Data protection declaration of Leopard Biosciences (01)
Leopard Biosciences is pleased that you are visiting our website. We take the protection of your personal data during processing in accordance with the statutory data protection regulations very seriously.
The following declaration gives you (hereinafter also referred to as "customer", "data subject" or "user") an overview of how we ensure this protection and what type of data is collected for what purpose.
For reasons of readability, the female form of speech is used. The female personal designation applies equally to all genders.
The responsible party within the meaning of the EU General Data Protection Regulation (hereinafter referred to as "GDPR") and other national data protection laws (in Germany: Federal Data Protection Act hereinafter referred to as "BDSG") of the member states as well as other data protection provisions is:
Leopard Biosciences GmbH
Am Klopferspitz 19a
82152 Martinsried
Germany
Phone: N/AFax: N/A
E-mail: info@leopard.bio
TBD
dpo@leopard.bio
You can reach our data protection officer at our mailing address (sectionI.) with the addition "data protection officer".
The definitions and terms are based on the GDPR, the BDSG and other data protection regulations. Particularly the definitions of Art. 4 and Art. 9 GDPR shall apply.
We process your personal data only to the following extent, as far as this is necessary for the provision of our web and online services, including a functioning website:
Users of our website, customers, interested parties and applicants
Newsletter and contact requests
Where personal data is processed on the basis of the data subject's consent, the legal basis for the processing is Article 6(1)(a) of the GDPR.
Where personal data are processed for the performance of a contract to which the data subject is a party, the legal basis is Article 6(1)(b) of the GDPR; this also applies to processing necessary for the performance of pre-contractual measures.
If personal data are processed for compliance with a legal obligation to which we are subject, the legal basis is Article 6(1)(c) of the GDPR.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, the legal basis is Article 6(1)(d) of the GDPR.
If processing is carried out to protect our legitimate interests or those of a third party and the interests, fundamental rights and freedoms of the data subjects are not overridden; Article 6(1)(f) of the GDPR is the legal basis for the processing.
In order to provide our web and online services as well as for the general provision of our services, we sometimes use IT service providers, IT developers, external consultants, cloud or archiving service providers who may act on our behalf and according to instructions in the context of the provision of services (so-called order processors). These service providers may receive personal data or come into contact with personal data in the course of providing the service and constitute third parties or recipients within the meaning of the GDPR.
In such a case, we ensure that our service providers take sufficient security measures, that appropriate technical and organizational measures are in place and that processing operations are carried out in such a way that they comply with the relevant data protection provisions and ensure the protection of the rights of data subjects (cf. Art. 28 GDPR).
In addition, we process your personal data within various specialist departments of Leopard Biosciences that are involved in the execution of the respective business processes; to the extent permitted, we also process data outside of the execution of the business for advertising purposes. We may also be obliged by law to make our collected data available to public authorities (e.g. tax authorities, state criminal investigation authorities, social security authorities). As far as legally permissible, we process personal data with cooperation partners, sponsors and business conference participants.
Your personal data is generally processed within the European Union (hereinafter referred to as “EU”) or the European Economic Area (hereinafter referred to as “EEA”). Only in exceptional cases (e.g., in connection with the transfer of personal data within Leopard Biosciences) may information be transferred to third countries. Third countries are countries outside the EU and/or EEA in which an adequate level of data protection in accordance with European requirements cannot be assumed without further ado.
Insofar as the information transmitted also includes personal data and is not transmitted pseudonymised or anonymised, we ensure before such a transmission that an adequate level of data protection is guaranteed in the respective third country or at the respective recipient in the third country. This can result from a so-called "adequacy decision" of the European Commission or be ensured by using the so-called "EU standard contractual clauses".
Personal data of the data subjects shall be deleted if the data is no longer required for the respective processing purposes or if the legal basis for the storage no longer applies. Instead of deletion, the data may be stored under restriction of processing if this is provided for by the European or national legislator in Union regulations, laws or other provisions, in particular, e.g.
