To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.

The legal basis for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Change privacy settings | History of privacy settings | „Revoke

 

This is the privacy policy for the website https://www.moleqlaranalytics.com as of 18.04.2024.

Name and address of the responsible person

We, the MoleQlar Analytics GmbH, are to be described as responsible within the meaning of the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) as well as other data protection regulations for our website and the associated data processing. All other information about the company can be found in the imprint of the website.

MoleQlar Analytics GmbH
Rosenheimer Straße 141h
81671 München

Handelsregister: HRB283623
Registergericht: Amtsgericht München

Vertreten durch: Dr. Moritz Völker-Albert

Telefon DE: 089 2153 5730
E-Mail: info@moleqlaranalytics.com

The MOLEQLAR Analytics GmbH is not legally obliged to order a data protection officer. If you have any questions about privacy in our company, please contact us directly as Data Protection Officer. The contact details can be found in this section or the imprint.

Provision of the website and log-files

1. Description and scope of data processing

Each time our website is accessed, our system, i.e. the web server, automates information from the system of the calling computer or terminal of the user. The following data is collected by us: Information about

• The browser type and the version used,
• The operating system of the user’s device,
• The user’s Internet service provider,
• The user’s IP address,
• The date and time of access,
• The previous website from which the user accesses our website.

2. Legal basis for data processing

The legal basis for the temporary storage of these data and log files is Article. 6 paragraph 1, letter f) DSGVO , which is the legitimate interest of us as the responsible operator of the website.

3. Purpose of the data processing

The temporary storage of the IP address of the user by our system is necessary in order to allow delivery of the website to the computer of the user. For this, the IP address of the user must inevitably remain stored for the duration of the session.

The storage of the above data in the log files is done to ensure the functionality of our website. These data also serve us to optimize the site and to ensure the security of our information technology systems (for example, for attack detection). An evaluation of the data for marketing purposes does not take place in this context.

4. Duration of storage

The above-mentioned data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP address of the user is deleted or alienated by us, so that an assignment of the calling client is no longer possible and the containing data have no longer any personal reference.

E-mail contact

1. Description and scope of data processing

We can be contacted via e-mail addresses provided on this website. In this case, the personal data of the sender, i.e. the user, transmitted with the request will be saved.

2. Legal basis for data processing

The legal basis for the processing of these data, which are transmitted by e-mail in the context of a request, is Article 6 paragraph 1, letter f) DSGVO, which is the legitimate interest of us as the responsible operator of this website.

If the request is intended to conclude or execute a contract, the additional legal basis for processing is Article 6 paragraph 1, letter b) DSGVO, i.e. the performance of a contract or the implementation of pre-contractual measures.

3. Purpose of the data processing

The processing of these personal data serves us only for the processing of the contact, in particular the concern of the user.

4. Duration of storage

The above-mentioned data will be deleted as soon as they are no longer necessary for the purpose of their collection. For personal data sent by e-mail, this is the case when the conversation with the user or the fulfillment of his request has ended. In the case of a conversation, this terminates when it can be inferred from the circumstances that the matter in question has been finally clarified.

5. Opposition possibility

The user has the possibility to contradict the data processing at any time. The objection must be sent to the following e-mail address: info@moleqlaranalytics.com
All personal data stored in the course of contacting will be deleted in this case.

Registration and login area for customers and business partners

1. For what purpose is data processed?

When using the moleqlar.boritea.app platform, personal data is processed. This is done for the purpose of
providing and technically operating the platform, including the associated quality assurance, managing the data
required for the tests and transmitting the test result.

2. What data is processed?

Among other things, your name, date of birth, gender and the data of the test performed (date/time, type of test
and test result) are processed. In addition, for communication between your end device (browser, smartphone) and
the moleqlar.boritea.app servers, data of the end device (the public IP address of your Internet access, type and
version of the browser, user logs, information about program errors that have occurred; hereinafter referred to as
“telemetry data”) is also processed.
If you contact us by e-mail or telephone, your personal data such as e-mail address and telephone number, e-mail
correspondence and telephone notes will be processed for the purpose of customer service on the basis of the
legitimate interest (Art. 6 (1) f GDPR) in a good customer relationship.

