Privacy Statement

INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA

The following information concerns the collection of personal data while using this website. Personal data are all data that can be personally related to you, e.g. name, address, email addresses, user behaviour.

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is LIGANOVA HORIZON GmbH, Hanauer Landstraße 184, D-60314 Frankfurt am Main, Germany.

You can contact our data protection officer at datenschutz@goingbeyond.group or at our postal address with the addition "the data protection officer".

Link to legal information: https://liganova-horizon.com/imprint

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number, if applicable, and the content of your message) will be stored by us in order to answer your questions. Your data will be processed as part of pre-contractual measures or on the basis of your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a) and b) GDPR. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

YOUR RIGHTS

You have the following rights towards us with regard to your personal data:

  • Right to information,
  • Right to correction or deletion,
  • Right to restriction of processing,
  • Right to refusal of processing,
  • Right to data portability.

You also have the right to lodge a complaint about our processing of your personal data with a data protection authority.

WITHDRAWAL OF CONSENT OR OBJECTION TO THE PROCESSING OF YOUR DATA

If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

DELETION OF PERSONAL DATA

The data processed by us will be deleted in accordance with the legal requirements if the purpose for processing your data no longer applies or if it is no longer required for the purpose. Your data will also be deleted if the processing was based on your consent and you have withdrawn it.

It may be that the storage of your data is necessary for other legally permissible purposes, such as the fulfilment of a legal obligation, the exercise of legal claims or for tax law reasons. In these cases, your personal data will only be processed for these purposes.

COLLECTION OF PERSONAL DATA WHEN YOU VISIT OUR WEBSITE

If you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR):

  • IP address
  • Date and time of the enquiry
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Quantity of data transferred in each case
  • The website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

In addition to the aforementioned data, technically necessary and, optionally, technically unnecessary cookies are stored on your computer if you give your consent. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). They are used to make the website more user-friendly and effective overall.

If cookies are set on our website that require your consent, we will inform you about this separately within this privacy policy. If you have given your consent to this, you can revoke it at any time via the cookie banner on our website.

To protect your data, we use TLS encryption. You can recognise this by the prefix https:// in the address bar of your browser.

OTHER FUNCTIONS AND OFFERS ON OUR WEBSITE

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

If our service providers or partners are based in a country outside the European Union (EU) or the European Economic Area (EEA), we will inform you of the consequences of this circumstance at the appropriate point in this privacy policy.

AGENCY SERVICES

We process the data of our customers within the scope of our contractual services, which may include e.g. conceptual and strategic consulting, campaign planning, software and design development / consulting or maintenance, implementation of campaigns and processes, handling, server administration, data analysis / consulting services and training services.

Legal basis of the processing is Art. 6 (1) lit. b) GDPR.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA

To process our business transactions, we use external domestic and foreign service providers (e.g. for IT, logistics, telecommunications, sales and marketing) who may also gain knowledge of your personal data. We have concluded order processing contracts with these providers in accordance with Art. 28 GDPR, which ensure that data processing is carried out in a permissible manner.

If your personal data is passed on by us to our subsidiaries or is passed on to us by our subsidiaries (e.g. for advertising purposes), this is also done on the basis of existing order processing relationships.

COOKIEBOT BY USERCENTRICS CONSENT MANAGER

We use the Consent Management Platform (CMP) of Usercentrics A/S, Havnegarde 39, 1058 Copenhagen, Denmark. The tool allows you to conveniently manage your consent to the setting of technically unnecessary cookies and to make changes in this regard - such as revoking consent or objecting to consent - via the tool.

Furthermore, you can find the information required under Art. 13 GDPR on the processing of your personal data by the Cookiebot by Usercentrics CMP and by technically unnecessary cookies in the tool.

You can access the settings of our CMP via the fingerprint icon in the lower left corner of the website.

CONDITIONS FOR THE TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

For the exceptional cases in which personal data is transferred to countries outside the European Economic Area (EEA), i.e. to third countries, this is done under the conditions of Art. 44 et seq. GDPR. We will inform you about the respective details of the transfer at the relevant points below.

The European Commission certifies that some third countries have a level of data protection comparable to the EEA standard by means of so-called adequacy decisions. However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible via binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data pursuant to Art. 46 para. 1, 2 lit. c) GDPR, certificates or recognised codes of conduct.

USE OF SOCIAL MEDIA PLUG-INS

This website uses so-called "social media plug-ins" of the social networks Instagram and LinkedIn, which are operated by the

  1. Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
  2. LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA

The website uses the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins, but only when you click on the marked field. You can recognise the provider of the plug-in by the logo. The data mentioned under § 5.1 of this declaration will be transmitted. In the case of Meta, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (for US providers in the USA).

The European Commission adopted its adequacy decision for the USA on 10 July 2023.It states that the USA guarantees an adequate level of data protection for transfers within this framework. LinkedIn and Meta are certified under the EU-US Data Privacy Framework and an adequate level of data protection can be assumed.

