- Data Controller
Data Controller according to Art. 4 No. 7 GDPR is:
Abalos Therapeutics GmbH
Merowingerplatz 1 A
Tel: +49 211 540104-0
- Processing personal data when contacting us via our Website
If you contact us by e-mail or via a contact form, the personal data provided by you (your e-mail address, and if necessary, your name and your phone number) will be stored by us on the basis of Art. 6 (1) (b) GDPR in order to answer your questions. These personal data will be deleted after storage is no longer required or processing will be restricted if there are statutory retention and documentation obligations.
- Processing personal data when visiting our Website
If you only use the Website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only process the personal data that your browser transmits to our server. If you wish to view our Website, we process the following data on the legal basis of Art. 6 (1) (f) GDPR which is technically necessary for us to display our Website to you and to guarantee stability and security:
- IP address,
- Date and time of the request,
- Content of the request (concrete page),
- Access status / http status code,
- the amount of data transferred in each case,
- the website from which the request comes,
- Browser type and browser version,
- operating system and its interface,
- Language and version of the browser software.
When you visit our Website, cookies may be stored on your device in order to provide us with personalised functions and to analyse your use of our Website. Cookies are used on the basis of Art. 6 (1) (f) GDPR. A cookie is a small text file that is stored on a user’s device (computer, tablet, smartphone etc.) in order to store certain information relating to the user’s device. If our Website is accessed by the corresponding device of the user, the server of our Website receives cookies back. The server can evaluate the information stored in cookies in various ways. Cookies can be used, for example, to collect statistical data on website usage. Cookies cannot execute programs or transmit viruses to your device. Cookies cannot access, read or modify any other data on your device.
You can allow, block or delete cookies installed on your device by setting the browser options installed on your device. Please read the help section of your browser carefully to learn more about how to activate the “Private mode” or unlock certain cookies. Here are some examples from well-known browsers to change your settings:
- a) Internet Explorer:
Tools > Internet Options > Privacy > Configuration. For more information, please consult Microsoft support or browser help.
- b) Firefox:
Tools > Options > Privacy > History > Custom Settings. For more information, please consult Mozilla support or browser help.
- c) Chrome:
Settings > Show Advanced Options > Privacy > Content Settings. For more information, please consult Google support or browser help.
- d) Safari:
Preferences > Privacy. For more information, please consult Apple support or browser help.
- Google Maps
This Website uses Google Maps to display interactive maps and to create directions to our office. Google Maps is a map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this Website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. The legal basis for the use of Google Maps is Art. 6 (1) (f) GDPR. When you visit a website on our Website that contains Google Maps, your browser establishes a direct connection with Google’s servers. The map content is transmitted by Google directly to your browser and integrated into the Website by it. We therefore have no influence on the extent of the data collected in this way by Google. To the best of our knowledge, this is at least the following data:
- Date and time of the visit to the website concerned;
- Internet address or URL of the website accessed;
- IP address, the (start) address entered during route planning.
We have no influence on the further processing and use of the personal data by Google nor are we aware of the full scope of the collection of personal data, the purpose of processing, the period for which the personal data will be stored and the erasure of personal data.
The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information (https://policies.google.com/privacy?hl=en).
- External web services/ links to other websites
We use a number of external web services on our Website. For example, we may refer to external patient organizations. If you visit these other websites, their privacy and cookie policies apply to the processing of your personal data in this regard.
- Data Security
We maintain reasonable security procedures within the meaning of Art. 32 GDPR in order to protect the personal data you provide to us against loss, misuse, unauthorized access, disclosure, alteration or destruction.
- Duration of Storage
We process your personal data no longer than it is necessary to achieve the purposes for which they were processed. However, your personal data can also be stored if this is provided for by the legal requirements to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we will delete or block your personal data after the end of the respective requirements.
- Your Rights
As a data subject You have the following rights:
- the right to access your personal data processed by us (Art. 15 GDPR);
- the right to request the rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) of your personal data;
- the right to request that we restrict the processing of your personal data (Art. 18 GDPR);
- the right to object to the further processing of your personal data (Art. 21 GDPR);
- the right to transmit your personal data to another controller (Art. 20 GDPR);
- the right to not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).
You have the right to lodge a complaint with a supervisory authority if you take the view that the processing of your personal data is unlawful (Art. 77 GDPR).
Your right to withdraw consent:
Where the processing of your personal data by us is based on consent, you have the right according to Art. 7 GDPR to withdraw that consent without detriment at any time by contacting us at firstname.lastname@example.org. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Last update: Sept. 2019