1. Overview
1.1. Protecting your personal data is veryimportant to us. This Privacy Policy explains the type, scope and purpose of the processing of your personal information on our website to ensure that all processing related to the services offered on our website are transparent and comprehensible for you as a visitor and user (hereinafter referred to as“user”) of our website.
1.2. When processing your personal data, we strictly observe the personal information requirements of the Protection of Personal Information Act (“POPIA”), 2013 guidance provided by the Information Regulator (IR).
1.3. Personal information refers to any information that can be related to you personally and can be used to identify you e.g. IP address, name, address, email data, user behaviour.
1.4. This Privacy Policy is effective from 25.10.2022 . Due to the ongoing development of our website and the services offered on our website or due to changes in legal or regulatory requirements, this Privacy Policy is subject to change. Accordingly, we reserve the right to amend the content of this Privacy Policy at any time. Any changes will be communicated by posting the amended Privacy Policy on our website. Unless otherwise specified, such amendments shall take effect immediately. We, therefore, recommend that you regularly review the Privacy Policy.
1.5. The Responsible Party pursuant to POPIA is DKMS gemeinnützige GmbH, Kressbach 1, 72072Tübingen, Germany.
You can reach our data protection officer at datenschutz@dkms.de or by writing to our postal address with the addendum “data protection officer””.).
2. What personal data do we process?
We record personal data relating to you when you visit our website or use our services offered on the website. Depending on how you use our website, this may comprise the following information:
2.1. Purely informational use: You can visit ourwebsite without providing any personal data. When you use the website for purely informational purposes, in other words if you do not otherwise transmit any information to us, we do not record any personal data, with the exception of the data that your browser automatically transmits to our server in order to allow you to visit our website. If you wish to view our website, we record the following data, which is technically necessary in order for us to display our website to you as well as to ensure stability and security:
• IP-adress,
• Time and date of the inquiry,
• Time zone difference compared to Greenwich Mean Time (GMT),
• Content of the request (specific page),
• Access status/HTTP status code,
• Data volume transmitted in each case,
• Website from which the request comes,
• Browser,
• Operating system and its user interface,
• Language and version of the browser software.
This information relates to the computer system used.
2.2. In addition to using our website for purely informational purposes, we provide you with the option of contacting us by e-mail, which you can use if interested. To do this, you usually need to specify further personal data, which we require in order to provide the respective service. If you contact us by e-mail when visiting our website, we will additionally process and save the data that you have provided (your e-mail address and, possibly, your name) in order to answer your questions. The data of users may be saved in a customer relationship management system (CRM system) or some comparable system.
2.3. Links to websites of third-party providers
At various places on our website there are links to the websites of third-party providers. After clicking on the link provided, you are forwarded to the website of the third-party provider concerned. In the process of forwarding, user information is transmitted to the third-party provider. If you send information to or via these sites of third-party providers, we recommend that you read the data protection regulations for these sites before providing them with any further information that can be assigned to you personally. For information with regard to how your data is handled while using the websites of third-party providers, please refer to the respective data protection regulations of the third-party providers. We are not responsible for their operation, including how they handle data.
3. For what purpose do we process your personal data?
3.1. We only process your personal data to the extent that is necessary in order to provide a working website and to provide our content and services. Personal data is only processed on a regular basis where this is permitted by statutory provisions or where the person concerned has given consent.
3.2. If you use our website for purely informational purposes, we record only the data that is technically necessary in order for us to display our website to you as well as ensure stability and security. The legal basis for processing is our legitimate interest according to section 11(1)(f),POPIA. 3.2. When you contact us by e-mail, your personal data will only be used for the purpose of answering your request. The legal basis for processing is our legitimate interest according to section 11(1)(f), POPIA.
4. How do we process your personal data?
When you use our website, your data is transmitted to us in encrypted form in order to prevent access by unauthorized third parties. We save your data on specially protected servers. Access to personal data is only possible for a few DKMS employees with special authorization, all of whom are familiar with the relevant Data Protection Regulations and compelled to comply with them.
5. Is personal data passed on to third parties?
Only our employees gain knowledge of your personal data. In addition, where this is prescribed or permitted by law, we share your personal data with recipients who provide services for us. The reason for this is that, in order to be able to perform our duties, we need to work together with service providers, who may also have to process personal data for this purpose. We restrict the forwarding of your personal data to what is really necessary. These service providers have been carefully selected and commissioned by us, are bound by our instructions and are monitored on a regular basis. They are bound by a contract with DKMS to ensure that any personal data that they receive in this context is used only for the allowed purpose. We assure you that we do not sell or rent your data to any other companies or organizations.We will under no circumstances use your e-mail address or other data without your agreement for any other purposes for which you have not given your consent.
The providers commissioned by us include, in particular:
• website Serviceprovider.
6. How long do we save your personal data?
6.1. We will only save any personal data that you have transmitted or provided until the purpose for doing so has been fulfilled, until you revoke your consent, until you object to the data being processed or until you request the deletion of your data.
6.2. If you use the website for purely informational purposes, we will save your data on our servers only for the duration of your visit to our website. Once you leave our website, your data will be immediately deleted.
6.3. If you contact us by e-mail when using our website, we will delete any data recorded in this context once it is no longer necessary to save the data or will restrict processing if any statutory storage obligations exist. We check necessity on a regular basis.
7. What rights do I have?
7.1. You have the following rights with regard to your personal data that we process:
Right to access one’s personal information (section 23, POPIA)
· Right to correction (section 24, POPIA),
· Right to erasure, (section 24, POPIA
· Right to object to processing, (section 11(3), POPIA)
Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you have the right to lodge a complaint at the Information Regulator, if you believe that the processing of your personal information infringes data protection laws.
7.2. If you have given your consent for us to process your personal data,you can revoke this at any time. Once you have pronounced such a revocation to us, this affects the permissibility of processing your personal data. It ispossible here to restrict the revocation of consent to process your personaldata to specific purposes such as a newsletter (restriction of processing).
7.3. If you wish to exercise your rights described above, please submit your request to: DKMS gGmbH, Kressbach 1, 72072 Tübingen or by e-mail to: datenschutz@dkms.de
7.4. You also have the right to lodge a complaint with a data protection supervisory authority about the way in which we process your personal data.
8.Questions and comments
Do you have any questions regarding our Data Protection Regulations? Please contact our data protection officer at datenschutz@dkms.de.
Information about your right of objection pursuant to section 11(3), POPIA.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on section 11(1)(f),POPI (legitimate interest). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
The objection can be made in any form and should preferably be directed to:
DKMS gGmbH
Kressbach 1
72072 Tübingen
E-Mail: datenschutz@dkms.de