BioCampus Cologne
Data protection

1. Name and contact details of the person responsible for processing

If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of personal data, as well as to withdraw a given consent or to object to a specific use of data, please contact us directly as the person responsible:

The controller within the meaning of Article 4 (7) of the General Data Protection Regulation (GDPR) as well as other data protection regulations and national data protection laws of the respective Member States is:

BioCampus Cologne Grundbesitz GmbH & Co. KG
Personally liable partner: BioCampus Cologne Management GmbH
Managing Directors: André van Hall, Andree Haack

Nattermannallee 1
50829 Cologne
germany
telephone: +49 (0) 221 93 33 6-0
email: info@biocampuscologne.de
Internet: www.biocampuscologne.de

‍

2. Information about the processing of personal data

2.1 Significance and scope

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be specifically related to a person, such as name, address and an e-mail address. Personal data is therefore information that relates to an identified natural person or who can be identified through this data. We process, in particular collect and use such data only if and insofar as this is necessary to provide our website and services.

‍

2.2 Legal basis for data processing

The processing of personal data requires a legal basis that legitimizes this processing. The following legal bases are considered in the present case:

• Art. 6 para. 1 lit. a GDPR: Personal data comprising the consent of the data subject may be processed;
• Art. 6 para. 1 lit. b GDPR: Personal data required to fulfill a contract may be processed. This also applies to the processing of personal data for necessary, pre-contractual measures;
• Art. 6 para. 1 lit. c GDPR: Personal data required to fulfill a legal obligation of the person responsible may be processed;
• Art. 6 para. 1 lit. d GDPR: Personal data required to protect the vital interests of the data subject or another natural person may be processed;
• Article 6 (1) (e) GDPR: Personal data required to perform a task that is in the public interest or to exercise public authority vested in the person responsible may be processed;
• Art. 6 para. 1 lit. f DSGVO: Personal data required to protect the legitimate interests of the person responsible or of a third party may be processed, unless the interests, fundamental rights and freedoms of the person concerned outweigh this interest.

The legal basis on which the processing is based is also specifically stated in this statement for each processing activity.

Any consent given by the data subject within the meaning of Article 6 (1) (a) GDPR may be withdrawn by the data subject at any time. However, this does not affect the lawfulness of the processing carried out on the basis of consent up to the withdrawal. (For more on this, see Punk 4)

‍

2.3 Storage period and deletion of personal data

Personal data that is processed by us is deleted after storage is no longer necessary. If there are legal storage periods to the contrary, processing will be restricted accordingly. The storage period for each processing activity is specifically stated in this statement.

‍

3. Processing activities

3.1 Visiting our website (general): log and log files

When you visit our website, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

• IP address
• Date and time of request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Each amount of data transferred
• Website from which the request comes
• browsers
• operating system and its interface
• language and version of the browser software.

Legal basis: Art. 6 (1) (f) GDPR

Purpose of processing:

The personal data collected in this context is processed by us exclusively to operate our website, i.e. to implement the technical presentation, convenient use and also to ensure the security of the website. For this reason, we also have a legitimate interest in processing within the meaning of Article 6 (1) (f).

Storage period:

We delete the data collected in this context as soon as they are no longer required to achieve the above-mentioned purpose. Data that is necessary to provide our website is deleted at the end of the respective session. We store parts of this data for up to a maximum of 7 days in order to be able to investigate any attacks on our site.

Processing such data, which is absolutely necessary to provide our website, is essential. In this respect, the user is not entitled to object. The above storage is carried out directly by us and/or the hosting provider commissioned by us.

‍

analytics services

For website analysis, this website uses Google (Universal) Analytics, a website analysis service provided by Google Inc. (www.google.de). This serves to protect our prevailing legitimate interests in an optimized presentation of our offer as part of a balancing of interests. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is abbreviated before transmission within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not combined with other data from Google.

