Data Privacy Statement
Fax +49 (0) 551-5 06 72-181
Commercial register: Göttingen No. B 2068
Data privacy officer
Collection and Storing of Personal Data as well as Nature and Purpose of its Usage
The use of this website is generally possible without entering any personal data. To the extent our website collects personal data (e.g. name, address, email) such collection is performed on a voluntary basis, as far as possible.
We process your personal data as collected for proper fulfillment of our contractual duties and to comply with our statutory obligations where applicable e.g. financial and tax requirements.
If and insofar as you have given us your express consent within the meaning of Art. 6 para. 1 lit. a GDPR, parts of this data may also be used for the purpose of advertising contact and other communication.
Only the relevant people in our company will have access to your data.
We only process your data as long as required in each case, so basically depending on the reason for the processing. If the data is not needed any longer, it will be deleted, as far as not provided otherwise below or where there are any statutory obligations requiring us to keep the data even longer. The usual statute of limitations is three years (Sections 195 et seq. BGB) but can be up to 30 years.
The provider of this website automatically collects and stores information in so-called server log files which your browser is automatically transferring to us. Such information consists of:
- Type and version of browser
- Used operating system
- Referrer URL
- Host name of the accessing system
- Time of the server request
The above data is used by us for the following purposes:
- proper building and comfortable usage of our website,
- evaluation of the system security and stability, and
- further administrative purposes.
The legal basis for the collection of such data is Art. 6 para. 1 sentence 1 lit. f GDPR, as we have an interest being justified by the afore-said purposes. It is not possible to allocate this data to certain persons. They will be not connected to other data. We reserve the right to assess this data if we get knowledge of any potential right infringement.
Registration and Purchasing
If you decide to register with our company online, we collect the following data from you:
- Login details (email address and password);
- Personal data (title, name), address (company/institution, country), security question.
This data will be stored until you delete your account.
If you place an order, we also collect delivery and invoice address, phone number and, subject to selected payment method, credit card details.
We process order and product data as related to your person.
We store and use the data as provided by you to fulfil and process your order as well as for later warranty claims. We will only contact you by phone to the extent this is required to process your order or to provide our services.
The legal basis for the afore-mentioned data collection and processing is Art. 6 para. 1 sentence 1 lit. a GDPR (your voluntary consent) as well as is Art. 6 para. 1 sentence 1 lit. b GDPR (entering into and fulfilment of a contract).
If you send an inquiry via the contact form your information as contained in the form as well as your provided contact details will be stored for the purpose of handling your inquiry and to for potential following questions. Your data is processed due to your voluntary consent, pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
If you wish to receive a newsletter which is offered on this website, we need your email address as well as a couple of information (name) which allows us to verify that your are the holder of that email address and that you have agreed to receive the newsletter. Further data is not collected. You have to confirm the subscription to our newsletter service by clicking on a link in the email which confirms the receipt of your inquiry. Only after such clicking, your data will be stored for the receipt of our newsletter.
We only use that data for sending you the requested information.
The legal basis for collecting your data and sending the newsletter is Art. 6 para. 1 sentence 1 lit. a GDPR.
With respect to our newsletter subscription we cooperate with the following third party providers:
With respect to the program SendinBlue, we cooperate with the provider Sendinblue SAS – Politique de confidentialité, 7 rue de Madrid, 75008 Paris, France, where we submit your email address and your names, as far as provided by you, for this purpose. You can get more information on the data protection by this third party provider on https://www.sendinblue.com/legal/privacypolicy/.
To prove the registration in the newsletter list and to be able to defend against the wrong allegation that receipt of the emails was not agreed, the date of your registration as well as your IP address, which was used for the registration, are stored. Apart from that, the following data is stored by the program SendinBlue:
- Date of the most recent profile update;
- Localization & time area: On the basis of your email address the program SendinBlue will conduct a localization and will thereby identify by using a geolocation service provider information on the IP address (geolocation data and any available location information). The localization is also used to identify the time areas. The result will be used to the simultaneous sending of newsletters at certain times;
- Language information: If the program SendinBlue is able to identify your selected language from your browser when subscribing to the newsletter or when opening any links, this data is stored in your profile as well.
