Privacy policy

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on the subject of data protection can be found in the privacy policy below.

2.1 Password-protected access

This event website is password protected. The event password you enter is used solely to check access to the website. The check is performed on the server; the password itself is not stored. After a successful check, our server sets a technically necessary session cookie that only contains the unlock state and is automatically deleted when the browser is closed. In addition, your browser remembers the unlock state locally for the duration of the session (session storage). The password is not passed on to third parties.

2.2 Network directory and recommendations

The "Needs & Services" sections (participant directory and personal recommendations) are provided by our server. When you request your personal recommendations, the participant ID you selected is transmitted to our server together with the session cookie in order to determine the recommendations for the selected profile. The data is not combined with other data and is not passed on to third parties.

2.3 Enquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) GDPR) and/or on our legitimate interests (Art. 6 (1) (f) GDPR). The data you send us remains with us until you request its deletion, withdraw your consent or the purpose for storing the data no longer applies. Statutory retention periods remain unaffected.

2.4 Cookies and local storage

This website does not use tracking or analytics cookies. Only technically necessary storage (session cookie and session storage) is used for password-protected access, without which the website does not work. This storage is based on Art. 6 (1) (f) GDPR; our legitimate interest is the error-free provision of the website. You can delete the stored data via your browser settings; the website then has to be opened again with the password.

2.5 Server log files

The web server automatically stores technical access data (IP address, date and time, page requested, browser type) in log files. This data is used exclusively for the security and stability of operations (Art. 6 (1) (f) GDPR) and is not combined with other data sources.

Own hosting

This website is hosted on a server operated by Medical Innovations Incubator GmbH. The personal data collected on this website is stored exclusively on our own server and is not held by third parties. This may in particular include IP addresses, contact requests, meta and communication data, contract data, contact details, names and other data made accessible via a website.

The data is stored for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering (Art. 6 (1) (f) GDPR). The data is processed exclusively within our area of responsibility and is not passed on to external service providers.

The data provided on this website (e.g. participant directory and personal recommendations) is also held exclusively by us and is not passed on to third parties. Only external persons who have access to the website with the valid event password can retrieve this data.

Controller

The controller responsible for data processing on this website is:

Medical Innovations Incubator GmbH
Eisenbahnstraße 63
72072 Tübingen, Germany

Phone: +49 152 / 52 99 8535
E-mail: info@mi-incubator.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal notification by e-mail to us is sufficient. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

Right to object to data processing in special cases (Art. 21 GDPR)

If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. The legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing. If you object, your personal data will subsequently no longer be used for direct marketing (objection pursuant to Art. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Information, rectification and erasure

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of erasure.
• If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Objection to marketing e-mails

We hereby object to the use of contact data published within the scope of the legal notice obligation for sending unsolicited advertising and information material. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.

This website links to external third-party offerings (including the speed-dating application and Google Maps). When you click on these links, you leave our website; the respective provider's own privacy policy applies to the subsequent data processing. In particular, when you open the Google Maps link, data (including your IP address) is transmitted to Google.