PRIVACY POLICY

VERSION 1.0 – 23 SEPTEMBER 2022

This privacy policy ("Privacy Policy") applies to the usage of the website https://www.mk2.bio ("Website") operated by mk2 Biotechnologies GmbH, registered at am Klopferspitz 19, 82152 Planegg, Germany ("Company", "we", "our", or "us") and has the purpose of providing detailed information to you ("User", "you", "your", or "yours") about the collection, usage, processing and disclosure of personal information when accessing the Website, as well as further information about your rights. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in EU General Data Protection Regulation (“GDPR”).

1 PERSONAL DATA

We collect the following types of personal data when you use our Website.

  • Identity and contact data
  • Professional details
  • Profile, usage and Website interaction
  • Technical data
  • Location-based data

2 HOW WE COLLECT PERSONAL DATA

We collect information about you when you use our Website or when you use our services.

Directly

  • When you access, use, or otherwise interact with our Website.
  • When you correspond with us by electronic means.

Indirectly

  • From third parties, such as social media plugins and third-party cookies.
  • Through public sources.
  • From public registers (such as commercial registers), news articles, sanctions lists, and Internet searches.

3 LEGAL BASIS AND PURPOSES

Our legal basis for collecting and using the personal data described in this Privacy Policy depends on the personal data we collect and the specific purposes for which we collect it.

Contract: To perform our contractual obligations or take steps linked to a contract with you.

  • To provide and protect our Website and our services
  • To administer, manage and develop our business and services
  • To recruit potential candidates

Consent: We may rely on your freely given consent at the time you provided your personal data.

  • To provide you with news, special offers, newsletters, and general information about goods and services which we offer (with your explicit consent).

Legitimate interests: We may rely on legitimate interests based on our evaluation that the processing is fair and reasonable.

  • To maintain and improve our Website and services
  • To develop new services

Public interest: To meet regulatory and public interest obligations.

  • To comply with applicable regulation and legislation.

4 DATA STORAGE AND RETENTION

We retain your personal data only for as long as is necessary for the purposes set out in Section 3 of this Privacy Policy, and to the extent necessary to comply with our legal obligations, resolve potential disputes and enforce our legal agreements and policies.

5 SERVICE PROVIDERS AND DATA TRANSFERS

We may employ third party companies ("Service Providers") to facilitate the operation of our Website assist us in analysing how our Website is used, or perform Website-related services, such as payment, delivery or IT infrastructure services. These Service Providers have access to your personal data only and insofar as necessary to perform these tasks on our behalf and are required to safeguard it in accordance with our contractual obligations and applicable data protection legislation.

We and our Service Providers may process your Personal Data in the following countries:

  • EU / EEA
  • US

For the transfer to countries that have not been deemed to provide an adequate level of protection according to lists of countries published by the Commission to the European Parliament and the Council, we safeguard your data by applying standard contractual obligations which provide for appropriate protection of data. The transfer of data to the US concerns only data in relation Website interaction, technical data and location-based data (incl. IP-address), and is processed only for the purpose of providing and protecting our Website and our services.

6 DATA DISCLOSURE

We may disclose your personal data in the good faith belief that such action is necessary:

  • To comply with a legal obligation (i.e. if required by law or in response to valid requests by public authorities, such as a court or government agency);
  • To protect the security of the Website and defend our rights or property;
  • To prevent or investigate possible wrongdoing in connection with Company;
  • To protect ourselves against legal liability.

7 DATA SECURITY

We take reasonable technical and organizational security measures that we deem appropriate in order to protect your stored data against manipulation, loss, or unauthorized third-party access. Our security measures are continually adapted to technological developments.

We also take internal data privacy very seriously. Our employees and the Service Providers that we retain are required to maintain secrecy and to comply with applicable data protection legislation. In addition, they are granted access to personal data only insofar as this is necessary for them to carry out their respective tasks or mandate.

The security of your personal data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. We recommend that you use antivirus software, a firewall, and other similar software to protect your system.

8 DATA PROTECTION RIGHTS

You have the below data protection rights on the basis of the GDPR. Please note that we may ask you to verify your identity before responding to such requests.

  • Right of access: You have a right to request a copy of your personal data, which we will provide to you in an electronic form.
  • Right to amendment: You have the right to ask us to correct our records if you believe they contain incorrect or incomplete information about you.
  • Right to withdraw consent: If you have provided your consent to the processing of your personal data, you have the right to withdraw your consent. This includes cases where you wish to opt out from marketing communications. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal basis for processing. To stop receiving emails from us, please click on the 'unsubscribe' link in the email you received.
  • Right to erasure: You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, or when it was unlawfully processed.
  • Right to restriction of processing: You have the right to request the restriction of our processing of your personal data where you believe it to be inaccurate, our processing is unlawful, or where we no longer need to process it for the initial purpose, but where we are not able to delete it due to a legal obligation or because you do not want us to delete it.
  • Right to portability: You have the right to request that we transmit your personal data to another data controller in a common format such as Excel, where this is data which you have provided to us and where we are processing it on the legal basis of your consent or in order to perform our contractual obligations.
  • Right to object to processing: Where the legal basis for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have a compelling legal basis for the processing which overrides your interests, or if we need to continue to process the personal data for the exercise or defence of a legal claim.
  • Right to lodge a complaint with a supervisory authority: You have the right of appeal to a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. The competent data protection authority is the Bavarian State Office for Data Protection Supervision (BayLDA).

9 LINKS TO THIRD-PARTY APPS AND SITES

Our Website may contain links to websites or apps that are not operated by us. If you click a third-party link, you will be directed to that third party’s site or app. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

10 COOKIE POLICY

We use cookies on our Website. For more information, please refer to our Cookie Policy.

11 CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We therefore encourage you to review this Privacy Policy periodically for any changes.

Changes to this Privacy Policy are effective when they are posted on this page.

12 CONTACT US

If you have any questions about this Privacy Policy, please contact Dr. Konstantinos Antonopoulos via e-mail info@mk2.bio.