Privacy and Cookie Policy

We, pluriSelect Life Science UG (haftungsbeschränkt) & Co. KG (hereinafter "pluriSelect" or "we"), appreciate your interest in our company and our website.
We take the protection of your personal data very seriously. We assure you that your information will be treated in accordance with the legal requirements of the Data Protection Regulation (GDPR) and other data protection regulations. Under no circumstances will there be a sale or other unauthorized disclosure of the collected data to third parties.

In the following, you will find information in our privacy policy about what types of personal data are collected for what purpose, how they are used and how we protect them.

1. Person responsible and contact

The responsible party within the meaning of the GDPR and other national data protection laws and other data protection provisions is:

pluriSelect Life Science UG & Co. KG
Deutscher Platz 5c
04103 Leipzig
Germany

For information, correction, blocking or deletion of personal data or questions regarding the use, collection or processing of your personal data, please contact us by email or telephone:

Phone: +49 341 3338580
Email: dataprotection@pluriselect.com

2. General information on data processing

The provision of personal data is generally not necessary for the use of our website.
When you visit our website, pluriSelect collects and processes information only to the extent necessary to provide a functional website and our content and services, and to help us optimize our website and ensure the security of our information technology systems.

Personal data is deleted or processing is restricted as soon as the data is no longer required in relation to the purpose for which it was collected. The only exception to this is if

• you have given us your consent for a use of your personal data (Art. 6 (1) lit. a GDPR)
• we need this data to carry out pre-contractual measures or to fulfill a contract with you or your company (Art. 6 (1) lit. b GDPR)
• we are required by law to store for a longer period (Art. 6 (1) lit. c GDPR)
• the processing is necessary for the protection of our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights or freedoms requiring the protection of personal data override (Art. 6 (1) lit. f GDPR)

We will not sell, distribute or rent your personal data to third parties unless we have your permission or are required to do so by law.

If you give us your consent, we may use your personal information to send you promotional information that we think may be of interest to you through third parties.

3. Passively transmitted data

3.1 Provision of the website and creation of log files

Every access to our homepage and every retrieval of a file stored on the homepage is logged in server log files. The collection and storage of data in log files is absolutely necessary for the operation of the website.
The following data is processed when you visit our website:

• used IP address
• browser used (type, version, language)
• requesting domain
• date and time of access to our website
• Website from which the user arrived at our website
• Websites that the user accesses through our website

The legal basis for the temporary storage of the above data is Art. 6 (1) lit. f GDPR.

The temporary storage of the IP address and log files by the system serves the sole purpose of being able to provide you with the website on your computer and thereby ensure the function and security. The data stored during the provision for this purpose will be deleted as soon as this purpose ceases to apply, i.e. the respective session has ended. In the case of storage of personal data in log files, deletion takes place after fourteen days at the latest.
This data is not merged with other personal data of the user.

3.2 Cookies

This website uses cookies. Cookies are small text files that your Internet browser places and stores on your computer. They are primarily used to make our website more user-friendly by helping us analyze traffic to our website and provide you with a pleasant user experience during your visit by personalizing the content.

A cookie does not give us access to your personal computer information in any way and no personal data is collected.

Some of the cookies we use are so-called session cookies and are deleted after you close your browser. Other cookies have the purpose of recognizing your browser and thus, for example, your language settings or the saved shopping cart when you visit again. These so-called persistent cookies remain on your computer for a certain period of time before they are automatically deleted after a specified duration, depending on the cookie.

List of cookies we collect

The following table lists the cookies we collect and what information they store

.

