- Acquisition, Processing and Utilization of Person-Specific Data
As a general rule, we only collect and utilize your personal data to the extent that is necessary for providing a functional website and our content and services. The collection and utilization of personal data generally only occurs with the user’s consent or if data processing is permitted by law.
Person-specific user data describes details relating to the actual or personal relationships of a specific or identifiable natural person. Such details include stock data (name, address, telephone number, email address), contract data (bought goods, payment informations, names of clerical assistants), user data (interest in which products), content data (supplied through the contact form) and all existing data that you disclose to us while visiting our websites www.viromer-transfection.com and www.BioNTech.de, during direct customer services and technical support contact via email, phone, fax, personal talks at conferences and when opening your customer account. The subject “user” includes all categories of data processing of persons. These persons include business partners, customers, potential customers and other visitors of our online portfolio.
Your person-specific data is saved in our Customer-Relationship-Management System. The duration of the data storage depends on the statutory storage requirements and is usually 10 years.
Your person-specific data is only passed on to third parties to the extent that this is legally permissible, including the purpose of processing the contract or for invoicing, for marketing or if you have previously consented to this. When processing orders, for example, the service companies used by us (transport companies, logistics companies, payment provider, banks) are sent the data they require for processing and concluding orders. The data passed on to our service providers in this context may only be used by them for fulfilling their duties.
When visiting our website, we compile technical access data. Such technical access data include, for example, the name of your internet service provider, the IP address, information about the internet browser and the operating system, the domain name of the website that acts as a platform for a visit to our own website, the average duration of a visit to our website, and the pages called from our website. This data will be sent to our web server when your internet browser calls individual internet pages. The legal basis for the temporary storage of data is Art. 6(1) (f), GDPR. The temporary storage of data, including the IP address, by the system is necessary to allow for delivery of the website to the user’s computer. For this purpose, the IP address of the user and other data must remain saved for the duration of the session.
If we use contractors like distributors for fulfilling orders, we take legal arrangements to ensure the safety of the person-specific data according to the legal regulations. Data processors (e.g. distributors) may also be used outside the European Union as part of contract implementation.
Legal basis and purposes for processing personal data
We process stock data (names, addresses and contact details of users), contract data (bought goods, names of contact persons, payment informations) for the fulfillment of our contractual obligations, for customer service, ,for technical support to permanently improve the usage of our websites and making them more customer-friendly, for communicating with you about your orders and requests, and for recommending products or services that might interest you. For your order we need your correct name, address and payment data. We need your e-mail address so that we can confirm receipt of your order and its dispatch, and so that we can communicate with you in general. We also use your e-mail address to identify you (as a log-in name), when you visit your customer account. In addition, we will process personal data if we need to do so in order to protect the legitimate business interests of BioNTech.
The legitimate interests of BioNTech include advising the public of the activities and goals of our company. In conjunction with running our website, we are processing personal data of website visitors to a minor degree. Provided the interests, fundamental rights and freedoms of these data subject do not override our interests, Art. 6 (1) (f), GDPR serves as the legal basis for processing.In cases where we are obtaining the consent of the data subject for processing personal data, Art. 6 (1) (a), EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data. With regard to processing personal data that is required for the performance of a contract to which the data subject is party, Art. 6 (1) (b), GDPR serves as the legal basis. This also applies to processing steps that are necessary for carrying out pre-contractual measures. If processing personal data is required for compliance with legal obligations to which our company is subject, Art 6 (1) (c), GDPR serves as the legal basis. In the event that the vital interests of the data subject or of another natural person require processing personal data, Art 6 (1) (d) GDPR serves as the legal basis.
Customer Account at www.viromer-transfecftion.com
For each customer who registers with us via the “create an account” option during the ordering process, we set up a customer account, i.e. password-protected, direct access to his or her existing ordering history with us. This allows you, amongst other things, to view your already-concluded, still open and recently sent orders, or to manage your personal data and the newsletter.
The following data must be given during the registration for a customer account (obligatory disclosures):
- your e-mail address
- your password
- your forename
- your surname
- delivery address
- billing address
For sending the Newsletter we make use of the e-mail address given by you and for this we need your confirmation that, as the owner of the e-mail address, you consent to its receipt .
Should you later decide that you no longer want to receive a newsletter from us, you can object to this at any time without thereby incurring any other costs than the transmission costs in keeping with the basic tariffs. Notification in text form sent by one of the contact options given under point 1 (e.g. e-mail, fax, letter) is sufficient for this purpose. There is, of course, also a cancellation link in every newsletter.
If BioNTech processes personal data, you are a data subject in the definition of the GDPR and have the following data subject rights in accordance with Art 12 ff, GDPR: Right to information, right to correction, right to restriction of processing, right to deletion, right to information, right to data portability, right of objection, right to file a complaint with a supervisory authority. Further rights are the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object (Art. 21 GDPR).
Pursuant to the GDPR and other applicable legal regulations, you are entitled to query us in writing at any time. We will then provide you with the relevant information. Please address your inquiry to the data protection officer. You may also arrange with him to have rectifications made in your data or to have such data deleted.
Withdrawal of consent
In cases where we are obtaining the consent of the data subject for processing personal data in accordance with Art. 6 (1) (a) GDPR, you can withdraw the consent you gave to use your personal data at any time with future effect by sending an email to the email address of the Responsible Body or to the data protection officer. The BioNTech data protection officer
Should you have any questions regarding the processing of your personal data or if you would like to address data subject rights, please do not hesitate to contact our data protection officer who will be also happy to help you if you need any further information or have any complaints or problems in connection with the security of your data.
Dr. Michael Kruse
An der Goldgrube 12
An der Goldgrube 12