DATA PROTECTION DECLARATION OF DWK LIFE SCIENCES

In the following data protection declaration, you as a user of our website will receive all necessary information about the extent to which and for what purpose your personal data is collected and used. Your personal data is processed strictly in accordance with the legal requirements of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG). We are always particularly committed to maintaining the confidentiality of your personal data and to ensuring the security of data transmission at all times.

Responsible body and data protection officer

The person responsible in the sense of the legal principles on data protection is:

DWK Life Sciences GmbH

Otto-Schott-Straße 21
97877 Wertheim/Main
Germany
Tel.: +49 (0)9342-802 0
E-Mail: [email protected]
Website: http://www.DWK.com/

Contact to the Data Protection Officer (atarax Group):
[email protected]

Definition of personal data

Personal data includes all information relating to an identified or identifiable natural person (hereinafter: data subject). Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics.

Your rights as a data subject

We would first like to notify you of your rights as a data subject. These rights are set out in Articles 15 - 22 GDPR, and include:

right of access (Art. 15 GDPR),
right to rectification (Art. 16 GDPR),
right to data portability (Art. 20 GDPR),
right to object to data processing (Art. 21 GDPR),
right to erasure / right to be forgotten (Art. 17 GDPR),
right to restriction of data processing (Art. 18 GDPR).

To exercise these rights, please contact: [email protected]. The same applies if you have any questions regarding data processing in our company or when you withdraw your consent. You also have a right of appeal to the relevant data protection supervisory authority.

Right to object

Please note the following with respect to your right to object:

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing.

If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to: [email protected].

Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions.

We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

Purposes and legal bases of data processing

The processing of your personal data complies with the provisions of the GDPR and all other applicable data protection regulations. Legal bases for data processing arise in particular from Art. 6 GDPR.

We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing.

Your consent also constitutes a legal basis for data processing. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent. If the consent also relates to the processing of special categories of personal data, we will explicitly notify you in the consent process.

Processing of special categories of personal data within the meaning of Art. 9 (1) GDPR may only take place where necessary on the grounds of legal regulations and there is no reason to assume that your legitimate interests should prevail to the exclusion of processing such data.

Data transfers / Disclosure to third parties

We will only transmit your data to third parties within the scope of given statutory provisions or based on consent. In all other cases, information will not be transferred to third parties unless we are obliged to do so owing to mandatory legal regulations (disclosure to external bodies, including the supervisory authorities or law enforcement authorities).

Data recipients / categories of recipients

In our organisation, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorised to handle personal data.

As far as this is necessary due to our local sales structure, we pass on your contact data to our locally responsible sales partners. They will use your contact data exclusively to process your enquiries or to process the respective contracts.

In many cases, service providers assist our specialist departments to fulfil their tasks (e.g. IT service providers, logistics, telecommunications, debt collection, consulting, financial services, marketing agencies). The necessary data protection contract has been concluded with all service providers.

In addition, your personal data may be transferred to recipients for whom you have given us your consent. The same applies to bodies to which we may transfer personal data on the basis of a balance of interests.

Transfers of personal data to third countries

A transfer of data to third countries (outside the European Union or the European Economic Area) shall only take place if required by law, if necessary for the conclusion or performance of a contract concluded or if you have provided your consent for such a transfer.

We transfer your personal data to service providers or group companies outside the European Economic Area as follows: e.g. USA, UK. In such cases, compliance with the level of data protection is ensured by: (e.g. Data privacy Framework, EU standard contractual clauses etc.).

Period of data storage

We store your data for as long as such is required for the relevant processing purposes. Please note that numerous retention statutory periods require that data must be stored for a specific period of time. This relates in particular to retention obligations for commercial or fiscal purposes (e.g. commercial code, tax code, etc.). The data will be routinely deleted after use unless a further period of retention is required.

We may also retain data if you have given us your permission to do so, or in the event of any legal disputes and we use the evidence within the statutory limitation period, which may be up to 30 years; the standard limitation period is 3 years.

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).

Secure transfer of data

We implement the appropriate technical and organisational security measures to ensure the optimal protection of the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

The data exchange to and from our website is encrypted. We provide https as a transfer protocol for our website and always use the current encryption protocols. In addition, we offer our users content encryption in our contact forms and applications. We alone can decrypt this data. It is also possible to use alternative communication channels (e.g. surface mail).

Obligation to provide data

A range of personal data is required to establish, implement and terminate the obligation and the fulfilment of the relevant contractual and legal obligations. The same applies to the use of our website and the various functions we provide.

We have summarised the relevant details in the above point. In some cases, legal regulations require data to be collected or made available. Please note that it will not be possible to process your request or execute the underlying contractual obligation without this information.

Data categories, sources and origin of data

The data we process is defined by the relevant context: it depends on whether, for example, you enter a request on our contact form or if you want to send us an application or submit a complaint.

Please note that we may also provide information at specific points for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.

We collect and process the following data when you visit our website:

Name of the Internet service provider
Web browser and operating system used
Information on the website from which you visited us
The IP address by your allocated Internet service provider
Files accessed, volume of data transferred, downloads/file export
Information on websites accessed on our site, including date and time

For reasons of technical security (in particular to safeguard against attempts to attack our web server), this data is stored in accordance with Art. 6 (1) lit. f GDPR.

