Privacy Policy

cecava GmbH takes your legitimate data protection concerns very seriously and observes the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and, if applicable, the regulations of others applicable data protection regulations.

cecava GmbH handles the data provided by you carefully and conscientiously. Any collection, processing or use of data of any kind will always be in accordance with legal requirements or with your express consent.

For the future of Internet-based business models and the development of an Internet-based economy, the protection of privacy is of crucial importance. cecava GmbH underlines its commitment to privacy protection with this statement. The following discloses our information gathering and dissemination practices for this website.

This privacy policy applies to this website and all other websites that link to this privacy policy.

The responsible party pursuant to Art. 4 para. 7 of the General Data Protection Regulation (GDPR) is:

cecava GmbH
Paul-Ehrlich-Str. 23
72076 Tuebingen
Germany
Court District – HRB 765904
VAT-No.:  DE369285829
info@cecava.com | cecava.com

Managing Directors:
Dr. Dirk Biskup, Dr. Dr. Saskia Biskup

You can reach our data protection officer at cecava GmbH at:
Thomas Fletschinger
email: dpo(at)cecava.com

Our handling of personal data is based on global principles and standards with regard to transparency in the use of personal data, compliance with and granting of the right of choice, access regulations, rules on data integrity, data security, data sharing and monitoring of the lawfulness of processing. In particular, cecava GmbH complies with the General Data Protection Regulation (GDPR) and the Gene Diagnostics Act.

In using this site, you consent to the processing of your data in the following manner. Any changes to this privacy policy will always be posted on this page so that you are always aware of what data is being stored by cecava GmbH and how it is being used.

We will also expressly ask for your consent to the further processing of personal data collected on this website or provided by you, where required by applicable data protection legislation.

This consent / agreement can be revoked at any time by sending an e-mail to info(at)cecava.com. In any event, cecava GmbH agrees to treat all personal data provided in the strictest confidence and not to disclose it to third parties.

cecava GmbH’s aim is to have a better understanding of your needs and interests in order to provide you with the best possible service. For this reason, cecava GmbH collects and uses personal data in the manner described below and in accordance with the applicable legal provisions on data protection.

When you visit our website, we collect your IP address, use cookies and other Internet technologies (hereinafter referred to as “automated tools” and “embedded web links”) that help us to obtain general information about visitors to our website and their interests. Below you will find information about the technologies used and the information they collect.

We also collect and process information that you provide to us on a voluntary basis, such as when you subscribe to our newsletter or contact us via the contact form.

What data do we collect and why?

With the help of the collected data, cecava GmbH would like to offer you consistent personal support. cecava GmbH uses your data exclusively as described in this statement. A subsequent change in the purpose of use is subject to your express consent, unless the change is otherwise legitimized by applicable legal provisions.

We always process your personal data for a specific purpose.

In particular, we may process your personal data for the following purposes:

• To carry out tasks for the preparation or performance of contracts
• To tailor information to your exact needs. For example, we can provide you with information on exactly the services that interest you
• To improve the quality of our website and services by adapting our offer to your specific needs
• So that we can contact you and answer customer inquiries
• To conduct voluntary customer surveys in order to continuously improve our services
• To send you communications about our services we are promoting
• To provide evidence of business transactions
• For the fulfillment of contractual obligations
• For archiving and logging
• For processing job inquiries
• For invoicing and accounting as well as
• other purposes prescribed by law and by the authorities
• In certain cases, we are required by law to transmit data to a requesting government agency (institution or authority). The legal basis for the processing is Art. 6 para. 1c GDPR or § 24 para. 2 no. 1 BDSG.
• In some cases, business partners require personal data from our customers. This usually takes place in the context of order fulfillment (e.g., in the case of complaints). This is expressly provided for by law. In this case, cecava GmbH remains responsible for the protection of your data – if necessary, in addition to the order processor. The respective business partner works according to our instructions, which cecava GmbH ensures through strict contractual regulations.

IP addresses are used to help diagnose problems, administer the site, and gather demographic information. cecava GmbH only collects this data in anonymous form and will not link it to the profile of a registered user without the user’s consent. When you visit our website, only the domain name is recorded by default.

cecava GmbH collects data only in connection with your visit to the cecava website. When you visit the websites of other companies or organizations that are not part of cecava GmbH, we do not collect any personal data.

