US

Choose your region

Privacy Policy

 

PromoCell GmbH takes the protection of your personal data very seriously and strictly adheres to the data protection laws. The following statement provides you with an overview of how we ensure this protection and what type of data is collected for which purpose.

 

Controller

 

This privacy policy informs users about the type, scope, and purposes of the collection and use of personal data on this website by the responsible provider:

 

PromoCell GmbH
Sickingenstrasse 63-65
69126 Heidelberg
info@promocell.com, Phone: +49-6221-649340
(hereinafter "Provider")

 

Data protection officer

 

You can reach our data protection officer by e-mail at: privacy@promocell.com

 

The following provisions serve to inform you about the processing of personal data in accordance with the requirements of the General Data Protection Regulation (GDPR).

 

This is especially with regard to the information obligations pursuant to Articles 12 to 14 of the GDPR, as well as to clarify the rights of data subjects under Articles 15 to 22 and Article 34 of the GDPR.

 

Handling of personal data

 

We generally collect and use personal data of our website users only to the extent necessary for providing a functional website, as well as our content and services. The collection and use of personal data of our users usually takes place only with the user’s consent. An exception applies in cases where obtaining consent in advance is not possible for practical reasons and the processing of the data is permitted by legal provisions.

 

The following legal bases are generally applicable for the processing of your data:

  • Where we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis.
  • When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required for the implementation of pre-contractual measures.
  • If the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
  • If the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and the interests of the data subject (fundamental rights and freedoms) do not override the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.

 

In particular, the following may constitute legitimate interests for processing under Article 6(1)(f):

  • Responding to inquiries;
  • Conducting direct marketing measures;
  • Providing services and/or information that are intended for you;
  • Processing and transferring personal data for internal or administrative purposes;
  • The efficient operation and management of our website or parts thereof, such as shop systems and ePublishing;
  • Technical support for users;
  • Prevention and detection of fraud and criminal activities;
  • Protection against payment defaults when obtaining credit information for inquiries regarding deliveries and services; and/or
  • Ensuring network and data security, insofar as these interests are in accordance with the applicable law and with the rights and freedoms of the user.

 

Access data / server log files

 

The provider (or its webspace provider) collects data on every access to the service (so-called server log files). The access data include:

 

Name of the accessed webpage, file, date and time of access, amount of data transferred, message about successful access, browser type including version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

 

These data are stored by us in log files and are deleted after 7 days.

 

The provider uses the log data solely for statistical evaluations for the purpose of operating, securing, and optimizing the service. However, the provider reserves the right to review the log data retroactively if there is concrete evidence that gives rise to a justified suspicion of unlawful use.

 

The legal basis for processing your data for the provision of our website and services is Article 6(1) sentence 1 lit. f) GDPR in conjunction with § 25(2) no. 2 TDDDG. We have a legitimate interest in processing your data so that we can offer you our website and the services provided thereon in a technically flawless, secure, and tailored manner. The data from the server log files are stored separately from other data.

 

Newsletter

 

If you give us your separate consent, we will send you email newsletters with promotional information (hereinafter “Newsletter”).

 

Our newsletters include information in the field of cell culture, particularly regarding our range of services, promotions, events, contests, job offers, contributions/articles, blog posts, and informational resources.

 

Newsletters, however, do not include messages without promotional information that are sent in the context of our contractual or other business relationship. This includes, for example, the sending of service emails with technical information and inquiries regarding orders, events, contest notifications, or similar messages.

 

To subscribe to the newsletter, it is sufficient for you to provide your email address, first name, and last name. This information is used solely for personalizing the newsletter.

 

The newsletters contain a so-called “web beacon”, i.e., a pixel-sized file that is retrieved when the newsletter is opened. As part of this retrieval, technical information such as details about the browser and your system, as well as your IP address and the time of access, is collected. This information is used to technically improve the services based on the technical data or the target groups and their reading habits based on the access locations (which can be determined with the help of the IP address) or the access times. The statistical evaluations also include determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is not our intention to monitor individual users. The evaluations are primarily used to understand the reading habits of our users and to tailor our content to them or to send different content according to the interests of our users.

 

There are cases in which we direct newsletter recipients via a link to third-party websites so that the content of the newsletters can be accessed online (e.g., in case of display problems in the email program). In this context, we point out that cookies are used on these third-party websites and that personal data may be processed by the website operator, its partners, and/or its service providers (e.g., Google Analytics). We have no influence on this data collection. You can obtain further information from the privacy policies of the third-party providers.

