Privacy Policy

The protection of personal data is important to us. For this reason, we process personal data in accordance with the applicable European and national legal provisions.

You may of course withdraw your declaration(s) of consent at any time with effect for the future. To do so, please contact the controller.

The following statement provides an overview of the type of data we collect, how this data is used and shared, the security measures we take to protect your data, and how you can obtain information about the data we hold on you.

Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.

Where the processing of personal data is necessary to comply with a legal obligation to which we are subject, Art. 6(1)(1)(c) GDPR serves as the legal basis.

Where processing is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, Art. 6(1)(1)(f) GDPR serves as the legal basis for processing.

Data erasure and storage duration

The data subject’s personal data will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored where this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which we are subject. Data will also be blocked or erased when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Hosting

External hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated via a website.

The host is used for the purpose of performing our contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our host will process your data only to the extent necessary to fulfil its performance obligations and will follow our instructions regarding this data.

The controller and the data protection officer

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection provisions, is:

LABS.ruhr GmbH
Gesundheitscampus-Süd 17
44801 Bochum

Germany

Phone: +49 (0) 234 52 00 737 5
Email: service@labs.ruhr

Website: www.labs.ruhr

Name and address of the data protection officer

The controller’s data protection officer is:

Dieter Grohmann | AKWISO Ltd.

Georgiou Karaiskaki 11-13, Carisa Salonica, Office 102, 7560 Pervolia, Larnaca, Republic of Cyprus

Email: dg@akwiso.com
Phone: +357 97 457 215

Website: www.akwiso.com

Definitions

This privacy policy is based on the terminology used by the European legislator when adopting the EU General Data Protection Regulation (hereinafter “GDPR”). This privacy policy is intended to be easy to read and understand. To ensure this, the most important terms are explained below:

  1. Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
  2. Data subject is any identified or identifiable natural person whose personal data is processed by the controller.
  3. Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  4. Profiling is any form of automated processing of personal data consisting of the use of such data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
  5. Pseudonymisation is the processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data is not attributed to an identified or identifiable natural person.
  6. Controller or person responsible for processing is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or member state law, the controller or the specific criteria for its nomination may be provided for by Union or member state law.
  7. Processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
  8. Recipient is a natural or legal person, public authority, agency, or other body to which personal data is disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a particular inquiry under Union or member state law are not regarded as recipients.
  9. Third party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
  10. Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

Provision of the website and creation of log files

When you use the website purely for informational purposes, i.e. if you do not register or otherwise transmit information to us, we automatically collect the following data and information from your computer system each time you access the website:

  1. The user’s IP address
  2. Information about the browser type and version used
  3. The user’s operating system
  4. The user’s internet service provider
  5. Date and time of access
  6. Websites accessed by the user’s system via our website
  7. Content of the requests (specific pages)
  8. The volume of data transferred in each case
  9. Language and version of the browser software

This data is also stored in our system’s log files. This data is not stored together with other personal data of the user.

The legal basis for the temporary storage of log files is Art. 6(1)(f) GDPR.

The temporary storage of the IP address by the system is necessary in order to:

  1. Enable the website to be delivered to the user’s computer. For this, the user’s IP address must remain stored for the duration of the session.
  2. Optimise the content of our website and its advertising
  3. Ensure the functionality of our information technology systems and the technology of our website
  4. Provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack

Storage in log files takes place to ensure the functionality of the website. In addition, the data helps us optimise the website and ensure the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.

These purposes also constitute our legitimate interest in the data processing under Art. 6(1)(1)(f) GDPR.

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is when the respective session ends.

Where data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In such cases, the IP addresses are erased or anonymised so that the requesting client can no longer be identified.

Collecting the data to provide the website and storing it in log files is essential for the operation of the website. There is therefore no right to object.

Use of cookies

This website uses exclusively technical cookies.

Cookies are small text files that are sent from a web server to your browser when you visit a website and are stored locally on your device (PC, laptop, tablet, smartphone, etc.), providing the user (i.e. us) with certain information. Cookies serve to make the website more user-friendly and secure, in particular to collect usage-related information such as the frequency of use and number of users of the pages, as well as page usage behaviour. Cookies do not damage your computer and do not contain viruses. Such a cookie contains a characteristic string of characters (a “cookie ID”) that enables the browser to be uniquely identified when the website is accessed again.

