Privacy Policy

Data Protection

Privacy policy at a glance

Below you will find all the information about the processing of your personal data by the BioCV GmbH and the rights to which you are entitled under data protection law.

What should you know beforehand?

The protection of yourpersonal data is very important to us. Therefore we would like to offer you comprehensive transparency regarding the processing of your data in our system.

The following information is intended to inform you about what we use your personal data for, what data it is and what rights you have in relation to data processing. Personal data within the meaning of Art. 4 No. 1 GDPR (hereinafter "data") is all information that at least indirectly allows the identification of a person or relates to an already identified person.

The use of our website / app with all its functions requires the processing of certain personal data. All data is processed securely in the Google Cloud by Google Ireland Limited ("Google"), Gordon House, Barrow Street Dublin 4 Ireland.

Personal data is only processed by us for clear purposes (Art. 5 Para. 1 lit. b GDPR). As soon as the purpose of the processing no longer applies, your personal data will be deleted, provided there are no legal or contractual claims to the contrary (e.g. pursuant to HGB; AO).

Responsible in terms of data protection law

BioCV Ltd

Rüsingstrasse 45

44894 Bochum

Germany

Tel: 0173 9837012

Email: info@biocv.org

Also referred to below as "person responsible" or "we".

Data Protection Officer

We have appointed a data protection officer for the company BioCV GmbH, who can be contacted at the e-mail address: orga@biocv.org can be reached.

Data collection when visiting the website

collection and storageof personal data as well as the type and purpose of their use
a) When visiting the website
When you visit our website www.BioCV.de, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and until it is automatically deleted saved:
– IP address of the requesting computer
– Date and time of access
– Name and URL of the retrieved file
– Website from which access is made (reference URL)
– Browser used and, if applicable, the operating system of your computer and the name of your access provider.
The data mentioned are processed by us for the following purposes:
Ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluation system security and stability as well as for other administrative purposes.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

b) When using the contact form
If you have any questions, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the request and can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us takes place in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR on the basis of your voluntarily given consent.

c) When using the online shop

When using the online shop, a customer account must first be created. For this we collect:

– the corporate name of the company

- Your name

- Your email address

– Your chosen password

- Delivery address

– Payment method and account number required for payment

– The company’s VAT number

The data mentioned will be processed by us for the following purposes: Ensuring a smooth ordering process on the website, evaluation system security and stability as well as for other administrative purposes. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

d) live chat

To use our live chat on our website, we use Wix Chat from our website providerwww.wix.com (https://www.wix.com/about/privacy). We do this within the scope of our legitimate interest in a technically flawless online offer and its economically efficient design and optimizationArticle 6 paragraph 1 sentence 1 lit. f GDPR.

When you access Live Chat, Wix Chat temporarily collects your IP address to determine the country the chat is launched from. This information enables us to provide you with customer service tailored to your needs. The IP address is collected exclusively for this purpose and is not permanently stored by Wix Chat. We do not use this data to personally identify you and it is not linked to any other data. Your privacy remains protected.

Please note that Wix Chat also has its own privacy policy, which you can access through the above link for more information about data processing by Wix Chat.

data collectionung when using the BioCV app

Download the BioCVGmbH app

When downloading the app, certain required information is transmitted to the app store you have selected (Google Play Store or Apple App Store), in particular the user name, e-mail address, customer number of your account, time punkt of the download, payment information and the individual device code are processed. This data is processed exclusively by the respective app store and is beyond our control.

As part of your use of the app, we automatically collect certain data that is required for using the app. These include:

- Internal device ID,

- IP address

- version of your operating system,

- time of access

- Request time

- General log data

This data is automatically transmitted to us, but not stored,

1. to provide you with the Service and related features;

2. to improve the functions and performance of the app and

3. To prevent and eliminate misuse and malfunctions.

This data processing is justified by the fact that

1. Processing is required for the performance of the contract between you as the data subject and us in accordance with Article 6 (1) (b) GDPR for the use of the app, and

2. we have a legitimate interest in ensuring the functionality and error-free operation of the app and being able to offer a market and interest-based service that protects your rights and interests in the protection of your personal data within the meaning of Art. 6 Para. 1 lit. f GDPR prevails.

Creation of a BioCV work account

So that you can use our app, it is necessary to create a BioCV Work Account. In this context, a user profile will be created for you personally after contact with us, to which your data can be assigned.