We collect and process the following data as part of a contact request:

Last name, first name (eventually: title),
Contact information, organization
Info on wishes and interests, type of enquiry

We collect and process the following data as part of the request of a quote:

first name, last name
contact information (e-mail address, phone number, city, state, country)
organization
the message itself

We collect and process the following data as part of online applications:

Last name, first name, title
Contact information (address, e-mail, telephone)
Certificates, attestations

We collect and process the following data for newsletters:

Last name, first name, job title
Company, position
E-mail Address
IP-address
Information about device and e-mail program used
Clicks on links
Time of interaction

We collect and process the following data for the login/registration process:

name
e-mail address
password

Contact form / Contact via e-mail (Art. 6 (1) lit. a, b GDPR)

A contact form is available on our website which can be used to contact us electronically. If you write to us using the contact form, we will process the data you submitted in the contact form to respond to your queries and requests.

In so doing, we respect the principle of data minimisation and data avoidance, such that you only have to provide the information we require to contact you. Your IP address will also be processed for technical reasons and for legal protection. All other data is voluntary, and additional fields are optional (e.g. to provide a more detailed response to your questions).

If you contact us by e-mail, we will process the personal information provided in the e-mail solely for the purpose of processing your request.

Asking for a quote (Art. 6 (1) lit. a, b GDPR)

A contact form is available on our website which can be used to request a quote from DWK Life Sciences. If you write to us using the contact form, we will process the data you submitted in the contact form to respond to your queries and requests.

Newsletter (Article 6 (1) lit. a GDPR)

You can subscribe to a free newsletter on our website. The contact information and information about your company you provided when you subscribed to the newsletter will be used to send the personalised newsletter.

The principle of data minimisation and data avoidance is observed here, as only the contact information and company information is mandatory. Your IP address will also be processed when you subscribe to the newsletter for technical reasons and legal protection.

Our newsletters contain tracking, This allows us to analyze, whether and when our newsletters are opened and which links our recipients click on. This is used to evaluate the usage behavior and to optimize our newsletter content and our offerings. Processing is carried out exclusively on the basis of your consent, Art. 6 b (1) lit. a GDPR. You may object to tracking at any time by unsubscribing from our newsletter. After that your data will no longer be processed for tracking purposes.

You can of course terminate the subscription at any time via the opt-out option provided in the newsletter and therefore withdraw your consent. You can also unsubscribe from the newsletter via our website.

Investor Page - Newsletter for Investors / Investor Relations

On our website, you can sign up for our investor newsletter. To do so, we use the Salesforce Marketing Cloud (Pardot) , which is provided to us by Salesforce Inc., Salestower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. For this purpose, we process the personal data you provide in the registration form, in particular your email address and, if applicable, your name, company, position, and contact type. You can choose between our annual and quarterly reports, ad hoc announcements, and director’s dealings. This information is processed for the purpose of sending investor relations updates regarding DWK’s business developments, financial information, publications, events, and similar investor-specific communications.

The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR. Subscription to the newsletter is generally carried out using the double opt-in procedure. After subscribing, you will receive an email in which you must confirm your subscription. We store the time of subscription, the time of confirmation, and the IP address in order to be able to verify your consent. You may revoke your consent at any time with future effect, for example via the unsubscribe link in every newsletter email or by sending us a message to [email protected]. The lawfulness of the processing carried out prior to revocation remains unaffected.

The necessary data protection agreements are in place. In this context, the service providers may process the data in a third country, the USA, or have their registered office there. A corresponding data protection agreement has been concluded where necessary. The service providers are obliged to comply with the data protection standards of the EU and to guarantee the European level of data protection by means of corresponding contractual regulations and/or certification via the US-EU Data Privacy Framework. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 (1) lit. a GDPR), in which case you will be informed separately of this and of possible associated risks.

Your data will be stored for as long as you remain subscribed to the newsletter. Once you unsubscribe, your data will be deleted for newsletter distribution purposes, unless there are legal retention requirements or further storage is necessary to provide proof of consent.

Further information on terms of use and data protection can be found at https://www.salesforce.com/de/company/legal/privacy/.

Marketing purposes (Article 6 (1) lit. f GDPR)

We are keen to nurture the customer relationship with you and to send you information and offers about our product / services. We therefore process your data to send you the relevant information and offers via e-mail.

You may object to the use of your personal data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is associated with direct marketing. If you object, we will cease processing your personal information for this purpose.

You can withdraw your consent at any time free of charge and informally without stating the reasons for such and should be addressed to +49 (0)9342-802 0, sent via e-mail [email protected] or via surface mail to [email protected] .

Application portal (Article 6 (1) lit. a, b GDPR)

Thank you for your interest in the activities of our company. We are aware of the importance of your data and process the personal data you provide on the application form solely for the purposes of the effective and correct execution of the application process and for contacting you during the application process. We shall not disclose data to third parties without your consent.

