We appreciate your interest in our website customcells.de. Data protection and the protection of your privacy are very important to us. These privacy notices provide information about the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles. With regard to the terminology used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is:

Fraunhoferstr. 1D
25524 Itzehoe
Deutschland
Phone: +49 (0)4 821 133 92 – 00
Fax: +49 (0)4 81 / 40 50 819
Email: contact@customcells.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Data Protection Officer
We have appointed a data protection officer for our company.
Hanno Pfannkuch
Email: dsb@customcells.de

General Information about Data Collection and Processing
Data protection and privacy are important to us. Visitors to the CustomCells website do not need to provide any so-called personal data such as names, addresses, telephone numbers, or email addresses. However, your personal data is necessary if you want to use our services, such as contacting us or subscribing to our newsletter. In the following privacy notices, we will provide detailed information about each area.

Scope of Processing of Personal Data
We generally process personal data of our users only to the extent necessary for providing a functioning website as well as our content and services. The processing of personal data of our users is regularly based on the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of data is permitted by legal provisions.

Types of Processed Data:
• Personal data (e.g., names, addresses)
• Contact data (e.g., email, telephone numbers)
• Content data (e.g., text entries, photographs, videos)
• Usage data (e.g., visited websites, interest in content, access times)
• Meta/communication data (e.g., device information, IP addresses)

Categories of Data Subjects:
• Visitors and users of the online offering (hereinafter collectively referred to as “users”).

Purpose of Processing:
• Provision of the online offering, its functions, and content.
• Responding to contact inquiries and communicating with users.
• Security measures.
• Reach measurement/marketing.

Legal Basis for the Processing of Personal Data
In accordance with Article 13 of the GDPR, we inform you about the legal basis for our data processing activities. If we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis. If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for the processing.

Data Erasure and Storage Duration
Personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may continue if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned norms expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Provision of the Website and Creation of Log Files
The hosting services we use are for the purpose of providing the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use to operate this online offering. In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, and meta- and communication data of customers, interested parties, and visitors of this online offering based on our legitimate interests in an efficient and secure provision of this online offering in accordance with Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

Description and Scope of Data Processing
We, or our hosting provider, based on our legitimate interests according to Art. 6(1)(f) of the GDPR, collect data on each access to the server on which this service is located (so-called server log files). When you visit our website, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:
• Name of the accessed page
• Transferred data volume
• Message indicating a successful retrieval of the page
• Information about the browser type and version
• The user’s operating system
• Browser type and browser version
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user’s system accessed our website (referrer)
• Websites accessed by the user’s system through our website
• Exit page

The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.

Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6(1)(f) of the GDPR.

Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. The data is also used for website optimization and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes represent our legitimate interests in data processing according to Art. 6(1)(f) of the GDPR.

Storage Duration
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of data collected for the provision of the website, this is the case when the respective session is ended. In the case of data stored in log files, this is the case after a maximum of seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized, so that an assignment of the calling client is no longer possible. Log file information is stored for a maximum of seven days for security reasons (e.g., for the investigation of misuse or fraudulent activities) and then deleted. Data whose further retention is necessary for evidentiary purposes is exempted from deletion until the respective incident is finally clarified.

Objection and Removal Option
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Therefore, there is no option to object on the part of the user.

Use of Cookies
a) Description and Scope of Data Processing
To make the visit to our website attractive and to enable the use of certain functions, we use cookies on various pages and through third-party providers. These are small text files that are stored on your end device. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit within an online offering. Some of the cookies used are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable third parties to recognize your browser on your next visit (persistent cookies). Such a cookie can also store user interests for reach measurement or marketing purposes. “Third-party cookies” refer to cookies offered by providers other than the operator of the online offering.