We use the data from your BioCV Work Account to authenticate you when you log in and to follow up on requests to change account information. The data you enter when registering or logging in will be processed and used by us to verify your authorization to use the app and in particular to manage your user account and to contact you to provide you with technical or legal information, updates, To be able to send security alerts or other messages related to the management of your user account.

We use Firebase Authentication, a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street Dublin 4 Ireland, to handle the registration and login process. Firebase Authentication is a sign-in and authentication service provided by Google. To simplify the sign-up and authentication process, Firebase Authentication may use third-party identity services and store the information on their platform.

Google represents a processor within the meaning of Art. 28 GDPR, with whom we have concluded a corresponding contract processing contract. Google also relies on the use of standard contractual clauses.

We only offer one access option via: Email and password. In addition, the third-party providers usually transmit further basic information about your user profile there (e.g. email address and profile picture) via Firebase Authentication.

The data processing is justified by the fact that the processing is required for the performance of the contract between you as the data subject and us in accordance with Article 6(1)(b) GDPR for the use of the app, and we have a legitimate interest in ensuring the functionality and error-free operation of the app, which outweighs your rights and interests in protecting your personal data within the meaning of Article 6 (1) (f) GDPR.

Access Permissions

For certain Ffunctions of the app, it is necessary for you to grant us access authorization for selected functions of your grant smartphone.

NFC scanners:

In order to be able to use the Nfc scan function of your device to scan our own animal ear sensors via Nfc, access to the Nfc function of your device is necessary. Access is only available if you use our app and have Nfc enabled and is only activated by scanning one of our ear sensors.

To provide this function, we use the function library nfc_manager3.2.0 (https://pub.dev/packages/nfc_manager) published by naokiokada.com.

To use the Nfc scanner, we need the following device authorizations given by the user:

- android.permission.NFC .

You grant us these permissions voluntarily and exclusively for the purposes listed above and you can revoke them at any time in the settings of your device. In addition, you will be informed about the need for authorization at the appropriate point in the app. The legal basis for data processing is your consent in accordance with Article 6 (1) (a) GDPR.

Location and Bluetooth Scanner:

In order to be able to use the Bluetooth function of your device to locate our own animal ear sensors in the immediate vicinity, access to your location data is required. Access is only possible if you use the Bluetooth function of our app. Authorization to use Bluetooth on the device used is also required.

To provide this function, we use the function library flutter_reactive_ble (https://pub.dev/packages/flutter_reactive_ble) from the publisher meethue.com.

To use Bluetooth we need the following devices provided by the user Permissions:

- android.permission.ACCESS_COARSE_LOCATION,

- android.permission.ACCESS_FINE_LOCATION,

- android.permission.BLUETOOTH_CONNECT,

- android.permission.BLUETOOTH_SCAN,

You grant us these permissions voluntarily and exclusively for the purpose listed above and you can revoke them at any time in the settings of your smartphone. In addition, you will be informed about the need for authorization at the appropriate place in the app. The legal basis for data processing is your consent in accordance with Article 6 (1) (a) GDPR.

Will my data be processed for online advertising?

No, your data will not be processed for online advertising.

What other data is collected to improve the BioCV Work App?

To use our software To optimize, eliminate technical weaknesses and to ensure smooth use of our app, we use an error log to save any errors in communicating or processing data from the Firestore in a list. This can be forwarded to BioCV GmbH if required, but will not forward data independently of the user.

We would like to point out that Google itself may receive data to evaluate the app and its functionality and for other purposes that we may not be fully aware of.

We would like to point out that Google has its own data protection guidelines, which are independent of ours. Therefore, we are not responsible for Google's policies and procedures. You can find more information about Google's data protection regulations at:

https://policies.google.com/privacy

The recipient of the data is Google Ireland Limited ("Google"), Gordon House, Barrow Street Dublin 4 Ireland. Through the use of Google services, a transfer of personal data outside the European Union is possible. Google represents a processor within the meaning of Art. 28 GDPR, with whom we have concluded a corresponding order processing contract. Google also relies on the use of standard contractual clauses.

If we have not asked you for your consent to use it in accordance with Article 6 Paragraph 1 Letter a GDPR, the legal basis for processing the data is our legitimate interest in accordance with Article 6 Paragraph 1 Letter f GDPR, the reliability of our app to improve and to ensure a constant service.

A list of the service providers used by Google Firebase can be found here:

https://firebase.google.com/terms/subprocessors

Google Analytics for Firebase

We use Google Analytics for Firebase for the purpose of statistically evaluating the use of our app. Your user ID is transmitted in a modified form so that it cannot be assigned to your user profile. The data collected in this way is transmitted to Google Ireland Limited ("Google"), Gordon House, Barrow Street Dublin 4 Ireland: number of sessions, session duration, your operating system, your device model, the region in which you are located, first-time starts , the version of the app, and other events and user properties.

