This Privacy Notice provides information about the processing of your personal data in connection with your use of the LSF websites, business partners and marketing communications. The personal data we collect about you depends on the context of your interactions with us, the products, services and features you use, your location and applicable law.

 

Personal data include any information relatied to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 

In the following, we inform you about the processing of personal data when using LSF-Websites. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

 

1. Controller

The Life Science Factory Management GmbH,

Annastraße 27,

37075 Göttingen,

Email: info@lifescience-factory.com (“LSF“, “we“, “our” or “us“) is responsible for the processing of your personal data in connection with your use of the LSF websites, business partners and marketing communications.

2. Processing of personal data in connection with your use of our websites 

2.1 Processing purposes, categories of personal data and legal bases and sources

As part of your use of the LSF Websites, LSF may process information that you have actively and voluntarily provided about yourself or that has been generated by us in connection with your use of the LSF Website, including the following categories of personal data, for the purposes and on the legal bases set out below. 

Unless otherwise upon collection of the personal data, the legal basis are those of the General Data Protection Regulation (GDPR): 

• Article 6 (1) (b) GDPR (“Contract Performance“) – Exercising our rights and performing our obligations under a contract we enter into with you 
• Article 6 (1) (c) GDPR (“Legal Obligation“) – Compliance with our legal obligations 
• Article 6 (1) (f) GDPR (“Legitimate Interest“) – Legitimate interests pursued by us 
• Article 6 (1) (a) GDPR (“Consent“) – In some cases, we may ask if you consent to the relevant use of your personal data. In such cases, the legal basis for processing this data about you may (in addition or instead) be that you have consented. 

 

2.2 Cookies

The LSF websites use cookies. Cookies are small text files which are stored on your device by the browser you use and through which certain information flows to the body which sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the online offer more user-friendly and effective.

In the following, we inform you about the cookies and external media we use:

 

Purposes of the processing	Categories of personal data	Legal basis for the processing
Provision of the website for the general public and for the purpose of contacting customers and interested parties	IT-related data, such as your device and user ID, information about your operating system, the pages and services accessed during your visit, the date and time of each visitor request, passwords, login details and data and logs about your use of LSF websites, LSF information technology systems, applications or services	Contract fulfillment  Legitimate interest (balancing of interests: We have a legitimate interest in providing a website for non-registered users to provide general information about our company)
Collection of statistical information about the use of the website (so-called web analysis)	IT-related data	Legitimate interest (balancing of interests: We have a legitimate interest in obtaining information about the use of the website, in particular to improve our offer)
Detecting malfunctions and ensuring system security, including detecting and tracking unauthorized access attempts and access to our web servers	IT-related data	Contract fulfillment  Legitimate interest (balancing of interests: We have a legitimate interest in eliminating malfunctions, ensuring system security and detecting and tracking unauthorized access or attempted access)
Delivering website content and increasing the delivery speed and security of our website	IT-related data	Legitimate interest (balancing of interests: We have a legitimate interest in eliminating malfunctions, ensuring system security and detecting and tracking unauthorized access or attempted access)
Safeguarding and defending our rights	IT-related data  Contact details, such as name, work address, work telephone number, work cell phone number, work fax number and work e-mail address	Legal obligation  Legitimate interest (balancing of interests: We have a legitimate interest in asserting and defending our rights)
Processing your inquiries, concerns and feedback	IT-related data  Contact details	Contract fulfillment  Legitimate interest (balancing of interests: We have a legitimate interest in processing and considering your comments and feedback)

2.2 Cookies

The LSF websites use cookies. Cookies are small text files that are assigned to the browser you are using and stored on your device and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the online offer more user-friendly and effective overall. 

LSF protects your privacy by not directly integrating content from third-party providers. To protect your data, we expressly point this out before displaying external content and transferring data to third-party providers. Users can then independently consent to the data transfer and display the content by clicking on it (so-called two-click solution). The legal basis for processing the data after the user has given consent is Art. 6 (1) (a) GDPR. 

