Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is:

bio innovation park Rheinland e.V. (bioIP e.V.)
Klein-Altendorf 2
53359 Rheinbach
Phone: +49 2225 99963-12
Email: info@grins-project.de
Website: https://grins-project.de

Authorized representative: Prof. Dr. Ralf Pude (Chairman)

2. General Information on Data Processing

We only process personal data of our users to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users regularly only takes place with the consent of the user. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of data is permitted by legal provisions.

Legal Basis for the Processing of Personal Data

Where we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis. For the processing of personal data necessary for the performance of a contract, Art. 6 (1) (b) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our association or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

3. Hosting

This website is hosted by Strato AG:

Strato AG
Otto-Ostrowski-Strasse 7
10249 Berlin
Germany

When visiting our website, the hosting provider automatically collects various log files. These contain information that your browser automatically transmits. Processing is carried out on the basis of our legitimate interest in the efficient and secure provision of our website in accordance with Art. 6 (1) (f) GDPR. We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with Strato AG, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR.

4. Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
IP address
Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in ensuring trouble-free operation of the website).
Storage duration: Log files are deleted after 7 days at the latest, unless further retention is required for evidence purposes in the event of security-relevant incidents.

5. Cookies

Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user’s computer system.

Technically Necessary Cookies

We use technically necessary cookies that are required for the operation of the website. These cookies are automatically deleted at the end of the browser session (session cookies). The legal basis for processing is Art. 6 (1) (f) GDPR.

Optional Cookies

If additional cookies (e.g. for analyzing browsing behavior) are used, they are treated separately in this privacy policy. We obtain your consent pursuant to Art. 6 (1) (a) GDPR for this purpose. You may revoke your consent at any time.

6. Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

Legal basis: The processing of data entered in the contact form is based on Art. 6 (1) (b) GDPR, provided your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR).

Storage duration: The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

7. Newsletter

Registration

Our website offers the option of subscribing to a free newsletter. When registering for the newsletter, the data from the input form (email address, optionally name) is transmitted to us. Consent to data processing is obtained during the registration process with reference to this privacy policy.

Registration for the newsletter uses a so-called double opt-in procedure. After registration, you will receive an email asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering with third-party email addresses.

Unsubscription

You can unsubscribe from the newsletter at any time via the unsubscribe link contained in each newsletter email or by sending an informal message to info@grins-project.de. The legality of data processing already carried out remains unaffected by the revocation.

Legal Basis

The processing of your data in connection with the newsletter is based on your consent pursuant to Art. 6 (1) (a) GDPR. The data stored as part of the newsletter registration will be stored by us until you unsubscribe from the newsletter and will be deleted after cancellation. Data stored for other purposes remains unaffected.

8. SSL/TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

9. Your Rights as a Data Subject

As a data subject, you have the following rights under the GDPR:

Right of Access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and to the information specified in Art. 15 GDPR.

Right to Rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you and, if applicable, the completion of incomplete data.

Right to Erasure (Art. 17 GDPR)

You have the right to request the immediate erasure of personal data concerning you, provided that one of the reasons specified in Art. 17 GDPR applies.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions specified in Art. 18 GDPR is met.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller.

Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (e) or (f) GDPR. Where personal data is processed for direct marketing purposes, you have the right to object to the processing at any time.

Right to Withdraw Consent (Art. 7 (3) GDPR)

You have the right to withdraw your consent at any time. The legality of the data processing carried out on the basis of the consent until the withdrawal is not affected by the withdrawal.

10. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR.

The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestrasse 2-4
40213 Duesseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de

11. Currency and Amendments to this Privacy Policy

This privacy policy is currently valid as of February 2026.

Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on this website.