider: Okta Inc.
Purpose: To provide the login functionality.
Cookie name: okta-oauth_*,sid,JSESSIONID
Cookie term: Session / 1 year

 

Statistics

Name: Google Analytics
Provider: Google LLC
Purpose: Cookie from Google for website analytics. Generates statistical data about how the visitor uses the website.
Privacy policy: https://policies.google.com/privacy
Cookie name: _ga,_gat,_gid
Cookie term: 2 years

 

External media

Name: Google Maps
Provider: Google
Purpose: Used to unlock Google Maps data.
Privacy Policy: https://policies.google.com/privacy
Host(s): .google.com
Cookie name: NID
Cookie term: 6 months

 

Name: Instagram
Provider: Facebook
Purpose: Used to unlock Instagram content.
Privacy Policy: https://www.instagram.com/legal/privacy/
Host(s): .instagram.com
Cookie name: pigeon_state
Cookie term: Session

 

2.3 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

This website uses Google Analytics with the extension “_anonymizeIp()”. This shortens the processing of IP addresses, thus excluding the possibility of personal references. If the data collected about you is related to a person, this is excluded immediately and the personal data is deleted immediately.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) (f) GDPR.

Third Party Information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms: https://policies.google.com/terms?hl=en, Übersicht zum Datenschutz: http://www.google.com/intl/en_uk/analytics/learn/privacy.html, as well as the Privacy Policy: https://policies.google.com/privacy?hl=en.

 

2.4 Google Maps

LSF websites use the services of Google Maps. This allows interactive maps to be displayed directly on the website and allows you to conveniently use the map function.

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged into Google, your information will be directly associated with your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and / or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

For further information on the purpose and scope of data collection and processing by Google, please refer to the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

2.5 Transfer of personal data to third parties

We also link to third-party content and have taken steps to protect your privacy. These are, for example, so-called social plugins of the social networks Facebook and Twitter. Moreover, we integrate functions and content from other networks (e.g. Instagram and YouTube) in order to actively participate in media development and offer content in the best possible form.

LSF protects your privacy by not directly integrating the content of third parties. To protect the data, before displaying external content and transferring data to third parties, we expressly point this out. Users can then consent to the transfer of data themselves and have the content displayed with a click (so-called two-click solution). The legal basis for processing the data upon the user’s consent is Art. 6 (1) (a) GDPR.

 

CONSENT FOR THIRD-PARTY CONTENT

Users can permanently consent to the display of embedded third-party content. The selection is then permanently saved in the user’s Internet browser. Consent can be withdrawn here at any time:

 

Contents of Instagram: The “Embed” function of Instagram provides the ability to integrate Instagram images and videos into the LSF websites. Instagram’s privacy notice: https://www.instagram.com/legal/privacy/

 

Contents of Google Maps: The “Embed” function of Google provides the ability to integrate the interactive map into the LSF websites. Google’s privacy notice: https://policies.google.com/privacy

 

2.6 links to other websites

This Data Privacy Notice applies only to LSF websites and not to third-party websites and applications. LSF websites may contain links to third-party websites and applications that may be of interest to you. LSF is not responsible for the collection, processing and use of your data within the framework of websites or applications that are not operated by LSF, nor for their content.

3. Processing of personal data related to your business relationship with LSF

In the context of your business relationship with LSF, LSF may process the following categories of personal data of contact persons at (prospective) customers, suppliers, vendors and partners (each a “Business Partner”):

• Contact information (such as full name, work address, work telephone number, work mobile phone number, work fax number and work email address); 
• Payment data (such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information); 
• Further information necessarily processed in a project or contractual relationship with LSF or voluntarily provided by the Business Partner, such as personal data relating to orders placed, payments made, requests, and project milestones; 
• Personal data collected from publicly available resources, integrity data bases and credit agencies; and
• If legally required for Business Partner compliance screenings: date of birth, ID numbers, identity cards and information about relevant and significant litigation or other legal proceedings against Business Partners.

 LSF may process the personal data for the following purposes:

• Communicating with Business Partners about products, services and projects of LSF or Business Partners, e.g. by responding to inquiries or requests or providing you with technical information about purchased products;
• Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services;
• Administrating and performing marketing campaigns, market analysis, sweepstakes, contests, or other promotional activities or events;
• Conducting direct marketing activities;
• Maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities;
• Ensuring compliance with legal obligations (such as record keeping obligations), export control and customs, Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and LSF policies or industry standards; and
• Solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims.

The legal basis for LSF processing data about you is that such processing is necessary for the purposes of:

• LSF exercising its rights and performing its obligations in connection with any contract LSF makes with you (Art. 6 (1) (b) GDPR),
• Compliance with legal obligations of LSF (Art. 6 (1) (c) GDPR), and/or
• Legitimate interests pursued by LSF (Art. 6 (1) (f) GDPR).

