Invivoscribe, Inc., 10222 Barnes Canyon Road, Building 1, San Diego, CA 92121 United States (hereinafter referred to as “we“ or “us”) is the operator of the website www.invivoscribe.com (hereinafter referred to as “website”) and controller regarding the personal data of its users in the meaning of the EU General Data Protection Regulation (“GDPR”). The website is also used by our subsidiaries in the United States (US), European Union (EU), and Asia, including LabPMM GmbH, Zeppelinstraße 1, 85399 Hallbergmoos, Germany and Invivoscribe SARL, c/o Ficorec Domiciliation Services 327, Boulevard Michelet 13009 Marseille, France

We are committed to protecting your privacy and your personal data. We collect, process and use personal data in accordance with this privacy policy and the applicable data protection laws, including the GDPR and the German Federal Data Protection Act (“BDSG”).

This privacy policy provides information about which personal data we collect from you and how we collect, process and use your data, including from your usage of the website, when you sign up for our newsletter, or when you place orders or purchase products from our website. We kindly ask you to carefully read the following explanations with regard to each type of interaction with our website.

Personal data in the meaning of this privacy policy are specific information about your personal or material relationships. This includes, but is not limited to, your name, your email address, your postal address and your phone number. If you are a registered customer, we will also collect your sales tax details.

This website is not intended for children and we do not knowingly collect data relating to children.

1.1      Personal Data may include information regarding your usage of the website. In this context we collect the following personal data from you:

Your IP address,
Date and time of your request,
Time difference to Greenwich Mean Time,
Content of your request,
Status of your request/HTTP-status code,
Extent of the transferred data,
Website from which your request was redirected,
Browser, operating system and user interface, language and version of your browser,
Location from which you retrieve data from the site,
other communication data and source, which you retrieve.

This data will generally be collected through log files and cookies. Please see below for further information regarding cookies.

1.2      We use the collected data to protect our legitimate interest (Art. 6 para. 1 lit. f GDPR), which is the legal basis of our processing:

to present our website to you on your computer,
to ensure the functionality of the website,
to optimize our website for your use,
to ensure the security of our information technology system.

The data will be deleted as soon as they will not be required for the fulfillment of the purpose the data has originally been collected for. Data that is collected in order to view the Site will be deleted after the session has ended.

2.1 We also collect information about your usage of our website by using browser cookies. These are small text files, that will be stored on your device and that will save settings and data in order to exchange them with our system via your browser. Normally, cookies contain the name of the website which sent the cookie data and information about the date when the cookie was set, the cookie lifetime and an alphanumeric id (cookie id). Cookies facilitate the recognition of your device and to make your preferred settings available, instantly. The cookie will be set in as soon as you are visiting our website.

On our website we use the following cookies:

2.2 The cookies we use store data about your visit of our website as explained above. These data cannot be associated with your personal data, but they allow us to distinguish you from other users of our website by using a unique identification number for every cookie (cookie id). We do not associate the cookie id with your name, your IP address or similar data that would enable us to identify you.

2.3 If you want to prevent the use of cookies, you can change the settings of your browser so that it will prevent the acceptance of cookies. Please keep in mind that you may possibly not be able to use all services on our website if you deactivate cookies in your browser. If you want to accept our cookies, but not the cookies of our service providers, please indicate “block cookies from third parties” in your browser settings.

2.4 We use cookies in order to protect our legitimate interest to improve our website and to deliver a service to you that is even better and more tailored to your needs. Cookies facilitate to recognize you when you return to our website and therefore to:

• store information about your preferred activities on the website so that we can align the website to your interests;

• to store your display preferences;

• to speed up the processing of inquiries.

The legal basis of such processing is legitimate interest, Art. 6 para. 1 lit. f GDPR.

2.5 Cookies are stored until you delete them or the lifetime of the respective cookies ends. In this case, the cookie will be deleted from your computer automatically.

The website offers a contact form, which allows you to make enquiries, ask questions, give recommendations and make suggestions to us and to require promotion and information material. The information you enter will be sent to us encrypted when you use the contact form. The following information is mandatory:

name
telephone number
email
institution
position
inquiry type
inquiry text
area of interest

We will use this information only to process your request and answer your questions, as well as to send you information and promotion material, if you have requested it. We will not process the data for other purposes. We save your details until we have answered your request.

Processing the data serves our legitimate interest in providing you with a convenient way to contact us or as pre-contractual action if you have requested it. The legal basis of the processing is legitimate interest, Art. 6 para. 1 lit. f GDPR or performance of a contract, Art. 6 para. 1 lit. b GDPR.

