Privacy Policy

I. General information and legal basis

The following declaration informs you of which type of person data is collected by us as the competent body on this website, for which purpose, and to what extent this data is made available to third parties.


1. Controller:
Laboratorium für Klinische Forschung GmbH
Lise-Meitner-Straße 25-29 , 24223 Schwentinental

Telephone: +49 4307-8276-0
Fax: +49 4307-8276-79

Authorised managing directors:
Bärbel Wilke, Uwe Troge
Registry court: Kiel local first instance court, Register number: HRB 2150 PL

Data protection officer:
Susanne Grohmann
Laboratorium für Klinische Forschung GmbH
Lise-Meitner-Straße 25-29 , 24223 Schwentinental


2. Legal basis of the processing

The processing of personal data requires a legal basis, which we would like to present to you below.

For the processing of personal data for which we obtain the consent of the data subject, Article 6 paragraph 1 letter a of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.

For the processing of personal data which is necessary for the fulfilment of a contract, where its party to the contract is the data subject, Article 6 paragraph 1 letter b of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis. This includes processing operations necessary to perform pre-contractual measures.

If the processing of personal data is necessary for the fulfilment of a legal obligation, which our company is subject to, Article 6 paragraph 1 letter c of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.

If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail over the first interest stated, then Article 6 paragraph 1 letter f GDPR shall serve as the legal basis for processing. The legitimate interest of our company is in the conduct of our business activities as well as in the analysis, optimisation and maintenance of the security of our online offer.

II. Log files

In the server statistics, such data is automatically stored, which the browser transmits to us within the scope of our legitimate interest in performing analysis and for security reasons (so-called "logfiles").

This comprises the following:

  •   Language and version of the browser software
  • Operating system used and its interface
  • Referrer-URL (the website previously visited)
  • Hostname of the accessing computer (IP address)
  • Date and time of the server request
  • Time zone difference with Greenwich Mean Time (GMT)
  •  Content of the request (specific webpage)
  • data quantity transferred
  •  Access status/ HTTP- Status code.

We usually cannot assign this data to specific individuals. This data will not be merged with other sources of data. The data is additionally deleted within 7 days following a statistical evaluation. Data the further retention of which is required for evidentiary purposes shall be exempted from the deletion until the final clarification of the respective incident.

III. Contractual processing

The personal data provided by you, such as the name, address or e-mail address will only be used internally to answer your contractual requests, to process your orders or to provide you with access to certain contractual information. Using our form for orders you can send us contractual queries. A transfer to third parties does not take place, unless valid data protection regulations justify a transfer, we are obliged to do so by law or this serves the expedient performance of the contract.

IV. Contact

1. General contact and callback service

When you contact us by e-mail, using the contact form or by means of a callback request, we will save your information to answer your questions.

A transfer to third parties shall fundamentally not take place, unless valid data protection regulations justify a transfer or we are obliged to do so by law. You can withdraw your consent that you have granted with effect for the future at any time. In case of cancellation your data shall be immediately deleted. Your data will otherwise be deleted if we have processed your request or the purpose of the storage has been omitted. You can always inform yourself about the data stored about you.


2. Application data

Data Privacy Notice for Applicants (Updated: 16 May 2018)

We are glad that you are interested in our company and that you have applied or are applying for a position to work together with us. In the following, we would like to provide you with information about how your personal data is processed in the context of your application.


Who is responsible for data protection?

The responsible entity in terms of data protection law is:

GBA Gesellschaft

Goldtschmidtstraße 5

 21073 Hamburg

You can find further information about our company, authorized representatives, as well as other contacts on our website:


Which of your data do we process and for what purposes?

We process the data that you sent us in the context of your application in order to check your suitability for the position (or, where applicable, for other open positions in our company) as well as to carry out the application process.


What is the legal basis for this?

The legal basis for the processing of personal data in the application process is primarily § 26 of the German Federal Data Protection Act in the version that is valid as of May 25th, 2018. According to this law, it is permitted to process data that is necessary in the context of making a decision concerning a position of employment. If, after the application process is completed, the data is required for a legal proceedings, then data processing may occur upon the legal basis of the conditions stated in Article 6 of the GDPR, in particular for the purposes of legitimate interests as per Article 6, paragraph 1, letter f of the GDPR. Our interests then consist of the assertion of or defense against legal claims.


How long is the data saved?

If an application is declined, the data from the applicant is deleted after 6 months. If you consent to having your personal data saved beyond this point, we will store your data in our pool of applicants. The data will then be erased after one year has passed. If, in the context of the application process, you receive a position at our company, the data will be transferred from our applicant data system to our employee database.


Who will receive the data that is transferred?

We use a specialized software provider for the application process. This company acts as a service provider for us, thus in the context of system maintenance, they could also gain knowledge of your personal data under certain circumstances. This supplier has signed an order-processing contract with us, which ensures that the data processing occurs in a permissible way. Your applicant data will be viewed by the Human Resources department after your application is received. Suitable applications are then forwarded internally to the relevant department managers for the open position. The subsequent procedure will then be determined. Fundamentally, inside the company, only those who require your data in order to conduct the application process properly have access to it. If necessary, we forward your data to the following recipients:

  • Companies of the GBA Group as well as internal departments that are assigned with processing your application,
  • Tax agencies, auditors, and other agencies, if we are convinced in good faith that we are required by law or other provisions to forward this data,
  • External suppliers as well as providers of external IT services and storage providers, if there is a corresponding processing agreement on hand (or a similar form of protection).


