Data protection

We, the TCC GmbH, take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal regulations of the relevant data protection laws, in particular the EU General Data Protection Regulation (GDPR) as well as this privacy policy.

This Privacy Policy covers the use of our digital services, including our social media profiles on PCs, smartphones, tablets and all other Internet-enabled mobile devices.

The digital services may contain links to other third party service provider websites that are not covered by this privacy statement.

1. Controller

The data controller for the processing of your personal data is

TCC GmbH
Humboldtstr. 67a
22083 Hamburg
info@tcc-clinicalsolutions.de

If you have any questions about data protection with us, please write to us at the aforementioned postal address, with the addition "Data protection" or at the e-mail address provided.

2. Purposes and legal basis of data processing

2.1 Data processing for the provision of contractual services

You can contact us via our website and our contact data to request contractual services. You can also use the contact form on our website for this purpose. If you provide us with personal data this way or in another way with this purpose, we process your data for the answer of your requests, for the performance of the order/contract as well as for invoicing. We need your name, your address data as well as your e-mail address. These data are necessary to enter into a contract with us. In addition, we collect further data you provide within the contractual initiation or performance of the contract, which are not absolutely necessary for the performance of the contract, but which support the purpose and are useful for it, in particular to be able to provide better consulting services. For example, we may collect information about contact persons in your company (name, telephone number, e-mail address, department, position in the company) and information about your company (business sector, planned measures and budget plans, if you provide them).

In the case of suppliers/service providers, we process the provided personal data to order and claim services and to pay for the services provided. For this we need the name, the name of your company (if different) the address data as well as the bank account data. Depending on the order/contract, we may require additional data; we will inform you on a case-by-case basis.

The basis for data processing is Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

2.2 Data processing for communication with you (contact form, etc.)

In addition to the contract data, we process your communication data (names of contact persons, address, telephone number, fax number, e-mail address) in order to be able to contact you and communicate with you within the contractual relationship. Personal data that you provide to us by e-mail or via the contact form on this website will only be processed for correspondence with you or only for the purpose for which you have made the data available to us.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

2.3 Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The respective content of a newsletter is explained in the respective declaration of consent. If you would like to receive a newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose, we will send you an e-mail with a confirmation link (double opt-in) to the e-mail address you have entered. If you do not confirm your registration, your information will be blocked and automatically deleted after one month.

Your e-mail address is the only mandatory information for sending the newsletter. The entering of further, separately marked data is voluntary and will be used to address you personally. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data. We do not collect any further data in this context. We use these data exclusively for the dispatch of the requested newsletter.

Data processing takes place on the basis of your consent pursuant to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to the sending of a newsletter at any time and cancel the respective subscription. You can declare your revocation by clicking on the link provided in every e-mail or by sending us a message via the contact details mentioned under point 1. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

2.4 Cookies

We may use so-called cookies on some of our websites, among other things to be able to offer you website-specific services, to recognize you when you visit our website again, and/or to adapt our offer to your personal preferences. Cookies are small text files that are stored on a visitor's computer and contain data on the respective user in order to enable access to various functions. Both session cookies and persistent cookies are used on our website. A session cookie is temporarily stored on your computer as you navigate through the site. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period of time. A persistent cookie remains on your computer until it is deleted. The storage of a cookie ensures that you do not have to repeatedly enter your personal settings and preferences every time you visit our website. This saves you time and makes using our website more convenient for you.

You can delete permanently installed cookies via the settings of your browser. Most browsers accept cookies automatically - so if you want to suppress the use of cookies, you may have to actively delete or block cookies or prevent the storage of cookies by setting your browser software. Please note, however, that if you choose not to accept cookies, you may still be able to visit our website, but some features may not work as intended.

We may use necessary cookies, which are required to enable the performance of the services we are obliged to provide or which are indispensable for the functionality of our website. We may obtain your consent for the use of other, unnecessary cookies. The data processing is then carried out on the basis of your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent at any time. The legality of the data processing already carried out remains unaffected by the revocation.

2.5 Linkedin

We have a company page on the social network linkedin.com of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") and are provided with so-called page analytics by LinkedIn with regard to our services. We are jointly responsible with LinkedIn for this operation of the LinkedIn company page within the meaning of Art. 26 GDPR.

For the type and scope of the information provided to LinkedIn, the associated purposes of data processing by LinkedIn, its lawfulness, and information on exercising your rights, please refer to LinkedIn's privacy policy at the URL https://www.linkedin.com/legal/privacy-policy and the joint controllership agreement, which can be found at the URL https://legal.linkedin.com/pages-joint-controller-addendum.

