Information about the processing of your data
Botiss biomaterials GmbH
Tel.: +49 33769-88 41-985
Fax: +49 33769-88 41-986
Questions about data protection
If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:
Tel.: +49 30 2060739817
We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to current standards.
You have the following rights with regard to the personal data concerning you that you can assert against us:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw your consent (Art. 7(3) GDPR)
Right to receive the data in a structured, commonly used, machine-readable format (“data portability”) and the right to transfer the data to another controller, if the prerequisites of Art. 20(1) (a), (b) GDPR are fulfilled (Art. 20 GDPR).
You can assert your rights by informing us using the contact details specified above under “Responsible provider” or by contacting the data protection officer designated by us.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).
Use of the website, access data
In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our web hosting service so that the website can be displayed to you. This is the following data:
Browser type/browser version
Operating system used
Language and version of the browser software
Hostname of the accessing device
Website from which the request comes
Content of the request (specific page)
Date and time of the server request
Access status/HTTP status code
Referrer URL (website visited before)
Volume of data transferred
Time zone difference from Greenwich Mean Time (GMT)
Temporary processing of the IP address by the system is necessary to make it technically possible to deliver the website to your device. This requires processing of your IP address for the duration of the session. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR.
The access data is not used to identify individual users and is not combined with other data sources. The access data is erased when it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.
Some elements of our website require that the retrieving browser can be identified even after a page change. This involves processing the following data in the cookies:
The user data collected by technically necessary cookies is not processed to create user profiles. We also use session cookies, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies are required for using the website. In particular, they enable us to recognise the device used if you return to the website. If you have an account with us, we use this cookie to recognise you on subsequent visits to the website; otherwise you would have to log in again each time you visited. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR. We use session cookies to make using our website more attractive and effective. Session cookies are erased as soon as you log out or close your browser.
b) Technically non-essential cookies
Frequency of page views.
These cookies are used to make using the website more efficient and attractive. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR. The technically non-essential cookies are automatically erased after a specified period, which may vary depending on the cookie.
Contacting our company
When contacting our company, e.g. by email, we will process the personal data provided by you so that we can respond to your request. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the contact is made with the intention of concluding a contract. If the processing is necessary in order to conclude a contract, it may be impossible to conclude or implement a contract if the data is not provided. Where you contact us by email, the necessary legitimate interest in the processing of the data also lies in the processing of the contact you make.
The data will not be transmitted to third parties in this context. The data is only processed in order to process the conversation. As soon as processing is no longer necessary, we erase the data generated in this context or, if statutory retention obligations apply, restrict processing of the data.
Processing and transmission of personal data for contractual purposes
We process your personal data if and to the extent necessary for the initiation, creation, execution and/or termination of a legal transaction with our company. The legal basis for this results from Art. 6(1) Sentence 1(b) GDPR. If processing the data is necessary in order to conclude a contract, it may be impossible to conclude or implement a contract and/or to end a legal transaction with our company if the data is not provided.
Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or erased, unless we are entitled to retain the data for a longer period and process it as required in the respective context on the basis of a consent granted by you (e.g. consent to the processing of your email address for sending promotional emails), a contractual agreement, a statutory authorisation (e.g. authorisation to send direct marketing) or on the basis of justified interests (e.g. retention for asserting claims).
Your personal data will be passed on if
it is necessary for the creation, execution or termination of legal transactions with our company (e.g. when transmitting data to a payment service provider/a shipping company to process a contract with you) (Art. 6(1) Sentence 1(b) GDPR), or
a subcontractor or party we use to perform our obligations, which we use exclusively within the framework of providing the offers or services requested by you, needs this data (unless you are expressly informed otherwise, such auxiliary parties are only entitled to process the data insofar as this is necessary for the provision of the offer or service), or
there is an enforceable official order (Art. 6(1) Sentence 1(c) GDPR), or
there is an enforceable court order (Art. 6(1) Sentence 1(c) GDPR), or
we are legally obliged to do so (Art. 6(1) Sentence 1(c) GDPR), or
the processing is necessary in order to protect the vital interests of the data subject or another natural person (Art. 6(1) Sentence 1(d) GDPR), or
this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6(1) Sentence 1(e) GDPR), or
we are authorised or even obliged to pursue overriding legitimate interests (Art. 6(1) Sentence 1(f) GDPR).