Cookie Name	Cookie description	Cookie duration
ADD_TO_CART	Captures the product SKU, name, price and quantity removed from the cart	7 days
FORM_KEY	Stores randomly generated keys used to prevent bogus requests	12 days
GUEST-VIEW	Allows guests to view and edit their orders	Session
LOGIN_REDIRECT	Retains the target page that was loaded before the customer was prompted to log in.	Session
MAGE-BANNERS-CACHE-STORAGE	Local storage for banners functionality.	Session
MAGE-CACHE-SESSID	Allows content to be cached in the browser for faster page loading	7 days
MAGE CACHE STORAGE	Allows content to be cached in the browser to make pages load faster	7 days
MAGE-CACHE-STORAGE-SECTION-INVALIDATION	Forces local storage of specific content sections to be invalidated	7 days
MAGE-MESSAGES	Tracks error messages and other notifications displayed to the user. The message is deleted from the cookie after it is displayed to the buyer.	7 days
MAGE-TRANSLATION-FILE-VERSION	Facilitates the translation of content into other languages.	7 days
MAGE-TRANSLATION-STORAGE	Facilitates the translation of content into other languages.	7 days
PHPSESSID	Your session ID on the server.	12 days
PERSISTENT_SHOPPING_CART	A link to information about your shopping cart and view history, if you asked for it.	1 year
PRIVATE_CONTENT_VERSION	Allows content to be cached in the browser to make pages load faster.	10 years
PRODUCT_DATA_STORAGE	Stores the configuration for product data related to recently viewed / compared products.	7 days
RECENTLY_COMPARED_PRODUCT	Stores the product IDs of the most recently compared products.	7 days
RECENTLY_COMPARED_PRODUCT_PREVIOUS	Stores product IDs of previously compared products for easy navigation	7 days
RECENTLY_VIEWED_PRODUCT	Stores the product IDs of the most recently viewed products for easy navigation.	7 days
RECENTLY_VIEWED_PRODUCT_PREVIOUS	Stores product IDs of recently previously viewed products for easy navigation.	7 days
SECTION-DATA-IDS	Allows content to be cached in the browser to make pages load faster	Session
STF	Information about products you have emailed to friends	Session
STORE	The store view or language you have chosen.	1 year
USER_ALLOWED_SAVE_COOKIE	Indicates whether a customer has agreed to cookies	1 month
X-MAGENTO-VARY	Allows content to be cached on the server so pages load faster	12 days

We may store cookies on your device if they are essential for the operation of the website.
For all other types of cookies, you have the right to choose which cookies you want to allow and can adjust your preferences at any time in your browser's cookie settings. Since the cookies are stored only on your terminal device, you have full control and can also delete cookies already stored at any time or restrict their use.

Please note that if you deactivate cookies, you may no longer be able to fully use all the functions of our websites.

Instructions for the cookie management of your respective browser can be found here:

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

If personal data is collected, the processing is carried out either for the purpose of implementing a contract concluded with you pursuant to Art. 6 (1) lit. b GDPR or to protect our legitimate interests in the best possible functionality and user-friendliness of our website pursuant to Art. 6 (1) lit. f GDPR.

3.3 Tools

We use analytics and tracking tools to understand how visitors find and use our website and to measure the success of our website in order to improve the quality of our web presence.

Google Analytics

This online offering uses Google Analytics, a web analytics tool provided by Google Inc. ("Google"). Google Analytics collects and stores data in pseudonymized form to create user profiles. These user profiles are used to analyze user behavior and are used to improve our offer in order to meet the requirements of our customers. Pseudonymized user profiles are not associated with the person behind the pseudonym, unless this person expressly consents to this circumstance.

Google Analytics uses cookies that are stored on your computer to facilitate recognition when you visit our online offering again. The information generated by these cookies about your website visit is usually transferred to a Google server in the USA and stored there. By activating IP anonymization in connection with this offer, the IP address of users from the EU and other contracting states of the EEA (European Economic Area) is shortened before transmission. Only in very few exceptional cases will your IP be transferred to a Google server in the USA. Google adheres to the data provisions of the "US Safe Harbor" agreement and is registered with the "Safe Harbor" program of the US Department of Commerce.

On behalf of the provider of this online service, Google will use this information for the purpose of evaluating your use of the online service, compiling reports on online activities, and providing other services relating to internet usage and customer behavior. The IP address transmitted by your browser is not associated with any other data by Google. If required by law or if a third party processes this data on Google's behalf, Google may share this information with third parties.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our online services. In addition, you can prevent the collection of information generated by cookies (including your IP address) for the purpose of using the online offer, as well as the further processing of this data by Google, if you download and install the browser plugin available here: (https://tools.google.com).

You can prevent Google Analytics from retrieving your data by clicking on the following button. An opt-out cookie will be set to prevent future data collection when visiting this online service:

Deactivate Google Analytics

For more information on the Terms of Use, please click here: http://www.google.com/analytics/terms/ and http://www.google.com/intl/de/analytics/privacyoverview.

We would like to point out that the website Google Analytics has been extended by the code "gat._anonymizeIp();" to enable anonymous collection of IP address data (so-called IP masking) using Google Analytics.

The legal basis for the use of tracking software is our legitimate interest in optimizing our services (Art. 6 (1) lit. f GDPR).

The legal basis for the use of tracking software is our legitimate interest in optimizing our services.

