Data Protection Declaration

1.  Name and contact details of the data controller and the company data protection officer

 

This data protection information applies to data processing by:

Controller: T-Balance Therapeutics GmbH (hereinafter referred to as: T-Balance Therapeutics), Waldfriedstrasse 4, 60528 Frankfurt a.M., Germany, email: ogel1@ogelffm.com,
Telephone: +49 69 66163745,
Fax: +49 69 6663008

 

The company data protection officer of T-Balance Therapeutics can be contacted at the address Scheja & Partner Rechtsanwälte mbB, Adenauer Allee 136; 53113 Bonn for the attention of Florian Reichert.

 

2. Collection and saving of personal data as well as the nature and purpose of the use of the latter

 

     A. When visiting the website

 

When you call up our website www.tbalance-therapeutics.com information is automatically sent to our website’s server by the browser used on your end-device. This information is saved temporarily in a so-called log file. The following information is collected without any action by you and saved until it is deleted automatically:

• IP address of the computer making the inquiry,
• date and time of access,
• name and URL of the file downloaded,
• website from which access is undertaken (referrer-URL),
• browser used and if applicable the operating system of your computer as well as the name of your access provider.

The above-mentioned data are processed by us for the following purposes:

• Ensuring a problem-free connection to the website,
• Ensuring convenient use of our website,
• Assessment of the system security and stability as well as
• for additional administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 Cl. 1 lit. f GDPR. Our justified interest follows from the purposes listed above regarding data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations on this subject under Sections 4 and 5 of this Data protection declaration.

 

     B. When you use our contact form

 

If you have questions of any kind, we offer you the opportunity to contact us using the form provided on the website. When doing so, you must provide a valid email address so that we know the originator of the inquiry and so that we can answer it. Additional information can be provided voluntarily.

Data processing for the purposes of making contact with us takes place in accordance with Art. 6 Para. 1 Cl. 1 lit. a GDPR on the basis of your consent which has been granted voluntarily.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of the inquiry you have made.

 

3. Web hosting

 

This website is hosted at an external service-provider (Wefra Life, Mitteldicker Weg 1, 63263 Neu-Isenburg). Personal data, which is collected on this website, will be saved on the servers of the host. These are above all the IP addresses, contact inquiries, meta and communication details, contractual data, contact details, names, website access and other data, which are generated via a website.

The use of the host takes place for the purpose of satisfying the contract towards our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of the secure, rapid and efficient provision of our online content by a professional provider (Art. 6 Para. 1 lit. f GDPR).

Our host will process your data only to the extent that is required to satisfy his service obligations and our instructions with regard to these data.

Conclusion of a contract for data processing:

In order to ensure processing in compliance with data protection, we have concluded a contract for data processing with our host .

 

 

4. Dissemination of data

 

The transmission of your personal data to a third party for purposes other than those listed below will not take place.

We will pass on your personal data to a third party only if:

• You have given your express consent for this in accordance with Art. 6 Para. 1 Cl. 1 lit. a GDPR,
• the transmission in accordance with Art. 6 Para. 1 Cl. 1 lit. f GDPR for the assertion, exercising or defence of legal claims is necessary and there is no reason to assume that you have an overwhelming interest worthy of protection in the non-dissemination of your data,
• in the event that there is a statutory obligation to transmit the data in accordance with Art. 6 Para. 1 Cl. 1 lit. c GDPR, and
• this is permissible by law and is necessary for handling contractual relationships with you in accordance with Art. 6 Para. 1 Cl. 1 lit. b GDPR.

5. Cookies
 

We use cookies on our website. These are small files which your browser generates automatically and which are stored on your end-device (laptop, tablet, Smartphone or similar) when you visit our website. Cookies do not harm your end-device, do not contain any viruses, Trojans or other malware. Information is archived in the cookie which arises in connection with the end-device that has been used specifically. However, this does not mean that we receive direct knowledge of your identity as a result.

Insofar as we use so-called session cookies to make it easier for you to use our website, this is to identify whether you have already visited individual pages of our website. They are then automatically deleted when you leave our website.

