Privacy Policy

1.   Personal data that we collect and process

2.   Job Application Procedure

3.   Purpose and legal basis for the processing of your personal data

4.   Storage duration

5.   Your rights

6.   Integration of third-party services

7.   Cookies

8.   Google Analytics

9.   Google Tag Manager

10. Google Ads 

11. Use of YouTube

12. General information on presence in social networks

13. Modification of the data protection declaration

14. Modification of the data protection declaration

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The aim of this privacy policy is to inform you as a user of our website about the type, scope and purpose of the processing of personal data and the rights that you have as you data subject under the General Data Protection Regulation (“GDPR”) that governs data protection in the European Union and the European Economic Area. We will only collect and process your data for the purposes stated in this privacy policy. Any use beyond the stated purpose requires your explicit consent, unless a use is permitted by law. The same applies to the transfer of your personal data to third parties (distributors).


Responsible Party

This website and the services offered are operated by:

Kappa Bioscience Europe GmbH
Friesenweg 22,
22763 Hamburg

represented by the managing director Jörg Büttinghaus  


Contact Us

Phone: +49 40 6094087 0
Email: info@kappabio[dot]com
which is the responsible party (the “controller”) for the collection and processing of personal data.
This website is hosted by an external service provider (host): All-Inkl.com.

1.    Personal data that we collect and process

Within the scope of our website we collect and process certain personal data. In summary, we collect and process the following data from you via our website:

Data that you provide us when you contact us or fill out our online contact form:

•    Name
•    Company name and Department within the company
•    Email address
•    Country
•    Content of the message

More specific:
You can contact us via our contact form.  In this case, we will store the personal data you provide in order to process your request and to contact you to process your request. As far as we request information via our contact form, we have marked the required fields for a contact accordingly (asterisk). The voluntary information serves us to make your inquiry more concrete and to improve the handling of your request. The requested data will be transmitted to us by you on a purely voluntary basis.
Depending on the nature of the request, the legal basis for this processing is Art. 6(1)(b) GDPR for inquiries that you make yourself within the framework of a pre-contractual contact or Art. 6(1)(f) GDPR, if your inquiry is of a different nature. The legitimate interest follows from the purposes mentioned in section 3 a.). Under certain circumstances you may give us your consent in which case the processing is based on Art. 6(1)(a) GDPR.

Data that we may collect and process when visiting our website:
In the case of purely informational use of the website, i.e. if you do not register or otherwise provide information, we only collect the personal data that your browser transfers to our server. We collect the following data that is technically necessary for us to display our website to you and to ensure the website’s stability and security (legal basis is Art. 6 para. 1, first sentence, lit. f) GDPR):

•    Your browser type and browser version
•    The operating system that you use
•    Referrer URL
•    Host name of the accessing computer
•    Time of the server request
•    Your dynamic IP address (anonymized)

In addition to the above mentioned data, cookies are stored on your computer when you use our website. For more information, see the section "Cookies" in this Privacy Policy.  

 2. Job Application Procedure

On our website we publish job offers, for which you can apply by email. If you decide to apply for an open job, we will process the personal data you provide us exclusively for the purpose of carrying out the job application process.
In case of a cancellation, we will delete your data as soon as a retention period of 180 days has expired. The period begins with the dispatch of our or yours cancellation notice. If you have expressly consented to the further use of your data for a later address regarding jobs of interest to you, we will continue to store your data according to your consent. We do not pass on your personal data to third parties outside the specific application process without your express consent or without legal basis.

In order to evaluate a job application, we do not require any information on the so-called "special categories of personal data" during the application process. These are data showing racial and ethnic origin (including your photo), political opinions, religious or philosophical beliefs or Union membership, genetic data, biometric data for the unique identification of a natural person, health data or data relating to the sex life or sexual orientation of a natural person. We strongly recommend that you do not provide any information about the above data. If the data you provide contains such information, we can only process your application if you give us explicit consent to store these special categories of personal data. We would have to obtain this consent separately from you, this would lead to a delay in the application process.