Cookies remain stored even after the browser session ends and can be retrieved when you visit the site again. However, cookies are stored on your computer and transmitted from it to our site. You therefore have full control over the use of cookies. If you do not want data to be collected via cookies, you can configure your browser via the “Settings” menu so that you are informed when cookies are set, or so that cookies are generally blocked or can be deleted individually. Please note, however, that disabling cookies may limit the functionality of this website. Session cookies are, in any case, automatically deleted when you leave the website.

Disclosure of personal data to third parties

Data transfer upon conclusion of a contract for services and digital content

We transfer personal data to third parties only where this is necessary for contract processing, for example to the credit institution commissioned to handle payments.

No further transfer of the data takes place, or only where you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for the data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Use of Gravatar

On our website we use the Gravatar service provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Gravatar (Globally Recognized Avatar) is a service that allows users to store a profile picture, which is then automatically displayed on various websites whenever they write a post or comment using their email address.

If you leave a comment on our site using an email address linked to Gravatar, a hash value (an anonymised character string) of your email address is transmitted to the Gravatar servers to check whether an avatar image exists for that email address. If a corresponding avatar is found, it is displayed next to the comment. The legal basis for using Gravatar is Art. 6(1)(f) GDPR. Our legitimate interest lies in the consistent and appealing presentation of user profiles on our website. Further information on data protection at Gravatar can be found in Automattic’s privacy policy: https://automattic.com/privacy/

If you do not want your Gravatar image to be displayed, we recommend using an email address that is not registered with Gravatar, or not maintaining a Gravatar profile.

Use of WordPress emojis

Our website uses the WordPress emoji function. WordPress provides a collection of emojis that can be used in texts, comments, and posts. These emojis are provided directly via the WordPress web server (Automattic Inc.).

When you visit our website, a connection to Automattic Inc.’s servers may be established to display emojis. No personal data is transmitted to Automattic in this process unless a further function (such as commenting or creating an account) is used that collects additional data. The legal basis for using WordPress emojis is Art. 6(1)(f) GDPR, as they contribute to optimising the user experience and providing an appealing presentation on our website. Further information on the processing of personal data by Automattic Inc. can be found in their privacy policy: https://automattic.com/privacy/

Links to external websites

This website contains links to external sites. We are responsible for our own content. We have no influence over the content of external links and are therefore not responsible for it; in particular, we do not adopt such content as our own. If you are directed to an external site, the privacy policy provided there applies. Should you notice any unlawful activities or content on that site, please feel free to inform us. In such a case, we will review the content and respond accordingly (notice and take-down procedure).

Contact form and email contact

Our website has a contact form that can be used to get in touch electronically. If you use this option, the data entered in the input mask is transmitted to us and stored.

This data is:

  • Name
  • Email
  • Message

At the time the message is sent, the following data is also stored:

  • The user’s IP address
  • Date and time of registration

For the processing of the data, your consent is obtained during the sending process, with reference to this privacy policy.

Alternatively, you can contact us via the email address provided. In this case, the personal data transmitted with the email is stored.

Insofar as this concerns details of communication channels (for example email address or telephone number), you also consent to us contacting you via that channel where necessary in order to respond to your request.

No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.

The legal basis for processing the data, where the user has given consent, is Art. 6(1)(a) GDPR. The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(1)(f) GDPR. If the email contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1)(1)(b) GDPR.

The processing of personal data from the input mask serves solely to handle your contact request. The data from your email enquiries will of course be used exclusively for the purpose for which you provided it to us when making contact. In the case of contact by email, the necessary legitimate interest in processing the data also lies in responding to it. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the contact form input mask and that sent by email, this is the case when the respective conversation with the user has ended. A conversation is deemed ended when the circumstances indicate that the matter concerned has been conclusively resolved. The additional personal data collected during the sending process is erased after seven days at the latest.