Our website uses cookies. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a unique character string that enables the browser to be identified when the website is accessed again. The following list provides the different types of cookies we use on our site:

• Session cookies: Our website was created using WordPress. WordPress sets cookies (e.g., to recognize the browser) to improve performance (faster content loading). Storage duration: Deleted when the browser is closed.
• Analytics cookies: We use third-party analytics cookies to understand how visitors use our site. This helps us improve the quality and content of our site. The aggregated statistical information includes data such as the total number of visitors. For more information, see Section II.2 “Google Analytics.” Storage duration: Persistent. The storage of these cookies is subject to the privacy policy of Google Inc.: Currently 1 year storage duration.
• 3rd Party Cookies: We use social media widgets to enable content sharing on social media channels. When using these social media widgets, cookies may also be stored on your devices. The storage of these 3rd party cookies (e.g., Google Maps) is not necessarily deleted after closing the browser. The storage of these cookies is exclusively subject to the privacy policies of the respective 3rd party providers. Storage duration: Persistent. The storage of these cookies is subject to the privacy policy of the 3rd party provider.
We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identified even after a page change. The following data is stored and transmitted in the cookies:
• Log-in information
• Accessed page

Furthermore, we use cookies on our website that allow us to analyze user browsing behavior. The following data can be transmitted:
• Entered search terms
• Origin (country/region)
• Frequency of page views
• Number of page views
• Duration of visit
• Use of website features
• Browser information
• Information about the device used (mobile/desktop)
• Exit pages
• Repeat visitor information

When visiting our website, a cookie banner refers to the use of cookies, and you can give your consent to their use. You can also configure your browser to inform you about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted. For more information on how to handle cookies, please refer to the help pages of your browser or visit the website: http://www.allaboutcookies.org/ge/.

When accessing our website, users are also informed about the use of cookies for analytical purposes by third-party providers through a banner. In this context, a reference to this privacy policy is also provided. For further information regarding the cookie settings of the integrated third-party providers, please refer to “Web analysis by Google Analytics.” Here, you can prevent the processing of your data by Google.

b) Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is Art. 6(1)(f) of the GDPR. The legal basis for processing personal data using cookies for analytical purposes, in the presence of user consent, is Art. 6(1)(a) of the GDPR.

c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognized even after a page change. We require cookies for the following applications:

• Log-in information
• Language settings
• Remembering search terms

The user data collected through technically necessary cookies is not used to create user profiles. The use of analytics cookies is for the purpose of improving the quality of our website and its content. Through analytics cookies, we learn how the website is used and can continuously optimize our offering. These purposes also constitute our legitimate interest in processing personal data pursuant to Art. 6(1)(f) of the GDPR.

e) Storage duration, objection, and removal options
Cookies are stored on the user’s computer and transmitted to our site. As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, not all functions of the website may be fully usable.

Newsletter

Description and scope of data processing
On our website, you have the opportunity to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. The following data is collected during this process:

• Your email address
• Your name, first name
• Your company

The following data is also collected during registration:

(1) IP address of the accessing computer
(2) Date and time of registration

The processing of the data is based on this privacy policy and a reference is made to it during the registration process. If you purchase goods or services on our website and provide your email address, it may be used by us for sending a newsletter. In such a case, the newsletter will only contain direct advertising for similar goods or services of our own. In connection with the processing of data for sending newsletters, the data is not passed on to third parties. The data is used exclusively for sending the newsletter.

Legal basis for data processing
The legal basis for processing data after the user has subscribed to the newsletter is Art. 6(1)(a) of the GDPR, provided that the user has given consent. The legal basis for sending the newsletter following the sale of goods or services is § 7(3) of the German Unfair Competition Act (UWG).

Purpose of data processing
The collection of the user’s email address is used to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

Storage duration
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s email address will be stored as long as the subscription to the newsletter is active. The other personal data collected during the registration process will be stored for as long as the subscription to the newsletter is active.

Objection and removal options
The subscription to the newsletter can be canceled by the user at any time. For this purpose, there is an appropriate link in each newsletter. This also allows for revocation of the consent to the storage of personal data collected during the registration process.

