Data Protection Guid...

1. Who is responsible for the data processing?

These Data Protection Guidelines apply to data processing by the centre responsible within the meaning of Art. 4, s. 7 of the General Data Protection Regulation (GDPR):

VIROTECH Diagnostics GmbH
Löwenplatz 5
D-65428 Rüsselsheim

You can contact our Data Protection Officer at privacy@virotechdiagnostics.com.

2. What data do we use?

The personal data processed by VIROTECH Diagnostics GmbH (VT) include your surname, given name, gender, address, contact data (telephone number, e-mail address, fax) and the account data of the company / laboratory and, if applicable, academic degree.

3. Why do we process your data and what is the legal basis for this?

We process the data referred to in section 2 in conformity with the provisions of the General Data Protection Regulation and the German Federal Data Protection Act (BDSG):

  • a.    In order to fulfil contractual obligations (Art. 6, s. 1, subs. b of the General Data Protection Regulation):
    Personal data are processed for the sale of diagnostic products or for the performance of technical services in accordance with our agreements with our clients or for the performance of pre-contractual measures which follow from your enquiry.
  • b.    In the context of weighing of interests (Art. 6, s. 1, subs. f of the General Data Protection Regulation):
    If required, we process your data over and above the actual fulfilment of the agreement in order to protect our legitimate interests. In individual cases, this is the operation of direct advertising in the form of mailing campaigns e.g. for product innovations, product modifications or event notifications, unless you have objected to the use of your data.

4. Who obtains your data?

Those positions within our company which require access for the fulfilment of our contractual and statutory obligations are given access to your data. Your data is only disclosed to a third party for the purposes of forwarding processes (to our logistics associates), in association with the performance of technical services (to external technical service personnel) or for the purposes of payment transactions (to our financial institution). We only disclose your personal data to a third party for purposes other than those referred to in this letter if you have granted us your explicit consent to do so.

5. How long do we store your data?

We process and store your personal data for as long as this is required for the fulfilment of our contractual and statutory obligations. Should you object to the processing for the purposes of direct advertising, we will no longer process your personal data for these purposes.

6. What data protection rights do you have?

Each person concerned has the right to disclosure under Art. 15 of the General Data Protection Regulation, the right to rectification under Art. 16 of the General Data Protection Regulation, the right to deletion under Art. 17 of the General Data Protection Regulation, the right to the restriction of the processing under Art. 18 of the General Data Protection Regulation, the right to objection arising from Art. 21 of the General Data Protection Regulation and the right to data portability arising from Art. 20 of the General Data Protection Regulation. Furthermore, there is a right of complaint to a data protection authority (Art. 77 of the General Data Protection Regulation in conjunction with Art. 19 of the German Federal Data Protection Act). In regard to you, the following emerges from this:

If you desire a detailed disclosure of the personal data concerning your person stored with us, please contact

VIROTECH Diagnostics GmbH, Löwenplatz 5, D-65428 Rüsselsheim, or at privacy@virotechdiagnostics.com.

On request, we will provide to you a copy of your personal data stored with us. You can also receive the personal data concerning you in a structured, up-to-date and machine-readable format or require us to forward these data to a third party nominated by you. If you determine that data stored concerning your person are incorrect or incomplete, you can require the immediate rectification or completion of these data at any time. Under the conditions referred to in Art. 17 and 18 of the General Data Protection Regulation, you can require the deletion or restriction of the processing of your data at any time. You can rescind the consent to the processing of personal data granted to us at any time. This also applies to the rescission of informed consents, which have been granted to us prior to the entry into force of the EU General Data Protection Regulation, that is, prior to 25 May 2018. Please note that the rescission is only effective for the future. Processing which has been undertaken prior to the rescission is not affected by this.

7. Is there an obligation to provide data?

Within the course of our business relationship, you must provide those personal data, which are required for the establishment and conduct of a business relationship and the fulfilment of the associated contractual obligations or for the collection of which we are legally obligated. These include your surname, given name, address, contact and the account data of the company / laboratory (telephone number, e-mail address and similar data).

8. Is there an automatic decision-making process (including profiling)?

In principle, we do not utilise a fully automated decision-making process under Art. 22 of the General Data Protection Regulation in order to substantiate and conduct the business relationship. We do not utilise profiling.

9. Information on your right of objection under Art. 21 of the General Data Protection Regulation

  • a.    Case-by-case right to objection

    You have the right to lodge an objection at any time to the processing of personal data concerning you, which is undertaken on the grounds of Art. 6, s. 1f
    of the General Data Protection Regulation (data processing on the basis of weighing legitimate interests), on grounds arising from your particular situation. Should you lodge an objection, we will no longer process your personal data, unless we are able to demonstrate compelling grounds worthy of protection for the processing which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal entitlements.