Where is the data processed?

The data is processed exclusively in data centers in Germany.


Applying online using our application portal

When applying using our online application tool, you have the opportunity to import your data from professional networks. In order to do so, you must log in there with your individual account. Only then does the data transfer occur. For more information on this, please refer to the notices on our application portal.


Your rights as a “data subject”

You have the right to disclosure concerning the personal data that we process related to you. If the request for access is not provided in written form, we ask for your understanding that we may request proof of identification to ensure that you are the person that you are reporting to be. Furthermore, you have a right to have the data corrected or erased or to limit the processing thereof, insofar as this legally appertains to you. In addition, you have a right to object to the processing of your data even within the context of the legal regulations. The same is valid for the right of portability. You have the right to file a complaint with a monitoring agency for data privacy about the way your personal data is processed by us.


Our Data Protection Officer

For further information pertaining to the way the GBA Group handles personal data, the individuals responsible for data protection and the external data protection officer are available to assist you (https:// ).

V. Cookies

This website uses cookies. Cookies are small text files which are stored on your computer and through which the place that sets the cookie is fed certain information. They are used to make the Internet offer more user-friendly and effective, and / or to facilitate navigation on our website.

You can, of course, also use our website without accepting cookies. You can also configure your browser settings in accordance with your wishes and in overall terms, e.g. refuse acceptance of third-party cookies or all cookies, or delete cookies that have already been stored. If you do not accept cookies, please note that our offer may not work faultlessly in this case.

You can find out which function on our website places cookies further below in the area of the individual functions.

VI. Registration

Our website offers a registration option. The personal data entered during the registration process will be transmitted to the controller for processing. The data entered is processed and used exclusively for the purpose of internal use.

When registering, the IP address of the user and the date and time of registration are saved. This serves to prevent misuse of the services. The data will not be passed onto third parties. An exception applies if there is a legal obligation to share.

The registration of the data is required for the provision of content or services. Registered persons have the possibility at any time to delete or modify the stored data. The data subject receives information about the personal data stored about him at any time.

VII. Passing on of data to third parties

We only pass on data to third parties if this is necessary to fulfil the contract and/or we are statutorily obliged to do so in an individual case.

In some cases we make use of external service providers in accordance with our legitimate interests with regard to analysis, optimisation and economical operation of the online content. This always requires that the third-party providers of this content access the IP address of the users, due to the fact they could not send the content to their browsers without the IP address. The IP address is thus necessary for the presentation of this content. Third party providers may also use so-called pixel tags (invisible graphics, also called "web beacons") for statistical or marketing purposes. Using “Pixel Tags” information such as user traffic can be evaluated on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, among other things, technical information similar to the logfiles. We have listed our service providers below.

If your data is to be used for other purposes, we will inform you beforehand and use the data only if you have explicitly declared your consent to this.



We use services provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google") in accordance with our legitimate interests in the analysis, optimisation, and economic operation of our website.

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law


Google - Youtube

We use the provider YouTube, a service provided by Google, for the integration of videos.

These videos are stored on and are directly playable from our website. YouTube uses cookies for data collection and statistical data analysis. YouTube uses cookies, among other things to record reliable video statistics, prevent fraud, and improve usability. The information produced by the cookie concerning your use of this website (including your IP address) will also be transmitted to Youtube servers in the United States and stored there. Your IP address cannot be assigned unless you have logged in or are permanently logged in to YouTube or another Google service before the page view. If you want to prevent such transmission of data you must log out from your Youtube account and your other Google accounts.

Through the YouTube cookies we receive statistical values to retrieve individual videos embedded in the website without reference to the respective user.

YouTube's embedded videos are used within the scope of permitted use by YouTube, which all users must accept. If you detect copyright infringement, please report it directly to YouTube. We use embedded YouTube videos in the extended privacy mode. This means that YouTube does not store cookies for a user who is viewing a website with an embedded YouTube video player, but does not click on the video to start playback. If you click on the YouTube video player, YouTube may be able to save cookies on the user's computer. We draw your attention to the fact that we as the provider of the website do not receive any notification of the content of the transmitted data as well as its use by Youtube. For more information about YouTube's official privacy policy, please visit and de.

VIII. Rights of the data subject

You have a right to information about the personal data stored by us. According to the statutory provisions you are also entitled to the correction of incorrect data, blocking, data portability and deletion of your personal data. To do so please send an email to us with the subject line "Privacy".

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you is in breach of the law.

If you have provided your consent, you have the right to revoke your consent at any time. This does not affect the legality of the processing performed on the basis of the consent until the revocation is received.

You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection may in particular be made against processing for direct marketing purposes.

IX. Storage duration of the personal data

We store personal data for the duration of the respective statutory retention period. Following the expiry of the deadline, the data will be routinely deleted, unless there is a need to initiate a contract or fulfil the contract. Unless the users' data is deleted because they are required for other and legally permissible purposes, their processing will be restricted. The data is blocked accordingly and not processed for other purposes. This applies, for instance, to data of users which must be stored for commercial or fiscal law reasons.

X. Safety information

We make every effort to store your personal data by making use of all the technical and organisational options available in such a way that the provisions of the data protection acts are observed and thus to protect this data. Our website or the communication via our website with us is encrypted via HTTPS.