Your personal data will not be transmitted to other persons, companies or bodies unless you have effectively consented to such transmission. The legal basis of the processing is then Art. 6(1) Sentence 1(a) GDPR.
We use external hosting services for the provision of the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. This involves processing all data necessary for the operation and use of our website.
We use external hosting services to run this website. By using external hosting services, we aim to make the provision of our website efficient and secure. The legal basis for the processing is Art. 6(1)(f) GDPR.
Integration of third-party content
The website integrates third-party content such as videos, maps, RSS feeds and graphics from other websites. This integration always requires that the providers of this content (“third-party providers”) perceive the IP addresses of users. This is because without the IP address they would not be able to send the content to the browser of the respective user. As such, the IP address is required to display this content.
We endeavour to only use content from third-party providers who process the IP address solely for delivering the content. We do however have no influence over whether the third-party providers process the IP addresses, e.g. for statistical purposes. If we are aware of such activity, we inform you of this in the following.
Some of the third-party providers may process data outside the European Union.
Google AJAX Search API
We use the Google AJAX Search API as a central search service. The integrated search service enables a full-text search of content on this website.
For the user’s information, the text “Search with Google™” is displayed in the search box. If the user selects the text field of the search box and enters a search term, an additional link will appear beneath the search box, which refers to this data protection information.
No data is transferred to Google until you activate the search box, start a full-text search and in turn access the search results page. By using the search function within the search results page, your data will also be transferred to Google at the same time. This includes, for example, the search terms you entered and the IP address of the device you are using. If you visit our official website without activating the Google AJAX Search API, in principle no data will be transferred to Google. We would like to point out that the processing of any personal data transferred in this manner is the responsibility of Google and that we have no influence on the type or scope of the data transferred or on its further processing. If you are simultaneously logged in to Google, the Google service is able to link the information directly to your user profile. You should log out to prevent the collection of profile information about you.
The legal basis for the processing is Art. 6(1)(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long Google stores data and have no way of influencing this.
Our website uses plug-ins from the video platform YouTube.de/YouTube.com, a service whose provider – represented by Google – is YouTube LLC (headquartered at 901 Cherry Avenue, San Bruno, CA 94066, US; “YouTube”). The plug-ins allow us to embed visual content (“videos”) on this website that we have published on Youtube.de/Youtube.com.
The videos are all embedded in “extended privacy mode”, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. Only when you play the videos is the following data transferred. We have no influence on this data transfer.
By visiting the website, YouTube receives the information that you have retrieved the corresponding subpage of our website. In addition, the data mentioned under “Access data” is submitted. This occurs regardless of whether YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the US and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The legal basis for the processing is Art. 6(1)(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long YouTube stores data and have no way of influencing this.
Services for statistical, analysis and marketing purposes
Some of the third-party providers offer users the option of directly objecting to the use of the respective feature, e.g. by placing an opt-out cookie.
In the following, we inform you about the services from external providers currently in use on our website, about the purpose and scope of the respective processing in each case, and about how you can object.
However, if IP anonymisation is activated on this website, then within European Union Member States or in other member states of the European Economic Area Google will shorten your IP address before transferring it. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of this website, compiling reports for us on website activity, and providing us with other services relating to website usage and internet usage.
Google will not associate the IP address transmitted by your browser for Google Analytics purposes with any other data held by Google.
This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in abbreviated form, meaning that any association with individual persons can be ruled out. As far as the data collected about you relates to you personally, that relation is therefore excluded immediately and the personal data thus erased without delay.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics help us to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the US, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
For more information about the third-party provider Google, please refer to
Usage-based online advertising
The information generated by DoubleClick cookies is transferred to and stored by Google on servers in the US. Google complies with the data protection provisions of the EU-US Privacy Shield agreement and is certified for the Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The data will only be transferred to third parties within the scope of legal regulations or order processing. According to Google, DoubleClick cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to what we know: by integrating DoubleClick, Google receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.
The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. The DoubleClick cookies are erased after six months at the latest. By using DoubleClick, we are pursuing the interest of showing you ads that may be of interest to you in order to make our website more interesting for you.