Thank you for your interest in our online presence. The protection of your personal data is of great importance to us. The use of our website is basically possible without any indication of personal data. However, if you make use of the contact or application form in our website, processing of personal data may become necessary. If in any circumstance there is a necessity and there is no legal basis for such processing, we will generally obtain your consent.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (EU-GDPR), and in accordance with the Berlin Data Protection Act (BlnDSG). By means of the following data protection declaration, we would like to inform you about the type, scope and purpose of the personal data we collect. Furthermore, we will inform you about the rights to which you are entitled by means of this data protection declaration.
The data protection declaration of this website is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation. The terms used are explained in a glossary at the end of this document.
The website collects a series of general data and information when a data subject or automated system calls up the website. This general data and information is stored in the log files of the servers. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) the Internet protocol address (IP address) reduced by the last digit for anonymization and (7) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
Contact and application form
If a data subject contacts the laboratory by e-mail or via a contact form, the personal data transmitted by the data subject will be automatically stored. Such personal data transmitted on a voluntary basis by a data subject will be stored for the purpose of processing or contacting the data subject. This personal data will not be passed on to third parties.
In principle, personal data collected by us will only be processed and stored for as long as this is necessary to achieve the purpose of storage or as required by law or regulation. The log data mentioned under 3. will be deleted after one month.
Each person affected by the processing of personal data has the right, in accordance with the statutory provisions, to obtain free information or confirmation from the responsible body about the personal data stored about him/her. In addition, there is a right to immediate correction of inaccurate personal data concerning you or deletion, or to restriction of processing or a right to object to processing.
A data protection consent to the processing of personal data can be revoked at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
There is the right to receive the personal data provided by the data subject in a structured, commonly used and machine-readable format and to transmit it to other controllers.
In addition, without prejudice to any other administrative or judicial remedy, a complaint may be lodged with a supervisory authority of a Member State if there are doubts as to the lawfulness of the processing of personal data concerning them.
The lifetime of our cookies is limited to the respective session, i.e. if you close the browser completely, these cookies are deleted.
You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the web browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers.
Links to various social media platforms such as, Twitter and LinkedIn have been integrated into the laboratory website. This is not an integration of data such as the "Like" button, but only links to the respective external presentation of our institution on the corresponding platform. No data relevant to data protection is stored.
Art. 6 I lit. a GDPR serves our institution as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary, as is the case, for example, with processing operations that are necessary for the sending of university publications, the processing is based on Art. 6 I lit.b GDPR. If our establishment is subject to a legal obligation which requires the processing of personal data, the processing is based on Art. 6 I lit.c GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person.
Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data subject is any identified or identifiable natural person whose personal data are processed by the controller.
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination; restriction, deletion or destruction.
Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.
Profiling is any type of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement of that natural person.
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not assigned to an identified or identifiable natural person. become.
Controller or controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.
Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients.
A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorised to process the personal data.
Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her.