Privacy Policy for applicants
This privacy policy explains how we process your data when you visit our website.
Personal data is information relating to an identified or identifiable individual. This primarily includes information that can be used to identify you, such as your name, telephone number, address or email address. However, personal information also includes certain identifiers such as your IP address or the device ID of the terminal you are using.
A) General information
1 Controller
The controller responsible for the processing of your personal data for the purposes of the General Data Protection Regulation (GDPR) is
4Teen4 Pharmaceuticals GmbH
Neuendorfstraße 15a
16761 Hennigsdorf near Berlin
Email: info@4teen4.de
Phone: +49 3302 205650
2 Data protection officer
You can contact our Data Protection Officer by email at datenschutz@4teen4.de. Please note that our Data Protection Officer will not be the only person to see the content of your email when you use this email address.
If you wish to exchange confidential information with him, please ask for a direct contact directly via this email address.
3 Cooperation with third parties
In some cases we use external service providers and partners to process your data, e.g. for hosting our website we use the services of Synacore GmbH, Cauerstr. 23, 10587 Berlin. These partners have been carefully selected and are under our instruction. They are under an obligation to be compliant with our order processing procedures or have other data protection agreements in place. We also work with partners who are under a professional obligation to maintain confidentiality, such as accountants, lawyers and other service providers.
4 Storage period
As a matter of policy, we will only retain personal information for as long as necessary to fulfil the purposes for which we collected it. We will then delete the data immediately, unless we need the data for evidence purposes for civil law claims or due to statutory retention obligations until the statutory limitation period has expired.
For evidence purposes, we must retain contract data for three years from the end of the year in which the business relationship with you ends. This is the earliest point at which any claims will become statute-barred.
Even after this, we may need to keep some of your information for accounting purposes. We are obliged to do so because of statutory documentation obligations, in particular under the German Commercial Code and the German Tax Code. The retention periods specified in these laws range from two to ten years. Where necessary, we will inform you directly about the duration of data storage in the following sections in relation to individual processing operations.
5 Rights of the data subject
You have the following rights as a data subject:
- Right of access by the data subject (Right to information about your personal data processed by us, Art. 15 GDPR);
- Right to rectification of your incorrect personal data stored by us (Art. 16 GDPR);
- Right to erasure of your personal data (Art. 17 GDPR);
- Right to restriction of processing of your personal data (Art. 18 GDPR);
- Right to data portability of your personal data (Art. 20 GDPR);
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Please contact us using the details above, if you wish to exercise any of the rights set out here. We will comply with your data protection request, subject to the necessary legal requirements.
Records of your data protection requests and our responses will be kept for up to three years for documentation purposes. In certain cases, this retention period may exceed three years if it is necessary for the establishment, exercise or defence of legal claims. This retention is based on Article 6 para. 1 (f) GDPR and reflects our interest in defending civil law claims under Art. 82 of the GDPR, avoiding fines as outlined in Art. 83 GDPR, and meeting our accountability obligations as outlined in Article 5 para. 2 GDPR.
You are entitled to withdraw any consent you give. If you withdraw your consent, we will no longer process your data on the basis of that consent. Withdrawal of consent does not affect the lawfulness of the processing based on the consent prior to its withdrawal.
If we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time on grounds relating to your particular situation. If you object to the processing of your data for direct marketing purposes, you have a general right to object, which we will also exercise without your having to give reasons.
If you wish to exercise your right of cancellation or objection, simply send an informal message to the contact details above.
Finally, you have the right to lodge a complaint with a data protection supervisory authority. You can assert this right, for example, with a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement. In Brandenburg, where we are based, the competent supervisory authority is the State Commissioner for Data Protection and for the Right of Access to Files, Stahnsdorfer Damm 77, 14532 Kleinmachnow, e-mail: Poststelle@LDA.Brandenburg.de.
6 Automated decision-making
We don’t use automated individual decision-making or profiling.
7 Changes to the privacy policy
We may update this privacy policy from time to time, for example when we update our website or when legal or regulatory requirements change.
B) Data processing when accessing our website
Whenever you use our website, we process information that your browser automatically transmits to enable your visit. This connection data consists of the so-called HTTP header information, including the user agent, and includes in particular:
- IP address of the requesting device
- Method (e.g. GET, POST), date and time of the request;
- The address of the requested website and the path of the requested file;
- if applicable, the previously visited website/file (HTTP referrer);
- Information on the browser and operating system used;
- HTTP protocol version, HTTP status code, size of file delivered;
- Request information such as language, content type, content encoding, character sets;
- Cookies stored on the terminal of the requested domain.
The processing of these connection data is strictly necessary to allow access to the site, to ensure the continuity and security of our systems and, in general, to maintain our site for administrative purposes. The connection data is also stored in internal log files for the purposes described above, temporarily and limited in content to what is necessary in order to identify the cause and take action in the event of repeated or criminal requests that jeopardise the stability and security of our website. The log files are generally kept for 30 days and then made anonymous.