As part of the application form you will be asked to provide personal information. In so doing, we respect the principle of data minimisation and data avoidance, such that you only have to provide the information we require to carry out a review of your application documents, e.g.: your curriculum vitae (certificates, attestations) or if we are legally obliged to collect such information.

We cannot review your application documents without this data, so in this case our application system will not allow us to upload the application documents. You can, of course, submit voluntary information in your application.

We implement the appropriate security measures to ensure the optimum protection of your data. Your data is stored for the above purpose until the application process has been completed and the relevant deadlines have expired, which will be no later than six months after receipt of a decision. However, you may allow us to store your application documents for a longer period to review them for other vacancies that match your profile.

We require your consent for this, which you can provide. In this case, we will store your data for 12 months. You can withdraw your consent at any time without stating the reasons for such with effect for the future by telephone: +49 (0)9342-802 0 , via e-mail to [email protected] or via surface mail to [email protected].

For our US jobs we use Automatic Data Processing (ADP) as a platform for our applicants. The software is provided to us by Automatic Data Processing Inc., 1 ADP Boulevard, Roseland, NJ 07068-1728, USA. The legal basis for the processing is your consent pursuant to Art. 6 (1) (a), (b) GDPR. You may revoke your consent at any time with future effect, for example by sending us a message to [email protected]. The lawfulness of the processing carried out prior to revocation remains unaffected.

Certificate Portal - Registration / Customer account (Art. 6 (1) (a,b) GDPR)

Users can provide personal data to enable them to register on our website.

Registration is therefore necessary to perform a contract with you or required to implement pre-contractual measures.

The principle of data minimisation and data avoidance is observed here, as only the mandatory data fields required for registration are marked with an asterisk (*). When registering, these are the name, the e-mail address, the password and password re-entry. When logging in, these are the e-mail address and the password.

When you register on our website, the user’s IP address and the date and time of registration are also stored (technical background data). Please click "Register" to consent to the processing of your data.

Please note: We will encrypt the password you entered which will be stored with us. Our company employees cannot view this password and cannot therefore assist you if you forget it.

In this event, use the "Forgotten password" function, which will send you an automatically generated new password by e-mail. No employee is authorised to request your password by telephone or in writing. Please never disclose your password should you receive such requests.

Upon completion of the registration process, your data will be stored with us for use in the protected customer area. When you log in to our website with your e-mail address as your username and your password, this data will be made available to you on our website.

You can of course cancel or delete the registration or your customer account.

DWK FutureLab Community (Art. 6 (1) (a) GDPR, § 7 (3) German Act against Unfair Competition)

In order to continuously improve the quality of our products, we rely on feedback from our end customers. To gather this feedback, promote our products, and strengthen customer loyalty, we have created a customer panel named DWK Insights Community in which you have also expressed your interest.

We would like to categorize the members of the panel based on company affiliation and the position they hold and contact them directly to send them surveys about our products. We would also like to invite them to in-person events and workshops on our premises.

We need your consent in order to include you in this customer panel. Giving consent is voluntary. You may revoke this consent at any time with future effect and without stating reasons by contacting us at [email protected]. Refusal to give consent will not result in any adverse effects.

As part of your admission to and participation in the customer panel, we collect and process the following personal data:

surname, name
e-mail address
company / employer

In so doing, we respect the principle of data minimisation and data avoidance, such that you only have to provide the information we require to add you to the customer panel. Your IP address will also be processed for technical reasons and for legal protection. All other data is voluntary and giving additional information is optional (e.g. to receive more relevant surveys).

The personal data will, except for the cases mentioned above, not be forwarded to third parties and are exclusively being processed for the purpose determined above. Data will be stored until you revoke your consent, until the purpose for processing no longer persists and there are no legal obligations to retain the data (storage periods).

In order to conduct our surveys, we may use a service provider in compliance with data protection regulations. We have concluded the necessary data protection agreements with this service provider.

You have the right to lodge a complaint about this data processing with a data protection supervisory authority. You further have, under the legal conditions, the right to access, the right to rectification, the right to erasure or restriction to processing, the right to object to processing and the right to data portability.

If you have further questions, please contact our data protection officer at [email protected].

Google Maps

On our website, we use a Google Maps plugin (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on the basis of your consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG). Google Maps is a web service for displaying interactive (land) maps to visually display geographical information.

Information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there as soon as you access the subpages in which the Google Maps map is integrated. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. Such an evaluation is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR and enables the display of personalized advertising, market research and/or demand-oriented design of the website.

You can revoke your consent at any time with effect for the future. To do so, simply call up our consent banner and change the settings accordingly. Please note that the change in the consent banner settings must be made individually for each end device.

In this context, the service providers may process the data in a third country, the USA, or have their registered office there. A corresponding data protection agreement has been concluded where necessary. The service providers are obliged to comply with the data protection standards of the EU and to guarantee the European level of data protection by means of corresponding contractual regulations and/or certification via the US-EU Data Privacy Framework. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 (1) lit. a GDPR), in which case you will be informed separately of this and of possible associated risks.