When accessing the website or using moleqlar.boritea.app, cookies are stored on the end device, which are
absolutely necessary for the functionality of the website or to ensure secure operation.

ABC_session: The session cookie is used to recognize you for the duration of your session and is necessary to ensure
the functionality of the application. As soon as you close the WebApp, the session cookie is automatically deleted.

XSRF-TOKEN: supports a security measure to prevent cross-site request forgery or cross-site scripting. This cookie
is also deleted at the end of your session.

locale: the cookie stores your language preference and is deleted after one year at the latest.

3. Who is responsible for data processing?

Responsible for the processing of this data is MOLEQLAR Analytics GmbH, Rosenheimer Straße 141h + info@moleqlaranalytics.com. If you have any
questions about this data protection information, please contact the data protection officer of MOLEQLAR Analytics GmbH at info@moleqlaranalytics.com.

4. What is the legal basis for processing?

The legal basis for the processing is your consent expressly given during registration in accordance with Art. 6 (1) a
GDPR or Art. 9 (2) a GDPR for the processing of special categories of data. Consent is voluntary, but the data
cannot be processed without it. In this case, you would have to take a test with another test provider or a trained
healthcare provider.
Consent can be withdrawn at any time without giving reasons by sending an email to info@moleqlaranalytics.com or by deleting the user account within the platform. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

5. To whom is the data passed on?

Your data will not be passed on to third parties unless there is a legal obligation to do so. The transfer to service providers who
support us in providing the platform is also excluded. However, these service providers are not permitted to
process the data for their own purposes and are bound by separate contracts to the strict provisions of the
General Data Protection Regulation for  processors and must demonstrate extensive technical and organizational measures to protect the data.

6. How long will the data be stored?

Data is automatically deleted if it is no longer required for its processing purpose:
– Molecular data containing information on nutrition, physical activity, and lifestyle habits will be treated under Article 6(1)(f) of the GDPR. Data will be stored until December 31, 2029, and then anonymized.  Storage can be canceled at any time. For inquiries, contact: info@moleqlaranalytics.com
– Information on the use of the test kit is deleted 300 days after receipt of the results.
– Completed applications of the test kit are automatically deleted if no result is available 90 days after
completion.
– User accounts that have not confirmed the e-mail 14 days after registration will be deleted.
– User accounts that have not logged in for 365 days will be deleted.
– Requested password resets are deleted daily.
– Any information from contact by e-mail or telephone (customer service) will be deleted no later than
three years after the last contact.

The systems used to process the data are located exclusively within the European Union.

7. Your rights

You have the right to access, rectification and erasure of the data and to restriction of processing if erasure is not
(yet) possible. You also have the right to transfer the data to another controller in a structured, machine-readable
format. If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with a
supervisory authority. The supervisory authority responsible for us is Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

However, you can also lodge a complaint with another supervisory authority that is responsible for your place of
residence

Tracking by Google Analytics

1. Description and scope of data processing

We use the tracking tool Google Analytics of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland on our website. In Google Analytics, the interactions of our website’s users are primarily captured and systematically evaluated using cookies.

If individual pages of our website are accessed, the following data is stored:

• Three bytes of the IP address of the user’s calling system (anonymized IP address),
• The website visited,
• The website from which the user accessed on our website (referrer),
• The subpages that are called up from the accessed page,
• The length of stay on the website,
• The frequency with which the website is called up.

The software is set so that the IP addresses are not completely stored, but the last three digits of the IP address are masked (Example : 192.168.79. ***). In this way, an assignment of the shortened IP address to the calling computer or terminal of the user is no longer possible.

