Data Privacy

Privacy Policy

This Privacy Policy informs you, as a user of the website www.cultivia.de about the processing of personal data on this website in accordance with Articles 12 and 13 of the General Data Protection Regulation (GDPR / DSGVO).

Controller and Data Protection Officer

The controller responsible for data processing on this website is:

Cultivia Pharma GmbH
Herforder Straße 69
33602 Bielefeld

(“Cultivia” or “we”)

You can reach us via servica@cultivia.de or +49 (0)241 9809 2739
You can reach our Data Protection Officer as follows:

Keyed GmbH
Data Protection Officer Serkan Taskin, Dipl. Jur., Legal Counsel
Siemensstraße 12
48341 Altenberge
Germany

phone: +49 (0)25056397103
s.taskin@keyed.de

Definitions

The definitions are based on Article 4 DSGVO. For reasons of transparency, we list some key terms below:

“Processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”);

“Controller” means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data;

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Principles for the Processing of Personal Data

The processing of personal data is carried out in accordance with the principles set out in the DSGVO. Processing takes place, in particular, only in a lawful manner, in a way that is transparent and comprehensible to the data subject, and for specified, explicit and legitimate purposes. In addition, the principle of data minimisation applies, according to which data processing is limited to what is necessary.

Legal Basis for the Processing of Personal Data

We collect and process your personal data only in accordance with the DSGVO as well as other provisions of European and applicable national data protection law.

Where we obtain your consent, the legal basis for data processing is Article 6(1), first subparagraph, lit. a DSGVO. You may withdraw your consent at any time with effect for the future.

If the processing of your personal data is necessary for the performance of a contract or for the implementation of pre-contractual measures, the legal basis is Article 6(1), first subparagraph, lit. b DSGVO.

If we are legally obliged to process data, the legal basis follows from Article 6(1), first subparagraph, lit. c DSGVO.

Where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests, Article 6(1), first subparagraph, lit. f DSGVO constitutes the legal basis for processing.

Which Personal Data We Process and for Which Purposes

We collect different types of personal data for different purposes:

Visiting our Website

When you access our website, data and information are collected automatically. This includes:

  • the page from which the website was requested,

  • the date and time of the request,

  • your length of stay,

  • the volume of data transferred,

  • the anonymised IP address of the requesting computer,

  • a description of the type and version of the web browser used,

  • the operating system installed,

  • the hostname of the accessing computer.

The collected data is stored in our system log files. As a rule, this data is not stored together with other personal data.

The legal basis for the temporary storage of the data and the log files is Article 6(1), first subparagraph, lit. f DSGVO. We have a legitimate interest in collecting and temporarily storing the above data. The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer and serves to ensure the security and functionality of the website.

aa. Cookies and Other Tracking

We use our own cookies and cookies from third-party providers for various purposes. Some cookies are technically necessary for the operation of our website. We refer to these as necessary cookies. Other cookies enable us to provide website functions or to improve the experience of visitors to our website by offering personalised content and advertising. The specific types of first-party and third-party cookies that may be used via our website and the purposes they serve are described in our cookie settings tool. Third-party cookies are additionally explained below.

Cookies are not the only way to recognise or track visitors to a website. We may use other similar technologies, such as web beacons (sometimes referred to as “tracking pixels” or “clear GIFs”). These are small graphic files containing a unique identifier that enables us to recognise when someone has visited our website. In this way, for example, we can monitor user navigation patterns from one subpage of our website to another, determine whether you came to our website via an online advertisement on a third-party website, and improve the performance of our website. In many cases, these technologies rely on cookies to function properly, so rejecting cookies may impair their functionality.

Using tracking technologies, we may also determine whether a person is in contact with us. If not, we delete personal data after a certain period of inactivity as part of our data minimisation practices.

The legal basis for the use of necessary cookies is Article 6(1), first subparagraph, lit. f DSGVO and § 25(2) no. 2 Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG), as we have a legitimate interest in ensuring the functionality and security of our websites.

The use of other cookies and similar technologies takes place only with your consent. The legal basis is Article 6(1), first subparagraph, lit. a DSGVO and § 25(1) TDDDG. You have the right, in the cookie settings tool, to decide whether you want to accept or reject non-essential cookies. You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can also configure your web browser to accept or reject cookies. If you choose to reject cookies, you may still use our website, although your access to certain functions and areas of our website may be restricted. Since the method for rejecting cookies via your browser settings varies from browser to browser, please refer to your browser’s help menu for further information.

bb. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In the course of using Google Analytics, personal data may be transferred to Google. With your consent, Google Analytics uses cookies to analyse your user behaviour on our website in order to improve website functionality and evaluate the success of our marketing. For this purpose, Google Analytics processes online identifiers (including cookie identifiers), Internet Protocol addresses and device identifiers, as well as customer-assigned identifiers.

Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage. In doing so, Google may link the data with other data about you (e.g. search history, personal accounts, usage data from other devices, and any other data Google has about you).

In order to obligate Google, as a processor, to process the transmitted data only in accordance with our instructions and to comply with applicable data protection regulations, we have concluded a data processing agreement (Auftragsverarbeitungsvertrag) with Google.

The legal basis for data processing is your consent, Article 6(1), first subparagraph, lit. a DSGVO and § 25(1) TDDDG. You may withdraw your consent at any time via our cookie settings with effect for the future. The information generated by the cookies is generally transferred to and stored on a Google server in the USA. This transfer is carried out on the basis of the EU–US Data Privacy Framework.

Google’s terms of use and information on data protection can be accessed via the following links:

b. Contact

You have the option to contact us via the address, telephone number and email address stated above under section I. and in the Legal Notice (Imprint). We store the sender data you provide, such as email address, name, telephone number, your request and any other data you communicate to us.

The legal basis for processing is Article 6(1), first subparagraph, lit. b DSGVO if the enquiry is aimed at concluding a contract, or Article 6(1), first subparagraph, lit. f DSGVO. We have a legitimate interest in responding to your enquiries.