We also cooperate with the company Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, which receives your entered data, i.e. your email address and your names if entered; the data privacy statement of Newsletter2Go GmbH is available on https://www.newsletter2go.de/datenschutz/.
You have the right to withdraw your granted approval to the storage of your data, email address and their usage for the sending the newsletter, at any time, for instance by using the “Unsubscribe” link in the newsletter.
The transfer of certain data to the above service provider is permitted under Section 6 para. 1 sentence 1 lit. a and lit. f GDPR as we have a reasonable interest in marketing our products.
We regularly conduct surveys in our customer and newsletter subscriber base. Insofar, we use the program SurveyMonkey of SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland. For this purpose your email address and, as far as provided by you, your name will be transferred to that company. You may inspect their data privacy statement under https://www.surveymonkey.de/mp/policy/privacy-policy/.
The transfer of data to SurveyMonkey is justified by Section 6 para. 1 sentence 1 lit. a and lit. f GDPR because it such transfer helps us to market our products.
Data Privacy Statement on the Usage of CleverPush
You can opt in to receive our push notifications. To send our push notifications, we use the delivery service "CleverPush", which is provided by CleverPush UG (haftungsbeschränkt), Tondernstr. 1, 22049 Hamburg ("CleverPush").
You will receive regular information about IBA news, events and product information.
To opt in, you must confirm your browser's request to receive notifications. This process is documented and stored by CleverPush. This includes saving the opt-in time and your browser ID or device ID. The collection of this data is required so that we can understand the processes in case of misuse and therefore serves our legal protection.
To show you the push notifications, CleverPush collects and processes your browser ID on our behalf and your device ID in the case of mobile access.
By subscribing to our push notifications, you agree to their receipt. Legal basis for the processing of your data after registration for our push notifications is in the presence of your consent Art. 6 para. 1 lit. a GDPR. CleverPush also statistically evaluates our push notifications. CleverPush can detect if and when our push notifications were displayed and clicked by you.
Your consent to the storage and use of your personal information to receive our push notifications and the statistical survey described above may be revoked at any time with future effect. To revoke consent, you can change the setting to receive push notifications in your browser. If you use our push notifications on a desktop PC with the operating system "Windows", you can also unsubscribe our push notifications by right-clicking on the respective push notification in the settings that appear there.
Your data will be deleted as soon as they are no longer necessary to achieve the purpose of their survey. Your data will be stored as long as the subscription to our push notifications is active.
Under the following link, the process of unsubscribing will be explained in detail: https://cleverpush.com/faq.
Transfer of Data
We only transfer your personal data for the following purposes or where the below legal grounds apply:
- You have expressly approved a transfer, Art. 6 para 1 sentence 1 lit. a GDPR;
- There is a statutory obligation for such transfer, Art. 6 para. 1 sentence 1 lit. c GDPR;
- The transfer of data is necessary to enforce or defend our rights and there is no reason for us to believe that your interest in a non-transfer is more valuable than the interest of our company, Art. 6 para. 1 sentence 1 lit. f GDPR; and/or
- The transfer is legally permitted and needed for the entering into, fulfillment and/or the termination of contracts, Art. 6 para. 1 sentence 1 lit. b GDPR.
It might be possible that we transfer your data to other companies which assist us in selling our products and in the fulfillment of the contracts as concluded with our customers, especially payment providers and delivery services.
As the servers for our online shop are hosted with a third party provider the personal data being required to process a purchase your order will be transferred to such provider. We have entered into a customary data processing agreement with that provider.
In any event, the transfer of personal data to a country outside the EEA will only take place where necessary to fulfil our obligations and if such country provides for an adequate data protection level in accordance with the GDPR.
Cookies are small text files that can be used by websites to make a user's experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration within the Cookie-Settings on our website.
Your consent applies to the following domains: www.iba-lifesciences.com
Data Privacy Statement for Usage of Hotjar
This website uses Hotjar, an analysis software of Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta. Hotjar enables us to measure and evaluate the user’s behavior (clicks, computer mouse movements, scroll heights, etc.) on our website. The information on your visit of our website which is generated through the “tracking code” and “cookies” will be transferred to the Hotjar server in Ireland and stored there. By the tracking code the following information is collected:
Device related data
The following information can be recorded by your device and your browser:
- IP address of your device (collected and stored by way of an anonymized format);
- Your email address including first and family name to the extent you entered those data on our website;
- Display size of your device;
- Type of device and browser information;
- Geographical location (only the country); and
- The preferred language of watching our website.
