Skip to content

Privacy

Bioranch guarantees to handle your data confidentially and to comply with legal requirements to the best of its knowledge and belief. In this privacy policy, we inform you about which data is stored where and how and – for example for shipping purposes – passed on. If you have any questions about your data, please contact the data protection officer also named here.

I. Name and address of the responsible person

The controller within the meaning of the General Data Protection Regulation and other national

data protection laws of the member states and other provisions of data protection law:

Bioranch GmbH

Andre Schäfer

Harkampsheide 19

48291 Telgte

Tel.: 0049 (0) 2504 7099250

Mail: andre.schaefer@bioranch.de

II. General information on data processing

As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services. The collection and use of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations. Information on the scope, purpose, and legal basis of the processing of personal data can be found in the respective chapters of this privacy policy. The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

III. provision of the website and creation of log files

Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

a) information about the type of browser and the version used

b) The operating system of the user

c) The Internet service provider of the user

d) The IP address of the user

e) Date and time of access

f) websites from which the user’s system accesses our website

g) websites that are called up by the user’s system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f) GDPR. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The storage in log files

is carried out in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of the

data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

IV. Cookies use

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is revisited. We use cookies to make our website more user-friendly. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after a page change. The user data collected through technically necessary cookies are not used to create user profiles. In the above-mentioned purposes also lies our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR. The following data is stored and transmitted in the cookies: Language settings Items in a shopping cart Log-in information We also use cookies on our website that enable an analysis of the user’s surfing behavior (third-party cookies). More

Information on the scope, purpose, legal basis and objection options can be found in the respective sections of Chapter IX of this privacy policy. Cookies are stored on the user’s computer and transmitted by the user to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the Flash Player setting. Please note that you can also be informed individually about the setting of cookies after setting your browser accordingly and thus also decide whether to accept them. You can find help on this in the respective help menu of your browser under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox:https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: http://help.opera.com/Windows/10.20/de/cookies.html

V. Registration and order processing

If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. We process the data you provide to process your order. In addition

you have the possibility to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data collected can be found in the respective input mask. The following data is also stored at the time of registration:

a) The IP address of the user

b) Date and time of registration

Registration is required to provide certain content and services on our website, such as insight into your orders and shipment information. As part of the registration process, the user’s consent to the processing of this data is obtained. The legal basis for the processing of the data, if the user has given his consent, is Art. 6 para. 1 lit. a) GDPR. If the data collection serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b) GDPR. The same applies to the transfer of your payment data to our house bank. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process, if the registration on our website is cancelled or modified. For the services rendered during the

registration process for the fulfillment of a contract or for the execution of pre-contractual

measures, this is the case if the data is required for the implementation of the

contract are no longer required. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations. As a user you have at any time the

Possibility to cancel the registration by informal notice by e-mail to us. You can have the data stored about you changed at any time by sending us an informal message by e-mail. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

VII. Disclosure of e-mail address to parcel service provider

During the ordering process, the customer has the option to give his consent to the transfer of his e-mail address to the shipping service provider UPS. The transfer is then made exclusively for the purpose of announcing the delivery to the customer. No further use takes place. After the delivery of the package, the customer’s email address will be deleted.

VIII. contact form and e-mail contact

A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. The data collected can be found in the respective input mask. The following data is also stored at the time the message is sent: The IP address of the user Date and time of the

Registration For the processing of the data is required during the submission process your

Consent obtained and reference made to this privacy policy. Alternatively, it is possible to contact us via the e-mail address provided under point 1. In this case, the user’s personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation. Legal basis for the

Processing of the data is in the presence of consent of the user Art. 6 para. 1 lit. a) GDPR. Legal basis for the processing of data collected in the course of sending an e-mail

are transmitted, Art. 6 para. 1 lit. f) GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. The revocation can be made by informal declaration to the e-mail address mentioned under point 1. All personal data stored in the course of contacting us will be deleted in this case.

IX. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the

address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

X. Third Party Cookies

1. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there. This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures an anonymization of the IP address by shortening and excludes a direct personal reference. By extension, your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to

Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/ dlpage/gaoptout?hl=en Google LLC, headquartered in the USA, is responsible for the us

Privacy Shield” data protection agreement, which ensures compliance with the level of data protection applicable in the EU. More information on the handling of user data

at Google Analytics can be found in Google’s privacy policy: https:// support.google.com/analytics/answer/6004245?hl=en

More information on the handling of user data

Order data processing

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

2. Google Tag Manager

Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool provides for the triggering of other

tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. http:// www.google.de/tagmanager/use-policy.html

3. Optimizely

This website uses Optimizely, a web analytics service provided by Optimizely, Inc, (“Optimizely”). Optimizely uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information collected by the cookie

information generated about your use of this website is usually transferred to a server of Optimizely in the USA and stored there. However, in case of activation of IP anonymization on this website, Optimizely will truncate your IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Optimizely in the USA and shortened there. On behalf of the operator of this website, Optimizely will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The data collected within the scope of

Optimizely from your browser transmitted IP address is not shared with other data from

Optimizely merged. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

website will be able to use it to its full extent. You can also deactivate OptimizelyTracking at any time (and thus prevent the collection of the data generated by the cookie and stored on your computer).