The selection is then permanently stored in the user’s Internet browser. Consent can be revoked here at any time. 

At you will find information on the cookies and external media we use: 

Required cookies

Name: Borlabs Cookie  
Provider: Owner of this website  
Purpose: Saves the preferences of visitors selected in the Cookie Box of Borlabs Cookie.  
Cookie name: borlabs-cookie  
Cookie lifetime: 1 year 

  

Name: Okta  
Provider: Okta Inc  
Purpose: To provide the login functionality.  
Privacy Policy: https://www.okta.com/privacy/  
Cookie name: okta-oauth_*,sid,JSESSIONID  
Cookie lifetime: Session / 1 year 

Analytics and personalization

Name: Google Analytics 4  
Provider: Google LLC  
Purpose: Cookie from Google for website analytics. Generates statistical data on how the visitor uses the website.  
Privacy policy: https://policies.google.com/privacy  
Cookie name: _ga,_gat,_gid  
Cookie: Duration 2 years 

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyze the use of websites. 
When using Google Analytics 4, so-called “cookies” are used as standard. Cookies are text files that are stored on your end device and enable your use of a website to be analyzed.  
The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server, where it is stored and processed. This may also result in information being transmitted to the servers of Google LLC based in the USA and further processing of the information there. 
When using Google Analytics 4, the IP address transmitted by your end device when you use the website is automatically collected and processed only in anonymized form by default, so that the information collected cannot be directly linked to a person. This automatic anonymization is achieved by Google truncating the IP address transmitted by your device within member states of the European Union (EU) or other parties to the Agreement on the European Economic Area (EEA). 
Google uses this and other information on our behalf to evaluate your use of the website, to compile reports on your website activity and usage behavior and to provide us with other services relating to your use of the website and the Internet. The abbreviated IP address transmitted by your device as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for 2 months and then deleted. 
Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the use of third-party information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and differentiate between user groups of the website for the purpose of target group-optimized marketing measures. However, data collected via the “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally. This data collected via the “demographic characteristics” function is stored for two months and then deleted. 
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the device you use to access the website, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the “cookie consent tool” provided on the website. 
We have concluded a so-called order processing contract with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties. 
To ensure compliance with the European level of data protection, including in the event of any transfer of data from the EU or the EEA to the USA and possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.  
Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites 

 

External Media & Marketing 

Name: Google Maps  
Provider: Google  
Purpose: Used to unblock Google Maps content. 
Privacy Policy: https://policies.google.com/privacy 
Host(s): .google.com  
Cookie name: NID  
Cookie lifetime: 6 months 

LSF websites use the Google Maps service. This allows interactive maps to be displayed directly on the website and enables you to use the map function conveniently.  

When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.  

Further information on the purpose and scope of data collection and its processing by Google can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA. 

 

Name: Instagram  
Provider: Facebook  
Purpose: Used to unblock Instagram content.  
Privacy policy: https://www.instagram.com/legal/privacy/  
Host(s): .instagram.com  
Cookie name: pigeon_state  
Cookie lifetime: Session 

 

Name: Facebook Pixel 
Provider: Facebook Ireland Limited  
Purpose: Facebook cookie used for website analytics, ad targeting and ad measurement.  
Privacy policy: https://www.facebook.com/policies/cookies  
Host(s): .facebook.com  
Cookie name: _fbp,act,c_user,datr,fr,m_pixel_ration,pl,presence,sb,spin,wd,xs  
Cookie duration: Session / 1 year 

This website uses the Facebook pixel (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, hereinafter referred to as “Facebook”) to measure conversions. 

This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized. 

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This allows Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator. 

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. 

You can find further information on protecting your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/ . 

You can also deactivate the remarketing function “Custom Audiences” in the settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You must be logged in to Facebook to do this. 

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/ 

Facebook also processes your data in the USA, among other places.  

The information generated by the cookies set by Facebook pixels about the use of our website is transmitted to servers in the USA and processed there. The transmitted data are only pseudonyms; it is not possible to draw conclusions about your name. Facebook relies on standard contractual clauses approved by the EU Commission for the transfer as a guarantee of a level of data protection comparable to that in the EU. 

