1. Overview
2. Which personal data do we process?
3. For which purpose do we process your personal data?
4. How do we process your personal information?
5. Will personal data be disclosed to third parties?
6. How long do we store your personal data?
7. What rights do I have?
8. How do we use Google Maps?
9. Questions and comments

1. Overview

1.1 This privacy policy has been developed to give you an overview of how we gather, store, process, forward or transfer your personal data, when you visit our website or use the services offered on our website.

1.2 When processing your personal data, we strictly comply with the data protection regulations of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

1.3 Personal data is all data personally referable to you, e.g. IP address, name, address, email data or user behaviour.

1.4 We reserve the right to adapt the contents of these data protection regulations. We therefore recommend that you review the data protection provisions at regular intervals.

1.5 According to Article 4 Section 7 of the EU General Data Protection Regulation (GDPR), the DKMS Group gGmbH (see legal notice) is in authority. You can reach our Data Protection Supervisor under datenschutz@dkms.de or via our postal address addressed c/o ‘Data Protection Supervisor’.

We gather your personal data when you visit our website or use one of the services offered on our website. Depending on how you use our website, this includes the following information:

2.1 Purely informational use: If you use the website for information purposes only, i.e. if you either complete a contact form or otherwise provide us with information, we do not collect personal data except the data that your browser transmits to our server automatically to show you our website. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to guarantee stability and security:
• IP address,
• Date and time of request,
• Time zone difference from Greenwich Mean Time (GMT),
• Content of the request (specific page),
• HTTP status code,
• The website making the request,
• Browser,
• Operating system and device;
• Language and version of your browser software.

2.2 In addition to the purely informational use of our website, we offer the option of getting in touch via a contact form that you can use if interested. As a rule, you must provide further personal data which we require to provide the respective service. Your email address, and if applicable your name and your telephone number will be stored by us so we can answer your questions.

2.3 Our website contains links to third-party websites in various places. After selecting the integrated link you will be redirected to the website of the respective third party provider. As part of the forwarding process, user information is transferred to the respective third party provider. If you send information to or about these third party sites, we recommend that you read the privacy policy of those sites before submitting any other information that may be associated with you. For information about how your information is used while using third party websites, please refer to the privacy policies of those third parties. We are not responsible for their operation including data handling.

3.1 In principle, we process your personal data only insofar as this is necessary to supply a functional website as well as our content and services. Personal data is processed on a regular basis only if this is permitted by legal provisions or the affected person has given their permission.

3.2 If you visit our website for purely informational use, we collect the following data, which are technically necessary for us to display our website to you and to guarantee stability and security. The legal basis for data processing is Art. 6 Para. 1 sentence 1 lit. f GDPR.

3.3 If you contact us via email or via a contact form, your personal data will only be used for the purpose of responding to your request. The legal basis for data processing is Art. 6 Para. 1 sentence 1 lit. f GDPR.

If you use our website, your data are sent to us in an encrypted form in order to prevent access by unauthorised third parties. Generally, we store your data on specially protected servers. Personal data can be accessed only by a few specially authorised DKMS Group gGmbH employees, all of whom are familiar with and obliged to comply with the applicable privacy policy.

In principle, only our employees receive knowledge of your personal data. We may also share your personal information with recipients who provide services to us, where required or permitted by law. In order to fulfil our tasks, we also have to work together with service providers who may also have to process personal data for this purpose. We limit the transfer of your personal data to what is necessary. These service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. They are contractually obliged by the DKMS Group gGmbH to use personal data they receive in this context only for the permitted purpose. We assure you that we do not sell or rent your data to other companies or organisations. Under no circumstances will we use your e-mail address or other data for other purposes without your explicit consent.

Regarding the service providers contracted by us, we are referring to Website Providers.

6.1 In principle, we store data that you have sent to or shared with us only for as long as necessary until the purpose of sharing the data has been fulfilled, you revoke your consent, have filed an objection against the processing or have requested the deletion of your data.

6.2 Insofar as you use our website only for informational purposes, the data processed will be deleted if they are no longer required to display our website or to ensure the stability and security of the website.

6.3 Insofar as you contact us via our website by using email or one of the contact forms, we will delete the data collected in this context after its storage is no longer required, or otherwise limit its further processing if we are required by the law to continue retaining it.

7.1 You have the following rights towards us with regard to the personal data concerning you:
• The right to information,
• The right to amendment or deletion,
• The right to limit processing,
• The right to object to processing,
• The right to data portability.

7.2 In the event that you have shared consent to process your personal data, you can revoke this consent at any time. Such revocation affects the permissibility of processing your personal data, once you have approached us regarding the same. In taking this step, you can restrict (limit processing) the revocation of the processing of your personal data to certain purposes.

7.3 To exercise your rights as listed above, please send your request to the following address: DKMS Group gGmbH, Kressbach 1, 72072 Tuebingen or via email at: datenschutz@dkms.de.

7.4 You also have the right to complain to the supervisory authority on data protection about how we process your personal data.

8.1 On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.

8.2 By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, the data specified under Section 2.1. of this data protection declaration will be transmitted. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, wherefore you must contact Google to exercise this right.

8.3 Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of the provider. There you will also find further information about your rights in this regard and setting options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy.

Do you have any questions about our privacy policies? Please contact our Data Protection Supervisor via email: datenschutz@dkms.de.

You have the right to object at any time to the processing of your data based on Art. 6 para. 1 f GDPR (data processing on the basis of a legitimate interest) or Art. 6 para. 1 e GDPR (data processing in the public interest), if there are reasons for this arising from your situation. This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

The objection can be made form-free and should be addressed to:

DKMS Group gGmbH
Kressbach 1
72072 Tuebingen
Germany

E-Mail: datenschutz@dkms.de

(Effective date: 25 May 2018)