The following data is automatically produced by our servers if Hotjar is used:
- Related domain;
- Visited websites;
- Geographical location (only the country);
- The preferred language of watching our website; and
- Date and time of access to our website.
Hotjar will use this information to evaluate your usage of our website, produced reports of your usage as well as for other services which related to the usage of our website and the internet evaluation of the website. To provide the services, Hotjar also uses services from third party providers, e.g. Google Analytics. These third party providers can store information which your browser submits during your visit on our website, e.g. cookies and IP inquiries. For further details on such third party providers’ handling of data, please read the respective data privacy statement as available under https://www.hotjar.com/privacy.
The data collection and processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR as it is a justified interest to evaluate and optimize the usage and design of our website.
If you continue to use this website, you agree with the above processing of the data by Hotjar and its third party providers within the frame of their data privacy statements.
The cookies which Hotjar uses have various durations; some of them remain valid for 365 days, others are only valid during your visit.
You can avoid the collection of data by Hotjar by clicking on the link below and following the instructions as provided under https://www.hotjar.com/legal/compliance/opt-out.
Data Privacy Statement for Usage of Facebook-Plugins (“Like-Button”)
There are some plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Data Privacy Statement for Usage of Facebook-Plugins (“Like-Button”)Menlo Park, California 94025, USA, being integrated in our website. You will be able to identify these Facebook plugins by seeing the Facebook logo or the "Like Button" ("Gefällt mir") on our website. An overview on all Facebook plugins can be found on: https://developers.facebook.com/docs/plugins/?locale=en_US. Only Facebook is responsible for the compliance of its network platform.
The usage of this plugin is justified as it serves to make or company and its products more popular. This marketing purpose is therefore based on Art. 6 para. 1 sentence 1 lit. f GDPR.
The Facebook-Plugins are integrated by using the double click-method [A1] in order to effectively protect your personal data.
When visiting our website, the respective plugin will establish a direct connection between your browser and the Facebook server. By such connection Facebook will get to know that you have visited our website with your IP address. If you click on the Facebook "Like-Button“ while being logged-in in your Facebook account you will be able to link the content of our website with your Facebook profile. Thereby, Facebook can connect your visit of our website to your user account. Even if you do not have any Facebook account, we cannot exclude that Facebook saves your IP address. Facebook may use your data for marketing, market research and design of its website. For this purpose Facebook creates usage, interest and relation profiles, especially in order evaluate your use of our website for advertisements and to inform other users of your usage of our website.
With respect to the purpose and the scope of the data collection, processing and usage by Facebook we refer to the Facebook Data Privacy Guidelines which are available also on English on: https://www.facebook.com/privacy/explanation (for English language you must click on the respective link on the website’s bottom). On this Facebook website you will also find an overview on the setting options in your personal Facebook profile which may serve to protect your privacy and your related rights. If you do not want that Facebook connects your visit of our website to your Facebook user account, you must log out of your Facebook account before visiting our website.
If you do not want to give Facebook access to your data, at all, we recommend you to use a so-called „Facebook-Blocker“. Such an add-on is available for the most popular browser for free.
Data Privacy Statement for Usage of Google Analytics
This website uses features of the web analysis service Google Analytics. Provider of that service is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies“. These “cookies“ are text files which will be stored on your computer and allow an analysis of your usage of this website. The information on your usage of this website being created by the cookie will regularly be transferred to a Google server in the US and stored there. Google creates pseudonymized usage profiles by collecting information on:
- Type and version of browser;
- Used operating system;
- Referrer URL;
- Host name of the accessing system; and
- Time of the server request.
That data is used by Google to evaluate the usage of the website, to create marketing reports, and to provide other services related to advertisement and market research. It is possible that such information is transferred to third parties if allowed by applicable law or where third parties are engaged as subcontractors to Google.
The data collection and processing is founded by Art. 6 para. 1 sentence 1 lit. f GDPR as our interest in evaluating and optimizing the usage and design of our website is a legitimate and prevailing interest.