Google LLC is headquartered in the USA and is certified under the EUUS Privacy Shield. A current certificate can here be viewed. As a result of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can this link click to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again.

Storage period, deletion and objection options:

The cookies are stored on your computer and transmitted from this computer to our website. In this respect, only you have the option to restrict and prevent the use of cookies through settings on your Internet browser. You can also delete cookies that have already been saved at any time.

‍

3.3 Contact form and email contact

When you contact us via our contact form or via one of our email addresses, the data you provide (your email address and any other personal data provided by you, such as your name and telephone number) will be processed by us in order to answer your questions and/or initiate and/or process any contractual relationship, if and to the extent necessary to do so. In this respect, we also store the date and time of transmission.

It will not be passed on to third parties in this context.

Important note:

For security reasons, we recommend that you only transmit emails in encrypted form. There are significant risks when transmitting unencrypted messages. Therefore, please do not send us any sensitive data via unencrypted email.

Legal bases:

Using the contact form:

• general question/message: Art. 6 para. 1 lit. a DSGVO (voluntary consent)
• Message about preparing, initiating a contract and/or processing a contractual relationship: Art. 6 para. 1 lit. b and f DSGVO

Sending an email:

• general question/message: Art. 6 para. 1 lit. f DSGVO
• Message about preparing, initiating a contract and/or processing a contractual relationship: Art. 6 para. 1 lit. b and f DSGVO

Purpose of processing:

The personal data collected in this context will be processed by us exclusively and only to the extent necessary to process the contact or to process the contract. This also includes our legitimate interest in processing within the meaning of Article 6 (1) (f).

Storage period:

We delete the data collected in this context after storage is no longer necessary, i.e. usually when the intended purpose has been achieved. If there are legal storage requirements, we restrict processing.

‍

3.4 Contact via telephone and hotline

When you contact us by telephone or via our hotline, the data you provide (e.g. your e-mail address and any other personal data provided by you, such as your name and telephone number) will be processed by us in order to answer your questions and/or initiate and/or process any contractual relationship, if and to the extent necessary. In this respect, we also store the date and time of transmission.

It will not be passed on to third parties in this context.

Legal bases:

• general question/message: Art. 6 para. 1 lit. a DSGVO (voluntary consent)
• Message about preparing, initiating a contract and/or processing a contractual relationship: Art. 6 para. 1 lit. b and f DSGVO

Purpose of processing:

The personal data collected in this context will be processed by us exclusively and only to the extent necessary to process the contact or to process the contract. This also includes our legitimate interest in processing within the meaning of Article 6 (1) (f).

Storage period:

We delete the data collected in this context after storage is no longer necessary, i.e. usually when the intended purpose has been achieved. If there are legal storage requirements, we restrict processing.

‍

3.5 Contact by letter (post) and fax

When you contact us by letter or fax, the data you provide (e.g. your fax number, email address and any other personal data provided by you, such as your name and telephone number) will be processed by us in order to answer your questions and/or initiate and/or process any contractual relationship, if and insofar as this is necessary. In this respect, we also store the date and time of transmission.

It will not be passed on to third parties in this context.

Legal bases:

• general question/message: Art. 6 para. 1 lit. a DSGVO (voluntary consent)
• Message about preparing, initiating a contract and/or processing a contractual relationship: Art. 6 para. 1 lit. b and f DSGVO

Purpose of processing:

The personal data collected in this context will be processed by us exclusively and only to the extent necessary to process the contact or to process the contract. This also includes our legitimate interest in processing within the meaning of Article 6 (1) (f).

Storage period:

We delete the data collected in this context after storage is no longer necessary, i.e. usually when the intended purpose has been achieved. If there are legal storage requirements, we restrict processing.