 

Name: LinkedIn Insight Tag  
Provider: LinkedIn Corporation  
Purpose: Cookie from LinkedIn used for website analytics, ad targeting and ad measurement. Generates statistical data about how the visitor uses the website.  
Privacy policy: https://de.linkedin.com/legal/privacy-policy  
Host(s): .linkedin.com  
Cookie name: UserMatchHistory, li_oatml, lms_ads, li_fat_id, li_sugr, U, _guid, BizographicsOptOut  
Cookie duration: Session / 90 days 

On our website, we use the analysis and conversion tracking technology of the LinkedIn Inc. platform (2029 Stierlin Ct, Mountain View, CA 94043, USA, hereinafter referred to as “LinkedIn”). 

With the aforementioned LinkedIn technology, you can be shown more relevant advertising based on your interests. We also receive aggregated and anonymous reports from LinkedIn about advertising activity and information about how you interact with our website. To do this, LinkedIn uses a JavaScript code (Insight tag), which in turn places a cookie in your web browser or uses a pixel. 

The LinkedIn Insight tag collects data about the use of our website, including URL, referrer URL, IP address, device and browser characteristics, timestamps and page views. The data collected via the LinkedIn Insight tag is encrypted and anonymized within 7 days. The anonymized data is deleted within 180 days. LinkedIn does not share any personal data with the owner of the website, but only provides summarized reports on the website target group and display performance. 

In connection with the use of LinkedIn Insight Tag, the information collected is also processed on servers of LinkedIn Inc. in the USA. 

The information generated by the cookies set by LinkedIn Insight Tag about the use of our website is transmitted to servers in the USA and processed there. The transmitted data are only pseudonyms; it is not possible to draw conclusions about your name. LinkedIn relies on standard contractual clauses approved by the EU Commission for the transfer as a guarantee of a level of data protection comparable to that in the EU. 

Further information on data protection at LinkedIn can be found at https://de.linkedin.com/legal/privacy-policy 

 

Name: Twitter Pixel  
Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland  
Purpose: Cookie from Twitter used for website analytics, ad targeting and ad measurement.  
Privacy policy: https://privacy.twitter.com/de  
Host(s): .t.co, .analytics.twitter.com  
Cookie name: _twclid,muc_ads,auth_token,personalization_id  
Cookie duration: Session / 1 year 

This website uses the conversion tracking technology of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland (“Twitter”). If you have reached our website from a tweet or an advertisement on Twitter, we will set a cookie on your computer that interacts with a “tag” also implemented in the form of a JavaScript code from Twitter. Cookies are small text files that are stored on your end device. If the user is redirected from Twitter to pages on this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track these (e.g. completed transactions, leads, search queries on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the “tag”, with which certain information about the action (including type of action, time, browser type of the end device) is transmitted. 
Through this transmission, Twitter can compile statistics about the usage behavior on our website after forwarding, which serve us to optimize our offer. 

You can find further information on data protection at Twitter at https://privacy.twitter.com/de 

 

google recaptcha 

On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to differentiate whether an entry is made by a natural person or abusively by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding abuse and spam. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA. 

Further information on Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/ 

Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the option described above for making an objection. 

 

2.3 External links

LSF websites may provide links to websites and applications that are offered and operated by third parties – providers not affiliated with us. After you click the link, we no longer have any influence on the collection, processing and utilization of any personal data that is transferred to third parties after clicking the link (for example, the IP address or the URL of the site on which the link is located), as our control of the conduct of third parties is then naturally withdrawn. We are not responsible for the privacy practices or the content of external websites or applications. 