In addition, there is the option that we also use temporary cookies to optimise user-friendliness, which are saved on your end-device for a certain specified period. When you visit our website again to use our services, it will be automatically identified that you have already visited and what entries and settings you activated so that you do not have to enter them again.

The data processed by the above-mentioned cookies are required for the above-mentioned purposes to maintain our justified interests and the interests of third parties in accordance with Art. 6 Para. 1 Cl. 1 lit. f GDPR.

 

We also use cookies to collect statistics on the use of our website and for the purpose of optimising our services for you and assessing the latter (see Section 6). These cookies enable us to automatically identify that you have already visited us when you visit our website again. These cookies will be deleted automatically after a period which is defined in each case.

Cookie name	Purpose	Period
_ga	Is used to distinguish between users	After two years	Google
_gid	Is used to distinguish between users	After 24 hours	Google
_ga_–container-id–	Saves the current session status	After 14 months	Google
_gat_–container-id–	Is used to restrict the inquiry rate	1 day	Google
NID (Backend)	The NID cookie contains a clear ID, via which it saves your preferred settings and other information, in particular your preferred language (e.g. German), how many search results should be displayed per page (e.g. 10 or 20) and whether the Google SafeSearch filter should be activated	After 6 months	Google

The legal basis for the data processed by the above-mentioned cookies is based on your consent Art. 6 Para. 1 Cl. 1 lit. a GDPR.

Most browsers accept cookies automatically.  However, you can configure your browser in such a way that no cookies are saved on your computer or a message always appears before a new cookie is generated. But the complete deactivation of cookies can mean that you will not be able to use all the functions on our website.

 

6. Google Analytics

 

We use Google Analytics, a web analysis service of Google LLC, – insofar as you have given your consent – for the purpose of structuring our website in line with requirements and continuously optimising it. Google Ireland Limited,  Gordon  House, Barrow Street, Dublin 4, Ireland, hereinafter referred to only as “Google”, is responsible for Europe.

This enables data, meetings and interactions to be assigned a pseudonym user-ID and the activities of a user to be analysed in this way.

In this connection pseudonymised user profiles are drawn up to analyse the activities of a user. Cookies (see under Section 5) are used for this purpose. The information generated by the cookie about your use of this website such as

• browser type/ version,
• operating system used,
• referrer-URL (the page visited previously),
• host name of the accessing computer (IP address),
• time of the server inquiry,

is generally sent to a server of Google in the USA and saved there. Through certification in accordance with the EU-US data protection shield (“EU-US Privacy Shield”)

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.

The information is used by Google on our behalf to assess the use of the website, to compile reports on website activities and to provide additional services associated with the use of the website and the internet for the purpose of market research and structuring these web pages in line with requirements. However, in the event of the activation of IP-anonymisation on this website, your IP-address will be abbreviated in advance by Google within the Member States of the European Union or in other contracting states of the agreement regarding the European Economic Area. We would like to point out that Google Analytics has been expanded by one IP-anonymisation on this website in order to ensure the anonymised collection of IP-addresses (so-called IP-masking). The IP-address transmitted from your browser as part of Google Analytics will not be amalgamated with other data from Google. You can find more information on conditions of use and data protection at
https://www.google.com/analytics/terms/de.html     or at
https://policies.google.com/?hl=de“

You can withdraw your consent at any time with effect for the future by preventing the saving of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website.The tracking measures we use are implemented on the basis of Art. 6 Para. 1 Cl. 1 lit. a GDPR and to this extent on the basis of your consent.

You can additionally prevent the collection of the data generated by the cookie and related to the use of the website (including your IP-address) as well as the processing of these data by Google, by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, in particular for browsers on mobile end-devices, you can also prevent collection by Google Analytics by clicking on this link. An opt-out cookie is set which prevents the future collection of your data when you visit this website. The opt-out cookie applies only in this browser and only for our website and is archived on your device. If you delete the cookies in this browser, you must re-set the opt-out cookie. (In order to prevent collection by Universal Analytics via various devices, you must implement the opt-out on all the systems used.)

You can find further information about data protection in connection with Google (Universal?) Analytics for example in the Google Analytics Help section (https://support.google.com/analytics/ ans- wer/6004245?hl=de).