In order to obtain effective user consent for cookies and cookie-based applications that require consent, this website uses a cookie tool, CCM19, with technology from Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany (“CCM19”).

Through the integration of an appropriate JavaScript code, a banner is displayed to the user when accessing the page, in which the user can consent to certain cookies and/or cookie-based applications by ticking the appropriate box. In this case, the Cookiebot will block the setting of any cookies requiring consent until the user has given their consent by ticking the appropriate box. This ensures that such cookies are only set on the user’s device if consent has been given.

In order for the Cookiebot to be able to uniquely assign page views to individual users and to individually record, log and store the consent settings made by the user for the duration of a session, certain user information (including the IP address) is collected by the Cookiebot when our website is accessed, transmitted to the servers of CCM19 and stored there.

The use of CCM19 serves to obtain the legally required consent for the use of cookies. Further legal basis for the described data processing is Art. 6 para. 1 lit. c GDPR.

For more information about CCM19’s use of data, please visit: https://www.ccm19.de/datenschutzerklaerung.html.

We will also contact you by email if you leave us your email address or provide it via the contact form. We will not share your email address with anyone outside of cecava GmbH. You can decide at any time to stop receiving emails from cecava GmbH. When you send an email to cecava GmbH, depending on the settings of your email programs, information may be automatically transmitted to us.

We work with a number of service providers who process certain types of information on our behalf. This is done solely in accordance with applicable data protection legislation. In particular, we have entered into data processing agreements on behalf of our service providers that meet the requirements of Article 28 of the GDPR.

Our Texts use fonts from Adobe Fonts, a service of the company Adobe Inc., 345 Park Avenue, San Jose, CA 95110-2704 („Adobe“).

When you access one of our pages, your browser loads the required web fonts into your browser cache so that texts and fonts are displayed correctly. For this, your browser connects to the server of Adobe. For this purpose, among other things, information such as fonts provided, JavaScript version, IP address, etc. is collected.

Further detailed information on Adobe’s privacy policy can be found here: https://www.adobe.com/de/privacy/policies/adobe-fonts.html

We do not share your personal information with third parties for purposes other than those described below. We will only share your personal information with third parties if:

• you have given your express consent to this in accordance with Art. 6 (1) p. 1 lit. a) GDPR, § 26 (2) Federal Data Protection Act (BDSG),
• the disclosure is necessary in accordance with Art. 6 (1) p. 1 lit. f) GDPR for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that a legal obligation exists for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c) GDPR as well as
• this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b) GDPR, § 26 para. 1 BDSG for the processing of a contractual relationship with you or for pre-contractual measures at your instigation.

We have no plans to transfer this information to any third country or international body, nor will we use automated means to make decisions, except as described in this Privacy Statement.

If necessary, cecava GmbH will also share information with business partners, service providers, third parties or subcontractors. We may use your personal information for the purpose of providing a service or completing a transaction, for example, fulfilling an order, providing customer support, or providing product or service information.

In response to a court or governmental order, cecava GmbH may be required to disclose your data and related information. We also reserve the right to use your information to assert or defend against legal claims.

In the event of an acquisition or merger with another company, it may be necessary to disclose or transfer personal information to potential or actual purchasers. In such an event, cecava GmbH will use its best efforts to protect the information.

cecava GmbH reserves the right to store and disclose personal data and other data for the purpose of detecting and fighting illegal activities and fraud attempts or a violation of the cecava GmbH terms of use.

Our website may contain links to the websites of third-party providers. cecava GmbH is not responsible for the data protection measures or the content of websites outside of cacava GmbH.

cecava GmbH retains personal data only as long as required by the purpose or legal provisions for which they were collected.

For easy directions to our site we use the map service of Google Maps, which belongs to the provider Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.

Google Maps stores your IP address to provide you with the necessary information. This takes place on Google’s servers in the USA; we have no influence on this during transmission. For uniform presentation, Google Maps uses Google Fonts for its fonts and texts, which are loaded into your browser cache. The usage of Google Maps is based on your consent in accordance with § 6 No. 2 DS-EKD and § 25 Para. 1 TTDSG. This consent includes the storage of cookies or access to information in the user’s end device (e. g. Device-Fingerprinting) in accordance with TTDSG. You have the right to withdraw your consent at any time. The revocation does not affect the legality of the data processing carried out before the revocation. The transfer of data to the USA takes place using the standard contractual clauses of the EU Commission.