Firebase Crashlytics

We use Firebase Crashlytics provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street Dublin 4 Ireland, to determine the causes of app errors or crashes. In the event of a crash, diagnostic data is transmitted. We would like to point out that, independent of the collection of analysis data by Firebase Crashlytics, further analysis data from Apple (iOS devices) and Google (Android devices) may be collected, which includes the use of our app. We have no influence on this data collection.

Will my data be passed on to third parties?

A transmission of your data to third parties does not take place. Exceptions may arise if

- you have given your express consent to this in accordance with Article 6(1)(a) GDPR,

- the disclosure is required in accordance with Article 6 (1) (f) GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

- in the event that there is a legal obligation for the transfer according to Art. 6 Para. 1 S. 1 lit. c DSGVO,

- this is legally permissible and required for the processing of contractual relationships with you in accordance with Article 6 (1) (b) GDPR or

- it is sent to a service provider working on our behalf and on our exclusive instructions, whom we have carefully selected (Art. 28 Para. 1 GDPR) and with whom we have concluded a corresponding contract for order processing (Art. 28 Para. 3 GDPR). which obliges our contractor, among other things, to implement appropriate security measures and grants us extensive control powers.

storage duration

We would like to inform you about thisn that we generally delete your data as soon as they are no longer required for the purpose for which they were collected. In particular, your data will be deleted when they are no longer required to fulfill contractual obligations or to grant or ward off warranty or guarantee claims. The personal data collected by us for the use of the contact form will be deleted after your request has been dealt with.

Sharing of Data
Your personal data will not be transmitted to third parties for purposes other than those listed below.
We only provide your personal informationThird parties further if: you have given your express consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR, the disclosure in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR for the assertion, exercise or defense of legal claims is required and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data, in the event that there is a legal obligation for disclosure under Article 6 Paragraph 1 Sentence 1 lit. c GDPR, as well as this is legally permissible and required for the processing of contractual relationships with you in accordance with Article 6 (1) sentence 1 lit. b GDPR.

When you visit our website, small text files, so-called cookies, are stored on your computer. Some cookies are automatically deleted when you end your visit (session cookies), while other cookies remain on your end device until you delete them manually. By using cookies, we can recognize you as a user and personalize our website. You have the option to adjust the use of cookies via your web browser. Please note that this may limit the usability of our website.

Cookies are used either on the basis of a legitimate interest (necessary cookies) or on the basis of your consent. As the operator of our website, we have a legitimate interest in using cookies to provide you with a user-friendly visit.

Purpose of data processing: provision and function of our website

Legal basis: The data is processed in accordance with Article 6 Paragraph 1 Letter a GDPR (consent) or Article 6 Paragraph 1 Letter f GDPR (legitimate interest).

Analysis Tools

On this website we use Google Analytics 4, a web analysis service provided by Google LLC, provided you have given your consent. Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") is responsible for users in the EU/EEA and Switzerland.

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by these cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

The processing of your data by Google Analytics is based on the consent you gave us when you visited our website. You have the right to revoke your consent at any time with effect for the future by changing the relevant cookie settings in your browser or by using our cookie banner.

We use Google Analytics to obtain and analyze information about the use of our website. This allows us to optimize our online offering and provide our users with a better user experience.

Google can transmit the data collected via Google Analytics to third parties if this is required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with other Google data. We have also activated the "anonymizeIP" function, which shortens your IP address before it is sent to Google in order to exclude direct personal reference.

For more information on how Google handles your data, see Google's privacy policy:https://policies.google.com/privacy

Please note that you can refuse the use of Google Analytics by making the appropriate settings in your browser or by installing the Google Analytics opt-out add-on:https://tools.google.com/dlpage/gaoptout

The legal basis for the processing of your data by Google Analytics is your consent in accordance with Article 6 Paragraph 1 lit. a GDPR.

Ssocial media

We operate profiles on various social networks to communicate with our customers and prospects and to provide information about our products and services. The mentioned social networks on which we are present are:

LinkedIn:https://www.linkedin.com/company/biocv-gmbh/?originalSubdomain=de

YouTube:https://www.youtube.com/@BioCV-GmbH

Instagram:https://www.instagram.com/biocvgmbh/

Please note that the data you leave on our profiles and social networks may be processed outside the European Union (EU). The operators of these social networks may be located in countries outside the EU, in particular in the USA.