Personal data of the data subjects shall be deleted if the data is no longer required for the respective processing purposes or if the legal basis for the storage no longer applies. Instead of deletion, the data may be stored under restriction of processing if this is provided for by the European or national legislator in Union regulations, laws or other provisions, in particular, e.g.
to comply with statutory retention obligations (e.g., the German Fiscal Code (§ 147 AO) or the German Commercial Code (§ 257 HGB), currently between 6 and 10 years), and/or
if there are legitimate interests in storing data (e.g., during the course of limitation periods for the purpose of a possible legal defense (§§ 195 ff. BGB – German Civil Code, currently between 3 and 30 years).
The data will be deleted at the latest when a storage period prescribed by the aforementioned standards expires, unless further storage by us is necessary and there is a legal basis for this.
With regard to the type of personal data concerned, we essentially distinguish between the following categories:
a) Master data: Master data is data about your company and / or your person that you provide to us. This includes in particular company, first name, last name, e-mail address and telephone number.
b) Event and marketing data: This is data that we receive from you in the context of, for example, webinars, (online) events, trade fair events, newsletter registrations, conferences and specialist events. This includes meta and log files, IP addresses and session IDs.
c) Meta and log files: Meta and log files include IP addresses, session IDs, browser types, operating system details and time of request.
d) Applicant data: This is data that you provide to us as part of the application process. This includes, in particular, qualifications, certificates, proof of qualifications, curriculum vitae and cover letters.
The GDPR grants certain rights to persons affected by the processing of personal data (so-called data subject rights, in particular Art. 12 to 22 GDPR). If you would like to make use of one or more of these rights listed below, you can contact us at any time under dpo@leopard.bio. As a data subject, you have the following rights in particular:
a) Right to information pursuant to Art. 15 GDPR.
You may request information from the controller as to whether and to what extent personal data concerning you has been or is being processed.
b) Right to rectification pursuant to Art. 16 GDPR
You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
c) Right of deletion according to Art. 17 GDPR
You may request the controller to delete the personal data concerning you without undue delay and the controller is obliged to delete such data without undue delay, unless one of the exceptions provided for in the GDPR applies or other legal retention obligations require the controller to retain the data in question.
d) Right to restriction of processing pursuant to Art. 18 GDPR
Under the conditions regulated in the GDPR, you may request the restriction of the processing of personal data concerning you.
e) Right to data portability pursuant to Art. 20 GDPR
You have the right to obtain the personal data concerning you, which you have provided to the controller and the processing of, which is based on consent or on a contract (e.g. also the requested preparation of a contract, Art. 6 para. 1 lit. b Alt. 2 GDPR) with you, in a structured, common and machine-readable format. In addition, you have the right, under the conditions regulated by the GDPR, to transfer this data to another controller without hindrance from the controller to whom the personal data was provided. In exercising this right, you also have the right to have the personal data relating to you transferred directly from one controller to another controller, where this is technically feasible. The freedoms and rights of other persons must not be affected by this.
f) Right of objection pursuant to Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. In the event of an objection, the personal data concerning you will no longer be processed for these purposes.
g) Right to revoke consent pursuant to Art. 7 (3) GDPR
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. This also applies to the revocation of declarations of consent given to us before the GDPR came into force, i.e., before 25 May 2018. You can revoke your consent at any time with an email to dpo@leopard.bio.
h) Right of complaint pursuant to Art. 77 GDPR
In the event of suspected and committed violations of data protection regulations, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the suspected violation. The right of appeal is without prejudice to other administrative or judicial remedies.
Our competent data protection supervisory authority is:
The Bavarian Data Protection Commissioner Prof. Dr. Thomas Petri
We do not make the conclusion of contracts or the fulfilment of our online offers with us dependent on you providing us with personal data beforehand. As a customer, interested party, website visitor, applicant or other participant, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data.
Each time our website is accessed, our systems automatically record data and information from the computer system of the accessing computer. In particular, the following log files are processed:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Date and time of the server request
IP Address
This data is not merged with other data sources.