Generally the legitimate interest pursued by LSF in relation to our use of your personal data is the efficient performance or management of our business relationship with you.

In some cases, LSF may ask if you consent to the relevant use of your personal data. In such cases, the legal basis for LSF processing that data about you may (in addition or instead) be that you have consented (Art. 6 (1) (a) GDPR).

 

4. Processing of personal data for direct marketing

Where and as permitted under applicable law, LSF may process your contact information for direct marketing purposes concerning LSF products and services (e.g. event invitations, newsletters), also by e-mail.

Where consented to receiving LSF marketing information on the basis of your personal interests, LSF will determine your personal interests by storing information about your visits on LSF websites with the help of cookies. This information may include viewed articles, downloaded documents and date and time of access (“Usage Data”) and will be stored in a personal user profile. Information on whether and when you opened a marketing e-mail LSF sent to you will also be added to the profile; LSF receives this information by calling up small images embedded in the e-mail (known as web beacons).

Moreover, the following information that you provided directly on the LSF website or, if applicable, that is stored in LSF Customer Relationship Management systems will be added to your profile:

• Personal contact data (e.g. name, title, company, function/role, country, telephone number);
• Information about the company you work for (e.g. address, industry and other publicly available information).

The data described in the preceding paragraph will be used by LSF to send you marketing content (e.g. newsletters, invitations to events and trade fairs etc.) concerning products and services that are of interest to you. In addition this data will be used by LSF sales personnel to submit offers to you and to be able to support you / your company in the best possible way.

Your data will be deleted from the marketing automation system of LSF if it is no longer needed for marketing purposes or if you have revoked your consent.

You have the right at any time to object to the use of your contact data for these purposes by sending an e-mail to unsubscribe@lifescience-factory.com or make use of the possibility to object in the message you have received.

 

5. Transfer and disclosure of personal data

LSF may transfer or disclose your personal data to:

• Other companies of the Sartorius Group or third parties in the context of your usage of LSF websites or our business relationship with you;
• third parties which provide IT services to LSF and which process such data only for the purpose of such services (e.g., hosting or IT maintenance and support services); and/or
• third parties in connection with complying with legal obligations or establishing, exercising or defending rights or claims (e.g., for court and arbitration proceedings, to law enforcement authorities and regulators, to attorneys and consultants).

Sometimes the recipients to whom LSF transfers or discloses your personal data are located in countries in which applicable laws do not offer the same level of data protection as the laws of your home country.

In such cases, if required by applicable law, LSF takes measures to implement appropriate and suitable safeguards for the protection of your personal data. Thus, LSF transfers personal data to external recipients in third countries only if the recipient has entered into EU Standard Contractual Clauses with LSF, implemented Binding Corporate Rules in its organization or – in case of US recipients – the recipient is certified under the Privacy Shield.

 

6. Retention periods

If no explicit storage period is specified at the time of collection (e.g. as part of a declaration of consent), your personal data will be deleted to the extent that it is no longer required for the purpose of storage, unless statutory storage obligations (e.g. commercial and tax law storage obligations) prohibit deletion.

7. Withdrawal of your consent

In case you declared your consent for the processing of certain personal data by LSF, you have the right to withdraw the consent at any time with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. If the consent is withdrawn, LSF may only further process the personal data where there is another legal basis for the processing.

8. Your rights

Under applicable data protection law you may have the right to:

• Obtain confirmation from Sartorius as to whether or not personal data concerning you are being processed, and where that is the case, access to the personal data;
• Obtain from Sartorius the rectification of inaccurate personal data concerning you;
• Obtain from Sartorius the erasure of your personal data;
• Obtain from Sartorius restriction of processing regarding your personal data;
• Data portability concerning personal data, which you actively provided;
• Object, on grounds relating to your particular situation, to processing of personal data concerning you; and
• Complain to a government supervisory authority (e.g. to the State Data Protection Officer for Lower Saxony, Germany) regarding our processing of your data.

 

9. Minors

The LSF websites are not intended for children under the age of 16.

10. Data Privacy Contact

The LSF supports you in all questions concerning data protection. Complaints can also be addressed to LSF and the rights stated in this data protection declaration can be asserted.

 

The LSF data protection organisation can be contacted at dataprotection@lifescience-factory.com.

11. Changes to this Data Privacy Notice

LSF reserves the right to change or adapt this data protection declaration at any time in compliance with the applicable data protection regulations, for example in order to reflect changes with regard to certain security and data protection measures or changes for other operational, legal or regulatory reasons.