top of page

Privacy Policy

Information according to Art. 14, 14 GDPR

​

As a life science and management consultancy for biotech startups, data protection is a key concern for us. Our privacy policy provides an overview of which personal data we collect, how we use it and whether we pass it on to third parties. We also provide information about the options users have to control their data and the data security measures we have taken.

 

1. Person responsible for data processing

 

MerkBast Consulting Dr. Andreas A. Bastian

Taunusstraße 59-61, 55118 Mainz
E-mail: info@merkbast.com

Phone: +49 (0) 6131 336 22 25

​

2nd Data Protection Officer

​

MerkBast Consulting Dr. Andreas A. Bastian

Taunusstraße 59-61, 55118 Mainz
E-mail: info@merkbast.com

Phone: +49 (0) 6131 336 22 25

 

3. Categories of data, origin of data

 

We collect and process personal data that we receive from you in person, by telephone, e-mail or online form in order to initiate consultations or during the consultation. In the event of personal or telephone contact, our employees will record personal data electronically if and to the extent that you provide it to us.

The data processed are: name, contact details (telephone, email address), data for making appointments, data about your project/plan (e.g. type of plan, deadline expectations, budget, preferences). Optionally, you can provide further data that will help us develop your individual concept and recommend suitable service providers (lawyers, CROs, CD(M)Os, etc.).

During the consultation, further personal data or data relating to your project/plan may be created and recorded.

4. Purposes and legal basis of processing

 

We process your data for the purpose of being able to plan, prepare and conduct an individual consultation with you, to create a planning concept from the consultation and, with your consent, to be able to pass on your data and the concept to service providers of your choice. In the event of a complaint, the data may be passed on to our service providers for complete processing. The collection, processing and forwarding of your data takes place on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future. To do so, simply send an informal email to info@merkbast.com.

If and to the extent that personal data is passed on to processors in order to protect our legitimate interests or the legitimate interests of third parties, this is done on the basis of Art. 6 Para. 1 lit. (f) GDPR. Our legitimate interests consist in making our IT operations and our services reliable, secure and economical. The data subject has the right to object to the processing of personal data on the basis of Art. 6 Para. 1 lit. f GDPR (Art. 21 GDPR).

If necessary, we process personal data of our private customers to fulfill legal obligations (e.g. proof and retention obligations) on the basis of Art. 6 Para. 1 lit c GDPR.

5. Recipients of data

 

Within MerkBast Consulting Dr. Andreas A. Bastian, only those departments and employees who are involved in the preparation and implementation of the consultation and the creation of your concept will have access to personal data.

Other recipients of personal data are:

  • Contract research and development service providers (CROs, CMOs, CDMOs), cooperation partners, public research institutions, patent attorneys.

  • Processors according to Art. 28 GDPR (service providers for the support/maintenance of computer/IT applications, call centers)

  • Other data recipients may be entities for which the data subjects have given their consent to the data transfer.

 

6. Transfer of data to a third country or to an international organisation

 

A transfer of personal data only takes place within the EU or EEA and North America (United States, Canada).

 

7. Data deletion/retention periods

 

We process and store your personal data as long as it is necessary to fulfil the above-mentioned purposes. Your personal data will be deleted after the consultation has been carried out and handed over to the tradesman.

8. Obligation to provide data

 

There is no legal or contractual obligation to provide personal data. To plan a consultation, your name and contact details (telephone number, email address) are required. Without this data, we cannot arrange a consultation with you.

 

9. Rights of the data subjects

 

You have the right to information in accordance with Article 15 GDPR, the right to rectification in accordance with Article 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restriction of processing in accordance with Article 18 GDPR, the right to object in accordance with Article 21 GDPR and the right to data portability in accordance with Article 20 GDPR. The restrictions in Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

You can revoke your consent to the processing of personal data at any time with effect for the future. Processing that took place before the revocation is not affected.

 

10. Information about your right of objection under Article 21 GDPR

 

1. Individual case-specific right of objection

You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) f GDPR (data processing on the basis of a balance of interests), for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

Mainz, November 1, 2024

bottom of page