 

7.  Google fonts

 

We use so-called fonts on our website for a uniform presentation of external typefaces, which is a list of more than one hundred typefaces. This is a service provided by Google LLC. Google Ireland Limited,  Gordon  House, Barrow Street, Dublin 4, Ireland, hereinafter referred to only as “Google”, is responsible for Europe.

When you call up a website, your browser will load the fonts required in your browser cache to display texts and typefaces correctly. For this purpose the browser you use must make a connection to the servers of Google.  This will provide Google with the information that our website has been called up with your IP-address. Google Fonts saves CSS and font inquiries and publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawlers to identify which websites use Google fonts. These data are published in the BigQuery database of Google Fonts. In addition to the IP-address, additional information such as the language settings, browser version, screen resolution of the browser and name of the browser are automatically transmitted to the Google servers through every Google Fonts inquiry.

Through certification in accordance with the EU-US data protection shield (“EU-US Privacy Shield”)

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.

The use of Google Fonts takes place in the interest of uniform and appealing presentation of our online services. This automatically optimises all typefaces for use on the internet, which leads to smaller file sizes and faster loading times. The legal basis for the use of Google Fonts is Art. 6 Para. 1 Cl. 1 lit. f GDPR.

If your browser does not support Google Fonts, a standard font from your computer will be used.

 

You can find further information on Google Fonts at https://developers.google.com/fonts/faq and in the data protection declaration of Google: https://www.google.de/intl/de/policies/privacy/.

 

8. Rights of the data subject

 

You have the right:

• in accordance with Art. 15 GDPR to request information on your personal data which we have processed. In particular you can request information on the purpose of processing, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned duration of storage, the existence of a right to correction, deletion, limitation of processing or objection, the existence of a right to make a complaint, the origin of your data, insofar as they were not collected by us, as well as the existence of automated decision-making including profiling and if applicable meaningful information about these details;
• in accordance with Art. 16 GDPR to immediately request the correction of your incorrect personal data saved by us or completion of the latter;
• in accordance with Art. 17 GDPR to request the deletion of your personal data saved by us, insofar as processing is not required to exercise the right to free expression and information, to satisfy a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• in accordance with Art. 18  GDPR  to request the limitation of processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse the latter’s deletion and we no longer require the data, but you require them for the assertion, exercising or defence of legal claims or you have submitted a right to object to processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or request transmission to another controller;
• in accordance with Art. 7 Para. 3 GDPR to withdraw the consent granted to us previously at any time. This means that we are no longer permitted to continue the data processing which was based on this consent for the future and
• in accordance with Art. 77 GDPR to complain to a supervisory authority. In general you can contact the supervisory authority at your usual place of residence or workplace or our company’s office.

9. Right to object

 

Insofar as your personal data are processed on the basis of justified interests in accordance with Art. 6 Para. 1 Cl. 1 lit. f GDPR, you have the right in accordance with Art. 21 GDPR to object to the processing of your personal data, insofar as there are grounds which arise from your special situation or the objection is directed against direct advertising. In the latter case, you have a general right to object which will be implemented by us without the indication of a special situation.

If you would like to use your right to withdraw consent or object, it is sufficient to send an email to s.ludscheidt.extern@ogen-gmbh.de.

 

10. Data security

 

We use the widespread SSL procedure (Secure Socket Layer) in conjunction with the relevant highest level of encryption supported by your browser within the website visit. In general this is 256-bit encryption. If your browser does not support 256-bit encryption, we will resort to 128-bit v3 technology. You can identify whether an individual page of our website is transmitted under encryption by the closed display of the key or lock symbol in the lower status bar of your browser.

Furthermore we use the appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or against unauthorised access by a third party. Our security measures are being improved continually in line with technological developments.

 

11. Updating and amending this data protection declaration

 

This data protection declaration is valid currently and has the status 10/2020.

It may become necessary to amend this Data protection declaration through the further development of our website and services or on the basis of a change to the statutory or official requirements. The relevant latest data protection declaration can be downloaded and printed out from the website at any time at https://stage.t-balance-therapeutics.com/en/data-protection-declaration/