The temporary storage of the IP address and possibly other log files by the systems each time our website is called up is necessary to enable the website to be made available to your computer. This is required for addressing the communication traffic between the user and our web and/or online offer or is necessary for the use of our web and/or online offer. The legal basis for this data processing - i.e. for the duration of your website visit - is Art. 6 Para. 1 (b) or f of the GDPR and § 96 TKG (Telecommunications Act). The processing and storage of the IP address and log files beyond the communication process is carried out for the purpose of ensuring the functionality of our web and online offers, for the purpose of optimising these offers and for ensuring the security of our information technology systems. The legal basis for storing the IP address for these purposes beyond the communication process is Art. 6 para. 1 (f) GDPR or § 109 TKG.
The data is stored for as long as it is necessary to achieve the aforementioned processing purposes. In the case of the collection of data for the provision of the website, this is the case when the respective session - i.e. the website visit - has ended. Any additional storage of log files including the IP address for the purpose of system security and optimization of our web and online offers is carried out for an appropriate period of time; thereafter, the log and meta data are automatically deleted.
The collection of log files for the provision of our website, including their storage within the aforementioned limits, is absolutely necessary for the operation of the website and the individual functions stored there. There is therefore no possibility for the user of the website to object. This does not apply to the processing of log files for analysis purposes. Here, the possibility of objection - depending on the web analysis tools used and the type of data analysis (personal / anonymous / pseudonymous) - is governed by section IV. 7. (f) of this data protection declaration.
To contact us, you can use the e-mail addresses provided on our website. If you make use of these options, personal data will be processed and stored by us for the purpose of answering the enquiry. In this context, we process in particular first name, last name and e-mail address. We do not pass on this data without your consent.
The processing of this data is based on. Art. 6 para. 1 (b) GDPR and / or on our legitimate interests, according to Art. 6 para. 1 (f) GDPR. The processing of data transmitted in the course of an enquiry is based on Art. 6 (1) (a) GDPR.
The data is generally deleted as soon as it is no longer required to achieve the purpose for which it was collected. Insofar as data is no longer required for the fulfilment of contractual or statutory obligations, including commercial and tax retention obligations, as well as for the pursuit of legitimate interests, i.e. for the preservation of evidence within the framework of the statutory limitation provisions, it is regularly deleted.
In addition to the purely informational use of our website, personal data may be processed for the purpose of advertising and/or marketing measures (e.g. newsletters), to conduct customer satisfaction surveys and for the purpose of press and public relations (hereinafter collectively referred to as "marketing").
On our website there is the possibility to subscribe to a newsletter. Subscription to our newsletter is free of charge and voluntary. If you would like to take advantage of the newsletter offered by us, the following "newsletter data" will be processed by us:
a valid e-mail address
date and time of registration and confirmation
the IP address used (in total: "Registration confirmation details")
performance data such as click and opening rates
In order to be able to check whether you are the owner of the specified e-mail address or whether its owner agrees to receive the newsletter, we send an automated e-mail to the specified e-mail address after the first registration step (so-called double opt-in). Only after confirmation of the newsletter registration via a link in the confirmation e-mail do we include the specified e-mail address in our distribution list. We do not collect any further data beyond the e-mail address and the details for confirming the registration.
If you do not confirm your registration, your information will be blocked and automatically deleted. In addition, we store your IP addresses and the times of registration and confirmation.
Your data is processed exclusively for the purpose of sending the newsletter you have ordered. The legal basis for this processing is Art. 6 para. 1 (a) GDPR or § 7 UWG (Law against Unfair Competition) (see below).
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your e-mail address and other "newsletter data" will therefore be stored for as long as the subscription to the newsletter is active. Your consent and order for the newsletter as well as your revocation of consent or unsubscription will be stored for a period of two years after the revocation of consent becomes effective for evidence purposes. Beyond that, we only store personal data for the assertion of or defence against legal claims or as long as legal obligations to store exist.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can execute the revocation by clicking on the link provided with every newsletter e-mail.
Your personal data will only be used for the purpose of advertising and/or marketing approaches as well as for carrying out customer satisfaction surveys if you have given your consent or if there is another legal basis that permits an advertising and/or marketing approach even without consent. As far as legally permissible, we reserve the right to address customers for advertising purposes on the basis of publicly accessible data and/or address data of third parties, which they extract from publicly accessible sources (e.g. data from directory media, the Internet, company homepages, public registers or similar). The objection for marketing purposes and direct advertising is governed by section IV. 7 (f) of this data protection declaration.
