A. Privacy Policy
1. Scope and subject matter of the privacy policy
The subject of this privacy policy is to provide information about what personal data we collect via our website and for what purpose we process it. Insofar as links are provided to other pages, we have neither influence nor control over the linked content and the data protection regulations there. We recommend that you check the data protection declarations on the linked websites in order to determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.
For reasons of better readability, the differentiated use of different forms of language is dispensed with. All personal designations apply equally to all genders male/female/diverse.
2. Important definitions and terms
In advance, you will receive a selection of some legal definitions that may be helpful for you to understand the privacy policy. The full text of the General Data Protection Regulation (GDPR), including further definitions and definitions, is available at the following link.
Personal data:
Any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing:
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction;
Controller:
means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his nomination may be provided for by Union law or the law of the Member States;
Processor:
Means a natural or legal person, public authority, agency or other body to whom personal data is disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the context of a particular inquiry in accordance with Union law or the law of the Member States shall not be regarded as recipients; the processing of such data by the said authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;
Third Party:
This is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
3. Contact details of the Controller
ITM Oncologics GmbH, Walther-von-Dyck-Strasse 4, 85748 Garching/Munich
Phone: +49 89 329 89 86 6000
E-mail: info@itm-radiopharma.com
4. Contact details of the data protection officer
Marcel Erntges, PRW Consulting GmbH, Leonrodstrasse 54, 80636 Munich, Germany
Phone: +49 89 210977-70
E-mail: datenschutz@itm-radiopharma.com
5. Log files
When you visit our website, we collect so-called access data and store it in a log file. This access data also includes the IP address. In addition, the log file stores the name of the website accessed, the file accessed, the date and time of access, the amount of data transferred and notification of successful access, the browser type and version, the operating system, the so-called referrer URL (the previously visited page) and the requesting provider.
| Personal data | IP address; |
| Purpose of the Data processing | We collect the log file data, including the IP address, in order to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. |
| Interest in the Data processing | The log file data, including the IP address, is only used for the technical and design optimization of the website and to secure our systems (e.g. in the context of an attack on our IT or a security incident). From the data of the log file, including the IP address, no personal reference can be established for us in the event of a visit to our website. |
| Provider | Purpose of data processing | Details/information on data protection |
|---|---|---|
| Ionos SE | Hosting of the website | Privacy Policy - IONOS Terms & Conditions* |
| Duration of data storage | The log files, i.e. the IP address contained therein, are automatically deleted 3-6 months after collection. |
| Legal basis | Art. 6 para. 1 f) GDPR |
| Provision prescribed or required | The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of the website is not guaranteed or restricted. |
*Privacy Policy - IONOS Terms & Conditions
6. Cookies
Cookies are small text files that enable us to make the use of our offers and our website more pleasant for users, e.g. by determining whether you have already visited an individual page of our website and thereby storing information about your preferred activities on the website, or thus aligning our website to your individual interests. As soon as a user accesses our platform, a cookie is stored on the end device (laptop, tablet, smartphone or PC) of the respective user. Cookies that are not necessary for the provision of our website are only set on your device with your consent. (Art. 6 para. 1 lit. a) GDPR).
Essential functions:
These providers are used to operate the website or certain functions thereof, for example to ensure security or to make an appointment with us. These providers are mandatory and cannot be deselected.
| Name | Domain | Purpose of data processing | Default expiration time |
|---|---|---|---|
| Theranostics_online_session | theranostics.online | User Session Tracking | Session |
| XSRF TOKEN | theranostics.online | Form submission security token (i.e., user registration) | Session |
External content:
The providers in this category are used to integrate third-party content into our website. Content from other services is integrated into this website in order to enable the use of certain functions (e.g. booking an appointment) or to improve the user experience (e.g. characters and graphics).
Currently no external content is integrated
Marketing:
We use these providers for our marketing, in particular the so-called "tracking" (tracking of registrations) and the performance measurement of our advertisements. The associated reach measurement is the evaluation of visit actions by analyzing user behavior in relation to the determination of certain user actions and measuring the effectiveness of online advertising. The number of visitors who have reached websites or apps, e.g. by clicking on advertisements, is measured. In addition, it is possible to measure the rate of users who perform a certain action (e.g. registration for the newsletter, ordering goods).
| Name | Domain | Purpose of data processing | Default expiration time |
|---|---|---|---|
| _pk_id.3. | theranostics.online | Used to store some details about the user, such as the unique visitor ID | 13 months |
| _pk.ses.3. | theranostics.online | Short-lived cookies, which are used to temporarily store data for the visit | 30 minutes |
*Please note that changing the cookie setting does not automatically delete cookies that have already been set in your browser. If necessary, please delete the cookies you no longer want manually via your browser settings.
