Data Privacy Statement (v1.1 May 2018)
The European Data Protection Regulation (GDPR) came into force on May 25th, 2018 in all member states to harmonize data privacy laws across Europe.
This Regulation applies to the processing of personal data. Personal data means any information relating to a natural person; these include name, address, telephone number, date of birth and bank details.
Companies which process personal data are responsible for complying with the requirements of GDPR. They are the “controllers” within the meaning of article 4 (7) of GDPR.
Processing means any operation which is performed on personal data such as collection, recording, organisation, storage, adaptation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller of the following data processing (and contact possibility):
Greiner Bio-One Ltd
Stroudwater Business Park
Tel: 01453 825255
Email: [email protected]
I. Storage of personal data of customers and suppliers (or their internal contacts)
The protection of personal data is a special concern of Greiner Bio-One (GBO).
According to Art 13 and 14 GDPR (General Data Protection Regulation) we are obliged to inform you about the processing of your personal data:
We process for the purpose of performance of a contract and our legitimate interest of customer retention the following personal data:
name, address, telephone number, e-mail address, (additional if necessary:) department and function.
We have received these data either from you, your company or from public sources such as company register, your website, telephone book, etc.
All employees of our company who take care of our customers and/or suppliers have access to these data; in addition, these data can be viewed by the IT departments of Greiner Bio-One International GmbH (A-4550 Kremsmünster) and Greiner Holding AG (A-4550 Kremsmünster).
Our SAP system and our electronic communication systems are supported by our external support- and maintenance partners.
If necessary for performing the contract with your company, the data can also be viewed by authorized employees of other GBO entities – see link to overview of GBO locations.
Furthermore, your name and your address (and if necessary the telephone number) will be provided to the transport company commissioned by GBO for delivery of the ordered goods.
We store the personal data necessary for the fulfilment of the contract for the duration of the entire business relationship as well as in accordance with the legal obligations for storage, documentation and reporting.
II. Contacting Greiner Bio-One (GBO)
If you contact us by form on the website or by e-mail, the data you provide (and, in the context of cookies, the IP data) will be stored for up to six months for the purpose of processing your enquiry and in the event of follow-up questions. Your data will be processed by the responsible Greiner Bio-One company (which can be one (or if necessary several) - see link to overview of GBO locations.
Your data will only be forwarded within the Greiner Bio-One division if this is necessary to process your request. We will not pass on your data to companies outside the Greiner Bio-One division without your express consent.
The lawfulness of this processing of your data is based on the need to respond to your request and on our legitimate interests.
These data provided by you are necessary for the performance of the contract. You have the right to revoke your consent at any time. Until such a revocation, your user data will remain stored with us and is processed in compliance with GDPR principles.
Furthermore, your name and the address (and in exceptional cases your telephone number if required) are transmitted to the transport company commissioned by GBO for the delivery of the ordered goods.
We store the personal data necessary for the fulfilment of the contract for the duration of the entire business relationship as well as in accordance with the legal obligations for storage and documentation, report.
You have the possibility to subscribe to a newsletter via our website. In this case, we need your e-mail address and your confirmation that you agree to receive the newsletter via Email.
In order to provide you with targeted information, we also collect and process the information you provide on your preferred product groups.
As soon as you have registered for the newsletter, you will receive an e-mail to confirm your registration.
You can cancel your subscription to the newsletter at any time. Please send the revocation to the following e-mail address: [email protected] We will immediately delete your respective data.
Our website is using “cookies”. These are small text files that are stored on your device using the browser. They're not doing any damage.
When cookies are deactivated, the functionality of our website may be limited.
VI. Customer Relationship Management System (CRM)
We use your personal data for our Customer Relationship Management System in order to store business contacts and to be able to offer support tailored to the needs of the customer.
We process your personal data on the basis of our legitimate interest in informing our customers and interested parties about our products and services as well as on the basis of the performance of a contract.
The following personal data are processed: First- and surname, titel, function; (company-) Email address, (company-) telephone number, (company-) address, what GBO products are you interested in.
Basically your personal data will only be processed by employees of the sales-, marketing-, product management- and quality department of GBO as well as by employees of the IT department of Greiner Bio-One International GmbH (Kremsmuenster, Austria).
For global projects, your personal data can be accessed from all Greiner Bio-One companies that use the CRM system: as of 25.5.2018, these are the Greiner Bio-One locations in Germany, Great Britain, USA, Netherlands, Belgium (and until the end of 2018 also Austria, France and Spain).
The IT department of Greiner Bio-One International GmbH cooperates with our software provider Aurea (Dubai) and the maintenance company Axians (Vienna, Austria).
Your personal data will be stored for as long as there is an active customer relationship with you or the company you work for.
In the event that contracts have been concluded between you or the company you work for, your personal data will be stored for as long as required by legal obligations for storage, documentation and reporting.
We have received your personal data from you or your employer.
VII. GBO compass
We use your personal data for the administration of E-learning courses.
We process your personal data on the basis of our legitimate interest in optimally informing our customers and interested parties about our products and services.
The following personal data are processed: Gender, title, first- and surname, function and department, company, (company-) Email address, (company-) telephone number, (company-) address, language, time zone, (optional: supervisor)
Your personal data will only be used by employees of the marketing department of GBO as well as by employees of the IT department of Greiner Bio-One International GmbH and Greiner Holding AG (Kremsmuenster, Austria).
In addition, our software provider IMC information multimedia communication AG (Germany) has access to your data.
Your personal data will be stored for as long as you are registered in our GBO compass system.
VIII. Rights of the data subject
We would like to inform you that you have the right to:
- request information about which of your personal data we process (Art 15 GDPR);
- correct your personal data (Art 16 GDPR);
- delete your personal data, as long as our legitimate interests do not outweigh (Art 17 GDPR);
- restrict the processing of your personal data (Art 18 GDPR);
- object to the data processing (Art 21 GDPR);
- receive your personal data in a structured, commonly used and machine-readable format (Art 20 GDPR).
If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority (right of appeal to a supervisory authority - Art 77 GDPR). In the UK this is the Information Commissioner’s Office.
Information Commissioner’s Office
All other data protection authorities of the EU member states are listed under the following link http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
We would like to point out that in the event that personal data is not provided or in the event of your revocation, the fulfilment of (contractual) obligations by GBO will be made more difficult or even impossible.
You can reach us as follows:
Greiner Bio-One Ltd
Stroudwater Business Park
Tel: 01453 825255
Email: [email protected]