The protection of your data is of particular concern to us. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (GDPR) and the country-specific implementation laws applicable to us. With the help of this data protection declaration, we inform you comprehensively about the processing of your personal data by BIOCOM AG and the rights to which you are entitled.
Personal data is the information that makes it possible to identify a natural person. This includes in particular your name, date of birth, address, telephone number, e-mail address and your IP address. The responsible body for data processing on this website is:
The controller alone or jointly with others shall decide on the purposes and means of the processing of personal data. We have appointed a data protection officer who you can contact at:
Tel.: +49 30 264921-0
Personal data means any information relating to an identified or identifiable natural person. Natural persons are considered identifiable if he or she can be identified, directly or indirectly, in particular by linking them to an identifier such as e.g. to a name, identification number, location data, or online identifier.
Legal basis for the processing of personal data
The legal basis for processing in this case is Article 6 (1) (e) of the EU GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG). Insofar as the processing of personal data is required in order to fulfil a legal obligation, this is based on Article 6 (1) (c) of the EU GDPR in conjunction with the relevant legal provision under which the legal obligation arises. Insofar as it is necessary to obtain the consent of a data subject before processing his or her personal data, Article 6 (1) (a) of the EU GDPR serves as the legal basis. Article 6 (1) (b) of the EU GDPR is the legal basis for processing personal data that are required to perform a contract to which the data subject is a party. It is also the basis for processing operations that are needed to carry out pre-contractual measures.
Data processing related to visiting this website
Categories, sources and origin of data
In server log files, the provider of the website automatically collects and stores information that your browser transmits to us, which are:
- Visited page on our domain
- Date and time of the server request
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- IP address (anonymised)
These data are not merged with other data sources. The data processing is based on Art. 6 para. 1 lit. b EU-GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Passing on to third parties
We will only pass on your data to third parties within the scope of the statutory provisions or with your corresponding consent. Otherwise, data will only be passed on to third parties if we are obliged to do so by mandatory legal provisions (passing on to external bodies such as supervisory authorities or criminal prosecution authorities).
Within our company, we ensure that only those persons receive your data who need it to fulfil their contractual and legal obligations. When dispatching the magazines, appropriate service providers support our specialist departments in fulfilling their tasks. The necessary data protection contracts were concluded with these service providers.
Storage period of the data
We store your data as long as they are needed for the respective processing purpose. Please note that numerous retention periods mean that data must continue to be stored. This applies in particular to commercial law or tax law storage obligations (e.g. Commercial Code, Tax Code, etc.). If there are no further storage obligations, the data will be deleted as soon as it has been used for its intended purpose.
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties.
You can recognize an encrypted connection by the "https://" address line of your browser and by the lock symbol in the browser line. In order to protect data stored with us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons in the best possible way, we use appropriate technical and organizational security measures.
Third country transmission
Data will only be transferred to third countries (outside the European Union or the European Economic Area) to the extent that this is necessary for the performance of the contractual obligation is required by law or you have given us your consent. This applies exclusively to the use of Google Analytics. We transmit your personal data to a service provider or to group companies outside the European Economic Area. In the case of Google Analytics (USA), an appropriate level of data protection follows from the corresponding participation in the Privacy Shield Agreement.
Newsletter and contact form
If you subscribe to our newsletter, your e-mail address will be stored on the server of "sendinblue", the service provider commissioned to send the newsletter. Your data will only be used to send the newsletter. We do not pass this data on to third parties, nor do we use it for other purposes. Our registration system, which includes a confirmation message, a web link, support and development of the Double-Opt-In to complete the registration, ensures that you have expressly requested the newsletter.
We also make it possible for interested parties to contact us via an online form on our website. Here, personal data (name, e-mail address) used for answering will be collected. These data will not be passed on to third parties or used beyond the processing of the enquiry.
The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions requested by you (e.g. shopping cart), takes place on the basis of Art. 6 para. 1 lit. f EU-GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these will be dealt with separately in this data protection declaration.
The information generated by the cookie about your use of the website such as
- Browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address) and
- Time of the server request
are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. We have also added the code "anonymizeIP" to Google Analytics on this website. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Further information can be found at https://www.google.com/privacypolicy.html.
You can prevent the storage of cookies by setting your browser software. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.
Google Ads Conversion Tracking
We also use Google Ads Conversion Tracking to track the use of our website statistically and for the purpose of optimizing our website. Google Ads places a cookie on your computer if you have reached our website via a Google advertisement. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the ad customer's website and the cookie has not expired, Google and the customer will be able to tell that the user clicked on the ad and was directed to that page.
Each Google Ads customer receives a different cookie. As a result, cookies cannot be tracked through ads customers' websites. The information collected from the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Google Ads customers will know the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive information that personally identifies users.
Matomo (formerly Piwik)
Our website uses the web analysis service Matomo. Matomo is an Open Source solution. Matomo uses "cookies". These are small text files, which your web browser stores on your terminal device and which allow an analysis of the website use. Information generated by cookies about the use of our website is stored on our server. Your IP address is anonymised before it is stored. Matomo cookies remain on your terminal until you delete them.
Matomo cookies are set on the basis of Art. 6 Para. 1 lit. f EU-GDPR. As the operator of this website, we have a legitimate interest in the anonymous analysis of user behaviour in order to optimise both our website and, if necessary, advertising. The information stored in the Matomo cookie about the use of this website will not be passed on to third parties.
You can prevent the setting of cookies by your web browser. However, some functions of the website may be restricted as a result. You can deactivate the storage and use of your data here. Your browser uses an opt-out cookie, which prevents the storage of Matomo usage data. If you delete your cookies, the Matomo opt-out cookie will also be removed. When you visit our website again, the opt-out cookie must be set again to prevent the storage and use of your data.
Processing of personal data within the scope of partnering
Visitors have the opportunity to register for partnering during the registration process. The purpose of partnering is to facilitate mutual contact. For this purpose, profiles can be placed on the partnering portal. These profiles will be visible to all other visitors who have registered for partnering and can be searched by a person’s name or by company / organisation name. It is possible to make contact enquiries via the partnering portal; the person requested will be informed of the request by e-mail. The e-mail addresses themselves will not be displayed on the partnering portal. If a person consents to the partnering, the data given in the input masks will be transmitted, exclusively for the operation of the partnering portal, to the service provider Venture Valuation AG, Kasernenstrasse 11, 8004 Zurich, Switzerland, which has been commissioned with the partnering; the data will be stored on a server in Switzerland.
Your rights as a data subject are standardized in Art. 15 - 22 EU-GDPR which include:
- The right of access (Art. 15),
- The right to rectification (Art. 16),
- The right to erasure “right to be forgotten” (Art. 17),
- The right to restriction of processing (Art. 18),
- The right to data portability (Art. 20),
- The right to object to data processing (Art. 21),
- Right of appeal to the competent supervisory authority (Art. 77)
Right of access, rectification, deletion, limitation
You have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if applicable, the right to correction, blocking or deletion of this data at any time within the framework of the applicable statutory provisions. You can contact us at any time in this regard and also for further questions on the subject of personal data.
Data that we process automatically on the basis of your consent or in fulfillment of a contract can be handed over to yourself or third parties. The information is provided in a machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible.
Rights of objection
Some data processing operations are only possible with your express consent. A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right of complaint to the responsible supervisory authority
In case of a breach of data protection law, you have the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection issues is Berliner Beauftragte für Datenschutz und Informationsfreiheit: www.datenschutz-berlin.de