Further information can be found here: privacy.google.com/businesses/gdprcontrollerterms/ und privacy.google.com/businesses/gdprcontrollerterms/sccs/. Further information on the handling of user data can be found in the privacy policy of Google: policies.google.com/privacy.

• In accordance with legal requirements, we process applicant data only for the purpose and within the scope of the application process. The processing of the applicant’s data for the fulfillment of our (pre-)contractual obligations within the scope of the application procedure is in accordance with Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR, insofar as the data processing becomes necessary for us, e.g. within the scope of legal proceedings (in Germany, § 26 BDSG also applies).
• Applicants must provide us with applicant data as part of the application process. Required applicant data includes personal information, mailing and contact addresses, and application documents such as cover letter, resume, and transcripts. In addition, applicants may voluntarily provide us with additional information.
• Applicants consent to the processing of their data for the purposes of the application process in the manner and to the extent described in this Privacy Policy by submitting their application to cecava GmbH.
• As far as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily provided in the course of the application process, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants in the course of the application process, their processing is additionally carried out in accordance with Art. 9 para. 2 GDPR (e.g. health data, if necessary for the exercise of the profession).
• Candidates may submit their applications by mail or e-mail. Please note, however, that emails are generally not encrypted and that applicants are responsible for encryption. Therefore, we cannot be responsible for the transmission of the application between the sender and the receipt on our server. If the applicant has any concerns about the security of the application materials sent by e-mail, we recommend that the application materials be sent by mail.
• In the event of a successful application, the data provided by the applicant may be processed by us for the purposes of the employment relationship. Otherwise, in the event of an unsuccessful application for a position, the applicant’s data will be deleted. Candidate data will also be deleted if an application is withdrawn, which candidates are entitled to do at any time.
• Subject to a justified withdrawal by the applicant, the data will be deleted six months after the end of the application process to enable us to answer any follow-up questions about the application and to comply with our obligations under the Equal Treatment Act. If, during the application process, you are offered a position, the data from the application will be transferred to a personnel file and will be deleted 10 years after the end of the employment relationship.

Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

You have the right,

• according to 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction, processing or opposition, the existence of a right of complaint, the origin of your data, if not collected by us, such as the existence of automated decision-making and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR to demand the correction of incorrect or the completion of your personal data stored by us without delay;
• pursuant to 17 GDPR to request the erasure of personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation on grounds of public interest, or for the establishment, exercise or defense of legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• according to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
• according to Art. 7 para. 3 GDPR to revoke your once given consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our company.

The competent supervisory authority for data protection of cecava GmbH is:

Baden-Württemberg Supervisory Authority
The State Commissioner for Data Protection Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart
Lautenschlager Str. 20, 70173 Stuttgart, Germany
Tel. +49 (0)711 615541-0
Fax. +49 (0)711 615541-15
Mail: poststelle@lfd.bwl.de
http://www.baden-wuerttemberg.datenschutz.de

For the assertion of the aforementioned rights as well as for questions regarding data protection, you can contact the person responsible in accordance with the aforementioned point 1 or send a corresponding e-mail to dpo@cecava.com.

If the processing of your personal data is carried out on the basis of legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be exercised by us without reference to a specific situation. If you wish to exercise your right of withdrawal or objection, it is sufficient to send an e-mail to dpo@cecava.com.

• We use the widely used Secure Sockets Layer (SSL) in conjunction with the highest level of encryption supported by your browser when you visit the site. This is usually 256-bit encryption. In the event that your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. A locked key or lock icon in the lower status bar of your browser will indicate that a particular page of our site is being transmitted using encryption.
• In order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties, we use appropriate technical and organizational security measures. In line with technological developments, our security measures are constantly being improved.
• In addition, in accordance with the General Data Protection Regulation (GDPR), we require each of our employees to respect data privacy and confidentiality.

We will update this Privacy policy when appropriate, for example, because of changes in relevant data protection regulations.

Status: 15.11.2024