Google Adwords

This website also uses Google Conversion Tracking, an analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). In doing so, Google Adwords places a cookie on your computer ("conversion cookie") if you have reached the website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If you visit a particular website of ours and the cookie has not yet expired, we and Google will recognize that someone has clicked on the ad and been redirected to our website. Each AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites. The information obtained using conversion cookies is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers are informed about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. You will not receive any information that could be used to personally identify a user. If you do not wish to participate in tracking procedures, you can also refuse the necessary cookie settings - via the browser settings that generally disable the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "googleadservices.com" or by clicking on the following link and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. You will then be excluded from the conversion tracking statistics. If you do not wish to receive interest-based advertising, you can also disable Google's use of cookies for this purpose via the website https://www.google.com/ads/preferences/html/blocked-cookies.html or by clicking on the following link and downloading and installing the plug-in provided there. https://www.google.com/settings/ads/plugin For more information and the Google privacy policy, please visit: http://www.google.com/policies/privacy/.

3.4 Links to other websites

Our website may contain links to other websites. Please note that our privacy policy does not extend to websites of other providers. We have no influence on whether and how other providers ensure the protection of your personal data. We therefore recommend that you read the privacy notices on the other websites you visit.

4. Actively submitted personal data

When you submit an inquiry via the web form or LiveChat, when you actively send us an email, when you subscribe to the newsletter or otherwise submit data to pluriSelect Life Science, we collect information about you and your company or another entity you represent (e.g. your name and that of your organization, address, email address, telephone number, fax number).

We use this data within the scope of Art. 6 (1) lit. b GDPR to process contracts concluded with you or to send you requested information and submit service offers;
according to Art. 6 (1) lit. f GDPR within the framework of our legitimate interest in your individual support and internal evaluation to improve our offered products;
or with your consent based on Art. 6 (1) lit. a GDPR to send the newsletter.

A use of this data for advertising purposes will not be made without your consent.

Please note that data transmission on the Internet (e.g. during communication by e-mail) can generally have security gaps. A full protection against access by third parties is not feasible.

4.1 E-mail contact

If you send us an e-mail, there are automatically recorded:

• Your email address
• The date and time of sending
• the IP address of the Internet access used

In terms of other data, you decide which you send us. Please keep in mind that, depending on the nature of your request, certain information (such as name, address or telephone number) may be required to process your request.

The legal basis for the processing of the data transmitted by you by using the email dispatch is Art. 6 (1) lit. f GDPR. Our legitimate interest in processing lies here in the purposes stated under point 5. If the e-mail contact serves the conclusion of a contract, Art. 6 (1) lit. b GDPR is additionally the legal basis for the processing.

4.2 Contact form

Our website allows you to send us a message via a contact form.
Mandatory data here are:

• Your name
• Email address
• Message text

The following can be deposited as voluntary information:

• Your telephone number

All data will be sent directly to us by email and will not be stored in a database. This further processed data is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of the data transmitted by you via our contact form is Art. 6 (1) lit. a GDPR.

4.3 Purchases through the webshop

We offer a webshop on our website through which you can purchase our products. In order to process your order, we need the following mandatory information, which is marked accordingly in the input mask:

• Full name
• Full address
• Email address
• Phone number

To protect our systems against misuse, the IP address and the date and time of the order are also recorded.

The collection and processing of personal data is necessary for the fulfillment of the purchase contract or for the implementation of pre-contractual measures and for the delivery of the goods and is based on the legal basis of Art. 6 para. lit. b GDPR.
Furthermore, the collected data is required for the processing of warranty claims and due to tax requirements. Warranty claims can be asserted up to two years after purchase. The tax regulations require the storage of invoices for ten years. The need to comply with legal obligations is also the legal basis for the processing of personal data pursuant to Art. 6 (1) lit. b GDPR.

When purchases are made via our webshop, we may pass on a user's personal data to third parties.
This happens in the following cases:

• For the delivery of parcels, packages or other shipments, we pass on the name and address of the user to the postal carrier selected by us. The disclosure is necessary for the performance of the contract with the customer and the legal basis for the disclosure is Art. 6 para.1 lit. b GDPR.
• For the collection of payments we use third party payment providers. The user passes on his payment data to the provider, who uses it to collect the payment due. The legal basis for the transfer is the need arising from the contract with the customer (Art. 6 para 1 lit. b GDPR).
• When paying with Paypal, your payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. You can read their privacy policy here

4.4 Customer Account

You can create a user account for your purchases through our website.
For this purpose, we collect the following data via the input mask:

• Email address
• Full name

The shipping information entered during the course of an order will also be stored to facilitate future purchases.
The legal basis for the storage of data is your consent and voluntary creation of a customer account in accordance with Art. 6 (1) lit. a GDPR.
When using the account for purchases in our webshop, the legal basis is based on the necessity to fulfill a contract or to take action upon request before the conclusion of the contract (Art. 6 (1) lit. b GDPR).

You can change or delete the personal data in your customer account at any time.
If you delete your user account, the stored data will also be deleted.

