Privacy policy

Privacy policy

We, EvidentIQ Germany GmbH (“EvidentIQ/we”), appreciate your visit to our “Future for Pati-ents” website and your interest in our platform. In the following provisions, we inform you about the type, scope and purpose of the collection and use of your personal data on this website. Personal data is any information relating to an identified or identifiable natural person. This includes in particular your name, your address and your e-mail address.

Please note that this platform is not used to participate in studies or similar or to arrange such participation. Rather, the website only contains information about study providers for specific clinical pictures. Users of this website can therefore only search for the most suitable study centers and voluntarily participate in a study or apply for participation (the study centers are responsible for their own data protection).

Insofar as the provisions of the General Data Protection Regulation (GDPR) are mentioned in this privacy policy, they shall apply in accordance with Art. 3 GDPR. In all other respects, the applicable statutory provisions on data protection apply.
In principle, you can also visit this website without providing us with any personal data. To do this, you may need to make settings in the browser you are using. The data collected on this website is processed exclusively for the stated purposes. Your data will not be passed on to third parties unless this is necessary for a specific purpose or you have given your consent.

1. Provider and data protection officer

The provider of the website and the controller within the meaning of data protection law is

EvidentIQ Germany GmbH

Rosental 5 / 80331 Munich

Managing Directors: Manuel Neukum, Lars Kloppsteck

Phone: +49 (0) 89 4522775-000

E-Mail: info@evidentiq.com

You can reach the data protection officer of EvidentIQ Germany GmbH at:

krupna LEGAL

E-Mail: office@krupna.legal

2. Data collection and processing when visiting the websitee

Connection data is transmitted to our web server every time you access content on our website. This connection data includes

the IP address (Internet Protocol address) of the respective user,
the date and time of the request,
the referrer URL,
Device numbers such as UDID (Unique Device Identifier) and comparable device numbers, device information (e.g. device type) and
the browser type / browser version

This connection data is not used to draw conclusions about the person of the user or merged with data from other data sources, but is used to provide the website. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR. After 7 days at the latest, the data is anonymized by shortening the IP address at domain level.

3. Data collection at the instigation of

We also process your personal data for the following purposes and in accordance with the

following provisions:

3.1. Contact forms

On our website you will ﬁnd the option to contact us using the appropriate forms. Only the ﬁelds marked as mandatory must be completed for your inquiry to be answered. These mandatory ﬁelds are your e-mail address and your individual message. Any other information you provide is voluntary. The data you enter in the forms is sent to us and stored using SSL encryption. The following data (metadata) is also stored when the form is sent:

Your IP address
Date and time of transmission

The metadata collected is used to prevent misuse of the contact form and to ensure the security of our information technology systems. As an alternative to using our contact forms, you can also write to us at the e-mail addresses provided. In this case, the data transmitted with the e-mail will be stored. The legal basis for the processing of the data transmitted by you is basically Art. 6 para. 1 sentence 1 lit. f GDPR or, if your request is aimed at the conclusion of a contract, Art. 6 para. 1 sentence 1 lit. b GDPR. However, if you are interested in a speciﬁc study, it may already be possible to draw conclusions about health data on the basis of the inquiry. In this case, the processing of your personal data is governed in particular by Art. 9 GDPR. The processing of health data by us is then based on your consent in accordance with Art. 9 para. 2 lit. a GDPR. As we have no inﬂuence on the content of your speciﬁc request, we will ask you for your consent (as a precautionary measure) in the event that health data is also affected.

We will only forward your data to a study center if you expressly request this. The legal basis for the transfer to the study center and the processing by the study center is then also Art. 9 para. 2 lit. a GDPR.

We generally store the personal data you provide for 3 years, unless we are obliged to store it for longer. The additional metadata generated with the transmission will be deleted after a period of 7 days at the latest.

3.2. Newsletter

You can subscribe to our newsletter on our website. To do so, you must enter your e-mail address. Optionally, you can enter your company, title and name to be addressed personally in the newsletter. We will pass on your details to our newsletter service provider CleverReach GmbH & Co KG, Schafjückenweg 2, 26180 Rastede, Germany, which we have entrusted with the technical implementation of our newsletter.