Please note that applications that you send to us by e-mail will be transferred without encryption. In this respect, there is a risk that unauthorized persons may intercept your message and use this data.  

3. Purpose and legal basis for the processing of your personal data

a.    We process your personal data for the following purposes:

a) for being able to deal with your requests;
b) for the technical realization of our website and for providing you with our information on this website (e.g. IP address, cookies, browser information);
c) for receiving and processing your job applications as response to our job offers.

b.    The legal basis for the processing of your personal data is:

We process personal data that is necessary for the performance of our services and, if applicable, your job application (Art. 6(1)(b) GDPR). If we obtain your consent for the processing of your personal data, Art. 6 (1)(a) GDPR is the legal basis for data processing. Data processing is also permitted if we process your data in our legitimate interest and your interests, fundamental rights and fundamental freedoms with regard to the processing of your personal data do not outweigh our interest (Art. 8 (1)(f) GDPR). As far as we use external service providers in the context of the processing of personal data on our behalf, the processing takes place on the legal basis of the Art. 28 GDPR.

4. Storage duration

Unless a more specific storage period is specified in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply, but we will not use your data for other purposes during this time.

5. Your rights

You have the right to receive information about the source, recipients, and purposes of your stored personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. You may also have a right to request data portability, i.e. demand that we hand over any data we automatically process to you or a third party you name. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising authority.

In addition, in the event that data are processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to at any time object to the processing of your personal data based on your specific grounds.
If we process your personal data for direct advertising, you have the right to object to the processing of your relevant personal data for direct marketing purposes.

6.    Integration of third-party services

Our website uses content, services and services of other providers. These are for example services for statistical evaluation for the use and visit of our website, or for the integration of videos from video platforms, such as YouTube. For this data to be displayed in the user's browser, the transfer of the user's IP address to the third party is necessary.  
Even if we endeavor to use only third-party providers which process the IP address in order to provide content or even work with anonymized IP addresses, we have no influence on whether the IP address may be stored. Information about the third party providers is given below

7. Cookies

Our website and pages use what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently stored on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain stored on your device until you actively delete them, or they are automatically removed by your web browser.

In some cases, it is possible that third-party cookies are stored on your device once you enter our Site (third-party cookies). These cookies enable you or us to take advantage of certain services offered by the third party.
Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of the cookies (e.g., the display of videos). The purpose of other cookies may be the analysis of user patterns or the display of promotional messages.

Cookies, which are required for the performance of electronic communication transactions (required cookies) or for the provision of certain functions you want to use or those that are necessary for the optimization of the website (e.g., cookies that provide measurable insights into the web audience), are stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. As operator of the website, we have a legitimate interest in the storage of cookies to ensure the technically error free and optimized provision of the services. If your consent to the storage of the cookies has been requested, the respective cookies are stored exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR); this consent may be revoked at any time.

We will ask you for the kind of cookies that you like to accept at the beginning of your first visit at our website and later from time to time.  You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of the website may be limited.
We work with third-party services to help us make the website and website more interesting for you. Therefore, when you visit the website, cookies from these partner companies (third parties) are also stored on your hard disk. These are cookies that automatically delete after the specified time.    

a) Cookie versions  

Session cookies-
As long as you visit our website, a Session Cookie is created, which usually does not store any characteristics of your person, but rather assigns a session ID, which can be used to assign a user to several sessions. Session cookies are automatically deleted after closing the browser, or expire when their session automatically expires.  

Permanent or persistent cookies-
A permanent or persistent cookie stores a file about your information and settings to make them available the next time you visit our website. This results in faster and more convenient access, which you can influence. On the one hand, the settings of your browser can be selected so that these cookies are not permitted, and on the other hand, these cookies are deleted when you delete your browser data, either by default or manually.

b) Cookie overview-
Notwithstanding that we will ask you for the kind of cookies that you like to accept at the beginning of your first visit at our website and later from time to time, if you do not wish to use browser cookies, you can set your browser to not accept the storage of cookies. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can choose the setting in your browser "block cookies from third parties". We do not accept any responsibility for the use of third-party cookies.   