However, if the IP anonymization is activated on this website your IP address will be shortened by Google within the European Union or the European Economic Area. Only in exceptional cases the complete IP address will be transferred to a Google server in the US and shortened there. On behalf of the operator of this website Google will use that information to evaluate your usage of this website in order to compose reports on website activities and to perform further services being connected to the usage of this website and the internet towards the operator of this website. The IP address which is transferred by your browser within the context of Google Analytics will not be connected to other Google data.
You can prevent the storage of the cookies by the respective settings in your browser software; however, we would like to point out that, in such case, you will not be able to use all features of this website completely. In addition, you may prevent the collection of the data being created by the cookie and relating to your usage of this website (including your IP address) as well as the processing of that data by Google by downloading and installing the browser plugin as available on http://tools.google.com/dlpage/gaoptout?hl=en.
You may also prevent the data collection by Google Analytics by clicking on the following Link. Then, an opt-out-cookie will be placed which shall avoid the future collection of your data when visiting this website: deactivate Google Analytics
Further information on Google’s terms and conditions of usage and Google’s data privacy can be obtained on http://www.google.com/analytics/terms/ and https://www.google.de/intl/en/policies/. We would like to inform you that on this website Google Analytics is extended with the code „anonymizeIp“, in order to allow an anonymized collection of IP addresses (so-called IP masking).
Data Privacy Statement for Usage of Google Analytics Marketing Features
This website features the Google Analytics marketing functions of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In the connection to Google Analytics we have activated the following four Google Analytics marketing functions: “Remarketing with Google Analytics”, “Reports on impressions in the Google Display Network”, “Integration of the Double-Click platform” and “Google Analytics reports the performance with respect to demographic characteristics and interests”. By way of this activation further access data will be collected via a Google cookie for advertisements preferences, which are beyond the regular standard implementation of Google Analytics.
The processing of your data is a justified interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR as we need the data to advertise our products.
The user may deactivate the Google Analytics marketing features and exercise his/her right of objection, e.g. via http://www.google.com/settings/ads (in German language). Alternatively, the user may deactivate the usage of cookies for Google Analytics marketing functions under assistance of the so-called advertisement network initiative by following the (English language) instructions under http://www.networkadvertising.org/managing/opt_out.asp.
If these technical measures are not available on the terminal device, the user may exercise his/her objection right against the usage of Google Analytics in total.
By using our website you agree with the processing of your data as collected by Google in the kind and manner described herein and for the purpose mentioned. We herewith inform you that Google has its own data privacy policies which are independent form ours. We do not take any responsibility or liability for those policies and processes. Further information on Google’s Analytics marketing features and the Google data privacy statement can be obtained from https://privacy.google.com/intl/en/index.html#.
Finally, we refer to the information as provided in the section “Data Privacy Statement for Usage of Google Analytics”. In particular, the user may also exercise his/her objection right by the Opt-Out features and, respectively, may change the settings of his/her browser to protect his data, as described therein.
Data Privacy Statement for Usage of Google Remarketing
This website features the web remarketing tool of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This tool serves to present interest-related advertisements from third parties, including Google, to the visitor of this website and our online services within the Google advertisement network. This remarketing tool uses so-called „cookies“. These „cookies“ are text files which will be stored on your computer and allow your recognition when you visit websites which are member of the Google advertisement network. On this website target-oriented advertisements will be presented to the visitor, which relate to a third party’ website content as already viewed by the visitor earlier, where such third party website uses the Google web remarketing tool. In addition, by this tool a user who has already visited this website and our online services and has been interested in our products, will be approached again by target-oriented advertisement within the Google advertisement network.
The collection and processing of your data is permitted under Art. 6 para. 1 sentence 1 lit. f GDPR due to our legitimate interest to market our products.
By using our website you agree with the processing of your data as collected by Google in the kind and manner described herein and for the purpose mentioned. We herewith inform you that Google has its own data privacy policies which are independent form ours. We do not take any responsibility or liability for those policies and processes. Further information on Google’s remarketing tool and the Google data privacy statement can be obtained from https://privacy.google.com/intl/en/index.html#.
