Privacy Policy
1. An overview of data protection
General
The following gives a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in the privacy policy below.
Data collection on this website
Who is responsible for the data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the controller” in this privacy policy.
How do we collect your data?
Some of your data is collected because you provide it to us. This may, for example, be data you enter in a contact form or supply when placing an order.
Other data is collected automatically or with your consent when you visit the website. This is mainly technical data such as your browser, operating system or the time the page was accessed.
What do we use your data for?
Part of the data is collected to ensure the website functions correctly. Other data can be used to analyse how visitors use the site. Further data is needed to process your orders and enquiries.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients and the purpose of its collection at no charge. You also have the right to request that it be corrected or deleted, and the right to restriction of processing. You can contact us at any time on this and on further questions about data protection. You may also file a complaint with the competent supervisory authority.
2. General information and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We point out that data transmitted over the internet (for example by email) may be subject to security gaps. Complete protection of data against access by third parties is not possible.
Information on the controller
The controller for data processing on this website is:
OMNI LIFE SCIENCE GmbH & Co. KG
Karl-Ferdinand-Braun-Straße 2
28359 Bremen
Telephone: 0421 – 27 61 69-0
Email: info@ols-bio.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
Data protection officer
We have appointed a data protection officer for our company:
Ole Ramon
OMNI LIFE SCIENCE GmbH & Co. KG, Karl-Ferdinand-Braun-Straße 2, 28359 Bremen
Telephone: 0421 – 27 61 69-0
Email: ole.ramon@ols-bio.com
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose of the processing no longer applies. If you assert a justified request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for storing it — in particular commercial and tax retention periods.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
Where data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. If you object, your personal data will no longer be used for direct marketing purposes.
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Arndtstraße 1, 27570 Bremerhaven
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where it is technically feasible.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. This right exists in particular if you contest the accuracy of your data, if the processing is unlawful but you refuse erasure, if we no longer need the data but you require it to assert legal claims, or if you have objected under Art. 21 (1) GDPR and the balancing of interests is still pending.
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.
Objection to advertising emails
We hereby object to the use of contact data published under the legal notice obligation for sending advertising and information material that has not been expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam emails.
3. Data collection on this website
Cookies
Our website uses so-called cookies. Cookies are small text files that are stored on your device by your browser. They do no harm to your computer and contain no viruses.
Most of the cookies we use are so-called session cookies. They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (for example the shopping cart) are stored on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in storing these cookies for the technically error-free and optimised provision of our services. Where consent to the storage of cookies has been requested, storage takes place exclusively on the basis of that consent (Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG); consent can be withdrawn at any time.
You can set your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies generally, and to activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.
Server log files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not combined with data from other sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and the optimisation of our website — for this, the server log files must be collected.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where this has been requested.
The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.
Customer account and registration
You can create a customer account on our website in order to place orders and view your orders. We use the data entered for this purpose only for the use of the respective offer or service for which you registered. The mandatory information requested during registration must be provided in full; otherwise we cannot carry out the registration.
For important changes, for example to the scope of the offer or for technically necessary changes, we use the email address provided during registration.
The data entered during registration is processed to fulfil the user relationship and to carry out pre-contractual measures (Art. 6 (1) (b) GDPR). The data collected is stored for as long as you are registered with us and is deleted afterwards. Statutory retention periods remain unaffected.
Processing of customer and contract data
We collect, process and use personal data only insofar as it is necessary for the establishment, content arrangement or amendment of the legal relationship with us (inventory data). This is done on the basis of Art. 6 (1) (b) GDPR. We collect, process and use personal data about the use of our websites (usage data) only insofar as this is necessary to enable the user to make use of the service or to bill the user.
The customer data collected is deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.
Data transfer on conclusion of a contract and shipping of goods
We transfer personal data to third parties only if this is necessary within the scope of contract processing, for example to the companies entrusted with the delivery of the goods. Any further transfer of the data does not take place, or only if you have expressly consented to the transfer. The legal basis for the processing is Art. 6 (1) (b) GDPR.
Payment processing
Orders placed via this website are settled by bank transfer. We process the data required for this — in particular the invoice address and order details — to perform the contract on the basis of Art. 6 (1) (b) GDPR. Credit card or direct debit data is not collected on this website.
Job applications
We also publish our job advertisements on our website. If you apply in response or send us an unsolicited application, your data will be forwarded to the persons responsible for personnel decisions within our company. If an employment contract is concluded, your data will be stored in accordance with the law. In the event of a rejection, your data will be stored for six months and then deleted. If legal proceedings are pending in relation to your application, your data will be stored until the proceedings have been concluded with legal effect.
The legal basis is Section 26 BDSG in conjunction with Art. 6 (1) (b) GDPR and, in the case of legitimate interests, Art. 6 (1) (f) GDPR. The General Equal Treatment Act (AGG) remains unaffected.
4. Analytics
Plausible Analytics
This website uses Plausible Analytics, a web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.
Plausible works without cookies and without persistent identifiers. No data is collected that would allow individual visitors to be recognised across sessions; IP addresses are not stored. Aggregated information is recorded, such as the page visited, the referring page, device type, browser, operating system and country of origin.
Processing takes place on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in a data-minimising analysis of user behaviour in order to improve our website. As no information is stored on or read from your device, consent under Section 25 TDDDG is not required.
The data is processed exclusively within the European Union. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. Further information: https://plausible.io/data-policy
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse the behaviour of website visitors. We receive various usage data, such as page views, time on site, operating systems used and the origin of users. Google Analytics uses technologies that make it possible to recognise the user for the purpose of analysing user behaviour (for example cookies). The IP address is truncated before it is stored; we cannot assign it to a specific person.
User-related event data is stored for two months.
Google Analytics is used exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Until you accept optional cookies, no information is stored on or read from your device. Consent can be withdrawn at any time.
The transfer of data to the USA is based on the adequacy decision of the European Commission on the EU-US Data Privacy Framework. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. Further information: https://policies.google.com/privacy
5. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the unsubscribe link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.
The data you deposit with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.
6. Plugins and tools
YouTube
This website embeds videos from the YouTube website. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our pages on which a YouTube video is embedded, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Further information: https://policies.google.com/privacy
Vimeo
This website embeds videos from the video portal Vimeo. The provider is Vimeo Inc., 330 West 34th Street, New York, New York 10001, USA.
When you visit one of our pages on which a Vimeo video is embedded, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged into Vimeo or do not have a Vimeo account.
Vimeo is used in the interest of an appealing presentation of our online offerings (Art. 6 (1) (f) GDPR). Where consent has been requested, processing takes place exclusively on that basis (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). The transfer of data to the USA is based on the adequacy decision of the European Commission on the EU-US Data Privacy Framework. Further information: https://vimeo.com/privacy
Google Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google's servers. This means Google learns that our website was accessed via your IP address. Google Fonts is used in the interest of a uniform and appealing presentation of our online offerings (Art. 6 (1) (f) GDPR). Where consent has been requested, processing takes place exclusively on that basis. If your browser does not support web fonts, a standard font from your computer is used. Further information: https://developers.google.com/fonts/faq and https://policies.google.com/privacy
Google reCAPTCHA
We use Google reCAPTCHA on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether data entered on this website (for example in a contact form) is entered by a human or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the visitor enters a page containing reCAPTCHA. For the analysis, reCAPTCHA evaluates various information (for example IP address, time spent on the site, mouse movements). The data collected is forwarded to Google.
Data processing takes place on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in protecting our web offerings against abusive automated spying and against spam. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Further information: https://policies.google.com/privacy and https://www.google.com/recaptcha/about/