8.    Google Analytics

Our website uses the web analytics service Google (Universal) Analytics, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g. cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

This analysis tool is used on the basis of Art. 1(1)(f) GDPR. We have a legitimate interest in the analysis of user patterns to optimize the services offered online and our advertising activities. If you have consented to the use of cookies that Google Analytics uses the processing is based on Art. 6(1)(a) GDPR; you may revoke your consent at any time.

a) Important data evaluated by Google Analytics

These are the most often data evaluated by Google Analytics:

  • Heatmaps: Google creates so-called Heatmaps an. These Heatmaps make it possible to see the exact areas you click on, so we can get information on what routes you make on our website.
  • Session duration: Google calls the time you spend on our website without leaving it session duration. Whenever you are inactive for 20 minutes, the session ends automatically.
  • Bounce rate: If you only look at one page of our website and then leave our website again, it is called a bounce.
  • Account creation: If you create an account or make an order on our website, Google Analytics collects this data.
  • Location: Your approximate location and the country you are in can be defined by the IP address. This process is called IP location determination.
  • Technical information: Information about your browser type, your internet provider and your screen resolution are called technical information.
  • Source: Both, Google Analytics as well as ourselves, are interested what website or what advertisement led you to our site. Further possibly stored data includes contact data, potential reviews, playing media (e.g. when you play a video on our site), sharing of contents via social media or adding our site to your favorites. This list is not exhaustive and only serves as general guidance on Google Analytics’ data retention.

b)    Cookies used by Google Analytics

  • Name: _ga

Value:2.1326744211.152111742381-5
Purpose: By default, analytics.js uses the cookie _ga, to save the user ID. It generally serves the purpose of differentiating between website visitors.
Expiration date: After 2 years

  • Name: _gid

Value:2.1687193234.152111742381-1
Purpose: This cookie also serves the purpose of differentiating between website users
Expiration date: After 24 hours

  • Name: _gat_gtag_UA_ 1

Value: It is used for decreasing the demand rate. If Google Analytics is provided via Google Tag Manager, this cookie gets the name _dc_gtm_ .
Expiration date: After 1 minute

  • Name: AMP_TOKEN

Value: No information
Purpose: This cookie has a token which is used to retrieve the user ID by the AMP Client ID Service. Other possible values suggest a logoff, a request or an error.
Expiration date: After 30 seconds up to one year

  • Name: __utma

Value:1564498958.1564498958.1564498958.1
Purpose: With this cookie your behaviour on the website can be tracked and the site performance can be measured. The cookie is updated every time the information is sent to Google Analytics.
Expiration date: After 2 years

  • Name: __utmt

Value: 1
Purpose: Just like _gat_gtag_UA_ this cookie is used for keeping the requirement rate in check.
Expiration date: Afer 10 minutes

  • Name: __utmb

Value:3.10.1564498958
Purpose: This cookie is used to determine new sessions. It is updated every time new data or information gets sent to Google Analytics.
Expiration date: After 30 minutes

  • Name: __utmc

Value: 167421564
Purpose: This cookie is used to determine new sessions for recurring visitors. It is therefore a session cookie, and only stays saved until you close the browser again.
Expiration date: After closing the browser

  • Name: __utmz

Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/
Purpose: This cookie is used to identify the source of our website’s visitor number. This means, that the cookie saves information on where you came to our website from. This could be another site or an advertisement.
Expiration date: After 6 months

  • Name: __utmv

Value: No information
Purpose: The cookie is used to store custom user data. It gets updated whenever information is sent to Google Analytics.
Expiration date: After 2 years

a- IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated (truncated) by Google within the member states of the European Union and European Economic Area prior to its transfer to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of us, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to us that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

b.    Browser plug-in
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

c.    Contract data processing
We have executed a contract data processing agreement with Google.

d.    Demographic parameters provided by Google Analytics
This website uses the “demographic characteristics” function of Google Analytics, to be able to display to the website visitor compatible ads within the Google advertising network. This allows reports to be created that contain information about the age, gender and interests of the website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data”.

e.    Storage period
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en.