We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to conﬁrm that you wish to receive the newsletter. If you do not conﬁrm your registration within 3 months, your information will be automatically deleted. The legal basis for data processing is based on your consent, based on § 25 para. 1 sentence 1 TDDDG for the storage and access to information in terminal equipment and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. When you register for a newsletter, we also store your IP address and the time of registration in order to fulﬁll our legal documentation obligations. The legal basis for data processing in this case is Art. 6 para. 1 sentence 1 lit. c GDPR. We store all personal data collected in connection with your subscription to the newsletter until you unsubscribe from the newsletter/revoke your consent to the processing of your personal data. We may store the above-mentioned metadata and your e-mail address for up to three years after you unsubscribe from the newsletter as proof of your original consent to receive newsletters. This data is processed exclusively for the possible defense against claims. You can request the immediate deletion of your data if you immediately conﬁrm the original existence of consent. You can cancel the receipt of our newsletter at any time or revoke your consent to the processing. The option to unsubscribe is indicated in every newsletter and you can unsubscribe via a link contained in the email. Further information can be found under point. 9.

4. Data processing for the needs-based design of the website

Cookies are used when you visit this website. Cookies are stored on your computer by your web browser when you open one of our web pages. They are used to improve the quality of service when you visit this website. Via the cookie banner (cf. sec. 4.1), you have the option of deciding whether or not you wish to consent to the use of technically unnecessary cookies when you access the website.

Our website sets transient cookies, i.e. temporary ﬁrst-party cookies that are absolutely necessary for the full use of the website. Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. The session cookies are deleted when you close the browser. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 lit. f GDPR, as they are technically essential to display the website correctly.

Details of the tools used on the website can be found in the cookie banner (point. 4.1 and in the following provisions of this Section 4. The legal basis for the processing of your data results from Art. 6 para. 1 sentence 1 lit. f GDPR, unless otherwise stated in the following provisions. Accordingly, our legitimate interest lies in the needs-based design of the website.

4.1 Borlabs Cookie

This website uses Borlabs’ cookie consent technology to obtain your consent to the storage of certain cookies on your end device and to document this in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg (“Borlabs”).

When you visit our website, a Borlabs cookie is stored in your browser in connection with the cookie banner, in which the consents you have given or the revocation of these consents are stored. However, this data is not transmitted to Borlabs.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory statutory retentionperiods remain unaffected.

Borlabs is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Customize cookie settings

4.2 Google Analytics

Our website uses the tracking tool “Google Analytics 4 (GA4)”. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered oﬃce at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This tracking tool helps us to make our website more interesting for you and to improve the user experience. Data about the use of our website is stored in pseudonymous user proﬁles. In addition to JavaScript and pixels, cookies can also be used for this purpose. Further information on the use of cookies can be found at: https://support.google.com/analytics/answer/11397207?hl=de.

The types of personal data processed include Online identiﬁers (including cookie identiﬁers), internet protocol addresses and device identiﬁers, identiﬁers assigned by the customer.

In addition, data from various devices, sessions and interactions can be linked to a so-called “user ID”. The information generated is usually ﬁrst sent to a Google server within the EU.

As part of the evaluation, Google also uses artiﬁcial intelligence to automatically analyze and enrich the data. This is done in particular for predictive metrics on future user behavior based on structured event data, such as purchase probability, churn probability and predicted revenue. The forecast measurement values can also be used for forecast target groups. You can ﬁnd out more about this at: https://support.google.com/analytics/answer/9846734.

Google also uses modeling techniques to estimate online conversions that cannot be recorded directly. With the help of estimated conversions, Google can make more realistic statements in reports, optimize advertising campaigns and improve automatic bidding. You can ﬁnd more information on this at: https://support.google.com/analytics/answer/10710245.

Finally, the data is analyzed using Analytics statistics. Automatic and user-deﬁned statistics are provided by Google. You can ﬁnd out more about this at: https://support.google.com/analytics/answer/9443595.