The legal basis for this processing is Art. 6 para. 1 (f) GDPR due to our legitimate interest in enabling access to the website and the permanent functionality and security of our systems. However, the automatic transmission of the connection data and the log files generated from it do not constitute access to the information in the terminal device within the meaning of the implementing laws of the ePrivacy Directive of the EU member states, in Germany § 25 TTDSG. Otherwise, it would be absolutely necessary anyway.
C) Data processing when making contact
You can contact us in several ways - by using our contact form, by email, by phone/fax or by mail.
We use the data collected - depending on the type of contact you choose, this may include your name, your e-mail address, your message to us or your enquiry, your telephone numbers, the date and time of the enquiry and, if applicable, contract data if you send us enquiries in connection with the conclusion or performance of a contract - exclusively for the purpose of communicating with you.
The processing of your data is generally based on Art. 6 para. 1 (f) GDPR. Our legitimate interest is the effective processing of enquiries addressed to us and, where applicable, the initiation or processing of business relationships. If the purpose of the contact is the conclusion of a contract or if the contact takes place within the framework of a contract to which you are a party, the legal basis for the processing of personal data is Art. 6 para. 1 (b) GDPR.
If your data is no longer required for the processing and handling of your enquiry because your enquiry has been dealt with, your enquiry has been clarified and there are no legal retention periods or a legitimate interest in further storage, your data will be routinely deleted by us.
D) Data processing in the case of an application
Applications for vacancies are available on our website at career@4teen4.de.
The purpose of the data collection is to select candidates for possible employment. In order to receive and process your application, we will process the application data you provide to us.
For more information, please refer to our specific privacy notice for applicants, which can be found at https://4teen4.de/dataProtectionInformation.
E) Online presence in social networks
We use social networking sites to communicate with existing and prospective customers and to keep them informed of our products. User data is generally processed by the relevant social networks for market research and advertising purposes. This allows user profiles to be created on the basis of the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers. These user profiles are then used, for example, for the display of advertisements within the social networks and on third party websites.
We may have access to information such as statistics about the use of our online properties provided by the social networks as part of the operation of our online properties. These statistics are aggregated and may include, in particular, demographic information (e.g. age, gender, region, country) and data about interaction with our online presence (e.g. likes, subscriptions, sharing, viewing of images and videos) and the posts and content distributed through it. This information may also provide us with information about the interests of our users and the content and topics that are most relevant to them. This information may also be used by us to customise the design, activities and content of the online presence and to optimise it for our audience. Details and links to the social network data we have access to as the operator of the website is provided here. There is generally joint liability for the collection and use of these statistics. Wherever this is the case, the relevant agreement is given below.
The legal basis for data processing is Art. 6 para. 1 (f)GDPR, based on our legitimate interest in effective information and communication with users, or Art. 6 para. 1 (b) GDPR, in order to stay in contact with our customers and inform them and to carry out pre-contractual measures with interested parties.
If you have an account with the social network, it is possible that we can see your publicly available information and media when we access your profile. In addition, the social network may allow us to contact you. This can be done, for example, via direct messages or posts. The content of the communication via the social network and the processing of the content data is the responsibility of the social network as a messenger and platform service. As soon as we transfer personal data from you to our own systems or process it further, we are independently responsible for this and this is done to carry out pre-contractual measures and to fulfil a contract in accordance with Art. 6 para. 1 (b) GDPR.
The legal basis for the data processing conducted by the social networks under their own responsibility is found in the privacy policy of the respective social network. The links below will also provide you with further information about the respective data processing and how to object to it.
Please note that the most efficient way to raise data protection concerns is to contact the social network provider directly, as only they have access to the data and can take appropriate action directly. You may also contact us with your request. In this case, we will process your request and forward it to the social network provider.
The following is a list of the social networking sites on which we have an online presence:
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Operation of the LinkedIn company page under joint responsibility on the basis of an agreement on the joint processing of personal data (so-called Page Insights Joint Controller Addendum)
Information on the processed Page Insights data and how to contact us in the event of data protection enquiries: https://legal.linkedin.com/pages-joint-controller-addendum
Privacy policy: https://de.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out - Xing/Kununu (XING SE, Dammtorstraße 30, 20354 Hamburg)
Privacy policy/ opt-out: https://privacy.xing.com/de/datenschutzerklaerung - StepStone (StepStone Deutschland GmbH, Völklinger Straße 1, 40219 Düsseldorf)
Privacy policy: https://www.stepstone.de/e-recruiting/rechtliches/datenschutzerklarung/ - Indeed (Indeed Ireland Operations Limited, Dublin - Block B, Capital Dock, 80 Sir John Rogerson's Quay, Grand Canal Dock, Dublin 2, D02 HE36, Ireland)
Privacy policy: https://hrtechprivacy.com/de/brands/about-indeed#privacypolicy - Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)
Privacy policy: https://twitter.com/de/privacy%20Opt-Out:%20https://twitter.com/personalization
Status: March 2024
Supported by
The project is funded by the European Social Fund (ESF) and the Federal State of Brandenburg via the Brandeburg Ministry for Labor, Social Affairs, Health, Women and Family (MASGF).