3. Processing of personal data in connection with your business relationship 

3.1 Processing purposes, categories of personal data and legal bases and sources

In the context of your business relationship with LSF, we may process information that you have actively and voluntarily provided about yourself as a (potential) customer, suppliers, vendors and partners and their representatives (each a business partner representative) or that has been generated by us, including the following categories of personal data, for the purposes and on the legal bases set out below: 

Processing Purposes	Categories of personal data	Legal basis for processing
Initiating contact to  prepare for, perform,  and end a business  relationship between  LSF and the  business partner for  which you work or  possibly with you  yourself such as  General communication  Processing orders and procurements based on contracts (e.g. nomination agreement, framework agreement, order)  Inquiries about current orders (change requests, capacity changes, etc.)  Appointment organization, event/participant management  Invoicing between LSF and business partners, invoicing of service periods or invoicing of expenses or costs   Contact person for the business relationship, business divisions, specialty divisions, projects, collaboration between the business partners Collaboration as part of the business relationship, projects	Contact data  Organizational data, such as company name, job position, place of work and country  Financial data, such as credit or payment information and bank account details (sole traders only)  Contractual data, such as purchase orders, contracts and other agreements between you and LSF (sole traders only)	Contract Performance (to initiate and execute Contracts (if you work for yourself))  Legitimate Interest (Balancing of interests: We have a legitimate interest in collaborations with business partners, feasible structures of processes within the business relationship, with contact persons being available, controlling and invoicing of the contractual services)
Execution and processing of procurement processes within LSF or between Sartorius AG and its group companies as well as internal processes for conducting the business relationship such as  Processing of orders and procurements based on contracts (e.g. nomination agreement, framework agreement, order)  Reporting  Administration  Satisfying tax law review and filing duties, archiving of data  Bookkeeping, receivables collection	Contact data  Organizational data  Contractual data  Financial data	Legal Obligation  Contract Performance (to initiate and execute Contracts (if you work for yourself))  Legitimate Interest (Balancing of interests: We have a legitimate interest in feasible structures of processes within the business relationship, fulfilment of statutory and regulatory requirements)
Creating and managing entry authorization to the work premises, offices, buildings, security of the work premises such as  Creating factory IDs and entry authorization  Identifying visitors and those authorized for entry  Visitor administration, issuing visitor passes  Video surveillance of the work premises	Contact data  Organizational data  Image material, such as video footage that is being recorded on a LSF closed-circuit television system (“CCTV“) installed on the applicable LSF premises or other video and related security/monitoring systems whether on LSF premises or not but to which we have a legitimate purpose in viewing/accessing	Contract Performance (to initiate and execute Contracts (if you work for yourself))  Legitimate Interest (Balancing of interests: We have a legitimate interest in protecting our business and trade secrets, protecting our house rules, checking entry authorization to our buildings and properties)
IT Administration such as  User administration (assignment of access, IT support, system access, authorization administration)  Processing of password resets  Proof of changes to information in applications  Clear identification of the user for secure operation of applications Determination of disruptions and guaranteeing system security including uncovering and tracking impermissible access attempts and access to our web servers	Contact data  Organizational data  IT-related data	Contract Performance (to initiate and execute Contracts (if you work for yourself))  Legitimate Interest (Balancing of interests: We have a legitimate interest in identifying the person in connection with the allocation of authorisations, the unambiguous identification of the user for the access to IT-Systems for guaranteeing the security and integrity of processes in connection with use of the LSF systems, troubleshooting and uncovering and tracking impermissible access or access attempts, abuse and unauthorized access)  Legal Obligation (in the area of data security)
Project organization and management such as  Collaboration on projects Exchange about projects with other business partners	Contact data  Organizational data  Further information necessarily processed in a project or contractual relationship with LSF or voluntarily provided by the Business Partner, such as personal data relating to orders placed, payments made, requests, and project milestones	Contract Performance (to initiate and execute Contracts (if you work for yourself))  Legitimate Interest (Balancing of interests: We have a legitimate interest in collaborations with business partners)
Taxes such as  Determining and reporting cash-equivalent advantages from non-cash benefits  Legal documentation regarding recipients of hospitality and gifts	Contact data  Organizational data  Financial data	Legal Obligation (concerning taxes)
Gastronomy such as  Cashless payment  Site IDs card balance claim	Contact data  Organizational data  Financial data	Contract Performance (hospitality contract or payment function of the Site ID)
Protecting and defending our rights and disclosure related to official/court actions such as  Exercising and asserting rights and claims  Disclosure related to official/court actions for purposes of collecting evidence, criminal prosecution, and enforcement of civil law claims  Processing data subject inquiries under GDPR Disclosure in the context of regulatory /court actions in connection with securities trading	Contact data  Organizational data  Financial data	Legal Obligation (fulfilling statutory obligations)  Legitimate Interest (Balancing of interests: We have a legitimate interest in asserting and defending our rights and fulfilling statutory and regulatory requirements)
Prevention, combating and clarification of the financing of terrorism and crimes that pose a threat to property, comparisons with European and international anti-terror lists such as  Comparison with anti-terror lists	Contact data  Organizational data  Financial data  Information that are legally required for Business Partner compliance screenings or export control checks, such as date of birth, nationality, place of residence, ID numbers, identity cards and information about relevant and significant litigation or other legal proceedings against Business Partners	Legal Obligation (fulfilling statutory obligations)  Legitimate Interest (Balancing of interests: We have a legitimate interest in fulfilling statutory and regulatory requirements)
Retention and archiving such as  Archiving based on storage obligations set forth under tax and commercial law	Organizational data  Financial data  Contractual data	Legal Obligation (fulfilling statutory obligations)  Legitimate Interest (Balancing of interests: We have a legitimate interest in fulfilling statutory and regulatory requirements, internal guidelines and industry standards)
Prevention of fraud and money laundering and  Fraud and money laundering	Organizational data  Financial data  Contractual data	Legal Obligation (fulfilling statutory obligations)
Compliance Audits such as  Compliance audits and documentation of compliance requests and compliance with legal requirements	Contact data  Organizational data  Financial data  Contractual data	Legitimate Interest (Balancing of interests: We have a legitimate interest in auditing compliance with legal requirements, internal guidelines)
Statistical evaluations regarding company control, Cost recording and controlling such as  Reporting on business management metrics	Organizational data  Financial data  Contractual data	Legitimate Interest (Balancing of interests: We have a legitimate interest in evaluations for controlling our business processes and cost control)
Conducting surveys and campaigns such as  Conducting surveys, marketing campaigns, market analyses, lotteries, competitions, and similar operations	Contact data  Organizational data	Legitimate Interest  Consent
Testing, developing, refining our products, quality assurance, product improvement such as  Research and development, quality assurance		Research (§ 27 BDSG)  Legitimate Interest (Balancing of interests: We have a legitimate interest in testing, developing, refining our products, quality assurance, product improvement)  Consent