‍

3.6 Transfer of personal data to third parties and order processing

Your personal data will only be passed on by us to third parties on the basis of an existing legal basis. The following may be considered:

• If you have given your express consent in accordance with Article 6 (1) (a) GDPR,
• the transfer in accordance with Article 6 (1) (f) GDPR is necessary to assert, exercise or defend legal claims, provided that there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• in the event that there is a legal obligation to transfer data in accordance with Article 6 (1) (c) GDPR, and
• This is legally permitted and is required in accordance with Article 6 (1) (b) GDPR to process contractual relationships with you.

In some cases, we use external service providers to process your data. These are carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

In this respect, personal data is passed on to the service providers involved as part of contract processing. This includes, for example, the bank or credit institution responsible for payment matters. In principle, however, only data required for processing is passed on.

‍

3.7 Our social media channels and appearances on external specialist platforms

We operate further websites on social media channels and external platforms in order to present our information offers and services to users active there. Active users there can also communicate with us directly via the platforms if they are interested.

We currently operate the following additional offers:

https://www.facebook.com/RTZkoeln/

These offers on social media channels and external specialist platforms can only be accessed on this page via a link. We do not use plugins or other direct interfaces to these external offers for this purpose.

As soon as you access the respective page, the terms and conditions as well as the data protection regulations of the respective channel/platform operator apply in any case. In this respect, we have no influence on data processing carried out on external sites. Nor do we have any further information about data processing than that provided by the channel/platform operators in general, public statements.

When you contact us via these channels and platforms, the data you provide (e.g. your account/user name, your email address and any other personal data you provide, such as your name and telephone number) will be processed by us to answer your questions and/or initiate and/or process any client relationship, if and insofar as this is necessary. In this respect, we also store the date and time of transmission.

We will not share this information with other third parties in this context.

Legal bases:

• general question/message: Art. 6 para. 1 lit. a DSGVO (voluntary consent)
• Message about preparing, initiating a contract and/or processing a contractual relationship: Art. 6 para. 1 lit. b and f DSGVO

Purpose of processing:

The personal data collected in this context will be processed by us exclusively and only to the extent necessary to process the contact or to process the contract. This also includes our legitimate interest in processing within the meaning of Article 6 (1) (f).

Storage period:

We delete the data collected in this context after storage is no longer necessary, i.e. usually when the intended purpose has been achieved. If there are legal storage requirements, we restrict processing.

‍

3.8 Applications and application procedures (personnel)

When sending an application or further application documents, we process this submitted data to identify and select suitable potential female employees (f/i) and/or employees (m/i). As part of carrying out these procedures, there is also further communication with the applicants (w/i) and/or applicants (m/i), for example to conduct an interview. As part of these measures, we provide further information on data processing.

Legal basis: Art. 6 (1) (a) GDPR

Purpose of processing:

Identification and selection of new female employees (f/i) and/or employees (m/i) to strengthen our team.

Storage period:

If there is no employment relationship after application, the application documents will be deleted six months after rejection (Art. 17 para. 3 lit. b GDPR). If, on the other hand, there is an employment relationship, the data required for the duration of the employment relationship will be further processed (Article 88 (1) GDPR in conjunction with 26 BDSG).

‍

3.9 Data collection as part of our rental activity

As part of these measures or in the course of pre-contractual negotiations aimed at concluding a rental agreement, we provide further information on data processing.

Legal basis: Art. 6 (1) (a) GDPR

Purpose of processing:

Identification, selection and processing

Storage period:

If a contract is concluded, necessary data will be further processed for the duration of the contractual relationship (Art. 6 para. 1 lit. b GDPR) and deleted after termination of the contractual relationship unless and insofar as there is no legal retention period to the contrary.

‍

3.10 Integration of Google Maps

We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function, including the route planning function.

By visiting our website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in sections 3.1 and 3.2 of this statement will be transmitted. This happens — particularly with regard to your IP address — even if you do not have a user account with Google. If you are logged in to Google, your data is also directly associated with your account.

Legal basis: Art. 6 (1) (f) GDPR

Purpose of processing:

With this functionality, we optimize our offer and thus increase the attractiveness of our site and the benefits for our visitors. For these reasons, we also have a legitimate interest in processing within the meaning of Article 6 (1) (f).