By default, Google automatically anonymizes the IP addresses of users when collecting user data. In addition, the IP addresses are neither logged nor stored by Google. However, the truncation of IP addresses does not result in the complete anonymization of data processing. Thus, when Google Analytics is used, usage data is collected that is to be evaluated as personal data, such as identiﬁcation features of the individual users, which also allow a link to an existing Google account, for example.

On our behalf, Google will use the information obtained via Google Analytics to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The pseudonymized user proﬁles will not be merged with personal data about the bearer of the pseudonym without separate consent.

Further information on Google Analytics can be found at:

https://support.google.com/analytics/answer/12017362

Please note that Google also has independent access to your data collected via Google Analytics and can also use this data for its own purposes. For example, Google can link this data with other data about you, such as your search history, personal account, usage data from other devices and all other data that Google has about you.

The legal basis for the use of Google Analytics is your consent, based on § 25 para. 1 sentence 1 TDDDG for the storage and access to information in terminal equipment and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. You give your consent to this via our cookie banner. The data sent by us and collected with cookies will be automatically deleted after 14 months. According to Google, data that has reached the end of its retention period is deleted on a monthly basis.

Please note that Google is a company from the USA. Information about the locations of Google’s data centers can be found at www.google.com/about/datacenters/locations/. The new EU standard data protection clauses have been agreed as suitable guarantees to ensure an appropriate level of protection when transferring data. In addition, Google LLC is an active participant in the EU-U.S. Data Privacy Framework, which guarantees the secure transfer of personal data to the USA. You can ﬁnd further information here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

4.3. Google Marketing Platform/DoubleClick

This website uses Google marketing platform products, such as DoubleClick from Google. DoubleClick uses cookies to present relevant ads to website visitors. A cookie ID is assigned to your browser to record which advertisements have already been sent to this browser. The DoubleClick cookie enables Google and its partner websites to serve ads based on previous visits to these or other websites. In the same way, the cookie ID enables the DoubleClick cookie to log conversions related to ad impressions, e.g. when a user views a DoubleClick ad and later uses the same browser to visit the advertiser’s website.

The legal basis for the use of DoubleClick is your consent, based on § 25 para. 1 sentence 1 TDDDG for the storage and access to information in terminal equipment and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. You give your consent via our cookie banner.

4.4. Google Tag Manager

We use the Google Tag Manager “GTM”. This Google service allows website tags to be managed via an interface. However, GTM only implements tags. In this respect, no cookies are used. The GTM only triggers other tags, which in turn may collect data, but the GTM does not access this data. The data is only analyzed in the respective tool (see in detail the information provided in section 4 listed tools). However, the GTM records your IP address and online identiﬁers (including cookie identiﬁers), which may also be transmitted to Google in the USA. You can ﬁnd additional information on GTM at https://support.google.com/tagmanager/answer/6102821?hl=de

The legal basis for the use of GTM is your consent, based on § 25 para. 1 sentence 1 TDDDG for the storage and access to information in terminal equipment and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. You give your consent via our cookie banner.

Please note that the provider is a company from the USA. Information about the locations of Google’s data centers can be found at www.google.com/about/datacenters/locations/. The new EU standard data protection clauses have been agreed as suitable guarantees to ensure an appropriate level of protection when transferring data. In addition, Google LLC is an active participant in the EU-U.S. Data Privacy Framework, which guarantees the secure transfer of personal data to the USA. Further information can be found here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

4.5. Google Ads conversion tracking

We use the “Google Ads Conversion” service to advertise our products on external websites with the help of advertising material and to determine the success of our advertising measures. These advertising materials are delivered by Google via so-called “ad servers”. If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies generally lose their validity after 30 days and are not used to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

The aforementioned cookies enable Google to recognize your Internet browser. Therefore, if you have visited certain websites of an Ads customer and the cookie stored on your computer has not yet expired, Google and the Ads customer can recognize that you clicked on the ad and were redirected to this page. Cookies cannot be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify you on the basis of this information.