2. Legal basis for data processing

The legal basis for the processing of users’ personal data is Article 6, paragraph 1, letter f, DSGVO, which is the legitimate interest of us as controller.

3. Purpose of the data processing

The processing of the user’s personal data with the help of Google Analytics enables us to analyze the surfing behavior of our users. By analyzing the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our own website and its user-friendliness.

4. Duration of storage

The data saved by tracking will be deleted as soon as they are no longer needed for our recording purposes. In our case, this is after 14 months. This is the shortest period that Google Analytics currently allows for the retention period.

5. Opposition possibility

You can use a browser add-on to deactivate Google Analytics JavaScripts (ga.js, analytics.js, dc.js) to prevent Google Analytics from using its data on our website.

If the user wants to disable Google Analytics, they can download and install the add-on for their own web browser. The Google Analytics opt-out add-on is compatible with regular versions of Chrome, Internet Explorer, Safari, Firefox, and Opera. For the add-on to work, it must be loaded and executed correctly in the browser. Third-party cookies must also be activated for Internet Explorer.

Further information can be found under the following link.

Integration of Google Maps and Google Fonts

1. Description and scope of data processing

We integrate the maps of the Google Maps service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. In order to make the map material available, Google will process technically necessary data for this purpose.

In addition, we also use Google fonts for the uniform representation of fonts. When a page is called, the user’s browser loads the required web fonts into its own browser cache in order to correctly display texts and fonts. To do this, the user’s browser must connect to Google’s servers. As a result, Google learns that our website has been accessed from the user’s IP address.

2. Legal basis for data processing

The integration of the services Google Maps and Google Fonts is necessary for the appropriate design of our website. This is also our interest in data processing according to Article 6, paragraph 1 letter f) GDPR, this is the legitimate interest of us as the responsible person.

3. Further information about data processing

Google is responsible for further data processing. For more information about how Google handles your data, please visit https://privacy.google.com and https://developers.google.com/fonts/faq.

Integration of Font Awesome

1. Description and scope of data processing

For the uniform representation of fonts, this website uses so-called Web Fonts. These are provided by Fonticons, Inc. When a page is accessed, the user’s browser loads the required web fonts into the browser cache to display texts and fonts correctly. To do this, the browser used by the user must connect to the Fonticons, Inc. servers. As a result, Fonticons, Inc. learns that our website has been accessed from the user’s IP address.

If the browser used by the user does not support web fonts, a default font will be used by the user’s machine.

2. Legal basis for data processing

The integration of the service Font Awesome is necessary for an appropriate design and an appealing presentation of our website. This is also our interest in data processing according to Article 6, paragraph 1, letter f), DSGVO, this is the legitimate interest of us as the person responsible.

3. Further information about data processing

Further data processing is the responsibility of Fonticons, Inc. For more information on how Fonticons, Inc. handles your data, please visit https://fontawesome.com/privacy.

Rights of the interested party

If personal data of a user is processed, this person is an “interested party” within the meaning of the DSGVO. He has the following rights over us as responsible persons:

• Right of access,
• Right of rectification,
• Right of restriction of processing,
• Right of deletion,
• Right of information,
• Right of data transfer,
• Right of appeal,
• Right of withdrawal of Data Protection consent form,
• Right to complain to a data protection supervisory authority.

Notice on the revocation of a consent:
A person affected has the right to revoke his privacy statement at any time with us. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Notice of Complaint to a Regulatory Authority:
Without prejudice to any other administrative or judicial remedy, an interested party has the right to lodge a complaint with a regulatory authority, particularly in the Member State of the user’s residence, the user’s workplace or the location of the alleged breach, if the user is of the opinion that the processing of his personal data by us violates the GDPR.

In such a case, the user is, of course, free to contact us directly, MOLEQLAR Analytics GmbH as the responsible body, before submitting a complaint to the supervisory authority, in order to achieve a quick clarification of the request by direct means. Such contact can also be made under the e-mail address info@moleqlaranalytics.com.