Google stores your data as user profiles and uses them for advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website.

Storage period, deletion and objection options:

If you do not want to be associated with your profile on Google, you must log out before activating the button. You also have the right to object to the creation of these user profiles. To exercise this right, you must contact Google.

For more information on the purpose and scope of data collection and processing by the plug-in provider, please see the provider's privacy policies. There you will also find further information about your rights in this regard and settings options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield www.privacyshield.gov/EU-US-Framework

Plugin operator data: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA.

‍

4. Rights of data subjects

You have the following rights vis-à-vis us with regard to personal data concerning you:

Right to information (Art. 15 GDPR):

You have the right to information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period or at least criteria for determining the storage period, the existence of a right to correct, delete, restrict the processing of personal data concerning you or an objection in this regard, the existence of a right of appeal to the supervisory authority, the origin of your data, provided that they do not We were collected, as well as about the existence of automated decision-making, including profiling — at least with regard to the logic involved in this regard.

Right to rectification (Art. 16 GDPR):

You have the right to have your incorrect and/or incomplete personal data stored by us corrected.

Right to deletion (Art. 17 GDPR):

You have the right to delete your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

Right to restrict processing (Art. 18 GDPR):

You have the right to restrict the processing of personal data concerning you, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to processing in accordance with Article 21 GDPR;

Right to data portability (Art. 20 GDPR):

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right to transfer this data to another person responsible without hindrance from us, provided that the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and the processing is carried out using automated procedures.

When exercising this right, you also have the right to have the personal data concerning you transmitted directly by us to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected as a result.

The right to data portability does not apply to processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.

Right to object to processing (Art. 21 GDPR):

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

If you would like to exercise your right of revocation or objection, simply send an e-mail to: info@rtz.de

Right to withdraw the declaration of consent under data protection law:

You have the right to withdraw your data protection consent at any time. Such a withdrawal of consent does not affect the lawfulness of our processing carried out on the basis of the consent up to the withdrawal.

If you would like to exercise your right of revocation or objection, simply send an e-mail to: info@rtz.de

Right to reject an automated decision in individual cases, including profiling:

You have the right not to be subject to a decision based exclusively on automated processing — including profiling — which has legal effect on you or significantly affects you in a similar way. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and us, is subject to Union or Federal Republic of Germany legislation, is admissible and this legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests or is carried out with your express consent.

However, these decisions must not be based on special categories of personal data under Article 9 (1) GDPR, unless Article 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases mentioned above, we take appropriate measures to protect your rights and freedoms as well as your legitimate interests, which include at least the right to obtain the intervention of a person from the person responsible, to express your own point of view and to challenge the decision.

‍

5. Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you infringes applicable data protection law.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

The supervisory authority responsible for us for data protection issues is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Cavaleriestr. 2-4, 40213 Düsseldorf, phone: 0211/38424-0, fax: 0211/38424-10, e-mail: poststelle@ldi.nrw.de

‍

6. Data security: encryption and TOM

Our website is SSL-encrypted (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.

You can recognize whether the respective subpage of our website is transmitted in encrypted form by the closed display of the key or lock icon in the lower status bar of your browser.

We also use appropriate technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments and adapted to the latest state of the art.

‍

7. Links to external websites of other providers

If we link and/or refer to third-party websites, the respective operators of these pages are responsible for processing data under data protection law. As soon as you leave our site and visit an offer from a third party, the data protection regulations presented there by the person responsible for the respective offer apply.

‍

8. Timeliness and amendment of this privacy policy

This privacy policy is currently valid and was last updated on 04.06.2018.

As a result of the development of our website and offers or due to changes in legal or regulatory requirements, it may be necessary to change this privacy policy. You can access and print out the current privacy policy at any time on our website under “Privacy Policy”.

‍

‍

‍