In the context of data transmission for advertising and marketing approaches / customer surveys, the following data in particular are processed:
Salutation, surname and first name
Company, address or post office box
E-mail and telephone number
a) The legal basis for advertising and/or marketing measures based on explicit consent is Art. 6 (1) (a) GDPR; the explanations on consent under IV. 7. (g) apply accordingly.
b) The legal basis for the use of personal data for the purpose of direct mail advertising is Article 6 (1) (f) of the GDPR (legitimate interests); the legitimate interest here is to contact potential customers for the purpose of direct advertising for our products and services.
c) The legal basis for advertising and/or marketing measures by telephone call is Section 7 (2) No. 2 UWG; this requires express consent in the case of consumers, and at least presumed consent in the case of other market participants; for the requirement of express consent, see above and Section IV. 7. (g).
d) For advertising and/or marketing measures via e-mail for the purpose of direct advertising for our own similar goods or services, the legal basis is Section 7 (3) UWG, provided that we have
(i) we have received your e-mail address in connection with the provision of a service,
(ii) you have not objected to the use of your e-mail address for the purpose of direct marketing, and
(iii) when collecting the e-mail address and at each use, we clearly inform you that you may object to such use of your e-mail address at any time (for the right to object, see section IV. 7 (f)).
Personal data is stored and used for advertising purposes for an indefinite period of time, depending on the respective legal basis for the advertising measure (consent or legitimate interests), until you have objected to the use of your data for advertising purposes or you have revoked your corresponding consent.
You can revoke your consent to the processing of personal data at any time with effect for the future without giving reasons. The revocation can be declared by telephone, in writing or by e-mail (for example to dpo@leopard.bio).
You may object to processing on the basis of legitimate interests at any time; a right of objection exists in particular in the case of profiling pursuant to Art. 21 GDPR.
If a revocation and/or an objection is made, the personal data will no longer be processed for the respective purposes concerned; this does not include the processing of data that is still required for the purpose of fulfilling a contract (Art. 6 (1) (b) GDPR), including statutory retention obligations, and/or if the data is still required in the context of legitimate interests (Art. 6 (1) (f) GDPR) (e.g. in the case of an objection to advertising, the processing of data in a so-called blacklist in order to prevent future advertising approaches).
We will be happy to provide you with further information on the handling of our data within the area of marketing and/or the sources of our data upon request; please contact our data protection officer, whose contact details can be found in section II.
In the area of press and public relations, we collect and process master data, contract implementation data or third-party data from journalists and/or press representatives for the purpose of press and public relations work. This may include, in particular, the provision of press information, the processing of press enquiries, contacting representatives of the press or organising and inviting them to (press) events. The legal basis for such data processing is Art. 6 para. 1 lit. b GDPR (performance of contract / implementation of pre-contractual measures), insofar as this is done to fulfil a corresponding agreement and/or in the context of a specific enquiry. Furthermore, data processing is carried out in the context of legitimate interests according to Art. 6 para. 1 lit. f GDPR; the legitimate interest in this case is the organization of press and public relations work for the benefit of Leopard Biosciences.
In all other respects, data processing is carried out on the basis of appropriate consent. The data subject can also revoke this consent at any time and without giving reasons for the future. In all other respects, the data subject shall be entitled to the rights set out in section IV (7).
We use "Google Web Fonts ", which are provided by Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland), for the uniform display of fonts on our website. We have integrated the use of Google Web Fonts locally so that no connection to Google's servers is established when you call up our website. When you access our website, your browser loads the required web fonts into your browser cache in order to display the page content (e.g. texts and fonts) correctly. Meta and log files (e.g. IP address) are temporarily stored as a result; further information on the storage of log and meta files on our website can be found in section V.). The use of the local integration of Google Web Fonts is in the interest of a uniform presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) of the GDPR. If your browser does not support web fonts and/or you block web fonts via your browser, a standard font from your computer will be used.
We have integrated buttons of various social networks on our website. These buttons provide you with various functions by means of which you can share information with your contacts on the respective third-party portal. The operators of the social networks determine their subject and scope.
