General information
Name and contact details of the controller and data protection officer
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is
Maren Leschke
E-Mail: maren.leschke@syngenity.de
Tel.: +49 (0)173 2027 246
General information on data processing, legal basis, storage period and recipients of the data
General information on data processing and legal basis
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of legal permission. When using this website, we only process personal data with your consent (Art. 6 para. 1 lit. a GDPR), for the performance of a contract to which you are a party or at your request for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR) or to fulfil a legal obligation (Art. 6 para. 1 lit. c GDPR) If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
Duration of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Recipient/disclosure of the data
We only pass on your personal data to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis in individual cases. Insofar as we are dependent on external service providers for the provision of services, for example for support, for the processing of payments and in the areas of the permissible sending of advertising measures, the information required for the fulfilment of the order will be passed on to these external service providers. These external service providers are carefully selected by us. In addition, an order processing contract has been concluded with each of these service providers so that it is regularly reviewed to ensure that your data is used in accordance with data protection regulations.
Furthermore, in individual cases we disclose personal data to third parties if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts, etc. Data may also be passed on if we are entitled or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.
Rights of data subjects, right to lodge a complaint
Your rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
• Information in accordance with Art. 15 GDPR about the personal data stored about you in the form of meaningful information on the details of the processing and a copy of your data;
• Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
• Deletion in accordance with Art. 17 GDPR of the data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose the erasure of the data because you need it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR.
• Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
• Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is carried out on the basis of Art. 6 para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the establishment, exercise or defense of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
• Revocation pursuant to Art. 7 para. 3 GDPR of your consent with effect for the future.
Complaint to a supervisory authority
If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
Data processing on the website
Automated data processing of the server
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites that are accessed by the user’s system via our website
The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 para. f GDPR.
The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.
The aforementioned data is stored for the duration of the display of the website and, for technical reasons, for a maximum of 10 days beyond that.
External hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Our host(s) will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We use the following hoster:
In order to ensure data protection-compliant processing, we have concluded a contract with the service provider for order processing in accordance with Art. 28 GDPR.
Contact and contact form
If you contact us by e-mail, telephone or via the forms provided on our website, we process the personal data you provide (including e-mail address, telephone number, name) in order to be able to process your request. The information collected via mandatory fields on the contact form is required in order to process the request. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the contact request. The personal data collected in the course of contacting us will not be passed on to third parties.
Your data will be processed when you contact us for the purpose of communicating and processing your request on the basis of Art. 6 para. 1 lit. b GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us in accordance with Art. 6 para. 1 lit. f GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields.
We store the data you enter until the purpose for which it was stored no longer applies (usually after your request has been processed). This only does not apply if we are legally obliged to store the data for longer.
Cookies
We use cookies. Cookies are small text files that are stored on your end device when you access the site. They cannot transmit viruses or malware to your computer, but they do contain information that enables the user to be identified. A distinction must be made between transient cookies, which are deleted as soon as your browser is closed, and persistent cookies, which are stored beyond the respective session and recognize you the next time you visit the website.
With regard to the function, a distinction must be made between technically necessary and non-necessary cookies.
Technically necessary cookies
These are all cookies that are necessary for the operation of our website and its functions (technically necessary cookies). These are usually set in response to an action you have taken. These include registration, login or settings such as language or cookie preferences. It is possible to deactivate these cookies in the browser. In this case, we can no longer guarantee that our website will function properly.
Technically unnecessary cookies
These are cookies that are not absolutely necessary for the operation of our website and its functions (technically unnecessary cookies). The use of such cookies constitutes data processing that is only permitted with your active consent (Art. 6 para. 1 sentence 1 lit. a GDPR). This also applies to the transfer of your personal data to third parties.
Legal basis
The legal basis for the use of technically necessary cookies is § 25 Para. 2 No. 2 of the Telecommunications Telemedia Data Protection Act (TTDSG) or on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interests consist in particular in being able to provide you with a technically optimized and user-friendly website and to ensure the security of our systems. The legal basis for consent with regard to the storage and reading of information is § 25 para. 1 TTDSG and with regard to the processing of personal data Art. 6 para. 1 lit. a GDPR.
Videos
We have made videos available for viewing on our website. For this purpose, we use a plugin from the video portal Vimeo, Vimeo.com Inc, 330 West 34th Street, 5th Floor, New York, New York 10001, USA.
To play the videos, a connection is established to the Vimeo servers in the USA. Your IP address is transmitted and Vimeo is informed which of our websites you have visited. This information is transmitted to the USA. If you are logged in to Vimeo as a member when you use the videos, Vimeo assigns this and possibly other information to your personal user account. You can prevent this link by logging out of your Vimeo user account before visiting our website and deleting the corresponding cookies from Vimeo.
The use of Vimeo is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If consent has been requested, processing is carried out on the basis of Section 25 (1) TTDSG and Art. 6 (1) (a) GDPR. Consent can be revoked at any time with effect for the future.
Registration on the website
You can register on our website to use additional functions such as accessing content such as videos on the site. We only use the data entered for the purpose of using the respective service. The mandatory information requested during registration must be provided in full. Otherwise the registration cannot be completed. For important changes, e.g. regarding the scope of the offer or for technically necessary changes, we use the e-mail address provided to inform you in this way.
The processing of the data entered during registration is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. The data collected during registration will be stored by us for as long as you use our services and are registered.
