We appreciate your interest in our website customcells.de. Data protection and the protection of your privacy are very important to us. These privacy notices provide information about the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles. With regard to the terminology used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is:
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Data Protection Officer
We have appointed a data protection officer for our company.
General Information about Data Collection and Processing
Data protection and privacy are important to us. Visitors to the CustomCells website do not need to provide any so-called personal data such as names, addresses, telephone numbers, or email addresses. However, your personal data is necessary if you want to use our services, such as contacting us or subscribing to our newsletter. In the following privacy notices, we will provide detailed information about each area.
Scope of Processing of Personal Data
We generally process personal data of our users only to the extent necessary for providing a functioning website as well as our content and services. The processing of personal data of our users is regularly based on the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of data is permitted by legal provisions.
Types of Processed Data:
• Personal data (e.g., names, addresses)
• Contact data (e.g., email, telephone numbers)
• Content data (e.g., text entries, photographs, videos)
• Usage data (e.g., visited websites, interest in content, access times)
• Meta/communication data (e.g., device information, IP addresses)
Categories of Data Subjects:
• Visitors and users of the online offering (hereinafter collectively referred to as “users”).
Purpose of Processing:
• Provision of the online offering, its functions, and content.
• Responding to contact inquiries and communicating with users.
• Security measures.
• Reach measurement/marketing.
Legal Basis for the Processing of Personal Data
In accordance with Article 13 of the GDPR, we inform you about the legal basis for our data processing activities. If we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis. If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for the processing.
Data Erasure and Storage Duration
Personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may continue if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned norms expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Provision of the Website and Creation of Log Files
The hosting services we use are for the purpose of providing the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use to operate this online offering. In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, and meta- and communication data of customers, interested parties, and visitors of this online offering based on our legitimate interests in an efficient and secure provision of this online offering in accordance with Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
Description and Scope of Data Processing
We, or our hosting provider, based on our legitimate interests according to Art. 6(1)(f) of the GDPR, collect data on each access to the server on which this service is located (so-called server log files). When you visit our website, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:
• Name of the accessed page
• Transferred data volume
• Message indicating a successful retrieval of the page
• Information about the browser type and version
• The user’s operating system
• Browser type and browser version
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user’s system accessed our website (referrer)
• Websites accessed by the user’s system through our website
• Exit page
The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.
Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6(1)(f) of the GDPR.
Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. The data is also used for website optimization and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes represent our legitimate interests in data processing according to Art. 6(1)(f) of the GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of data collected for the provision of the website, this is the case when the respective session is ended. In the case of data stored in log files, this is the case after a maximum of seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized, so that an assignment of the calling client is no longer possible. Log file information is stored for a maximum of seven days for security reasons (e.g., for the investigation of misuse or fraudulent activities) and then deleted. Data whose further retention is necessary for evidentiary purposes is exempted from deletion until the respective incident is finally clarified.
Objection and Removal Option
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Therefore, there is no option to object on the part of the user.
a) Description and Scope of Data Processing
• Session cookies: Our website was created using WordPress. WordPress sets cookies (e.g., to recognize the browser) to improve performance (faster content loading). Storage duration: Deleted when the browser is closed.
• Log-in information
• Accessed page
• Entered search terms
• Origin (country/region)
• Frequency of page views
• Number of page views
• Duration of visit
• Use of website features
• Browser information
• Information about the device used (mobile/desktop)
• Exit pages
• Repeat visitor information
b) Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is Art. 6(1)(f) of the GDPR. The legal basis for processing personal data using cookies for analytical purposes, in the presence of user consent, is Art. 6(1)(a) of the GDPR.
c) Purpose of data processing
• Log-in information
• Language settings
• Remembering search terms
The user data collected through technically necessary cookies is not used to create user profiles. The use of analytics cookies is for the purpose of improving the quality of our website and its content. Through analytics cookies, we learn how the website is used and can continuously optimize our offering. These purposes also constitute our legitimate interest in processing personal data pursuant to Art. 6(1)(f) of the GDPR.
e) Storage duration, objection, and removal options
Description and scope of data processing
On our website, you have the opportunity to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. The following data is collected during this process:
• Your email address
• Your name, first name
• Your company
The following data is also collected during registration:
(1) IP address of the accessing computer
(2) Date and time of registration
Legal basis for data processing
The legal basis for processing data after the user has subscribed to the newsletter is Art. 6(1)(a) of the GDPR, provided that the user has given consent. The legal basis for sending the newsletter following the sale of goods or services is § 7(3) of the German Unfair Competition Act (UWG).