Contact form & email contact

Description and scope of data processing
When contacting us (e.g., via contact form, email, telephone, or social media), the user’s details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6(1)(b) of the GDPR. The user’s details may be stored in a customer relationship management system (CRM system) or a comparable inquiry organization. We delete the inquiries if they are no longer necessary. We review the necessity every two years; furthermore, the statutory archiving obligations apply.
Our website has a contact form that can be used for electronic contact. If a user chooses this option, the data entered in the input mask is transmitted to us and stored. This data includes:

• Your email address
• Your name
• Your company

At the time the message is sent, the following data is also stored:

• The user’s IP address
• Date and time of the request
• Subject
• Message

For the processing of the data, your consent is obtained during the submission process, and reference is made to this privacy policy. Alternatively, you can contact us via the provided email address. In this case, the personal data transmitted with the email will be stored. In this context, the data will not be disclosed to third parties. The data is used exclusively for processing the conversation.

Legal basis for data processing
The legal basis for processing data is Article 6(1)(a) of the General Data Protection Regulation (GDPR) when the user has given consent. The legal basis for processing data transmitted via email is Article 6(1)(f) of the GDPR. If the email contact aims at concluding a contract, an additional legal basis for processing is Article 6(1)(b) of the GDPR.

Purpose of data processing
The processing of personal data from the input mask serves solely for the purpose of handling the contact request. In the case of contact via email, there is also a legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form’s input mask and data transmitted via email, this is the case when the respective conversation with the user has ended. The conversation is deemed to be ended when it can be inferred from the circumstances that the matter in question has been finally clarified. Any additional personal data collected during the sending process will be deleted no later than seven days after.

Right to object and to erasure
The user has the right to withdraw consent to the processing of personal data at any time. If the user contacts us via email, they can object to the storage of their personal data at any time. To revoke consent and object to storage, the user can send an email to the email address of the data protection officer, specifying the relevant email address, their first and last name, and requesting the deletion of their data. In this case, all personal data stored as part of the contact will be deleted. The conversation cannot be continued once the personal data has been deleted.

Your rights to information, data rectification, erasure, restriction, and portability

Right to information
Upon request, we will gladly inform you, free of charge, whether and which personal data we have stored about you. You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and to receive information about such data in accordance with Article 15 of the GDPR.

Right to rectification
You have the right, in accordance with Article 16 of the GDPR, to request the completion of incomplete personal data or the rectification of inaccurate personal data concerning you.

Right to restriction of processing
You have the right to request the restriction of processing of personal data concerning you. If the processing of personal data concerning you has been restricted, except for storage, such data may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing restriction has been limited under the aforementioned conditions, you will be informed by the controller before the restriction is lifted.

Right to erasure
According to Article 17 of the General Data Protection Regulation (GDPR), you have the right to request the immediate deletion of relevant data or, alternatively, the right to request a restriction of data processing according to Article 18 of the GDPR. You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format in accordance with Article 20 of the GDPR. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, provided that:
(1) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and
(2) the processing is carried out by automated means.
The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. If you request the direct transfer of data to another controller, this will only be done to the extent that it is technically feasible.

Right to be informed
If you have exercised your right to rectification, erasure, or restriction of processing with regard to the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients from the controller.

Right to object
You have the right to object at any time, in accordance with Article 21 of the GDPR, to the processing of personal data concerning you. This includes the right to object to processing for direct marketing purposes. Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on Article 6(1)(e) or (f) of the GDPR.

Right to withdraw consent
You have the right to withdraw your consent to the processing of personal data at any time in accordance with Article 7(3) of the GDPR, without affecting the lawfulness of processing based on consent before its withdrawal. You can revoke your consent at any time by sending an informal notification via email to our data protection officer.

Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data concerning you violates the GDPR.

Updating the privacy policy
The privacy policy is regularly updated.

Objection to promotional emails
The use of contact data published in the context of imprint obligations for sending unsolicited advertisements and information materials is hereby objected to. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

This website uses cookies. We use cookies to personalize content and ads, offer social media features, and analyze access to our website. We also share information about your use of our website with our social media, advertising, and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services. Cookies are small text files used by websites to make the user experience more efficient.

By law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or revoke your consent at any time from the cookie statement on our website.

Learn more about who we are, how you can contact us, and how we process personal data in our privacy policy.

Please provide your consent ID and the date when contacting us regarding your consent.
Your consent applies to the following domains: www.customcells.com