To the best of our knowledge, the plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or customising the design of its website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. a) GDPR.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below.

Addresses of the respective plug-in providers and URL with their data protection notices:

http://www.facebook.com/policy.php;

https://de.linkedin.com/legal/privacy-policy

LINKS

We use links to content on websites of other websites operators. We have no influence on the data collected there or the data processing procedures, nor do we know the full extent of the data collection, the purpose of the processing or the retention periods.

We also have no information about the deletion of the data collected by the linked provider. In this respect, we are not responsible under data protection law for the data processing on the linked website.

Further information on the purpose and scope of data collection and processing by the website operator can be found in the privacy policies of the respective websites. There you will also find further information on your rights in this regard and the setting options for protecting your privacy.

USE OF APPLICANT AND EMPLOYEE DATA

You can send us your application documents by e-mail or via an online form.

Your data required for establishing contact and the application process will be stored for the purpose of carrying out an application procedure in compliance with the statutory provisions. The legal basis for this is Art. 6 Para. 1 lit. b) GDPR and § 26 Para. 1 in connection with para. 8 p. 2 BDSG (implementation of pre-contractual measures).

The following data may be processed by us in the application process:

  • Master data (title, first name, surname, date of birth if applicable)
  • Contact details (address, telephone or mobile phone number, private email address)
  • Application data (e.g. profile picture and other documents such as CV, cover letter, complete application, certificates).

In the event of recruitment, the data will be transferred to the personnel file. Information on the storage period can be found in the information on the processing of personal data of our employees.

If an application for a specific job advertisement is not successful, your data will be stored for evidence purposes for up to 6 months after completion of the application procedure for the possible assertion, exercise or defence of legal claims.

With your consent, we will be happy to include your application in our applicant pool until further notice. We will save unsolicited applications for the search for a suitable position for you until further notice.

The provision of data is not required by law or contract. You are not obliged to provide the data. However, if you do not provide the data, it will not be possible to carry out an application procedure and, if applicable, recruitment.

GOOGLE ANALYTICS 4.0

If you have given your consent, Google Analytics 4, a web analytics service provided by Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics 4 uses cookies that enable us to analyse your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymisation of IP addresses is activated by default. Due to IP anonymisation, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Your user behaviour is recorded during your visit to the website. In addition to the personal data mentioned under § 5 of this declaration, the following data is recorded:

  • First visit to the website
  • Start of the session
  • Websites visited
  • Your "click path", interaction with the website
  • Scrolls (whenever a user scrolls to the end of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • file downloads
  • Ads viewed / clicked on

On behalf of the operator of this website, Google will use this information to analyse your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website.

Recipients of the data are/may be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

For the USA, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified under the Data Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the standard contractual clauses with the provider.

The data sent by us and linked to cookies is automatically deleted after 2 months. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, which you can revoke at any time.

You can find more information on the terms of use of Google Analytics and data protection at Google here.

GOOGLE TAG MANAGER

Google Tag Manger is a tag management system with which we can integrate and manage tracking codes or conversion pixels on our website. Google Tag Manager collects data on the website and forwards it to the connected analysis tool

The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can revoke at any time.

META PIXEL

With your consent, this website uses Metas visitor action pixel to measure conversions. The provider of this service is Meta Platforms, Inc, 1601 Willow Road Menlo Park, CA 94025 USA. This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook or Instagram ad. This allows the effectiveness of these ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Usage Policy. This enables Meta to place adverts on Facebook and Instagram pages and outside of these. This use of the data cannot be influenced by us as the website operator.

The use of Meta pixels is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time.

The European Commission issued its adequacy decision for the USA on 10 July 2023. It states that the USA guarantees an adequate level of data protection for transfers within this framework. Meta is certified under the EU-US Data Privacy Framework and an adequate level of data protection can be assumed.

If personal data is collected on our website with the help of the tool described here and forwarded to Meta, we and Meta Platforms, Inc, 1601 Willow Road Menlo Park, CA 94025 USA are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The processing carried out by Meta after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. You can find the wording of the agreement at: https://www.facebook.com/legal/controller_addendum

Further information on Meta's data protection provisions can be found here.

LINKEDIN INSIGHT TAG

The LinkedIn Insight Tag is a JavaScript code that is embedded on our website.

It is a tracking tool that records and analyses LinkedIn members on a website. This gives us insights into our target group, the attractiveness of our offers and the performance of ad campaigns on LinkedIn.

The LinkedIn Insight Tag places a cookie in the user’s browser. LinkedIn uses this to collect data, such as URL, referrer URL, device properties, browser properties and IP address.

The legal basis of this tracking is your consent acc. to Art. 6 (1) lit. a) GDPR, which can be revoked any time. You can find more information on the terms of use of LinkedIn Insight Tag and data protection at LinkedIn here.

UPDATE OF THE PRIVACY POLICY

We will amend this privacy policy from time to time if this is necessary due to changes in data processing. Please inform yourself regularly about the content of our privacy policy and also about the up-to-dateness of contact information from third parties.

;