This Privacy Notice provides information on the processing of your personal data in connection with your use of the Sartorius Pipetting Mobile Application.
Personal data include any information related to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
1. Identity and contact details of the controller and the Data Protection Organization
Sartorius Biohit Liquid Handling Oy, Laippatie 1, 00880 Helsinki, Finland ("Sartorius", "we", "our" or "us"), as controller of personal data, is responsible for the processing of your personal data in connection with your use of the Sartorius Pipetting Mobile Application ("App").
The Sartorius Group Data Protection Organization are available to you as a contact for all data protection-related matters and for exercising your rights. They may be contacted at the above address or at dataprotection@sartorius.com.
2. Processing of personal data
When using the App, Sartorius may process the following categories of personal data for the purposes and on the legal bases specified below.
Unless expressly stated otherwise upon collection of the personal data, the legal bases specified below in accordance with the GDPR shall also include any applicable corresponding local laws.
2.1 Information collected when downloading the App
Before you can download and install this App, you may need to enter into a usage agreement with an App Store operator (e.g. Google, Apple) to access its portal (e.g. Google Play, Apple App Store - "App Stores"). The App Store operator collects and processes data in connection with the use of the App Store, such as user name, email address and individual device identification number as the responsible Controller. We process the data only to the extent necessary to download the App to your device. We are not party to the usage agreement with the App Store operator and have no influence on its data processing. In this respect, the privacy policy of the respective App store operator applies.
2.2 Information that is collected automatically
When using the App, we automatically collect certain data that is required for the use of the App. This includes:
This data is automatically transmitted to us in order to
We store this log data for 30 days.
2.3 Crash reports
With your consent, the App uses usage analytics services to learn at which points within the App a crash occurred, or the App crashed.
Within the context of these crash reports, various information is processed, such as
We store the latter for 90 days.
We process this data on the basis of consent pursuant to Art. 6 (1) (a) GDPR.
2.4 Registration and authentication
2.4.1 To receive access to the App, you need a Sartorius ID user account with Sartorius Corporate Administration GmbH, Otto-Brenner-Straße 20, 37079 Göttingen, Germany ("SCA"). The Sartorius ID serves as a central user account that you can use to log in to numerous services (e.g. websites or apps) of the Sartorius Group or third parties. Further information on data processing in connection with the Sartorius ID can be found in the My Sartorius Privacy Notice at https://my.sartorius.com/data-privacy.
2.4.2 If you use the App using a Sartorius ID and log in, we process the following log data:
We process this log data on the basis of Art. 6 (1) (f) GDPR due to our legitimate interest in ensuring the technical operation of the App, as well as to prevent and eliminate malfunctions and to investigate criminal offences.
2.5 Use of the App
2.5.1 When using the App, you can enter, manage, and edit various information, tasks, and activities. This information includes, in particular, a log of workflow execution and comments.
2.5.2 If you log in to the App, we process the following log data:
The processing and use of usage data is carried out for the provision of the App. This data processing is necessary for the fulfillment of the contract according to Art. 6 (1) (b) GDPR for the use of the App.
2.5.3 The App does not use cookies.
3. External links
This Privacy Notice only applies to this App, not to websites or applications offered and operated by third parties. The App may provide links to other websites or applications of third parties which may be of interest to you. After you click the link, we no longer have any influence on the collection, processing and utilization of any personal data that is transferred to third parties, as our control of the conduct of third parties is then naturally withdrawn. We are not responsible for privacy practices or the content of external websites or applications.
4. Permissions
Certain functions of this App can only be used if the corresponding permissions are granted. Permissions are interfaces to the operating system of your end device, through which the App can access data stored on your end device. The App works with the following permissions:
You can manage and disable permissions within the settings of your operating system. Please note that after deactivating a permission, you may no longer be able to use all of the App's features.
5. Transfer and disclosure of personal data
For the purposes mentioned above Sartorius may transfer or disclose your personal data to:
We employ companies of the Sartorius Group and other specialized companies (e.g. hosting service providers, IT service providers) to process data on our account and our instructions.
We transfer personal data to other third parties in connection with complying with legal obligations or establishing, exercising or defending rights or claims (e.g., for court and arbitration proceedings, to regulators, law enforcement and government authorities, to attorneys and consultants).
If we transfer personal data to service providers or Sartorius Group companies outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual clauses) are in place. You can request information on this and on the level of data protection at our service providers in third countries using the contact information above.
6. Retention periods
Sartorius will retain your personal data for as long as reasonably necessary to fulfill the purposes we collected or otherwise process it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
7. Corporate transactions
As our business evolves, we may change the structure of our business by changing its legal form, establishing, buying or selling subsidiaries, divisions or components. In such transactions, customer information may be transferred along with the part of the company being transferred. In any transfer of personal information to third parties to the extent described above, we will ensure that it is done in accordance with this Privacy Notice and applicable data protection law. Any disclosure of personal data is justified on the grounds that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances as necessary and that your rights and interests in the protection of your personal data within the meaning of Art. 6 (1) (f) GDPR are not overridden.
8. Children
To use this App, you must be at least 16 years old.
9. Your rights
Under applicable data protection law, you may have specific rights in relation to your personal data. In particular, and subject to the statutory requirements, you may have the following data protection rights:
Status of this Privacy Notice: May 2023