 

The legal basis is your consent pursuant to Article 6(1)(a) and Article 7 of the GDPR in conjunction with § 7(2) no. 3 UWG or the statutory permission pursuant to § 7(3) UWG. You can revoke your consent for the storage of the data, the email address, and its use for sending the newsletter at any time. Unfortunately, a separate revocation with regard to the statistical evaluation and/or the dispatch is not possible. The revocation can be carried out via a link in the newsletters themselves or by contacting the above-mentioned contact options.

 

Legal framework of third-party services and content

 

Some of our websites integrate content from third parties within the service, such as videos from YouTube, images, texts and multimedia files, RSS feeds, or other services from other websites. This always involves the transmission of your IP address to the providers of this content. We cannot make any statements about, nor do we have any influence on, the actual use of your data by these providers, and we also have no control over further processing, particularly whether the data are used for other purposes such as profiling beyond the delivery of the data. If details are known to us, we provide information about this in separate data protection declarations, among other things. Please refer to the respective privacy notices of the third-party providers for further information.

 

YouTube

 

On our website, we use services from YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA. For users whose habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland is the data controller responsible for your data. YouTube is an online platform where users can upload, view, share, and comment on videos. It offers a variety of content, including music videos, vlogs, tutorials, and more.

 

If you access a page in which a YouTube video is embedded, a connection to the YouTube servers is only established once you click the confirmation button. In this case, YouTube will set cookies and use your visit data for its own purposes. If you are logged into YouTube at that time, the information about the videos you have watched will be assigned to your YouTube account. You can prevent this by logging out of your account before visiting our website. If you have not given consent within the framework of the Consent Manager, you have the option to provide it later through the so-called “2-click procedure”.

 

Your data may be processed in the USA and transferred there, i.e., to a third country outside the European Union (EU) or the European Economic Area (EEA). The legal basis for the data transfer is the adequacy decision with the USA pursuant to Article 45(1) GDPR based on the EU-US Data Privacy Framework. The provider has been certified under the US-EU Data Privacy Framework and is thereby committed to complying with the EU data protection level.

 

Further information on YouTube’s data protection is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/. The legal basis for this data processing is your consent, Article 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can revoke your consent at any time with effect for the future by opening the data protection settings in the lower left (“Cookie”) and toggling the switch accordingly.

 

HubSpot

 

This website uses a tool from HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA for online marketing activities.

 

HubSpot offers an integrated software solution that covers various aspects of online marketing, including email marketing, social media publishing and reporting, chat and contact management, landing pages, contact forms, and web analytics. In doing so, cookies are also stored on the device you use to analyze the use of our website and to optimize our marketing measures.

 

The use of HubSpot enables visitors to our website to learn more about our company, download content, and provide us with their contact information as well as other voluntary details. This information and the content of our website are stored on the servers of our software partner HubSpot. They are used by us to get in touch with visitors of our website and to analyze which of our services might be of interest to them. All data collected by us is subject to this privacy policy and is used exclusively for the optimization of our marketing activities.

 

Your data may be processed in the USA and transferred there, i.e., to a third country outside the European Union (EU) or the European Economic Area (EEA). The legal basis for the data transfer is the adequacy decision with the USA pursuant to Article 45(1) GDPR based on the EU-US Data Privacy Framework. The provider has been certified under the US-EU Data Privacy Framework and is thereby committed to complying with the EU data protection level.

 

The legal basis for this data processing is your consent, Article 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can revoke your consent at any time with effect for the future by opening the data protection settings in the lower left (“Cookie”) and toggling the switch accordingly.

 

You can stop the dispatch of emails via HubSpot at any time using an unsubscribe link in the respective email.

 

Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/data-privacy.

 

Bioz

 

We use the Bioz service, provided by Bioz, Inc., 530 Lakeside Dr., Suite 240, Sunnyvale, CA 94085, USA, to optimize our scientific research and to improve the product selection for our customers. Bioz is an artificial intelligence-based search engine that collects data from scientific publications to provide product recommendations.

 

In the course of using Bioz, various data are processed, including:

  • Usage data (e.g., IP address, browser type and version, operating system)
  • Device information
  • Behavioral data (e.g., clicks and search queries within the Bioz platform)

 

This data is used to ensure the functionality of the service and to optimize the search results. Bioz stores the data on servers within and outside the European Union. Your data may be processed in the USA and transferred there, i.e., to a third country outside the European Union (EU) or the European Economic Area (EEA). The legal basis for the data transfer is the standard contractual clauses pursuant to Article 46(2, 3) GDPR. These clauses oblige the provider to comply with the EU data protection level in the processing of personal data even outside the EU.