Page Analytics (https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview) is aggregated data that allows us to learn about how people interact with our site. The generation and provision of these page analytics is the responsibility of LinkedIn, we have no influence on it. LinkedIn assumes all obligations under the GDPR with regard to the processing of insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of the data processing by us of the data provided by LinkedIn is the statistical evaluation of the use of our company page. This enables us, for example, to determine preferred visiting and posting times of our users and to use this data to optimize our posts and our company page. In addition, we process personal data made publicly available by you on LinkedIn (e.g., clear names in the user profile) as well as data directly related to activities on our company page (e.g., contributions, posts, likes, marks), also for the purpose of communicating with you.

The basis for the above data processing is Art. 6 para. 1 p. 1 lit. a GDPR, insofar as you have given your corresponding consent to LinkedIn in this regard. You can revoke this at any time vis-à-vis LinkedIn with effect for the future. If you have given us consent in this regard, you can revoke this consent at any time with effect for the future. Otherwise, the basis for our data processing is Art. 6 (1) p. 1 lit. f DSGVO, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. Our interest lies in providing content and communication with LinkedIn users and in improving the reach and effectiveness of our posts.

Please assert your rights to information, correction, deletion, restriction of processing and data portability of your stored Insights data against LinkedIn, as LinkedIn has assumed the corresponding obligations:

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
Privacy policy https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

2.6 Data processing for applications

You can send us applications for jobs in our company via our websites and the contact data we have stored there. Insofar as personal data is transferred to us by you in this way or in any other way during applications, we process your data for the purpose of examining, processing and responding to your application and, if necessary, preparing the employment relationship.

In the case of applicants who are minors, we also record the personal data of the legal guardians, in particular name, address and, if applicable, the consent to enter into the contract with TCC and obtain any necessary consent.

The basis for the data processing is either Art. 88 para. 1 GDPR, Art. 26 para. 1 BDSG (new) which allows the processing of data for the purpose of deciding on the justification, for the establishment as well as for the performance of employment relationships or - if you have given your consent - Art. 6 para. 1 s. 1 lit. a GDPR. You may revoke any consent you have given at any time with effect for the future. An informal notification by e-mail to us is sufficient for this purpose. The legality of the data processing operations already carried out remains unaffected by the revocation.

2.7 Data processing to protect legitimate interests

We also process your data if it is necessary to protect the legitimate interests of us or third parties. This may be the case in particular to ensure IT security and IT operation, in particular also for support enquiries, to be able to understand and prove facts in the event of legal disputes, for market and opinion surveys, to statistically evaluate the use of our website, for advertising other products from us or our cooperation partners.

The basis for data processing is Art. 6 para. 1 s. 1 lit. f GDPR. We have a legitimate interest in the above-mentioned data processing. Our interest is either in IT security, in ensuring support for better usability of our website or in our legal interest or in our evaluation and advertising interest.

Other data processing based on your consent
It may also happen that we ask for your consent to process personal data. Any granting of consent and the relevant data processing is voluntary and you will not suffer any disadvantages if you do not consent.

The data processing is then carried out on the basis of your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. An informal notification to us is sufficient for this purpose. The legality of the data processing operations already carried out remains unaffected by the revocation.

2.9 Log files

Each time our websites are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The stored data records contain the following data: Browser type and browser version, operating system used, referrer URL, time of server request, shortened IP address.

These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.

The data processing is based on Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the data controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.

2.10 Data processing for the fulfilment of legal obligations

In addition, we process your data to fulfil legal obligations (e.g. regulatory requirements, commercial and tax storage and proof obligations).

The basis for data processing is Art. 6 para. 1 lit. c GDPR, which permits processing to fulfil a legal obligation.

3. Categories of receipt of personal data

Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract processing or billing or if you have given your prior consent or if there is a legal basis for the passing on of such data.

Service providers who support us in providing our services to you are sales and marketing partners, software (SaaS) providers, IT service providers, in particular service providers for software and hardware maintenance, hosting providers and e-mail service providers.

4. Duration of data storage

In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still necessary. We store your data on the basis of legal proof and storage obligations, which result among other things from the German Commercial Code and the German Tax Code, according to which the storage periods are up to ten full years. In addition, we keep your data for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years).

5. Data Security

Your personal data will be transmitted securely by us through encryption. We use the coding system SSL (Secure Socket Layer). You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. Furthermore, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons.

6. Rights of the data subject

Within the framework of the applicable legal provisions, you have the right to access information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification, restriction or erasure of this data. You can request information about your personal data stored by us and under certain conditions request the correction or erasure of your data by contacting us via our contact data given above. You may also have the right to restrict the processing of your data and to have the data you provide disclosed in a structured, common and machine-readable format. If you have given us your consent to process personal data for specific purposes, you can revoke your consent at any time with effect for the future. You may object to the processing of your data for direct marketing purposes. If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation. You can also contact a data protection supervisory authority.