LinkedIn Insight Tag
Type and scope of processing
We use LinkedIn Insight Tag from LinkedIn Corporation, Sunnyvale, California, US, to create target groups, segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with LinkedIn Corporation. For this purpose, LinkedIn Corporation offers retargeting for website visitors in order to display targeted advertising outside our website.
LinkedIn Insight Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. This data is used to provide anonymized reports on website audience and ad performance.
We process your data with the help of LinkedIn Insight Tag for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. GDPR.
The specific storage period of the processed data cannot be influenced by us, but is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Insight Tag: https://www.linkedin.com/legal/privacy-policy.
Further data processing
Applications
If you apply to us and submit your application documents, you consent to the processing of your data for the purposes of the application procedure in accordance with the type and scope described in this data protection declaration. You are welcome to send your application to the e-mail address provided. However, we would like to point out that data transmission via e-mail is always unencrypted. We can therefore accept no responsibility for the transmission path between you and receipt on our server. You can also send us your application by post instead.
Your data will be processed for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of Art. 88 para. 1 GDPR in conjunction with. § 26 BDSG. There is no legal or contractual obligation to provide your data, but it is not possible to process your application without providing the information.
If your application is successful, your data may be further processed by us for the purposes of the employment relationship. If your application for a job offer is unsuccessful, the data will be deleted after a period of six months following rejection.
Presence on social media platforms
We maintain so-called fan pages or accounts or channels on the networks listed below in order to provide you with information and offers within social networks and to offer you further ways to contact us and find out about our offers. In the following, we will inform you which data we or the respective social network process in connection with your access and use of our fan pages/accounts.
Data that we process from you
If you wish to contact us via Messenger or via Direct Message via the respective social network, we generally process your user name, which you use to contact us, and may store other data provided by you insofar as this is necessary to process/answer your request.
The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller).
(Static) usage data that we receive from the social networks
We receive automated statistics regarding our accounts via Insights functionalities. The statistics include the total number of page views, likes, information on page activities and post interactions, reach, video views/views and information on the proportion of men/women among our fans/followers.
The statistics only contain aggregated data that cannot be related to individual persons. They are not identifiable to us.
What data the social networks process from you
In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and therefore no user account is required for the respective social network.
Please note, however, that the social networks also collect and store data from website visitors without a user account when the respective social network is accessed (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no influence whatsoever. Details on this can be found in the privacy policy of the respective social network (see the corresponding links above)
If you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our posts/contributions and/or wish to contact us via messenger functions, you must first register with the respective social network and provide personal data.
We have no influence on the data processing by the social networks in the context of your use. To the best of our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.
Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion and guidelines on the use of cookies and similar technologies in the context of registration and use of social networks can be found in the data protection provisions/cookie guidelines of the social networks. There you will also find information on your rights and options to object.
LinkedIn page
LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Companies can create profiles on which photos and other company information can be uploaded. Other LinkedIn users have access to this information and can write their own articles and share this content with others.
The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, LinkedIn is often used by companies and other organizations to recruit employees and present themselves as an interesting employer.
You can find more information about LinkedIn at: https://about.linkedin.com/
Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy
We do not collect or process any personal data via our LinkedIn company page.
Facebook Fanpage
We operate a Facebook page. When you visit it, Facebook collects in particular your IP address and other information that is available in the form of cookies on your mobile phone/tablet/PC. Based on this information, we receive statistical information about the use of our Facebook page. You can find more information at the following link: https://de-de.facebook.com/help/pages/insights.
The information is not used to draw conclusions about individual users. We only use this information to better respond to the interests of our users and to improve our online presence as a whole.
The purpose of data processing is to communicate and interact with you. As a rule, the following types of data are processed: Name, message content and any profile information you have published yourself.
The processing of your personal data for the above-mentioned purposes is based on our legitimate interest in providing an information and communication channel in accordance with Art. 6 para. 1 lit. f GDPR. If you as a user have given Facebook your consent to data processing, Art. 6 para. 1 lit. a GDPR forms the basis of the processing.
In principle, we are jointly responsible with Facebook for the processing of your personal data. However, since the processing is primarily carried out directly by Facebook, Facebook is also the first point of contact when it comes to exercising your rights as a data subject (right of access, rectification, erasure, etc.). Should you require assistance in this regard, you are welcome to contact us (see contact details of the controller).
Under the following links you will find further information on data processing by Facebook:
Data protection provisions: https://www.facebook.com/privacy/explanation
Cookie Policy: https://www.facebook.com/policies/cookies/
We operate an online presence on Instagram. Instagram is a social media platform operated by Meta Platforms, Inc. 1601 Willow Road, Menlo Park, CA 94025, USA. Facebook Ireland Ltd. processes personal data when you visit our Instagram page. This also applies if visitors are not logged in to any Facebook services. The processing includes, among other things, information about the type of content that people view or interact with. The processing also includes the actions taken by visitors and information about the devices they use (e.g. IP addresses, operating system, browser type, language settings, etc.). Facebook Ireland Ltd. provides more detailed information on data processing in its Instagram privacy policy, which is available at
https://www.instagram.com/legal/privacy/ can be called up.
Facebook provides information about the cookies that Facebook Ireland Ltd. sets when an Instagram account exists, Facebook products (including the website and apps) are used or other websites and apps that use Facebook products are visited under the following links:
https://www.instagram.com/legal/cookies/
https://www.facebook.com/policies/cookies/
The data may be transferred to countries outside the European Union.