 

The data collected by Bioz is stored only for as long as it is necessary for the aforementioned purposes or as required by statutory retention periods. Once the purpose of data storage ceases to exist, the data will be deleted.

 

The legal basis for this data processing is your consent, Article 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can revoke your consent at any time with effect for the future by opening the data protection settings in the lower left (“Cookie”) and toggling the switch accordingly.

 

Registration function / online shop

 

If you wish to place an order in one of our web shops, it is necessary for the conclusion of the contract that you provide your personal data, which we require for processing your order. Mandatory information required for the processing of the contracts is marked separately, while further information is optional. The data you provide is processed by us for the purpose of processing your order. For this, we may pass on your payment data to our payment service providers. For processing payments on our website, we use the payment service provider Stripe, operated by Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA. Stripe enables us to process payments securely and efficiently by supporting various payment methods.

Within the payment processing, Stripe processes the following personal data:

  • Payment information (e.g., credit card number, bank details),
  • Contact data (e.g., name, email address),
  • Transaction data (e.g., amount, date, payment method).

Stripe also processes these data to ensure compliance with anti-money laundering regulations and security requirements. The data may be stored on servers in the USA or other countries outside the EU. Your data may be processed in the USA and transferred there, i.e., to a third country outside the European Union (EU) or the European Economic Area (EEA). The legal basis for the data transfer is the adequacy decision with the USA pursuant to Article 45(1) GDPR based on the EU-US Data Privacy Framework. The provider has been certified under the US-EU Data Privacy Framework and is thereby committed to complying with the EU data protection level.

 

The data collected by Stripe is stored only for as long as necessary to fulfill contractual and legal obligations. Once the purpose of data storage ceases to exist, the data will be deleted, unless statutory retention periods require a longer storage period.

 

Further information on data processing by Stripe can be found in the privacy policy of Stripe.

 

The legal basis for this data processing is Article 6(1)(b) GDPR for the fulfillment of the contractual relationship (payment processing).

 

We are obliged under commercial and tax law regulations to store your address, payment, and order data for a period of ten years. However, we limit the processing, meaning that your data is used solely to comply with statutory obligations.

 

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

 

Credit checks

 

In the context of orders or contracts, we may pass on personal data to external service providers for credit checks, if this is necessary to safeguard our legitimate interests. Only the data that is necessary for the credit check by the respective credit agency is transmitted. The credit check is carried out on the basis of a mathematical-statistical procedure and assists us in making informed decisions about entering into and executing contractual relationships.

 

The data collected in the context of the credit check is stored only for as long as it is necessary for the purpose for which it was collected, or as long as statutory retention periods apply.

 

The legal basis for this data processing is Article 6(1)(f) GDPR, as the credit check falls within our legitimate interests. Our legitimate interest is to avoid payment defaults and to make informed decisions about entering into and executing contractual relationships with our business partners.

 

Contact

 

Personal data that you transmit for the purpose of contacting us or sending documents, etc., will be used solely for this purpose. Providing this information is expressly voluntary and only with your consent. If this information includes details about communication channels (for example, email address, telephone number), you also consent to us contacting you via this communication channel to address your inquiry. You may of course revoke your consent at any time for the future. Please contact our Data Protection Officer, whose contact details can be found above, for this purpose. The personal data will be deleted once the purpose has been fulfilled.

 

Careers: When you contact us via email, live chat, or through a contact form, the data you provide (your email address, and if applicable, your name and telephone number) will be stored by us to answer your questions and address your concerns.

 

The data we have received from you in the context of contacting us will be deleted as soon as they are no longer needed for the purpose for which they were collected, your inquiry has been fully processed, and further communication with you is neither necessary nor desired by you.

 

The legal basis in this respect is Article 6(1) sentence 1 lit. f) GDPR, as it is our legitimate interest to answer your inquiries efficiently. If we request information via our contact form that is not necessary for contacting you, we always mark it as optional. This information is used to clarify your inquiry and to improve the processing of your request. Providing this information is expressly voluntary and based on your consent, Article 6(1) sentence 1 lit. a) GDPR. If this information includes details about communication channels (for example, email address, telephone number), you also consent to us contacting you via this communication channel to address your inquiry. You may, of course, revoke this consent at any time for the future.

 

Feedback Form: The controller for data processing collects and processes personal data from users for the purpose of quality assurance, for example, via a feedback form. In this case, processing may also occur electronically, especially when feedback is transmitted via email or a web form on our website. The retention period is determined by the fulfillment of the processing purpose and legal requirements. The legal basis for this processing is Article 6(1)(f) GDPR, as the processing is carried out in our legitimate interest to improve our services.