Your use of the website related data – incl. your IP address – to Optimizely as well as the processing of this data by Optimizely) by following the instructions at http:// www.optimizely.com/opt_out.

XI. Plugins and tools

1. Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. This gives Google knowledge that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and appealing

Presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a default font is used by your computer. For more information about Google Web Fonts, please visit https:// developers.google.com/fonts/faq and Google’s privacy policy: https:// www.google.com/policies/privacy/.

XII. External service companies

1. payment service provider

We offer several payment methods for the use of the webshop and use different payment service providers. Depending on the payment method you choose, different data will be transmitted to the respective payment service provider. The

The legal basis for the transfer is Art. 6 para. 1 lit. a) GDPR. Below we list our payment service providers.

PayPal: If you decide to use the PayPal payment method, your personal data will be transferred to us.

Data transmitted to PayPal. Prerequisite for the use of PayPal is the opening of a PayPal account. With the use or opening of a PayPal account, among other things, name, address, telephone number and email address must be transmitted to PayPal.

The legal basis for the transmission of data is Article 6 (1) a) DSGVO (consent) and Article 6 (1) b) DSGVO (processing for the performance of a contract). The operator of the payment service PayPal is: PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg Email: impressum@paypal.com By choosing the PayPal payment option, you consent to the transmission of personal data such as name, address, telephone number and email address, to PayPal. What other data is collected by PayPal, results from the

respective privacy policy of PayPal. This can be found at: https://www.paypal.com/ en/webapps/mpp/ua/privacy-full

SOFORT: If you select the payment method “SOFORT”, the payment will be processed via the

Payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we transfer your information provided during the ordering process together with the information about your order pursuant to Art. 6 para. 1 lit. b) GDPR. The

Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm,

Sweden). The transfer of your data takes place exclusively for the purpose of the

payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. You can obtain further information about SOFORT’s data protection policy at the following Internet address: https://www.klarna.com/sofort/datenschutz

2. shipping service provider

The delivery of the goods to you will be made by the following transport service provider : UPS Germany 41456 Neuss.

For the purpose of delivery, we give, if this is necessary for the delivery of goods, in accordance with Art. 6

Para 1 lit. b) GDPR only the name of the recipient and the delivery address to the

Transportation service provider continues. Insofar as, in individual cases, a different

transport company must be commissioned (e.g. due to the scope of the order) will be

You will be informed about this separately. In that case, the transfer of your data will be carried out in accordance with the provisions of this chapter. Only if you have given your express consent in the ordering process, we will disclose your e-mail address in accordance with Art. 6 para. 1 lit. a) GDPR before the delivery of the

goods to the transport service provider for the purpose of coordinating a delivery date or for delivery notification. The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the respective transport service provider.

XIII Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. right to information

You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and about the existence of other rights such as correction of the data or the existence of a right of complaint to a supervisory authority.

2. right to rectification

You have a right of rectification and/or completion towards the

responsible, insofar as the processed personal data concerning you are inaccurate or incomplete. The responsible party shall make the correction without undue delay.

3. right to restriction of processing

You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is verified, if you refuse the erasure of your data due to unlawful data processing and instead request the

Restrict the processing of your data, if you want to use your data to enforce,

exercise or defense of legal claims, after we have received such data according to

no longer required for the purpose or if you object on the grounds of your particular circumstances.

situation, as long as it has not yet been determined whether our legitimate reasons prevail. If the processing of personal data relating to you has been restricted, this data – apart from its storage – may only be processed with your consent.

or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person, or processed for reasons of substantial public interest of the Union or a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

4. right to deletion

You may request from the controller that the personal data concerning you be

Data will be deleted immediately if and to the extent that the requirements for this are met. The

Responsible party is obliged to delete this data immediately. If the person responsible has

personal data relating to you has been made public and is it pursuant to Art. 17 para. 1

DSGVO to erase them, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers processing the personal data that you, as data subject, have requested erasure of all links to or copies or replications of such personal data. The right to erasure does not exist insofar as processing is necessary (1) for the exercise of the right to freedom of expression and information; (2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; (3) for reasons of public interest in the field of public health pursuant to Article 9(2) of the Directive. 2 lit. h) and i as well as Art. 9 par. 3 GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 3 of the GDPR. Art. 89 par. 1 GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or (5) for the establishment, exercise or defense of legal claims.

5. right to information

You have the right to be informed by the controller of the recipients to whom the controller has communicated that you have exercised your right to rectification, erasure or restriction of processing against the controller.

6. right to data portability

You have the right to request the personal data concerning you that you have provided to the

responsible person in a structured, common and machine-readable format.

7. right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.

8. right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9. right to non-automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.

10. right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

End of the privacy policy