The legal basis for the use of Google Ads Conversion is your consent, based on § 25 para. 1 sentence 1 TDDDG for the storage and access to information in end devices and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. You give your consent to this via our cookie banner. Please note that the provider is a company from the USA. Information about the locations of Google’s data centers can be found at www.google.com/about/datacenters/locations/ The new EU standard data protection clauses have been agreed as suitable guarantees to ensure an appropriate level of protection when transferring data. In addition, Google LLC is an active participant in the EU-U.S. Data Privacy Framework, which guarantees the secure transfer of personal data to the USA. Further information can be found here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

The data sent by us and collected using cookies is automatically deleted after 14 months. According to Google, data that has reached the end of its retention period is deleted on a monthly basis.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no inﬂuence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge as follows: By integrating Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will ﬁnd out your IP address and store it.

Further information on data protection at Google can be found here: https://support.google.com/google-ads/answer/93148

https://ads.google.com/intl/de_de/home/faq/gdpr/

4.6. Google AdSense

We use Google’s AdSense function on our website. The purpose of data processing is to rent out advertising space on the website and to target visitors to the website with interest-based advertising. This function is used to display personalized, interest-based advertisements from the Google Display Network to visitors to the website. Google uses cookies and web beacons (invisible graphics) to analyze your use of the website. The information generated by this (including your IP address) about your use of this website is usually transmitted to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. To the best of our knowledge, Google will not associate your IP address with any other data held by Google.

Further information and Google’s privacy policy can be found at: https://www.google.com/policies/technologies/ads/ and https://www.google.com/policies/privacy/

The legal basis for the use of Google AdSense is your consent, based on § 25 para. 1 sentence 1 TTDSG for the storage and access to information in terminal equipment and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. You give your consent to this via our cookie banner. Please note that the provider is a company from the USA. Information about the locations of Google’s data centers can be found at www.google.com/about/datacenters/locations/ The new EU standard data protection clauses have been agreed as suitable guarantees to ensure an appropriate level of protection when transferring data. In addition, Google LLC is an active participant in the EU-U.S. Data Privacy Framework, which guarantees the secure transfer of personal data to the USA. Further information can be found here: https://www.dataprivacyframework.gov/list.

4.7. Agile Store Locator / Google Maps

We use the Agile Store Locator from AgileLogix in connection with the study center search and the Google Maps map service (see below). By using the functions, data is transferred to AgileLogix. Further information on data protection can be found at https://agilestorelocator.com/privacy-policy/

On our website, we also use the map service Google Maps from the provider Google via an API. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. We have no inﬂuence on this data transfer. The legal basis for the use of Google Maps on our website is your consent, based on Section 25 para. 1 sentence 1 TDDDG for the storage and access to information in terminal equipment and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. You give your consent to this via our cookie banner. Please note that Google is a company from the USA. The new EU standard data protection clauses have been agreed as suitable guarantees to ensure an adequate level of protection when transferring data. In addition, Google LLC is an active participant in the EU-U.S. Data Privacy Framework, which guarantees the secure transfer of personal data to the USA. You can ﬁnd further information here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

You can ﬁnd more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

4.8. hCaptcha

We also use the hCaptcha (“hCaptcha”) tool from the provider Intuition Machines Inc 2211 Selig Dr, Los Angeles, CA 90026, United States (“IMI”) on our website.

The purpose of hCaptcha is to check whether the data entry on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the user enters a website with hCaptcha activated. For the analysis, hCaptcha evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to IMI. The hCaptcha analysis in “invisible mode” can take place completely in the background. The users of the website are not informed that such an analysis is taking place if no challenge or task is displayed to the user. If your consent is requested via our cookie banner, the legal basis for the use of hCaptcha on our website is this consent, based on Section 25 (1) sentence 1 TDDDG for the storage and access to information in terminal equipment and Art. 6 (1) sentence 1 lit. a GDPR for our further processing of your data. Otherwise, the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Please note that IMI is a company from the USA. The new EU standard data protection clauses have been agreed as suitable guarantees to ensure an adequate level of protection when transferring data. In addition, IMI is an active participant in the EU-U.S. Data Privacy Framework, which ensures the secure transfer of personal data to the USA. Further information can be found here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

Further information on hCaptcha can be found in the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy, https://www.hcaptcha.com/gdpr and https://hcaptcha.com/terms.