4.1 You may place orders and purchase products through the website. In order to enter into a contract with you and to perform this contract, we collect the following information from you:

company/institution
name
telephone number
fax
email
address
payment method
customer type
username
password.

The processing of your personal data is based on performance of a contract, Art. 6 para. 1 lit. b GDPR. We may also use such data in order to carry out fraud checks in order to pursue our legitimate interests to protect you and ourselves from unauthorized usage of your personal information, i.e. your payment details, Art. 6 para. 1 lit. f GDPR.

4.2 Depending on which payment method you choose, we will give your payment details to a payment service provider we engaged to handle your payments or to the payment service of your choice. The transmission is based on performance of a contract, Art. 6 para. 1 lit. b GDPR. Some payment services will collect this information independently, if you registered with such payment service. In this case, you will be asked to log into your account of the payment service and the processing of your payment details are subject to the privacy policy of such payment service.

4.3 You may also create a customer account, which allows you to view prior purchases, to reorder the products you ordered and to store your personal details and payment details for future orders. When you create a customer account we will store the information you entered into the online form. Storing your personal information is based on performance of a contract, Art. 6 para. 1 lit. b GDPR.

5.1 We may use your email address for direct marketing communication, but only in case you have consented in receiving newsletters or promotion information by registering on the website. For this purpose we use the double opt-in consent, i.e. after you have given your consent to receiving our newsletter you will receive an email with a confirmation link. You will receive our newsletter only after you have clicked on the confirmation link.

5.2 Besides your email address, we also collect the following data from you:

name,
IP address,
time and date of the registration.

5.3 We store and use your email address in order to send you email messages with marketing content on a regular basis. Your email address will not be disclosed to any third party.

5.4 The collection of your data is intended to prevent misuse of our services and the email address which has been entered.

5.5 Your personal data will be stored until you unsubscribe to the newsletter or you withdraw your consent.

5.6 The legal basis for the processing is Art. 6 para. 1 lit. a GDPR.

6.1 This website also uses Google Analytics, a web analytics service provided by Google, Inc., (“Google”). Google Analytics uses cookies to help us analyse your use of the website. The information generated by the cookie about your use of the website may be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on the Site, Google will shorten your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases the un-shortened IP address will be transmitted to a Google server in the USA and shortened there. On behalf of us, Google will use this information to evaluate your use of the website, to compile reports on the website activity and to provide us with other services relating to the website usage and internet usage.

6.2 The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

6.3 You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all functions of the website. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the online portal (including your IP address) as well as the processing of this data by Google, if you download and install a browser plug-in, which is available at http://tools.google.com/dlpage/gaoptout?hl=en.

6.4 This website uses Google Analytics with the extension “_anonymizeIp ()”. As a result, IP addresses are processed shortened and linking the data to a concrete individual is therefore excluded. Insofar as the data collected can be used for a personal reference, it will be immediately excluded and the personal data will be deleted immediately.

6.5 We collect this data in order to protect our legitimate interests, to analyze the use of the website, to improve it and to make it more interesting for you. The legal basis for processing is legitimate interests, Art. 6 para. 1 lit. f GDPR.

7.1 We embed videos in the website which are hosted on www.youtube.com and which may be played directly on the website. All videos are embedded by using the privacy-enhanced mode. This means that no personal data will be transmitted to YouTube before you click on play. Only when you play the videos, will data be transmitted to YouTube. We have no influence on this data transfer.

7.2 YouTube receives the information that you visited the relevant page of the Site and where the video is embedded, when you click on play. In addition, the data specified in section 1.1 above will be transmitted. Further, YouTube uses cookies in order to collect information about the visitor of the website and transfers these data to YouTube, regardless if you are registered with YouTube or if you are logged into your personal account. If you are logged into your personal account, YouTube will be able to associate your visit to the Site with your personal account. YouTube saves your personal data as user profile and uses such information for marketing, research and/or optimizing its website. This information is particularly used to provide advertising that matches your interests, regardless, whether you are registered with YouTube. You are entitled to object to such creation of profiles. In order to execute such right, you are required to file an enquiry with YouTube.

7.3 Further information with regard to collection and use of personal data by YouTube and your rights related to such use may be found in the YouTube privacy policy: www.youtube.com/privacy.

7.4 We use videos hosted on YouTube in order to pursue our legitimate interests to present you contents in an appealing and optimized form. The basis for the processing is Art. 6 para 1 lit. f GDPR.

8.1 We embed videos in the website which are hosted on www.vimeo.com and which may be played directly on the website. All videos are embedded by using the privacy-enhanced mode. This means that no personal data will be transmitted to Vimeo before you click on play. Only when you play the videos, will data be transmitted to Vimeo. We have no influence on this data transfer.