7. Web user analysis
So-called tracking or web analysis tools are used on our website. This describes the collection of access data on our website and the evaluation of the behavior of our visitors for the purpose of optimizing our offer. With the help of these tools, it is possible to examine how and where visitors come to our site, which areas on a website are visited particularly often and how often and for how long which subpages and categories are viewed. In addition, we can determine which search terms and websites the user has entered and evaluate how many users visit our pages in total and which information or offers are most in demand. The aim is to be able to design our offers and our website in a user-friendly way with the help of the knowledge gained in this way. By statistically evaluating the user profiles, statements can be derived about the functionality and success of our websites and functions, such as answers to questions about how often information pages on certain product groups were accessed or how many visitors clicked on certain offers. With the help of the tracking tools, we can tailor our offer more specifically to our customers, visitors and interested parties.
| Provider | Purpose of data processing | Details/information on data protection |
|---|---|---|
| Matomo | Website and analysis tool | Matomo Cloud Privacy Policy - Matomo Analytics* |
| Duration of data storage | Further details about the providers, how web tracking works and information about technologies used in the context of these tracking tools, the storage period of the cookies used for this purpose and information can be found under 6 Cookies. In addition, you can revoke your consent at any time and change your cookie settings for our website. |
| Legal basis | Art. 6 para. 1 a) GDPR |
| Provision prescribed or required | The provision of the aforementioned personal data is neither legally nor contractually required. |
*Matomo Cloud Privacy Policy - Matomo Analytics
8. Plugins and embedded functions
We integrate functional and content elements into our online offer, which are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example, graphics, videos or social media buttons as well as contributions (hereinafter uniformly referred to as "content").
The integration always presupposes that the third-party providers of this content process the IP address of the users, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content or functions. We make every effort to only use content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, websites to be referred to, the time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.
| Provider | Service | Details/information on data protection |
|---|---|---|
| 3Q GmbH | Videos | Data protection information for customers (3q.video)* |
| Legal basis | Art. 6 para. 1 a) GDPR |
Please note that in the event of interaction via the aforementioned media, data may also be processed outside the European Union, whereby the providers have undertaken to comply with EU data protection standards. If necessary, after the start of a content, further data processing operations may be triggered by the aforementioned providers, over which we have no influence.
Furthermore, user data is usually processed for market research and advertising purposes. For example, user profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
*Data protection information for customers (3q.video)
9. Contact
| Personal data | Name, first name, e-mail address, telephone and the corresponding message |
| Purpose of the Data processing | We use a contact form on our website to exchange information with our customers and interested parties and to answer their concerns and inquiries. We process the enquiries and information addressed to us in this context exclusively for the purpose of processing your enquiry and contacting you. |
| Duration of data storage | Duration of the processing and handling of the request or until we are requested to delete it. |
| Legal basis | In principle, we do not need any personal data to answer the inquiries. The legal basis is Art. 6 para. 1 lit. a) GDPR. If you are already a customer or contractual partner, the data processing is based on Art. 6 para. 1 lit. b) GDPR. |
| Provision prescribed or required | The provision of the aforementioned personal data is neither legally nor contractually required. However, it is not possible to process your request without providing this information. |
10. Data Security
We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from the dangers of data transmission and from third parties gaining knowledge of it. These are continuously adapted and reviewed in accordance with the current state of the art. In order to maintain the confidentiality and integrity of the data you provide on our website, this data is transmitted via "https" and Transport Layer Security (TLS).
B. Your rights
You have the right to request confirmation from us at any time as to whether we are processing your personal data and the right to information about this personal data. In addition, you have the right to correction, deletion and restriction of data processing, as well as the right to object to the processing of personal data at any time, or to revoke your consent to data processing at any time or to request data transfer.
All requests for information, requests for information, revocations or objections to data processing should be sent by e-mail to datenschutz@itm-radiopharma.com. In addition, you have the right to complain to a supervisory authority in the event of data protection violations.