1. Data protection at a glance

General

The following information is intended to provide a simple overview of what happens to your personal data when you visit the website [www.breakpointtx.com] (the „Website“).

Definitions

  • Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific factors.
  • Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaption or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data processing on our Website

What personal data do we collect and use?

For the purposes listed in this Privacy Policy, we collect and use the following categories of personal data:

  • Version and type of the browser
  • Operating system used
  • Referrer URL
  • Host name of accessing computer
  • Time and date of server enquiry
  • IP address
  • Requested website or file

Who is responsible for the processing of data on this Website?

Breakpoint Therapeutics GmbH („[Breakpoint]“, „we“, „us“ or „our“) is the data controller for this Website.

Address: Essener Bogen 7, 22419 Hamburg, Germany
Telephone: +49 40 56081 180
Email: info@breakpointtx.com

How do we collect your data?

Your data is collected automatically by our IT systems when you visit the Website. Most of this data is technical data (e.g., internet browser, operating system or the time the Website is accessed). This data is automatically collected if you access our Website.

For which purposes do we process your data?

Some of your data is collected to enable us to provide the Website in a functional manner. Other data can be used to analyse your user behaviour.

What rights do you have with respect to your data?

In case the processing of your data is based on your consent, you can withdraw your consent with effect for the future at any time. This does not affect the processing based on your consent before its withdrawal.

Right to object
If the processing of your personal data is based on Article 6 para. 1 sentence 1 lit. f GDPR (processing based on legitimate interests of the controller), you have the right to object at any time to the processing under the prerequisites stipulated in GDPR, e.g. on grounds relating to your particular situation.

You have the right to obtain information about the personal data concerning you. Under the prerequisites stipulated in GDPR, you have the right to rectification, erasure or restriction of the processing as well as to data portability. You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

Details on your rights as a data subject are provided in Section 2 of this Privacy Policy.

2. General information, data controller and rights as a data subject

Data protection

We take the protection of your personal data very seriously. We treat your personal data in strict confidence and compliance with the provisions of data protection law and this Privacy Policy.

Various personal data is collected when you use this Website. The present Privacy Policy explains which data we collect and what we use it for. It also explains how and for which purpose this is done.

Please note that data transmission in the internet (e.g. for communication by email) can involve security gaps. Complete and absolute protection of data against access by third parties is not possible.

Information on the controller

The controller for the processing of personal data on this Website is:

Breakpoint Therapeutics GmbH
Address: Essener Bogen 7, 22419 Hamburg, Germany
Telephone: +49 40 56081 180
Email: info@breakpointtx.com

SSL or TLS encryption

For security reasons and for the protection of the transmission of confidential content such as enquiries which you send to us as operator of the Website, this Website uses SSL or TLS padlock-encryption. You can recognize an encrypted connection from the fact that the browser’s address line switches from „http://“ to „https://“ and from the padlock symbol in your browser line.

When the SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Withdrawal of your consent to data processing

If the processing of your personal data is based on your consent, you can withdraw your consent with effect for the future at any time. To exercise this right, you can contact us as via email to the email address provided in the Section “Information on the controller” of this Privacy Policy. This does not affect the lawfulness of processing based on your consent before its withdrawal.

Right to object to processing (Article 21 GDPR)

If the legal basis for processing is Article 6 para. 1 sentence 1 lit f. GDPR (processing based on legitimate interests of the controller), you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis for processing can be found in this Privacy Policy. If you object to the processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is required for the establishment, exercise or defence of legal claims (objection according to Article 21 para. 1 GDPR).

To exercise your right to object, you can contact us at any time using the contact data provided in the Section „Information on the controller“ of this Privacy Policy.

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint shall be without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive the personal data which we process in an automated manner based on your consent or for the performance of a contract in a commonly used and machine-readable format. If you request to transmit this data directly to another controller, this will only be done as far as it is technically possible. For this purpose, you can contact us at any time using the contact data provided in the Section „Information on the controller“ of this Privacy Policy.

Access, restriction, erasure and rectification

In accordance with the applicable provisions, you have the right to request information about your stored personal data, its origin and recipients and the purpose of the processing free of charge, and you may have a right to rectification, restriction of the processing or erasure of such data. For this purpose or if you have further questions with regard to personal data, you can contact us at any time using the contact data provided in the Section „Information on the controller“ of this Privacy Policy.