The processing of your data by these social networks is usually carried out for the purposes of user communication, the dissemination of information about our products and services and to analyze the use of and interaction with our profiles.

Please note that the privacy policies and practices of these social networks may differ from our own privacy policies. Therefore, please read the data protection declarations of the respective social networks to find out more about data processing and your rights in connection with the use of these platforms.

If you have any questions about data protection in connection with our presence on social networks, please feel free to contact us. We will do our best to respond to your requests and uphold your privacy rights.

Social Media Plug ins

In our online offer we integrate functional and content elements provided by third parties. These elements may include, for example, graphics, videos, social media buttons, and posts (collectively "Content").

The integration of this content requires the processing of the IP address of the user by the third-party provider. Without the IP address, the content could not be sent to the user's browser. The IP address is therefore required for the display of this content or functions. We endeavor to only use content where the respective provider only uses the IP address to deliver the content.

In addition, the third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. These "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device. These cookies contain technical information about the browser and operating system, referring websites, visit times and other information about the use of our online offer and can also be linked to information from other sources.

The legal basis for processing the data is either the consent of the user, if we ask them for their consent to the use of third-party providers, or our legitimate interests in efficient, economical and user-friendly services if the data is processed on this basis. You can find more information on the use of cookies in our data protection declaration.

Instagram: Into thetagram plugins and buttons - This can include content such as images, videos or text and buttons with which users can share content from this online offer within Instagram. Service provider: https://www.instagram.com, Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy Policy: http://instagram.com/about/legal/privacy.

YouTube: videos; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (ensuring the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Possibility of objection (opt-out): opt-out plugin: http://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of advertisements: https://adssettings.google.com/authenticated.

LinkedIn: LinkedIn plugins and buttons - This can include, for example, content such as images, videos or text and buttons with which users can share content from this online offer within LinkedIn. Service provider: https://www.linkedIn.com, LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland; Website: https://www.linkedIn.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy.

concernedfenenrechte
SYou have the right:
- According to Art. 15 DSGVO information aboutto request your personal data processed by us.
In particular, you can Auskunft about the processing purposes, the category of personal data, the categories of recipientsabout which your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if they were not collected from us, and the existence request automated decision-making including profiling and, where appropriate, meaningful information about its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- According to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exerciseor defense of legal claims is required;
- according to Art. 18 GDPR to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you use them to assert them, You need to exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
- according to Art. 7 Para. 3 DSGVO, to revoke your consent once given to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future and
– to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work.

To assert your rights as a data subject, it is sufficientan email to orga@biocv.org.

Where can I complain?

If you are of the opinion that the processing of your personal data by us is unlawful or that we are violating data protection law for other reasons, you can complain to a supervisory authority at any time in accordance with Art. 77 GDPR.

data securityHerheit
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Right of withdrawal

right of withdrawal

You have the right to withdraw from this contract within fourteen days without giving any reason.

The cancellation period is fourteen days from the day on which you or a third party named by you who is not the carrier took possession of the goods.

In order to exercise your right of withdrawal, you must inform us (BioCv GmbH, Rüsingstraße 45, 44894 Bochum, Germany, Tel.: 0173 9837012, email: info@biocv.org) by means of a clear statement (e.g. a letter sent by post or an e-mail) of your decision to withdraw from this contract.

To meet the cancellation deadline, it is sufficient for you to send the communication regarding your exercise of the right of cancellation before the cancellation period has expired.

Consequences of revocation

If you revoke this contract, we have paid you all payments that we have received from you, including the delivery costs (with the exception of the additional costs resulting from the fact that you have chosen a different type of delivery than the cheapest standard delivery offered by us have), immediately and at the latest within fourteen days from the day on which we received the notification of your cancellation of this contract. For this repayment, we use the same means of payment that you used in the original transaction, unless something else was expressly agreed with you; under no circumstances will you be charged fees for this repayment. We may refuse repayment until we have received the goods back or until you have provided proof that you have returned the goods, whichever is earlier.

You must return or hand over the goods to us immediately and in any case no later than fourteen days from the day on which you inform us of the cancellation of this contract. The deadline is met if you send back the goods before the period of fourteen days has expired. You bear the direct costs of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.

When was the privacy policy last updated?

This privacy policy is dated August 2023.

Due to the further development of our app and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access the current data protection declaration at any time via our website using the link provided.

Here you can find out how to delete your account.