4.9. Gravity Forms

In connection with our inquiry and contact forms (for more information on this and the legal basis for data processing, see Section. 3.1), we use the Gravity Forms service provided by Rocketgenius Inc, 1620 Centerville Turnpike, Suite 102, Virginia Beach, USA. Gravity Forms is a form management solution from WordPress. Your data will be transmitted to us to process the requests and stored on the WordPress content management system at our hosting provider. Rocketgenius, Inc. does not store or pass on the data, see:

https://docs.gravityforms.com/wordpress-gravity-forms-and-gdpr-compliance/. Further information on Gravity Forms’ data protection can be found here: https://www.gravityforms.com/privacy/.

4.10. WPML

We use WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (“WPML”) to display our website in different languages. WPML is a multilingual plugin for WordPress. When you visit our website, WPML stores a cookie on your end device to save the language setting you have selected. Further information on data protection at WPML can be found here: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance

4.11. Google Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally, which is why your IP address or other data is not transmitted to Google servers.

4.12. Vimeo

If we have integrated videos on our website, we use plugins from Vimeo, Inc., a US company based at 555 West 18th Street, New York, New York 10011, USA (“Vimeo”). If you visit one of our websites equipped with a Vimeo plugin and give your consent, a connection to the Vimeo servers is established. Vimeo receives information about which of our websites you have visited, your IP address, location and device and browser characteristics. Vimeo also uses cookies and similar tracking technologies such as web beacons (invisible graphics) to collect this information and provide the services. Since we have set up the “do not track” function, Vimeo does not use third-party analytics and advertising cookies, even if you are logged into your Vimeo account. Our legal basis for the processing of your data is your consent, based on § 25 para. 1 sentence 1 TDDDG for the storage and access to information in terminal equipment and Art. 6 para. 1 sentence 1 lit. a GDPR for our further processing of your data. You give your consent to this via our cookie banner. Please note that Vimeo is a company from the USA. The new EU standard data protection clauses have been agreed as suitable guarantees to ensure an adequate level of protection when transferring data. In addition, Vimeo is an active participant in the EU-U.S. Data Privacy Framework, which guarantees the secure transfer of personal data to the USA. Further information can be found here: https://www.dataprivacyframework.gov/list. Further information on data protection at Vimeo can be found here:

https://vimeo.com/privacy, https://vimeo.com/privacy/california-privacy and https://vimeo.com/cookie_policy.

5. Our social media presence

5.1. Links to social networks

Our website contains links to social networks (Facebook or Meta, and LinkedIn). These social networks are operated exclusively by third parties. If you follow the links, the respective social media provider may process your personal data. Please note the data protection information of the social media providers in this regard.

5.2. Data processing by EvidentIQ and legal basis

Our social media presences (Facebook or Meta and LinkedIn) serve the purpose of informing you about EvidentIQ and about new developments, services and products from EvidentIQ. Depending on the offer of the respective social media provider, you have the option of various interactions (comments, recommendations, etc.) in connection with our social media presence. User interaction is an important criterion for us in order to carry out targeted marketing. For example, we can determine which posts are read most frequently. We therefore also use the statistics determined by the social media providers in this regard for our own purposes.

If we process personal data of social media users, the legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest then lies in particular in targeted information / advertising. You will be informed separately by the social media providers about the legal basis on which the social media providers process your data for their own purposes.

5.3. Shared responsibility

In individual cases, we are jointly responsible with the social media providers for the processing of your personal data. In this case, you can exercise your rights (see section. 9) both against us and against the social media provider. However, the social media provider is the ﬁrst point of contact.

We have concluded an agreement with Meta (formerly Facebook) on joint responsibility for the processing of personal data. This applies to the processing of so-called “Insights data”. This involves page statistics, in particular regarding the interactions of Facebook users. Details on the Insights data can be found here: https://www.facebook.com/business/pages/manage#page_insights. You can view our agreement with Facebook at the following link:

www.facebook.com/legal/terms/page_controller_addendum.

