ALRISE Biosystems GmbH, Competence in Drug Delivery

Note: The English translation of our data protection declaration is for convenience only and does not claim to be legally binding. In case of doubt the German version prevails.

The following presentation serves to inform both those persons who only visit the website of ALRISE Biosystems GmbH, Robert-Rössle-Straße 10, 13125 Berlin ("ALRISE") ("Users"), and those persons who - with and without visiting the website - conclude or plan to conclude a contract with ALRISE (hereinafter "Business Partners") and those persons who - with and without visiting the website - apply to ALRISE (hereinafter "Applicants").

The terms used are based on formulations used by the European legislator when adopting the General Data Protection Regulation (hereinafter referred to as the "GDPR").

1. Whose Personal Data is Being Processed?

Persons affected by the processing of personal data are users, business partners and applicants. Users, business partners and applicants are hereinafter also referred to in summary as "data subject".

2. Data Processing - Website

2.1 Which data is automatically processed when I visit the ALRISE website?

When accessing the ALRISE website, the ALRISE servers automatically store various data about the accessing system ("access data").

The access data includes:

ALRISE uses this access data in order to make the website accessible, to detect and correct any technical problems that may occur, and to prevent and, if necessary, to prosecute misuse of the ALRISE website.

In addition, ALRISE reserves the right to use the access data in anonymous form; i.e. without the possibility of identifying the user for statistical purposes and to improve the website.

2.2 Which Data Are Processed When Using the E-Mail Function on the Website?

Via this website ALRISE offers the possibility to contact ALRISE by e-mail and to write messages. In addition to the disclosure of the pure e-mail address of the sender, these e-mails may contain, at the user's discretion, personal data (e.g. first and last name, title, address, telephone number, e-mail text, factual context of the inquiry).

ALRISE processes the personal data transmitted in connection with e-mails exclusively for processing the respective e-mail request.

2.3 Are Cookies Used?

The ALRISE website does not use cookies.

3. Data Processing - Initiation / Establishment of a Contractual Relationship

3.1 Is the Business Partner Obliged to Provide Personal Data?

The establishment and implementation of a contractual relationship between ALRISE and the business partner requires that the business partner provides ALRISE with the personal data required for the establishment, implementation and fulfilment of the associated contractual obligations or which ALRISE is legally obliged to collect (e.g. under money laundering laws, tax laws). Without this data, ALRISE will generally have to refuse to establish a contractual relationship or fulfil an existing contract and may have to terminate the contractual relationship.

3.2 Purpose of Processing

When entering into and executing a contractual relationship with the business partner, ALRISE processes personal data of the business partner for the following purposes:

3.3 Categories of Data

Which personal data of the business partners are processed in detail depends largely on the respective contractually agreed services. However, for the purposes mentioned above, ALRISE processes the following categories of personal data of business partners:

4. Data Processing - Job Applications

In the case of applications - whether digital, by post or in any other form - the data submitted by the applicant will be collected and processed by ALRISE for handling the application procedure.

4.1 Is the Applicant Obliged to Provide Personal Data?

The precondition for consideration of an application is that the applicant provides ALRISE with the personal data necessary for communication with the applicant and verification of the applicant's qualifications. Without this data ALRISE will normally not establish a contractual relationship with the applicant.

4.2 Purpose of Processing

ALRISE processes personal data of the applicant in accordance with the applicable legal provisions for the protection of personal data and data security. As part of an application process, ALRISE processes personal data of applicants for the following purposes:

4.3 Categories of Data

Which personal data of the applicant are processed in detail depends largely on the circumstances of the individual case. For the above purposes ALRISE processes the following categories of personal data of applicants:

5. Legal Bases under Data Protection Law

The processing of the personal data of the data subject is based on the following legal bases:

5.1 Data Processing Website

5.2 Data Processing - Initiation / Establishment of a Contractual Relationship

5.3 Data Processing - Job Applications

6. Transmission and Passing-On of Personal Data to Third Parties

ALRISE only transmits personal data to other third parties (e.g. courts, authorities, law firms) if this is necessary to fulfil the aforementioned purposes or if the transmission is necessary to assert, exercise or defend own legal claims. ALRISE has also commissioned tax consultants/auditors to provide tax advice to ALRISE and to this extent has also outsourced the accounting to the commissioned tax consultancy firm.

ALRISE cooperates with technical service providers (so-called contract processors), such as service providers for EDP/IT applications, data destruction, marketing and website management. These service providers only act in accordance with ALRISE's instructions and are contractually obliged to comply with the applicable data protection requirements.

Data is only transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary for the fulfilment of the contract with the business partner in individual cases or required by law. ALRISE does not cooperate with service providers in third countries.

7. Deletion Periods

7.1 Website

7.2 Initiation / Establishment of a Contractual Relationship

Personal data of the business partner are deleted as far as they are no longer necessary for the fulfilment of the purpose of the processing, unless their - limited - further processing is necessary for the following purposes:

If personal data of the business partner are processed on the basis of the business partner's consent, the business partner has the right to revoke the consent given at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. After revocation, data processing may only be continued if (future) processing can be based on a legal basis other than consent (see section 5.2 above).

7.3 Job Applications

With regard to the application data collected by ALRISE (see section 4.3), ALRISE proceeds as follows.

8. Rights of the Data Subject

The data subject has the following rights and/or claims. Their assertion will be processed immediately and does not lead to any disadvantages for the data subject.

The data subject also has the right to lodge a complaint with a data protection authority if he or she considers that ALRISE's processing of personal data concerning him or her is in breach of the GDPR. In addition to the data protection authority responsible for ALRISE (cf. section 9 below), the supervisory authorities of the place of habitual residence of the data subject, the place of employment of the data subject and the place of presumed infringement are responsible for this. Further rules on the appeal procedure can be found under Art. 77 GDPR.

9. Responsibilities

Responsible for the legitimacy of data processing is:

ALRISE Biosystems GmbH
Robert-Rössle-Straße 10
13125 Berlin
Deutschland
Phone: +49 (0) 30 94 89 24 83
Fax: +49 (0) 30 94 89 24 82
E-Mail: info@ALRISE.de

The rights mentioned in section 8 can also be asserted by using the aforementioned contact data.

The Berlin Commissioner for Data Protection and Freedom of Information supervises compliance with data protection law in the non-public sector in Berlin. The contact details are:

The Berlin Commissioner for Data Protection and Freedom of Information

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
Phone: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
E-Mail: mailbox@datenschutz-berlin.de

10. Changes to the Data Protection Statement

ALRISE reserves the right to adapt this data protection statement to changed factual or legal conditions if necessary.

Status: May 2018

ALRISE Biosystems GmbH
Robert-Roessle-Straße 10
Otto-Warburg-Haus
13125 Berlin, Germany
Phone +49 30.94 89 24 83
Fax +49 30.94 89 24 82
info@alrise.de