If you do not consent to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at http://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

Cookies (Art. 6 (1) lit. a, f GDPR, § 25 TDDDG (The German Federal Telecommunications Digital Services Data Protection Act)

On our website, we use so-called cookies. Cookies help us to improve our content to be more user-friendly, effective and secure. Cookies are small text-files which are stored (locally) in your devices´ browser. Cookies contain pseudonymous data only, in most cases even only anonymous data. Some cookies are persisting for a single browsing session (so-called session-cookies), others are active for a longer period of time (so-called persistent cookies, such as e.g. the ones used to save consent-settings). The latter kind of cookies are subject to auto-deletion after its pre-set expiration (usually 6 months). Besides our own cookies, we are also making use of cookies controlled by third parties. These may use the information of these cookies to, e.g. show you content or to track the sites you have visited.

Based on our legitimate interest (Art. 6 (1) lit. f GDPR), we are using technically required cookies, which are mandatory to operate the website as such and to operate it technically. Additionally, and again without your consent, we use cookies that help store or access information for transmitting messages or to offer services, § 25 (2) TDDDG.

Based on the cookie scan by cookieserve (https://www.cookieserve.com/scan-summary/?url=dwk.com), we are using the following technically necessary cookies:

Name	Functionality	Retention period
PHPSESSID	This cookie is native to PHP applications. The cookie is used to store and identify a users’ unique session ID for the purpose of managing user session on the website. The cookie is a session cookie and is deleted when all the browser windows are closed.	1 hour
private_content_version	This cookie is set by the provider Magento eCommerce platform. This cookie is used for appending a random, unique number and time to pages with customer content to prevent them from being cached on the server.	1 year 1 month 4 days
section_data_ids	Magento stores identifiers of website sections.	1 day
mage-messages	Magento manages website messages for users.	1 day
recently_viewed_product	Magento 2 set this cookie to store product IDs of recently viewed products for easy navigation.	1 day
recently_viewed_product_previous	Magento 2 sets this cookie to store product IDs of recently viewed products for easy navigation.	1 day
recently_compared_product	Magento 2 set this cookie to store information on recently compared products.	1 day
recently_compared_product_previous	Magneto sets this cookie to store the data on recently compared products.	1 day
product_data_storage	Magneto sets this cookie to store the product information.	1 day
__cf_bm	This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.	1 hour
product_data_storage	Magneto sets this cookie to store the product information.	Never
_vwo*	Visual Website Optimizer sets this cookie to calculate unique traffic on a website.	Never
recently_compared_product_previous	Magneto sets this cookie to store the data on recently compared products.	Never
recently_viewed_product	Magento 2 set this cookie to store product IDs of recently viewed products for easy navigation.	Never
recently_viewed_product_previous	Magento 2 set this cookie to stores product IDs of recently viewed products for easy navigation.	Never
recently_viewed_product	Magento 2 set this cookie to store product IDs of recently viewed products for easy navigation.	Never
private_content_version	This cookie is set by the provider Magento eCommerce platform. This cookie is used for appending a random, unique number and time to pages with customer content to prevent them from being cached on the server.	Never
recently_compared_product	Magento 2 set this cookie to store information on recently compared products.	Never

Based on the cookie scan by cookieserve (https://www.cookieserve.com/scan-summary/?url=dwk.com), we are using the following non-technically necessary cookies:

Name	Functionality	Retention period
_ALGOLIA	Algolia sets this cookie for the website to function and cannot be switched off in our systems.	6 months
hjIncludedInSessionSample	Determines if a user is included in the sample for session recording.
visitor_id*	Pardot sets this cookie to store a unique user ID.
_vwo_uuid_v2	This cookie is set by Visual Website Optimiser and calculates unique traffic on a website.	1 year
cf_clearance	Manages and verifies CAPTCHA challenges to block malicious traffic.	1 year
_ga	Used to distinguish users for website analytics tracking.
_fbp	Facebook sets this cookie to store and track interactions.	3 months
CookieConsent	Stores the user's cookie consent preferences.
conversion_linker	Links ad click information to conversion pages.
IDE	Used by Google DoubleClick to serve targeted ads.
_vwo_uuid_v2	This cookie is set by Visual Website Optimiser and calculates unique traffic on a website.	1 year
_vwo_uuid	Visual Website Optimizer sets this cookie to generate a unique id for every visitor and for its report segmentation feature. The cookie also allows to view data in a more refined manner.	1 year
_vwo_ds	This cookie stores persistent user-level data for VWO Insights.	7 days
_vwo_sn	This cookie stores session-level information.	1 hour
_vis_opt_test_cookie	Visual Website Optimizer creates this cookie to determine whether or not cookies are enabled on the user's browser.	Session
_gcl_au	Google Tag Manager sets this cookie to experiment advertisement efficiency of websites using their services.	3 months
wp_ga4_user_id	GA4 sets this cookie to identify and track users, helping to analyze user interactions and behaviour on websites that use Google Analytics.	Past
wp_ga4_customerGroup	GA4 sets this cookie to track the group or category of customers visiting a website, assisting in analytics by categorizing audience segments for better understanding and targeting of marketing efforts.	1 year
_gcl_ls	Stores Google click identifier information to measure and attribute conversions from advertising campaigns.
_vis_opt_s	Visual Website Optimizer sets this cookie to detect if there are new to or returning to a particular test.	3 months 8 days
mage-cache-storage	Magento sets this cookie for local storage of visitor-specific content that enables e-commerce functions.	1 day
mage-cache-storage-section-invalidation	Magento sets this cookie for local storage of specific content sections that should be invalidated.	1 day
form_key	Magento sets this cookie as a security measure that appends a random string to all form submissions to protect the data from Cross-Site Request Forgery (CSRF).	1 day
mage-banners-cache-storage	This cookie is set by the provider Magento eCommerce platform. This cookie is used for storing banner content locally to improve performance.	1 day
mage-cache-sessid	Magento sets this cookie as a value, and this cookie triggers the cleanup of local cache storage. When the cookie is removed by the backend application, the administrator cleans up local storage and sets the cookie value to true.	1 day
mage-cache-storage	Magento sets this cookie for local storage of visitor-specific content that enables e-commerce functions.	Never
mage-banners-cache-storage	This cookie is set by the provider Magento eCommerce platform. This cookie is used for storing banner content locally to improve performance.	Never
mage-cache-storage-section-invalidation	Magento sets this cookie for local storage of specific content sections that should be invalidated.	Never