Purpose of data processing
The collection of the user’s email address is used to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s email address will be stored as long as the subscription to the newsletter is active. The other personal data collected during the registration process will be stored for as long as the subscription to the newsletter is active.
Objection and removal options
The subscription to the newsletter can be canceled by the user at any time. For this purpose, there is an appropriate link in each newsletter. This also allows for revocation of the consent to the storage of personal data collected during the registration process.
Contact form & email contact
Description and scope of data processing
When contacting us (e.g., via contact form, email, telephone, or social media), the user’s details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6(1)(b) of the GDPR. The user’s details may be stored in a customer relationship management system (CRM system) or a comparable inquiry organization. We delete the inquiries if they are no longer necessary. We review the necessity every two years; furthermore, the statutory archiving obligations apply.
Our website has a contact form that can be used for electronic contact. If a user chooses this option, the data entered in the input mask is transmitted to us and stored. This data includes:
• Your email address
• Your name
• Your company
At the time the message is sent, the following data is also stored:
• The user’s IP address
• Date and time of the request
Legal basis for data processing
The legal basis for processing data is Article 6(1)(a) of the General Data Protection Regulation (GDPR) when the user has given consent. The legal basis for processing data transmitted via email is Article 6(1)(f) of the GDPR. If the email contact aims at concluding a contract, an additional legal basis for processing is Article 6(1)(b) of the GDPR.
Purpose of data processing
The processing of personal data from the input mask serves solely for the purpose of handling the contact request. In the case of contact via email, there is also a legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form’s input mask and data transmitted via email, this is the case when the respective conversation with the user has ended. The conversation is deemed to be ended when it can be inferred from the circumstances that the matter in question has been finally clarified. Any additional personal data collected during the sending process will be deleted no later than seven days after.
Right to object and to erasure
The user has the right to withdraw consent to the processing of personal data at any time. If the user contacts us via email, they can object to the storage of their personal data at any time. To revoke consent and object to storage, the user can send an email to the email address of the data protection officer, specifying the relevant email address, their first and last name, and requesting the deletion of their data. In this case, all personal data stored as part of the contact will be deleted. The conversation cannot be continued once the personal data has been deleted.
Your rights to information, data rectification, erasure, restriction, and portability
Right to information
Upon request, we will gladly inform you, free of charge, whether and which personal data we have stored about you. You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and to receive information about such data in accordance with Article 15 of the GDPR.
Right to rectification
You have the right, in accordance with Article 16 of the GDPR, to request the completion of incomplete personal data or the rectification of inaccurate personal data concerning you.
Right to restriction of processing
You have the right to request the restriction of processing of personal data concerning you. If the processing of personal data concerning you has been restricted, except for storage, such data may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing restriction has been limited under the aforementioned conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure
According to Article 17 of the General Data Protection Regulation (GDPR), you have the right to request the immediate deletion of relevant data or, alternatively, the right to request a restriction of data processing according to Article 18 of the GDPR. You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format in accordance with Article 20 of the GDPR. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, provided that:
(1) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and
(2) the processing is carried out by automated means.
The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. If you request the direct transfer of data to another controller, this will only be done to the extent that it is technically feasible.
Right to be informed
If you have exercised your right to rectification, erasure, or restriction of processing with regard to the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients from the controller.
Right to object
You have the right to object at any time, in accordance with Article 21 of the GDPR, to the processing of personal data concerning you. This includes the right to object to processing for direct marketing purposes. Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on Article 6(1)(e) or (f) of the GDPR.
Right to withdraw consent
You have the right to withdraw your consent to the processing of personal data at any time in accordance with Article 7(3) of the GDPR, without affecting the lawfulness of processing based on consent before its withdrawal. You can revoke your consent at any time by sending an informal notification via email to our data protection officer.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data concerning you violates the GDPR.
Objection to promotional emails
The use of contact data published in the context of imprint obligations for sending unsolicited advertisements and information materials is hereby objected to. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
By law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.
This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.
You can change or revoke your consent at any time from the cookie statement on our website.
Please provide your consent ID and the date when contacting us regarding your consent.
Your consent applies to the following domains: www.customcells.com