9.     Google Tag Manager

Our website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tool Manager implements tags. The Google Tool Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it remains valid for all tracking tags, insofar as these are implemented with the Google Tag Manager. Domain or cookie-level deactivation will continue for all tracking tags implemented with Google Tag Manager. Google Tag Manager itself does not set any cookies but manages different tracking websites’ tags. In our data protection texts on Google Analytics you can find detailed information on how you can delete or manage your data. You can find Google's privacy policy at: policies.google.com/privacy/partners

10.    Google Ads  

Our website uses Google Ads. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.

Ads is an online advertising program. As part of the online advertising program, we work with conversion tracking. After clicking on a Google-switched ad, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used for the personal identification of users. The cookie allows Google and us to recognize that you clicked on an ad and were redirected to our website. The storage of “conversion cookies” is based on Art. 6(1)(f) GDPR. As a website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

Each Google Ads customer receives a different cookie. Cookies are not traceable through Google Ads customers' websites. Conversion cookies are used to generate conversion statistics for Google Ads customers using conversion tracking. Google Ads customers will learn how many users clicked on their ad and were redirected to pages with conversion tracking tags. Google Ads customers, however, do not receive any information that allows a personal identification of the users. If you do not wish to participate in the tracking, you may object to a usage. The conversion cookie must be deactivated in the user settings of the browser. Thus, no inclusion in the conversion tracking statistics takes place.

For details on Google Ads and Google Conversion Tracking, see Google's Privacy Policy: www.google.de/policies/privacy/.
With a modern web browser, you can monitor, restrict or prevent the setting of cookies at www.google.com/settings/ads/onweb/. Disabling cookies may result in limited functionality of our website.

11.    Use of YouTube

Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

If you visit a page on this website into which a YouTube has been embedded, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.

Furthermore, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If a corresponding consent has been requested, the processing takes place on the basis of Art. 6(1)(a) GDPR; you may revoke your consent at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

12.     General information on presence in social networks

In order to present our company in the best possible way and to communicate with you as a user, customer or prospect and to inform you about our services offered, we use the presence on social networks.  
You can find us on the following platforms or social networks

a.    LinkedIn

This website uses functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Any time you access a page of this website that contains functions of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to this website to your user account. We have to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data and its use by LinkedIn.

The use of the LinkedIn plug-in is based on Art. 6(1)(f) GDPR. We, as operator of the website have a legitimate interest in being as visible as possible on social media. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6(1)(a) GDPR. This declaration of consent may be revoked at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission.

Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en.


b.    Twitter  

We have integrated functions of the social media platform Twitter into this website. These functions are provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. While you use Twitter and the “Re-Tweet” function, websites you visit are linked to your Twitter account and disclosed to other users.

During this process, data are transferred to Twitter as well. We must point out, that we, the providers of the Site and its pages do not know anything about the content of the data transferred and the use of this information by Twitter. For more details, please consult Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.

The use of Twitter plug-ins is based on Art. 6(1)(f) GDPR. We have a legitimate interest in being as visible as possible on social media. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6(1)(a) GDPR. This declaration of consent may be revoked at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

You have the option to reset your data protection settings on Twitter under the account settings at https://twitter.com/account/settings.

13.    Modification of the data protection declaration

We are constantly developing our website to provide you with an ever-improving service. We will keep this Privacy Policy up-to-date and adapt it accordingly if and to the extent necessary.

14.    Data Protection Officer

We have appointed a data protection officer.  
Timo Sokoll
https://www.miles-stones.de/

MILES & STONES Consulting Company GmbH
Tauwerk 1
24119 Kronshagen  

Office: +49 431 3630 46-10
Email: info@kappabio[dot]com     

As Of: October 22 , 2022