With your consent, further cookies may be used, which enable us as well as third parties to analyze how our services are used. So, we can design our content according to our users´ preferences. Additionally, we may measure a single ad´s effectiveness to place it according to the users´ interest in certain themes. The legal basis, here, is your express consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG).

You may revoke your consent anytime and with effect for the future, as well as you may change your cookie-settings via our consent-banner. Please remember that all changes must be made for each device separately.

[Access the Consent-Tool]

Should you have accounts with the third party providers of ours and be logged into these while surfing our website, your data may be linked to your account. Such linking may be prevented by refusing to consent into the use of the respective cookies, to withdraw such consent if previously declared or by logging off this account before surfing our website.

Most browsers accept cookies automatically. However, you may deactivate, restrict or delete cookies manually by your browsers´ settings or software-based. Should cookies be deactivated, our website may eventually not be used anymore or to a limited extent only.

Google Analytics 4

This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on the basis of your consent (Art. 6 (1) lit. a GDPR, as well as § 25 (1) TDDDG). Google Analytics uses cookies. The information stored in this way is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated, your IP address will be shortened before data transmission and within the EU or EEA. An unabridged transmission of the full IP address to Google only takes place in exceptional cases.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Sessions and campaigns are terminated after a certain period of time. By default, sessions are terminated after 30 minutes of inactivity and campaigns after six months. Users' personal data is deleted or anonymized after 14 months.

In this context, the service providers may process the data in a third country, the USA, or have their registered office there. A corresponding data protection agreement has been concluded where necessary. The service providers are obliged to comply with the data protection standards of the EU and to guarantee the European level of data protection by means of corresponding contractual provisions and/or certification via the Data Privacy Framework. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 (1) lit. a GDPR), in which case you will be informed separately of this and of possible associated risks.

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

You can revoke your consent at any time with effect for the future. To do so, simply call up our consent banner and deselect the corresponding consent. Please note that the change in the consent banner settings must be made individually for each end device.

[Access the Consent-Tool]

This website uses the IP anonymization function of Google Analytics. Furthermore, a contract for commissioned data processing has been concluded with Google. You also have the option of deactivating Google Analytics using a browser add-on.

You can find more information on this at https://support.google.com/analytics/answer/6004245 (general information on Google Analytics and data protection).

Hotjar

To improve user-friendliness and the customer experience, we use the web analysis service “Hotjar” from Hotjar Limited, Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta on our website. With the help of Hotjar Limited technologies, visitor information is collected and transmitted to the Hotjar Limited servers. The technology makes it possible to collect, analyse and visualize the activities of the users during the visit to our website. For example, we can use a “heat map” to recognize which areas of our website are visited and clicked on the most. Cookies are also used for this purpose. We cannot establish a direct personal reference from the pseudonymous data used. The legal basis for the processing of your data is your consent, Art. 6 (1) lit. a GDPR.

Further information on data protection can be found at https://www.hotjar.com/privacy/.

Cloudflare

To make our website faster and more secure, we use Cloudflare from Cloudflare Inc, 101 Townsend St., San Francisco, CA, 94107, USA on our website. Cloudflare provides a content delivery network (CDN). In addition to faster delivery of websites via servers in your area, Cloudflare also offers support for verifying reCAPTCHAs. Cookies are used and data about our website visitors is processed.

The legal basis for the use of Cloudflare is our legitimate interest in optimizing our website and making it more secure, Art. 6 (1) lit. f GDPR. Cloudflare also processes data in the USA, among other places. Cloudflare is actively registered under the Data Privacy Framework. The necessary contractual basis with Cloudflare is in place.

Please find more information on https://www.cloudflare.com/de-de/privacypolicy/#6-notice-to-eu-uk-and-swiss-residents.