We have also concluded a joint responsibility agreement with LinkedIn Ireland with regard to so-called “Page Insights”. With the Page Insights, LinkedIn Ireland does not provide us with any personal data about you, but only aggregated data. It is not possible for us to draw conclusions about individual users from the information in the Page Insights. Details on Page Insights and our agreement with LinkedIn Ireland can be found at the following link:

https://legal.linkedin.com/pages-joint-controller-addendum.

With regard to the storage period of the data processed by us for our own purposes, we refer you to our explanations under Section. 8. Please also note the data protection provisions of the respective social media provider.

6. Security measures to protect your personal data

We use technical and organizational measures to protect your data from unauthorized access, loss or destruction. Our security measures are continuously improved in line with technological developments. Our employees and all persons involved in data processing are obliged to comply with data protection laws and to handle personal data conﬁdentially. Our employees are trained accordingly.

To protect your personal data on this website, we use a secure online transmission method, the so-called “Secure Socket Layer” (SSL) transmission. You can recognize this by the fact that a closed lock symbol is displayed at the address component https://. By clicking on the symbol, you will receive information about the SSL certiﬁcate used. The display of the symbol depends on the browser version you are using. SSL encryption guarantees the encrypted and complete transmission of your data.

7. Data transfer (to countries outside the EU)

We only pass on your personal data to third parties or other recipients if this is necessary for the provision of services, if you have given your consent, if there is a legal obligation or if the transfer of data is permitted on another legal basis. Where necessary, we have concluded agreements with the recipients of your data on order processing in accordance with Art. 28 GDPR.

If necessary for our purposes, we also transfer your data to recipients outside the EU if you have given your consent, if there is a legal obligation or if the transfer of data is permitted on another legal basis. As part of data processing, your data will also be transferred to recipients based in the USA. An adequate level of data protection is ensured by the conclusion of the new so-called EU standard contractual clauses and/or the participation of the service provider in the USA in the EU-U.S. Data Privacy Framework. An overview of the participants in the EU-U.S. Data Privacy Framework can be found here: https://www.dataprivacyframework.gov/s/participant-search

8. Duration for which personal data is stored / criteria for determining the duration

Your personal data will be stored by us for as long as is necessary for the aforementioned purposes of processing; in the event of an objection, there are no compelling legitimate grounds on the part of EvidentIQ to the contrary or, in the event of revocation, there is no other legal basis for data processing. In certain cases, e.g. if there is a legal obligation to retain data, your personal data will not be deleted immediately, but will be blocked ﬁrst. For example, the retention period for messages sent via the contact form with business content may be ten years.

9. Your rights

Within the scope of the legal requirements, you are generally entitled to the following from EvidentIQ

Conﬁrmation as to whether personal data concerning you is processed by EvidentIQ,
information about this data and the circumstances of the processing,
Correction if this data is incorrect,
Deletion, insofar as there is no justiﬁcation for the processing and no (further) obligation to store the data,
Restriction of processing in speciﬁc cases determined by law,
Objection in the case of data processing on the basis of Art. 6 para. 1 sentence 1 lit. f. GDPR and
Transmission of your personal data – insofar as you have provided it – to you or a third

party in a structured, commonly used and machine-readable format.

If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the consequence that the processing of your personal data will become inadmissible for the future. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Please send your speciﬁc request to our data protection oﬃcer in writing or by e-mail, clearly identifying yourself:

krupna LEGAL

E-mail: oﬃce@krupna.legal

Insofar as we process your data in joint controllership with third parties within the meaning of Art. 26 GDPR (see Section 5. 5.3), the third party is centrally responsible for exercising all data subject rights. However, you are at liberty to assert your rights against us as well.

Finally, we would like to draw your attention to your right to lodge a complaint with the supervisory authority.

10. No automated individual decision

We do not use your personal data for automated individual decisions.

11. Changes to the privacy policy

New legal requirements, business decisions or technical developments may require changes to our privacy policy. The privacy policy will then be adapted accordingly. You will always ﬁnd the latest version on our website.

Status: 08/2024