4.5 Live Chat

We offer a live chat (operated by Provide Support, LLC) to quickly address your concern. When clicking on the Live Chat Support button, a secure connection is established between a pluriSelect support representative and the user. The staff member can accept the request and send messages to the user.
Provide Support, LLC is committed to protecting the privacy of all our customers. Chat conversation transcripts are not stored on Provide Support chat servers. They remain on the chat server for the duration of the chat session and are then destroyed.
Captured:

• Your entered name (freely selectable)
• Email address (freely selectable)
• Text message
• used IP address
• Internet browser used
• country from which the request is made

The processed data is used to prevent misuse of the live chat function and to ensure the security of our information technology systems, as well as to enable individual processing of your request. By pressing the "Start Chat" button, you consent to the processing of the data you have provided for the purpose of chat support.

The legal basis for processing the data you provide via our live chat is Art. 6 (1) lit. a GDPR.

4.6 Sample request

Through our website, users have the option to request samples of one of our products via the special "Sample Request" page or the corresponding button on the respective product page. In order to fulfill your sample request, we inquire:

• Email address
• Name
• Shipping address
• Phone number
• Optional message text

All data will be sent directly to us via email and will not be stored elsewhere.

By filling out the input mask, you consent to the processing of the data you provide for the purpose of sending you a sample. The legal basis for the processing of the data provided by you via the sample request form is Art. 6 (1) lit. a GDPR.

4.7 Newsletter

Our website can be used to subscribe to our free newsletter. This requires a double opt-in by the user. For registration, only your e-mail address is required as input. You will then receive an email with a confirmation link to complete the subscription. The user's personal data will be stored as long as the subscription to the newsletter is active. You can revoke your consent and cancel the subscription at any time by clicking on the corresponding link contained in each newsletter. The personal data collected in connection with the newsletter subscription will hereby be deleted.

The following data is stored for processing and is required for the newsletter dispatch:

• Email address
• Date and time of confirmation
• Subscription status

The legal basis for the processing of personal data after subscription to the newsletter is your consent in accordance with Art. 6 (1) lit. a GDPR.

We send our newsletters via the service provider Mailchimp® (The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA) This provider has contractually agreed to transfer and process all data in accordance with the EU Privacy Shield. You can read the privacy policy of Mailchimp® here: https://mailchimp.com/legal/privacy/.

The newsletters are tracked via the Google Analytics tracking tool (see point 3.3). This allows us to measure the success of our mailing. The information collected in this process is anonymous and will not be traced back to specific individuals. The legal basis for tracking the use of our newsletter is our legitimate interest in such use pursuant to Art. 6 (1) lit. f GDPR.

4.8 Social media plugins

Our website may offer third party social media widgets/tools/buttons. When you use third-party sharing features, including social media widgets/tools/buttons, such use is subject to the third-party provider's privacy policies and terms.
Use of such social media widgets/tools/buttons will result in disclosure of personal information to the provider of the social media widget/tool/button.
We do not actively offer these functionalities. They must be activated by the user in order to be used.
The legal basis for the processing of personal data is your consent (Art. 6 (1) lit. a GDPR).

5. Security

We are committed to ensuring that your information is secure. To protect users' personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

6. Rights of data subjects

If we process personal data from you in connection with your use of our website or in any other context, you are a data subject within the meaning of the GDPR.
As a data subject, you are entitled to the following rights against us as the controller:

Right to information (Art. 15 GDPR)

You can request information from us at any time as to whether personal data relating to you is being processed by us. If such processing exists, you have the right to information about the purpose, nature and origin of the personal data as well as the recipients and storage period. The right to information is subject to the restrictions of § 34 BDSG.

Right to erasure (Art. 17 GDPR)

You can demand that we delete the personal data concerning you without delay. We are obliged to delete this data if the points mentioned in Art. 17 GDPR apply. The right to deletion is subject to the restrictions of § 35 BDSG.

Right to rectification (Art. 16 GDPR)

You have the right to request that we correct and/or complete personal data concerning you. A simple message to us is sufficient and we will make the correction without delay.

Right to restriction of processing (Art. 18 GDPR)

You may request the restriction of the processing of your personal data in accordance with Art. 18 GDPR.

Right to information (Art. 19 GDPR)

If you assert the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom we have disclosed personal data relating to you of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right against us to be informed about these recipients.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance from us, in accordance with Art. 20 GDPR.

Right to object (Art. 21 GDPR)

You have the right at any time to object to processing of your data, which is permissible in itself, on the grounds of a particular personal situation. For an objection, a simple message to us in which you justify your objection is sufficient.

Right to withdraw consent (Art. 7 (3) GDPR)

If you have given your consent to the use of data, you can revoke it at any time. A simple message to us is sufficient for this purpose.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the General Data Protection Regulation.