Google Tag Manager

This website uses the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). This service allows website tags to be managed via an interface. The Tag Manager is required for technical operation and is used to control the tags. The legal basis for the use of Google Tag Manager is Art. 6 (1) lit. f GDPR. We have a legitimate interest in the use of Google Tag Manager, as it is absolutely necessary to control the individual scripts used on the website and in this way to ensure the function of the website. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager.

More information about Google Tag Manager can be found at the following link: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ .

Google Remarketing (DoubleClick)

For marketing purposes, we use Google Remarketing, a service provided by Google Limited, Gordin House, Barrow Street, Dublin 4, Ireland for retargeting ads across the Google Display Network. This enables us to display our advertising on other websites in a targeted manner and tailored to your interests. If you have visited our website, you will receive customized advertisements about our products and services.

The agreements required under data protection law have been concluded. In particular, Google is also registered under the Data Privacy Framework.

The legal basis for this is your consent Art. 6 (1) lit. a GDPR and our legitimate interest Art. 6 (1) lit. f GDPR. You can revoke your consent at any time with effect for the future. To do so, simply call up our consent banner and change the settings accordingly. Please note that the change in the consent banner settings must be made individually for each end device.

More detailed information can be found at https://policies.google.com/privacy?hl=de.

Facebook Pixel

This website uses the “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, to measure conversions.

Meta Ireland and we are jointly responsible for the collection of your data when you use the service and for the transfer of that data to Meta. This is based on an agreement between us and Meta Ireland regarding the joint processing of personal data, which sets out our respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum. Accordingly, we are specifically responsible for fulfilling the information obligations under Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, and for compliance with the obligations under Art. 33, 34 GDPR, to the extent that a breach of personal data protection affects our obligations under the joint processing agreement. Meta Ireland is responsible for enabling data subjects to exercise their rights under Art. 15–20 GDPR, to comply with the security requirements of Art. 32 GDPR with regard to the security of the service, and to fulfill the obligations under Art. 33, 34 GDPR, to the extent that a personal data breach affects Meta Ireland’s obligations under the Joint Processing Agreement.

This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized. The data collected is processed for us as the operator of this website in such a way that we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy.

A cookie may be stored on your computer for this purpose. We use the Facebook pixel to display the advertisements placed by us only to those users who have also visited our website or who have certain characteristics that we transmit to Facebook. With the help of the Facebook pixel, Facebook is able to determine our website visitors as a target group for the display of advertisements.

The use of Facebook pixels is based on your express consent (Art. 6 (1) lit. a GDPR, § 25 (1) TTDSG). You can withdraw your consent at any time with effect for the future. To do so, simply call up our consent banner and select the appropriate setting. Please note that the change in the consent banner settings must be made individually for each end device.

LinkedIn Ads/ LinkedIn Insights Tags

We use “LinkedIn Insight Tags” of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland on our website on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR, § 25 (1) TTDSG.

LinkedIn Ireland Unlimited Company and we are joint controllers for the collection of your data and the transfer of that data to LinkedIn when you use the service. This is based on an agreement between us and LinkedIn Ireland Unlimited Company regarding the joint processing of personal data, which sets out our respective responsibilities. The agreement is available at https://www.linkedin.com/legal/l/page-joint-controller-addendum. Accordingly, LinkedIn is specifically responsible for fulfilling the information obligations under Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, as well as for the rights of data subjects under Art. 15–20 GDPR and the obligations under Art. 33, 34 GDPR.

If consent is given, visitors to this website may be shown personalized advertisements on LinkedIn. Furthermore, it is possible to create reports on the performance of the advertisements and information on website interaction. For this purpose, the LinkedIn Insight cookie is integrated on this website. If you visit this website while logged into your LinkedIn account at the same time, the visit data of our website can be assigned to your LinkedIn account.

This allows us to evaluate the effectiveness of our advertisements and optimize future advertising measures and display targeted advertising outside our own website without personally identifying you as a website visitor. We have no influence on the storage and processing of data by LinkedIn itself. LinkedIn uses the data for its own advertising purposes.

You can revoke your consent at any time with effect for the future. To do so, simply call up our consent banner and deselect the relevant consent. Please note that the change in the consent banner settings must be made individually for each end device.

To prevent the data from being linked to your LinkedIn account - even if you have given your consent - you must log out of your LinkedIn account before accessing our pages with the LinkedIn banner. Please note that this must be done separately for each end device.

LinkedIn probably also processes data in the USA. The LinkedIn Corporation is registered under the Data Privacy Framework. We have concluded the agreements required under data protection law. You can find out more about data processing by LinkedIn Ads at https://www.linkedin.com/legal/privacy-policy.

Algolia

On our website we use Algolia, a web hosting and backend service that uses AI functions of Algolia Inc, 301 Howard Str., San Francisco, CA, 94105, USA. Algolia enhances website search functionality and tracking.

It cannot be ruled out that Algolia also processes data in the USA. The necessary contractual agreements have been concluded. We use Algolia on our website on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR, § 25 (1) TTDSG. You can revoke your consent at any time with effect for the future. To do so, simply call up our consent banner and change the settings accordingly. Please note that the change in the consent banner settings must be made individually for each end device.