This data is processed on the basis of Article 6 (1) (a) and (f) of the GDPR so that we can offer you the opportunity to interact with the social networks and other users, improve our services and make them more interesting for you as a user.
Please note that we are not the provider of the social networks and have no influence on the data processing by the respective providers. Furthermore, we have no knowledge of the content of the transmitted data or its use by the respective provider. You can find more information on the handling of your data in the respective data protection notices of the providers of the social networks:
LinkedIn
The function of the social network LinkedIn is integrated on our website. This function is offered by LinkedIn Ireland Limited, 77 Sir John Rogerson's Quay, Dublin 2, Ireland. In the process, data is also transferred to LinkedIn. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. If you are logged in to LinkedIn, LinkedIn can assign the visit to your LinkedIn account. The purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights in this regard and setting options for protecting your privacy, can be found in LinkedIn's privacy policy. You can find further information on this in LinkedIn's data protection declaration at http://www.linkedin.com/static?key=privacy_policy.
Cookies
We use so-called "cookies" on our website. Cookies are small text files that your internet browser places and stores on your computer and through which certain information flows to the body that sets the cookie. They serve to optimize our Internet presence and our offers.
Most of these are so-called "session cookies", which are deleted again after the end of your visit. In some cases, however, these cookies provide information that enables us to recognize you automatically. This recognition is based on the IP address stored in the cookies, but these cannot directly identify a user.
We also use web analysis tools ("performance cookies") to analyze the online platform. With the help of cookies, we can process usage data of the online platform and thus gain insights into the use of our online platform (e.g. number of accesses, number of users).
Advertising cookies or targeting cookies are used to provide the website user with tailored advertising on the website or offers from third parties and to measure the effectiveness of these offers. Sharing cookies are used to improve the interactivity of our website with other services (e.g. social networks).
Any use of cookies that is not strictly technically necessary constitutes data processing that is only permitted with your explicit and active consent pursuant to Article 6 (1) a of the GDPR. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we will only share your personal data processed through cookies with third parties if you have given your explicit consent to do so in accordance with Art. 6(1)(a) of the GDPR.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.
Our website uses transient, (e.g., "session cookies") persistent and third-party cookies.
Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a set period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
You can find an overview and additional information on the cookies we use, including details on the provider, data processing purpose, technology used, data collected, legal basis, place of processing, retention period, data recipient, data protection officer and transfer to third countries in our cookie-settings.
We use the "Matomo" analysis tool to design our website in line with demand. Matomo creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognise and count returning visitors. We also use the Heatmap & Session Recording modules. Matomo's heatmap service shows us the areas of our website where the mouse is most frequently moved or clicked. The session recording service records individual user sessions. We can replay recorded sessions and thus analyse the use of our website. Data entered in forms is not recorded and is not visible at any time.
Data processing is based on your consent pursuant to Art. 6 para. 1letter a GDPR, provided you have given your consent via our cookie banner. Youcan revoke your consent at any time. Please make the appropriate settings viaour cookie banner.
An overview and additional information on the analysis tool we use, including details of the provider, data processing purpose, technology used, data collected, legal basis, place of processing, retention period, data recipient, data protection officer and transfer to third countries, can be found in our cookie-settings.
Your trust is important to us. Therefore, we would like to answer any questions you may have regarding the processing of your personal data. If you have queries that have not been answered by this data protection declaration or if you would like more detailed information on a particular matter, please contact us at any time using the following e-mail address: dpo@leopard.bio.
We reserve the right to change the data protection declaration at irregular intervals in the context of the further development of data protection law and technological or organizational changes and will inform you of all significant changes, which have an effect on the use of your personal data.
Note 01: The Leopard Biosciences group of companies includes: Leopard Biosciences GmbH, Leopard Biosciences Aps.
Feel free to contact us
Leopard Biosciences GmbH
Preysingstraße 21
D-82131 Gauting
Germany
info@leopard.bio
Leopard Biosciences Aps
Ole Maaløes Vej 3
DK-2200 Copenhagen
Denmark
info@leopard.bio