 

Your information will be used for processing your application and making a decision on the establishment of an employment relationship. The legal basis is § 26(1) in conjunction with § 26(8) sentence 2 of the Federal Data Protection Act (BDSG). Furthermore, your personal data may be processed if this is necessary to defend against any legal claims arising from the application process against us. The legal basis for this is Article 6(1)(f) GDPR. The legitimate interest in processing also lies in the specified purposes.

 

Job Applications: You can apply to our company via email. Please note that emails sent unencrypted are not transmitted in a secure manner.

 

Your information will be used for processing your application and making a decision on the establishment of an employment relationship. The legal basis is § 26(1) in conjunction with § 26(8) sentence 2 of the Federal Data Protection Act (BDSG). Furthermore, your personal data may be processed if this is necessary to defend against any legal claims arising from the application process against us. The legal basis for this is Article 6(1)(f) GDPR. The legitimate interest in processing also lies in the specified purposes.

 

If an employment relationship is established between you and us, we may further process the personal data we have received from you for the purposes of the employment relationship in accordance with § 26(1) BDSG, if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations arising from a law or a collective agreement, a company or service agreement (collective bargaining agreement) related to employee representation.

 

No processing of your application data beyond the described use will take place.

 

Your personal data will be deleted no later than 6 months after the completion of the application process, provided that there are no other legitimate interests on our part that oppose deletion or you have not given us consent for longer storage. A legitimate interest in this context may, for example, be the burden of proof in a proceeding under the General Equal Treatment Act (AGG).

 

Cookies

 

What are cookies? Cookies are data that are stored on your computer by a website you visit, enabling your browser to be recognized on subsequent visits. Cookies transmit information to the entity that places the cookie. Cookies can store various information, such as your language setting, the duration of your visit on our website, or the inputs you have made there. This, for example, avoids the need to re-enter form data each time you use the website. The information stored in cookies can also be used to recognize preferences and to tailor content to areas of interest.

 

There are different types of cookies: Session cookies are data that is only temporarily stored in the memory and is deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified duration, which can vary depending on the cookie. The information in these types of cookies can also be stored in text files on your computer. However, you can also delete these cookies at any time through your browser settings.

 

First-party cookies are set by the website you are currently visiting. Only that website may read information from these cookies. Third-party cookies are set by organizations that are not the operator of the website you are visiting. These cookies are, for example, used by marketing companies.

 

The legal bases for possible processing of personal data through cookies and their storage duration may vary. If you have given us your consent, the legal basis is Article 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. If the data processing is carried out on the basis of our predominant legitimate interests, the legal basis is Article 6(1)(f) GDPR in conjunction with § 25(2) no. 2 TDDDG. The stated purpose then corresponds to our legitimate interest.

 

We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach, and - with your consent - to tailor our services to preferred areas of interest. For this purpose, we use both transient and persistent cookies.

 

You can delete cookies already stored on your device at any time. If you wish to prevent cookies from being stored, you can do so through the settings in your internet browser. Instructions for common browsers can be found here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that certain functions of our website may not work if you have disabled the use of cookies.

 

 

 

Information on your rights

 

You have the following rights regarding your personal data in relation to us:

 

General Rights: You have the right to access, rectify, delete, restrict the processing of, object to the processing of, and to data portability regarding your personal data. If processing is based on your consent, you have the right to revoke this consent with effect for the future.

 

Rights Regarding Data Processing Based on Legitimate Interests: According to Article 21(1) GDPR, you have the right to object at any time to the processing of your personal data, based on reasons arising from your particular situation, if such processing is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) or Article 6(1)(f) GDPR (data processing to safeguard a legitimate interest), including profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the assertion, exercise, or defense of legal claims.

 

Rights Regarding Direct Marketing: If we process your personal data to conduct direct marketing, you have the right under Article 21(2) GDPR to object at any time to the processing of your personal data for the purposes of such marketing, including profiling insofar as it is related to such direct marketing.

 

In the event of your objection to the processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.

 

Right to File a Complaint with a Supervisory Authority: You also have the right to file a complaint with a competent data protection supervisory authority regarding the processing of your personal data by us.

 

The following supervisory authority is responsible for us: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg https://www.baden-wuerttemberg.datenschutz.de/.

 

Changes to the privacy policy

 

We reserve the right to change our privacy policy as needed and to publish it here. Please check this page regularly. The updated policy will take effect upon publication, subject to applicable legal provisions. Should we have already collected data about you that is affected by the change and/or is subject to statutory information obligations, we will also inform you of significant changes to our privacy policy.

 

Last update: April 2025