8.2 Vimeo receives the information that you visited the relevant page of the website and where the video is embedded, when you click on play. In addition, the data specified in section 1.1 above will be transmitted. Further, Vimeo uses cookies in order to collect information about the visitor of the website and transfers these data to Vimeo, regardless if you are registered with Vimeo or if you are logged in. If you are logged into your personal account, Vimeo will be able to associate your visit to the website with your personal account. Vimeo saves your personal data as user profile and uses such information for marketing, research and/or optimizing its website. This information is particularly used to provide advertising that matches your interests, regardless, whether you are registered with Vimeo. You are entitled to object to such creation of profiles. In order to execute such right, you are required to file an enquiry with Vimeo.

8.3 Further information with regard to collection and use of personal data by Vimeo and your rights related to such use may be found in the Vimeo privacy policy: www.vimeo.com/privacy.

8.4 We use videos hosted on Vimeo in order to pursue our legitimate interests to present you contents in an appealing and optimized form. The basis for the processing is Art. 6 para 1 lit. f GDPR.

All information that you supply will be stored on servers within Invivoscribe’s data center(s) in the United States (US). We may process, store, and transfer the personal data we collect in accordance with laws that may differ or may not be as comprehensive as privacy laws in your own country. By submitting your personal data or engaging with our website, you consent to this transfer, storing, or processing.

In order to protect our website and our systems against loss, destruction, and access or distribution by unauthorized persons we use technical and organizational security measures. The technical and organizational measures will be constantly updated to the newest technical standards. All your personal data will be transferred encrypted. For encryption we use the SSL (Secure Socket Layer) system.

Unless you have consented to or we are obligated to or entitled to by law and/or by a binding decision of a court or of the authorities, we will not transfer your personal data to third parties, except as described herein.

We will store your data as long as we are entitled to. If you executed your right to objection or if the processing of the data loses its legal basis for other reasons (i.e. because the purpose for which we collected the data has been achieved), we will delete the data without delay, unless we are obligated to keep the data according to statutory storage obligations.

The website may contain links to websites and offers from other providers. After clicking on a link, we have no influence on the processing of any personal data (e.g. the IP address or the URL on which the link is located) which is transferred to third parties by clicking on the link. We cannot assume any responsibility for the processing of such personal data by third parties.

A link to an outside site, company or organization in no way constitutes an endorsement or approval of that site, information, service or organization, either outright or implied, and Invivoscribe is not responsible for content on outside sites.

We reserve the right to update this privacy policy. In the case of changes, we will provide you with an appropriate period of notice and, if necessary, request your consent. You can find the current version of this privacy policy on our website. Please check our website regularly regarding an updated privacy policy.

We will provide you with information on whether and, if so, what personal data are stored on you, where we collected the data, the recipients or the categories of recipients of the data to which these data has been transferred to and the purpose of the collection. You can also have your personal data rectified, deleted or restricted by us at any time.

If the processing is based on our legitimate interests, you are entitled to object the processing of data at any time. In this case, we will only execute the processing if we demonstrate compelling legitimate grounds which override your interest regarding the exclusion of your data from the processing or the processing takes place for the establishment, exercise or defense of legal claims.
If the processing of your data is based on your consent, you are entitled to revoke this consent at any time. In this case, we will cease processing your data, unless, we are entitled to further processing your data by law. Your revocation will not affect the lawfulness of the processing of data prior to your revocation.
If you supplied personal information, we will, upon request, provide you with them in a machine readable form in order to use the data with other service providers.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We may also collect, use, and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

We do not collect any Special Categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offenses.

To execute your rights as described above, please contact us via email at [email protected] or mail to:

Invivoscribe, Inc.
10222 Barnes Canyon Road, Building 1
San Diego, CA 92121-2711 USA

Please do not hesitate to contact us if you have any questions, comments or suggestions, or inquiries concerning the collection, processing and use of personal data by us.

With regard to France you can also contact:

Invivoscribe SARL
c/o Ficorec Domiciliation Services
327, Boulevard Michelet
13009 Marseille,
France

With regard to Germany you can also contact:

LabPMM GmbH
Zeppelinstraße 1
85399 Hallbergmoos, Germany

Monika Kefer (Data Security Officer)
Blumenstr. 9A
83569 Vogtareuth, Germany

If you believe that the processing of your data infringes data protection laws, you are entitled to lodge a complaint with the competent supervisory authority. With regard to Germany you can contact the Data Protection Authority of Bavaria under the following address:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach, Germany