Data Privacy
The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
BioCopy AG
Dr. Matthias Wiedenfels, CEO
Dr. Günter Roth, Chairman of the Board
Switzerland Innovation Park Basel Area AG
Novartis-Campus, Gebäude (Building) WSJ-210
Lichtstrasse 35
CH-4056 Basel
Switzerland
E-Mail: info@biocopy.com
Website: https://www.biocopy.com
General notice
Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the Swiss Confederation (Data Protection Act, DSG), every person (data subject) has the right to protection of their privacy as well as protection against misuse of their personal data. The operators of these pages (the controller) take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy. In cooperation with our hosting providers, we take every possible precaution to protect the databases as well as possible against unauthorized access, loss, misuse or falsification. We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is therefore not possible. By using this website, you consent to the collection, processing and use of data in accordance with the following description. This website can be visited without registration. For statistical reasons, data, such as date and time of access, pages accessed or names of files accessed are stored on the server. This data cannot be linked to individual users. If personal data, in particular name, address or e-mail address are collected, this happens entirely on a voluntary basis. Without consent, data will not be passed on to third parties.
Name and Address of the Data Protection Officer
DataCo GmbH
Daniel Grewing
Nymphenburger Str. 86
80636 Munich, Germany
All queries should be addressed to info@biocopy.com.
Cookies
In order to constantly improve the user-friendliness of our website, we monitor the usage of our website.
Collection of general data and information
The website of BioCopy AG collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites which are targeted by the system accessing our website, (5) the date and time of access to the website, (6) an IP address, (7) the internet service provider of the accessing system, and (8) similar data and information that may be used in the event of attacks on our information technology systems. When using these general data and information, BioCopy AG does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) ensure the long-term viability of our information technology systems and website technology, and (3) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, BioCopy AG analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security, and to ensure an optimal level of protection for the personal data we process. Server log files are stored separately from all personal data provided by a data subject.
Contact through the website
According to legal requirements, the website of BioCopy contains information that enables a quick electronic contact, as well as direct communication with us, through e-mail. If a data subject contacts BioCopy by e-mail, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties. Art. 6 I lit. f GDPR further permits further processing if it is necessary to preserve legitimate interests of BioCopy AG or a third party as long as civil rights and fundamental freedom of the respective data subject don’t prevail. We take every precaution to protect your data from loss, misuse, unauthorized access, unauthorized distribution, distortion or destruction. Your data are stored on a password protected server, to which only a limited number of persons have access.
Routine erasure and blocking of personal data
The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to. If the storage purpose is no longer applicable, or if a storage period prescribed by the European legislator or any other competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.
Rights of the data subject (user)
As a user of our web services, you have the right at any time to free access to your stored personal data, their origin and recipient, the purpose of data processing, as well as the right to correction, blocking or deletion of this data. Simply contact us at any time under the address provided with your query in this regard or to ask further question on the issue of personal data management.
Data protection provisions about the application and use of LinkedIn
The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world. The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside of the UNITED STATES LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible. With each call-up to one of the individual pages of this website, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in on LinkedIn at the same time, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website —which specific sub-page of our website was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.
LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy . The applicable privacy policy for LinkedIn is available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available under https://www.linkedin.com/legal/cookie-policy .
Legal basis for processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
The legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.
Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.
Provision of personal data as statutory or contractual requirement; Requirement necessary to enter into a contract; Obligation of the data subject to provide the personal data; Possible consequences of failure to provide such data We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact any employee. The employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
Amendment of Privacy Statement
We may update our Privacy Statement from time to time. Updates of our Privacy Statement will be published on our website. Any updates become effective upon publication on our website. We therefore recommend that you regularly visit this site to keep yourself informed on possible updates.
This Privacy Policy has been generated with the help of the Privacy Policy Generator of the External Data Protection Officers that was developed in cooperation with RC GmbH, which sells used notebooks and the Media Law Lawyers from WBS-LAW.