Right to restriction of processing

You have the right to restriction of processing of your personal data. To exercise your right to restriction, you can contact us at any time using the contact data provided in the Section „Information on the controller“ of this Privacy Policy. The right to restriction applies in the following cases:

  • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to demand that we restrict the processing of your personal data.
  • If the processing of your personal data has been or is unlawful, you may request restriction of the processing instead of erasure of your personal data.
  • If we no longer need your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to request restriction of the processing instead of erasure of your personal data.
  • If you objected to the processing according to Article 21 para. 1 GDPR, your and our interests need to be weighed. As long as it is not clear whose interests predominate, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

3. Data processing on our Website

Server log files

We automatically collect and store data in so-called server log files that your browser transfers to us automatically. Server log files contain the following data:

  • Version and type of the browser
  • Operating system used
  • Referrer URL
  • Host name of accessing computer
  • Time and date of server enquiry
  • IP address
  • Requested website or file

The data is not combined with any other data sources.

We use this data to make our Website fully available to you (e.g. to adapt our Website to the needs of your end user device), and to collect and generate comprehensive demographic information to compile anonymous statistics on the use of our Website.

The legal basis for this automated data processing is Article 6 para 1 sentence 1 lit. b GDPR, which allows data processing for the performance of a contract or for pre-contractual measures, and our legitimate interest to ensure the stability and security of the Website, Article 6 para. 1 sentence 1 lit. f GDPR.

As far as the processing is based on our legitimate interests, you have the right to object to this kind of processing at any time on grounds relating to your particular situation. To exercise this right, you can contact us at any time using the contact data provided in Section 2 („Information on the controller“).

The server log files are retained for a period not exceeding nine (9) weeks and will be properly erased afterwards, unless longer storage is required or justified by law. The IP address will be anonymised.

Cookies

The Website uses cookies, which are small text files that are downloaded to your device and stored by your browser. In particular, the Website uses a so called session cookie that records your entries in forms and that is deleted automatically after closing the browser. The session cookie is technically necessary for enabling the use of the Website. The legal basis for the use of the session cookie is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to provide a functional and user-friendly website.

Inquiry by email, telephone or fax

If you contact us by email, telephone or fax, your inquiry including all personal data it contains (name, inquiry) will be stored and processed by us for the purpose of answering your request.

The legal basis for this processing is Article 6 para. 1 sentence 1 lit. b GDPR, as far as it is carried out for the performance of a contract or pre-contractual measures, as well as Article 6 para. 1 sentence 1 lit. f GDPR, as the processing of the inquiries is in the parties’ mutual interest.

As far as the processing is based on our legitimate interests, you have the right to object to this kind of processing at any time on grounds relating to your particular situation. To exercise this right, you can contact us at any time using the contact data provided in Section 2 („Information on the controller“).

Your personal data will be stored for a period of three (3) years after completion of the inquiry and properly deleted afterwards, unless a longer storage is legally required or justified.

Data Retention

We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this Privacy Policy, your personal data will be retained only as long as we need it to fulfil the purpose for which we have collected it or, if applicable, as long as longer storage is legally required or justified.

4. Sharing of personal data with third parties

We may disclose personal data to contracting parties who assist us in providing the services we offer through the Website. In particular, we will disclose your personal data to host providers and IT service providers.

Such transfer will be based on data processing agreements. Therefore, our contracting parties will only use your personal data to the extent necessary to perform their functions. The contracting parties are contractually bound to process your personal data only on our behalf and in accordance with our instructions.

5. Analysis tools

Ionos Web Analytics

The Website uses Ionos-Webanalytics, a web analysis service of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany („Ionos“). In the course of the analyses conducted by Ionos, the number of Website visitors and the visitors’ behaviour (e.g. number of page views, time spent on the Website, jump rates), the visitor sources (i.e. from which page the visitor comes), the visitor locations as well as technical data (version of browser and operating system) can be analysed. For this purpose, Ionos stores the following data:

  • Referrer URL (previously visited website)
  • Requested website or file
  • Browser type and version
  • Operating system used
  • Device type
  • Time of server enquiry
  • IP address in anonymised version (will only be used to determine the location of the access)

Data collection is completely anonymised so that it cannot be traced back to single users. Cookies are not stored by Ionos-Webanalytics.

The storage and analysis is based on Article 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time without giving reasons with effect for the future,

You have the right to object, on grounds relating to your particular situation, to this kind of processing of your personal data. To exercise this right, you can contact us at any time using the contact data provided in Section 2 („Information on the controller“).

For further information, please see the following links:

https://www.ionos.de/hilfe/online-marketing/
https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-von-webseitenbesuchern-ihres-11-ionos-produktes/11-ionos-webhosting/
https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Processing

We have entered into a data processing agreement with Ionos. This agreement is intended to ensure that Ionos handles your personal data in accordance with data protection law. Ionos may only process your personal data as far as required to perform its services. Ionos is contractually bound to process your personal data only on our behalf and in accordance with our instructions.

6. Amendments to this Privacy Policy

We reserve the right to change this Privacy Policy corresponding to updates of our Website. Please visit the Website regularly and check our current Privacy Policy. This Privacy Policy was last updated in March 2023.