Privacy policy

Privacy

At GBG, we take the protection of your personal data very seriously: We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection notice.

 

Responsible for data processing is GBG Forschungs GmbH, represented by Prof. Dr. med. Sibylle Loibl.  
You can contact our data protection officer via privacy@gbg.de or by phone +49 61027480-461.

Your rights 

You have the right for free information about your stored personal data, its origin and recipient, the purpose of data processing and the right to correct, block or delete this data at any time. You can contact us at any time at the address given in the Imprint concerning your rights as well as further questions regarding data privacy.

You have the right to lodge a complaint with the competent supervisory authority, e.g. the Hessian Data Protection Officer, P.O. Box 31 63, 65021 Wiesbaden, https://www.datenschutz.hessen.de.

It is generally possible to use our website without providing personal data. Nevertheless, certain personal data is processed in order to enable the presentation and use of our website in the first place (see "Cookies" and "Server log files"). The legal basis for such processing is Art. 6 para. 1 lit. f) GDPR (legitimate interest) or, if consent has been given, Art. 6 para. 1 lit. a) GDPR (consent).

 

Cookies 

Cookies are used to make our website more user-friendly, effective and secure.The cookies we use are so-called "session cookies".They are automatically deleted at the end of your visit.

SSL-encruption 

This site uses end-to-end SSL encryption for security reasons and to protect the transmission of confidential content, such as requests via the contact form. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. This makes it more difficult for third parties to intercept and modify the transmitted data.

Server-Log-Files 

The host of our website (1and1) automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: 

  • IP address of the accessing computer 
  • Date and time of the server request 
  • Browser type and browser version 
  • Operating system used 
  • Referrer URL 

This data is anonymized after seven days and used to correctly deliver the content of our website, to compile access statistics and thus improve our website, to ensure the long-term functionality of our information technology systems and the technology of our website and to provide law enforcement authorities with the information necessary for prosecution in the event of a criminal offence. This data is not merged with other data sources. We reserve the right to check this data if we become aware of specific indications of unlawful use.

Links to external sites

If we refer ("link") to pages that are not on our own web server, we indicate this by means of a corresponding "external link" symbol. As soon as you follow such a link, you leave our area of responsibility. The privacy policy of the respective provider then applies. 

If you contact us via the contact form or by e-mail, the information you provide there, including the contact details you provide, will be stored by us for the purpose of processing the request and in the event of follow-up questions. We will not pass on this data without your consent. The legal basis for this processing of personal data is Art. 6 para. 1 lit. f) GDPR (legitimate interest) or, if you have expressly given your consent to data processing, Art. 6 para. 1 lit. a) GDPR (consent).

 

The data from the contact form is transmitted to us via an encrypted channel (SSL).

We will only use your application data for the selection process in the context of the vacancy for which you are applying.
Your application data will be received by the HR department of GBG Forschungs GmbH. The legal basis for the processing of your application data is Art. 6 para. 1 lit. b) GDPR (fulfillment of a contract/implementation of pre-contractual measures).
Your data will be deleted no later than six months after completion of the application process.

We conduct many different studies. Here we describe the typical, general case.

 

We process your data on the basis of your patient consent to the clinical study and in accordance with the requirements of the German Medicines Act (AMG). The legal basis for the processing of your data is Art. 6 para. 1 lit. a) GDPR (consent). You have the right to withdraw this consent at any time without giving reasons. In the event of withdrawal of consent, no further data will be collected, but the data collected so far will remain stored to the extent necessary to comply with the requirements of the AMG.

The purpose of data processing is to conduct a clinical study to investigate the efficacy and safety of the medication used. The data may also be used for the approval or extension of approval of the medication.

Your medical data will be transmitted to GBG Forschungs GmbH in Neu-Isenburg in pseudonymized form (without name, only with a patient number) by your attending physician. GBG has no access to your name and address data. Only your treating trial center knows your name.

This medical data will be stored after completion or discontinuation of the study in accordance with the legal regulations for clinical studies (currently at least ten years). In the event of a scientific publication, only anonymized data will be published.

If you have any questions about your stored data, please contact your supervising trial site first. If necessary, they can forward your request to the GBG.

Please refer to the patient information and the declaration of consent for your study for details, in particular regarding the institutions involved.

We process your data, such as address, contact person, contact details, bank details, for the execution of the contractual relationship. Without the provision of this data, we cannot execute the contractual relationship. The legal basis for processing is therefore Art. 6 para. 1 lit. b) GDPR (fulfillment of a contract/implementation of pre-contractual measures). This data is only accessible to the involved and authorized persons.
We store this data for at least ten years after the end of the contractual relationship, in accordance with tax law requirements.