Algolia probably also processes data in the USA. We have concluded the agreements required under data protection law. You can find out more about data processing by Algolia at www.algolia.com/policies/privacy.

Salesforce

We use Salesforce on our website for internal processes and on our website as a customer-relations management tool (CRM) for managing customer inquiries, supporting sales activities and where applicable, for marketing und communications purposes. The provider is Salesforce Inc, Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA. The following data may be processed: contact information (e.g. name, e-mail-address, phone number), company related data, communication content (e.g. inquiries, correspondence), usage and interaction data, contact and transaction data for handling inquires, customer management, initiation and performance of contracts analysis and optimization of business processes and implementation of marketing measures when consent has been given. The data is processed on the basis of the user's consent, Art. 6 (1) lit. a GDPR for marketing purposes, Art. 6 (1) lit. b GDPR for contract or pre-contractual measure and Art. 6 (1) lit. f GDPR for the legitimate interest of efficient customer management. Data is stored only as long as necessary for the respective purposes or as required by statutory retention obligations.

Salesforce processes the data worldwide, including in the USA. Salesforce Inc. is registered under the Data Privacy Framework. The necessary data protection agreements have been concluded. Further information on data processing by Salesforce can be found in Salesforce's privacy policy: https://www.salesforce.com/de/company/privacy/.

Salesforce Marketing Cloud (Pardot)

Salesforce Marketing Cloud (Pardot) is a marketing automation platform developed by Salesforce Inc, Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.

To optimize our marketing activities and maintain our customer relationships, we use the marketing automation platform Pardot on our website. When using our marketing offers, forms or landing pages created with Pardot, the following data in particular may be processed contact information (e.g. name, e-mail address), usage data (e.g. clicks, pages visited, interactions), device and browser information, IP address. The legal basis for this processing is your consent in accordance with Art. 6 (1) lit. a GDPR.

Visual Website Optimizer (VWO)

Visual Website Optimizer (VWO) is a tool for conversion optimization and A/B testing. The provider is Wingify Software Private Limited, Plot No. 10, 2nd Floor, Huda Tech Park, Sector 56, Gurgaon, Haryana 122011 in India.

It helps us to test different versions of our website to find out which versions are better received by users and lead to more conversions. This enables companies to continuously improve their websites and optimize the user experience. In particular, data about user behavior on our website, clicks, page views, dwell time, browser and device information and IP addresses are processed. This data is used to carry out tests, create user segments and measure the effectiveness of the optimizations. The data is processed on the basis of the user's consent, Art. 6 (1) lit. a GDPR.

Wingify processes the data mainly in India, the necessary contractual agreements are attached.

More detailed information on Visual Website Optimizer can be found at https://vwo.com/de/privacy-policy/.

Magento, Art. 6 (1) (a) and (f) of the GDPR, § 25 (1) of the TDDDG

We use Magento Open Source and Adobe Commerce on our website. In particular, the following personal data is processed for this purpose: inventory data, contact information such as email address and phone number, usage data, IP address, device and browser information, and log data. This enables us to provide our service, optimize the user experience, ensure system security and stability, and use the tool for error analysis and abuse prevention. Cookies are used to provide access to login areas, save language settings and manage sessions. The legal Basis for this is your consent pursuant to Art. 6 (1)(a) GDPR, § 25 (1) TDDDG, as well as our legitimate interest in ensuring system security and stability, analyzing errors and preventing misuse, pursuant to Art. 6 (1)(a) GDPR. You may revoke your consent at any time with effect for the future without providing a reason. The necessary data protection agreements are in place. Personal data will only be stored as long as necessary to fulfil the respective purposes or as required by statutory retention obligations.

Social Plugins

Our website uses YouTube plugins, a service operated by Google. The operator of the YouTube website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages that includes a YouTube plugin, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited.

Furthermore, after you start a video, YouTube may store various cookies on your device. The legal basis for this processing is your consent and thus Art. 6 (1) (a) of the GDPR, as well as Section 25 (1) of the TDDDG. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts. The cookies remain on your device until you delete them. In some cases, additional data processing operations may be triggered after starting a YouTube video, over which we have no control.

In this context, it may happen that the service providers process the data in a third country, the United States, or are based there. Where necessary, a corresponding data protection agreement has been concluded. The service providers are obligated by appropriate contractual provisions and/or through certification under the US-EU Data Privacy Framework to comply with EU data protection standards and to ensure the European level of data protection. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 (1) (a) GDPR); in this case, you will be separately informed of this and of any associated risks.

If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. For more information on the handling of user data, please refer to YouTube’s Privacy Policy at: https://www.google.de/intl/de/policies/privacy.

Automated decisions in individual cases

We do not use purely automated processing to make decisions.

Links to other providers

Our website also contains clearly identifiable links to the websites of other companies. Although we provide links to websites of other providers, we have no influence on their content, and no guarantee or liability can therefore be assumed for such. The content of these pages is always the responsibility of the respective provider or operator of the pages.

The linked pages were checked at the time of linking for potential legal violations and identifiable infringements. No illegal content was identified at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement and, upon notification of a violation of rights, such links will be promptly removed.