4. Processing of personal data for marketing communication

4.1 Processing purposes, categories of personal data and legal bases and sources 

Where and as permitted by applicable law, LSF may process information that you have actively and voluntarily provided about yourself or that we have generated for marketing communication purposes, including the following categories of personal data, for the purposes and on the legal bases set out below: 

Processing Purposes	Categories of Personal Data	Legal Basis for Processing
Customer and prospective customer care	Contact data  Organizational data	Consent
Customer surveys (including satisfaction surveys)	Contact data  Organizational data  Usage data to determine your personal interests, such as information about your visits on LSF websites that may include viewed articles, downloaded documents and date and time of access as well  as information on whether and when you opened a marketing e-mail LSF sent to you	Consent
Direct marketing purposes e.g.   trade show invitations, newsletters with further information and offers concerning LSF products and services), also by e-mail	Contact data  Organizational data  Usage data  Business-related social network data, i.e. publicly accessible business-related data about you, such as data published in business- or employment-oriented social networks or Internet sites, e.g. LinkedIn and Xing.	Consent (to receiving LSF marketing communication on the basis of your personal interests)  Legitimate Interest (Balancing of interests: We have a legitimate interest in a consolidated customer profile, provided that the subsequent use for marketing and market research is in compliance with data protection and competition law requirements)
Maintaining an up-to-date customer profile as a basis for marketing and market research	Contact details  Organizational data  Usage data  Business-related social network data	Consent (to receive LSF marketing communications based on your personal interests)  Legitimate interest (balancing of interests: We have a legitimate interest in a consolidated customer profile, provided that the subsequent use for marketing and market research is compatible with data protection and competition law requirements)

 

4.2 Data Transfer  

LSF may may transfer your Data for the above-mentioned purposes to Sartorius AG affiliated companies listed here. 