You may withdraw your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. To withdraw consent or object to storage, please contact the controller or the data protection officer pursuant to § 1 by email or post. All personal data stored in the course of making contact will be erased in this case.

SSL encryption

For security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator, this site uses SSL encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the padlock symbol in your browser bar. When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right of access

You may request confirmation from the controller as to whether personal data concerning you is being processed by us. Where such processing is taking place, you may request from the controller free information at any time about the personal data stored about you, together with the following information:

  1. The purposes for which the personal data is processed
  2. The categories of personal data being processed
  3. The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed
  4. The planned duration for which the personal data concerning you will be stored or, if specific information is not possible, the criteria for determining the storage period
  5. The existence of a right to rectification or erasure of the personal data concerning you, a right to restrict processing by the controller, or a right to object to such processing
  6. The existence of a right to lodge a complaint with a supervisory authority
  7. All available information about the origin of the data, where the personal data is not collected from the data subject
  8. The existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards under Art. 46 GDPR in connection with the transfer.

Right to rectification

You have the right to obtain from the controller, without undue delay, the rectification and/or completion of personal data concerning you, where the processed personal data is inaccurate or incomplete.

Right to restriction of processing

Under the following conditions, you may request the controller to restrict the processing of personal data concerning you without undue delay:

  1. Where you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data
  2. Where the processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of its use
  3. Where the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise, or defence of legal claims, or
  4. Where you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been established whether the controller’s legitimate grounds override yours

Where the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent, or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a member state. Where processing has been restricted under the above conditions, you will be informed by the controller before the restriction is lifted.

Right to erasure

You may request the controller to erase the personal data concerning you without undue delay, where one of the following grounds applies:

  1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. You withdraw the consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
  3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
  4. The personal data concerning you has been processed unlawfully.
  5. The erasure of the personal data concerning you is necessary to comply with a legal obligation under Union or member state law to which the controller is subject.
  6. The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

Where the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17(1) GDPR, it shall, taking account of available technology and the cost of implementation, take reasonable measures, including technical ones, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, that personal data.

The right to erasure does not exist insofar as the processing is necessary:

  1. For exercising the right of freedom of expression and information
  2. For compliance with a legal obligation requiring processing under Union or member state law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  3. For reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR
  4. For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to under (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  5. For the establishment, exercise, or defence of legal claims

Right to information

Where you have exercised the right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about these recipients.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, where:

  • The processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and
  • The processing is carried out by automated means

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the freedoms and rights of others.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

To exercise the right to data portability, the data subject may contact the controller at any time.

Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

Where the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

To exercise the right to object, the data subject may contact the controller directly.

Right to withdraw the data protection consent

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent up to the point of withdrawal. You may contact the controller for this purpose.

Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply where the decision:

  1. Is necessary for entering into, or the performance of, a contract between you and the controller
  2. Is authorised by Union or member state law to which the controller is subject, and that law lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
  3. Is based on your explicit consent

However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures to protect your rights and freedoms and legitimate interests have been taken.

With regard to the cases referred to in (1) and (3), the controller takes suitable measures to safeguard your rights and freedoms and legitimate interests, which include at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

If the data subject wishes to assert rights relating to automated decisions, they may contact the controller at any time.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR. The supervisory authority with which the complaint was lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Changes to the privacy policy

We reserve the right to amend our data protection practices and this policy, where necessary, to bring them into line with changes in relevant laws or regulations, or to better meet your needs. Any changes to our data protection practices will be announced accordingly at this point. Please note the current version date of the privacy policy in this regard.

COOKIEBOT

This website uses cookies. We use cookies to personalise content and ads, to provide social media features, and to analyse access to our website. We also share information about your use of our website with our social media, advertising, and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of their services.

Cookies are small text files used by websites to make the user experience more efficient.

By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we require your permission.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or withdraw your consent at any time from the cookie declaration on our website.

Learn more in our privacy policy about who we are, how you can contact us, and how we process personal data.

Please provide your consent ID and the date when you contact us regarding your consent.

Your consent applies to the following domains: www.labs.ruhr

Digital solutions that make an impact
Digital solutions that make an impact