Links to social media

On our website, you will find links to the social media platforms Facebook, YouTube, LinkedIn and Instagram. You can recognize links to these social media platforms by their respective company logos. If you follow these links, you will be directed to the DWK Life Sciences GmbH company page on the respective social media service. When you click on a link to a social media service, a connection is established with the servers of that social media service. This transmits information to the servers of the social media service indicating that you have visited our website. In addition, further data is transmitted to the provider of the social media service. This includes, for example:

The address of the website on which the activated link is located
The date and time the website was accessed or the link was activated
Information about the browser and operating system used
IP address

If you are already logged in to the relevant social media service at the time the link is activated, the provider of the social media service may be able to determine your username and, in some cases, even your real name from the transmitted data and associate this information with your personal user account on the social media service. You can prevent this association with your personal user account by logging out beforehand.

The servers of the social media services are located in the United States and other countries outside the European Union. The data may therefore also be processed by the social media service provider in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as is the case in the member states of the European Union.

Please note that we have no influence over the scope, nature, or purpose of data processing by the social media service provider. For more information on how your data is used by the social media services integrated into our website, please refer to the privacy policy of the respective social media service.

Updates

We will update our website and this Data Protection Declaration from time to time to protect your personal data. You should check this statement from time to time to keep up to date on how we protect your data and continually improve the content of our website.

DATA PROTECTION DECLARATION REGARDING SOCIAL MEDIA

We maintain a presence in “social media”, in this case on Facebook, Instagram, LinkedIn and YouTube. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

Below you will find the most important information on data protection law in relation to our websites.

Name and address of the controller

Responsible for the company websites within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is, in addition to the DWK Life Sciences GmbH, the

Facebook
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Instagram
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
YouTube
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where a joint controller agreement has been entered into with the respective platforms, we are joint controllers for the collection and processing of your data that takes place when you use the respective platform. The agreement sets out the respective responsibilities, and we would like to inform you here of its key provisions. The agreements are linked below for the relevant services and can be accessed there. Accordingly, we are specifically responsible for fulfilling the information obligations under Art.13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, and for compliance with the obligations under Art.33, 34 GDPR, to the extent that a breach of personal data protection affects our obligations under the joint processing agreement. Platforms are responsible for ensuring that data subjects’ rights under Art. 15–20 GDPR are upheld, for complying with the security requirements of Art. 32 GDPR with regard to platform security, and for fulfilling the obligations set forth in Art. 33, 34 GDPR.

However, you use these platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

We would also like to point out that your data may be processed outside the European Union.

Purpose and legal basis

We maintain the fan pages ourselves in order to communicate with visitors to these pages and to inform them about our offers in this way.

We also collect data for statistical purposes in order to further develop and optimize the content and to make our offer more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) are processed by the social networks and made available to us. We have no influence on the processing and presentation of this data.

In addition, your personal data will be processed by the social media providers, but also by us for market research and advertising purposes. For example, it is possible that user profiles are created based on your usage behavior and your interests. This allows, among other things, advertisements to be placed within and outside the platforms that correspond to your interests. Cookies are usually stored on your computer for this purpose. Besides that, data that is not collected directly on your end devices may also be stored in your user profiles. The storage and analysis also takes place across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

The processing of your personal data by us is based on our legitimate interests in effective information and communication in accordance with Art. 6 (1) lit. f GDPR.

Overall, you have the following rights regarding the processing of your personal data:

Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to lodge a complaint about unlawful processing of your personal data with the competent data protection authority.

However, since we don´t have full access to your personal data, you should contact the social media providers directly when asserting your rights, as they have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will of course try to support you. Please contact us by e-mail
[email protected] or phone +49 (0)9342-802 0.

Information on copyright and artistic copyright

If you wish to publish images, texts, plans, videos, music etc. on our website, you should be aware that you may be assigning all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

Google Analytics 4

We use Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google". Google Analytics uses cookies. The information generated by these cookies, such as the time, place and frequency of your visit to the website, including your IP address, is transmitted to Google in the USA and stored there.

We use Google Analytics on our website with an IP anonymization function. In this case, Google will already reduce your IP address within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area and thereby make it anonymous. Google will use this information to evaluate your use of our site, to compile reports on website activity for us and to provide other services relating to website and Internet use. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

Google will, according to its own statements, under no circumstances associate your IP address with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. Google also offers a deactivation option for the most popular browsers, giving you more control over what information Google collects and processes. If you activate this option, no information about your visit to the website will be transmitted to Google Analytics. However, activation does not prevent information from being transmitted to us or to other web analytics services that we may use. For more information about the opt-out option provided by Google and how to enable this option, please follow the link below: https://tools.google.com/dlpage/gaoptout?hl=en.

Google reCAPTCHA

On this website, we also use the reCAPTCHA function provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function primarily serves to distinguish whether an input is made by a natural person or abusively through automated and machine-based processing.

The service includes the transmission of the IP address and, where applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in determining individual accountability on the internet and preventing misuse and spam.

As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA. Google is registered under the Data Privacy Framework.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at:
https://www.google.com/intl/de/policies/privacy/