Data Privacy Statement for Usage of Microsoft Bing Ads Remarketing
This website features the web remarketing tool of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This tool serves to present interest-related advertisements from third parties, including Microsoft, to the visitor of this website and our online services within the Bing ads advertisement network. This remarketing tool uses so-called „cookies“. These „cookies“ are text files which will be stored on your computer and allow your recognition when you visit websites which are member of the Bing ads advertisement network. On this website target-oriented advertisements will be presented to the visitor, which relate to a third party’ website content as already viewed by the visitor earlier, where such third party website uses the Bing ads web remarketing tool. In addition, by this tool a user who has already visited this website and our online services and has been interested in our products, will be approached again by target-oriented advertisement within the Bing ads advertisement network.
The processing of your data is allowed in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR as we have a legitimate interest to advertise our products.
By using our website you agree with the processing of your data as collected by Bing ads in the kind and manner described herein and for the purpose mentioned. We herewith inform you that Microsoft has its own data privacy policies which are independent form ours. We do not take any responsibility or liability for those policies and processes. Further information on Microsoft’s remarketing tool and the Microsoft data privacy statement can be obtained from
Data Privacy Statement for Usage of LinkedIn
Our website uses features of the network LinkedIn, whose provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
The usage of this plugin is justified as it serves to make or company and its products more popular. This legitimate marketing interest is therefore based on Art. 6 para. 1 sentence 1 lit. f GDPR. Only LinkedIn is responsible for the compliance of its platform with data privacy requirements.
When visiting our websites, which contain LinkedIn features, a connection to LinkedIn servers will be established. LinkedIn will be informed that you have visited our website with your IP address. If you click on the "Recommend-Button" when logged-in in LinkedIn, LinkedIn can connect your visit of this website with your personal LinkedIn account. As provider of this website, we would like to point out that we have no knowledge of the data content as well as its usage by LinkedIn.
If you do not want LinkedIn to connect the information as collected during your visit of this website to the already existing LinkedIn data, if any, you must log out before using this website.
Further information can be obtained from LinkedIn’s data privacy statement on: https://www.linkedin.com/legal/privacy-policy (for English language you must select English at the bottom of the website).
Data Privacy Statement on the Usage of Twitter
On our website you will find features of the service Twitter. Those services are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The various Twitter buttons can be found on https://publish.twitter.com/#. Twitter is exclusively responsible for the compliance of its platform.
The usage of this plugin and the related data processing is justified as it serves to make our company and its products more popular. This marketing purpose is therefore based on Art. 6 para. 1 sentence 1 lit. f GDPR.
By using Twitter and the feature "Re-Tweet" the visited websites will be connected to your Twitter account; in addition, other users will be informed on these websites. Some data will be transferred to Twitter as well. As provider of this website we do not have any knowledge of the content of the transferred data and its usage by Twitter. You will find further information about the content and scope of Twitter#s data collection, processing and usage in the data privacy statement of Twitter on https://twitter.com/en/privacy
You can change your Twitter data privacy settings in your account settings on http://twitter.com/account/settings.
To prevent Twitter from connecting your data as collected when visiting this website to your Twitter profile, you must log out before visiting this website.
Your rights as Concerned Individual
- To request information as to whether or not your personal data is being processed; the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored (where possible) or, if not possible, the criteria used to determine that period; the existence of the right to request from us rectification or erasure of personal data or restriction of processing of your personal data or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source (Art. 15 GDPR);
- To obtain from our company without undue delay the rectification of inaccurate personal data. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement (Art. 16 GDPR);
- To request us to erase your personal data concerning without undue delay for certain reasons given that your personal data is not required for exercising the right of freedom of expression and information; for compliance with a legal obligation applying to us; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; or for the establishment, exercise or defense of legal claims (art. 17 GDPR);To obtain restriction of processing where the accuracy of the personal data is contested by you; the processing is unlawful and you opposes the erasure of the personal data and requests the restriction of their use instead; we no longer need your personal data for the purposes of the processing, but you need them for the establishment, exercise or defense of legal claims; or you have objected to processing pursuant to Article 21 para. 1 GDPR (Art. 18 GDPR);
- To receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller where the processing is based on consent or on a contract pursuant, or the processing is carried out by automated means (Art. 20 GDPR);
- To withdraw your voluntarily given consent at any time whereas such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal (Art. 7 para. 3 GDPR); and
- To lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence if you are of the opinion that the processing of your personal data infringes the GDPR (Art. 77 GDPR).