4.3 Withdrawal of your consent 

You have the right to revoke your consent at any time with effect for the future, for example by using the opt-out mechanism provided in the respective communication you received. 

4.4 Corporate transactions 

As our business evolves, we may change the structure of our company by changing its legal form, establishing, buying or selling subsidiaries, divisions or components. In such transactions, customer data may be transferred along with the part of the company being transferred. In any transfer of personal information to third parties to the extent described above, we will ensure that this is done in accordance with this Privacy Notice and applicable data protection law. 

Any disclosure of personal data is justified on the grounds that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances and your rights and interests in the protection of your personal data are not overridden. 

5. Transfer and disclosure of personal data

For the purposes mentioned above, LSF may transfer or disclose your personal data to: 

• Other companies of the Sartorius Group or third parties in the context of your usage of LSF website or our business relationship with you; 
• third parties which provide IT services to LSF and which process such data only for the purpose of such services (e.g., hosting or IT maintenance and support services); and/or 
• third parties in connection with complying with legal obligations or establishing, exercising or defending rights or claims (e.g., for court and arbitration proceedings, to law enforcement authorities and regulators, to attorneys and consultants). 

6. International data transfers 

If we transfer personal data to service providers or Sartorius Group companies outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual –clauses) are in place. You can request information on this and on the level of data protection at our service providers in third countries using the contact information above. 

7. Retention periods 

LSF will retain your personal data for as long as necessary to fulfill the purposes we collected or otherwise process it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation to our relationship with you. 

8. Your rights 

Under applicable data protection law, you may have specific rights in relation to your personal data. In particular, subject to the statutory requirements, you may have the following data protection rights: 

• Right of access: You have the right to obtain information on the processing of your personal data and to receive a copy of these data. 
• Right to rectification: You have the right to request that we correct or complete your inadequate, incomplete or inaccurate personal data. 
• Right to erasure: Under certain circumstances, you have the right to request that we delete your personal data. 
• Right to restriction of processing: Under certain requirements, you may request us to restrict the processing of your personal data. 
• Right to data portability: You have the right to receive your personal data in a structured, common, and machine-readable format and request that these data are transferred to another data controller, if applicable under the specific circumstances. 
• Right to object: You might have the right to object to the processing of your personal data by us, in particular, if the processing of your personal data is based on (i) the necessity of the performance of a task in the public interest, or (ii) legitimate interests. We will then stop the processing of your personal data unless we remain legally authorized to do so. 
• Right to lodge a complaint: You also have the right to lodge a complaint with a supervisory authority or other applicable privacy regulator about our processing of your data. This can be for example the data protection authority in your country of residence. A list of all data protection authorities in the European Union can be found here. 
• Right to withdrawal: If data processing is based on your consent, you have the right to withdraw your consent at any time and free of charge, with effect for the future, i.e., your withdrawal does not affect the lawfulness of the processing based on consent before its withdrawal. 

 

9. Minors

The LSF websites are not intended for children under the age of 16.

10. Data Privacy Contact

LSF will support you in all matters relating to data protection. You can also lodge complaints with LSF and assert the rights set out in this privacy policy. 

  

The LSF data protection organization can be contacted at

dataprotection@lifescience-factory.com.

11. Changes to this privacy policy 

LSF reserves the right to amend or adapt this data protection declaration at any time in compliance with the applicable data protection regulations, for example to reflect changes with regard to certain security and data protection measures or changes for other operational, legal or regulatory reasons. 

 

Status of this privacy notice: September 2023