Last updated: April 5, 2019
StonyLab, Inc. and all of its affiliated organizations (referred as "StonyLab", "we", "us", or "our" in this Privacy Statement) take considerable precautions to assure the security and privacy of any information passed through our website (https://www.stonylab.com/, and we continually enhance our security measures as the online environment changes. Read more about how we keep your information secure below.
With this data protection declaration we explain to you which personal data is processed for which purposes. "Personal data" is any information relating to an identified or identifiable natural person.
1. Collection and Use of Personal Data
We process personal data that we receive from you as part of our business relationship, i.e. during the initiation, implementation and execution of the contract for the product or service you purchased or personal data that we collect about you in connection with the use of the product or service. We also process data that you voluntarily provide to us, including while attending tradeshows or through our web forms or surveys. Additionally, we process personal data we received from third party websites in case you fill out a form from one of our advertisements for example to receive a download or sign up for a newsletter.
1.1 Browsing our websites
By browsing our websites, you provide us with automatic information. The term "Automatic Information" is information automatically collected by our web server that your web browser makes available whenever you visit one of our websites. The browsing data we collect includes the website you are accessing, the time and duration of your visit, the pages you have visited, your searches and temporarily, your IP address as well as the items you have added to your cart, if applicable. Your IP address is used to identify the city of from which you are accessing the site as well as the company to which the IP address has been registered. We use browsing data of our users for creating aggregated statistics, to learn what is of interest to users in order to improve various aspects of our websites and to provide services like troubleshooting, and to recognize users who have already visited our websites in order to customize their website experiences for their future visits. We also use the browsing data to study traffic patterns and maintaining or restoring the security of our websites or to detect and correct technical defects and errors.
1.2 Providing you with services you requested
In order to provide you with access to some services on our websites, we ask for information from you like your name or an email address, for example, when you register for an account on one of our websites. We use your data to provide you with information or services that you have requested such as providing information about relevant products, services and/or promotions, answering questions about our products or services or sending you newsletters or other marketing/promotional materials based on your selections or providing access to an on-line platform or application. In order to provide you with the information that you have requested or that you may be interested in, we may individualize the content you requested based on the information we collect about you. We use your information like your name, address, email address, financial information, job profession, area of expertise and your purchasing history to complete the sales transaction if you purchased one of our products via a website or to offer you any of our services you requested.
Please note that the provision of some information will be necessary in order for us to take action regarding an order for products or services that you have purchased. For example, we need your address to be able to send you the product you ordered. Our online forms clearly identify which fields are required in order for us to complete the transaction. If you don’t provide these information to us, we will not be able to complete the transaction.
1.3 Customer Management
We process your personal data like your contact information in order to provide you with a satisfactory customer management experience, e.g. sales transaction follow-up or process your inquiries. For this purpose we also process your personal data as part of our management and development of our client relationships in order to provide you with individualized content and to assess your needs as a customer. We process your personal data to analyse your preferences and habits to improve our services and to ensure that we can deliver the highest quality services and support to our customers.
1.4 Legal obligation and legal enforcement
In some cases, we are under a legal obligation to process personal data. A typical example is providing data to a government agency which has identified the potential misuse of a drug or the processing within the scope of the so-called pharmacovigilance, i.e. the obligation to investigate and share data when potential side effects of drugs become known.
Where required, we can also use your data to enforce our or third party rights (such as copyright infringements).
1.5 Providing you with information that may interest you
We aim to present you information that could be of interest to you and to communicate seamlessly over various channels (phone, email, SMS, mail, social media messages) without sending redundant information. Our communication with you is based on the information we collect about you and are permitted to use. For example, we use the combination of your email address and your browsing data so we can provide you with information about a product you look up on one of our websites. Based on the information we collect, we may internally indicate that you are interested in certain categories of information.
Generally, we will use collected information to inform you about our new products, innovations, promotions, seminars, webinars and events like trade and vendor shows.
We only provide you with such information where we are permitted to, for example when you have chosen to receive our promotional emails and where you did not object to our use of your data for marketing-related purposes.
We use profiling procedures to optimize and personalize our customer relationship management and our advertising measures. To optimize and personalize our advertising measures, we create customer profiles and assign customers to specific customer segments on the basis of these customer profiles. On the basis of this segmentation, we can manage the type, content and frequency of specific advertising measures for specific target groups. For profiling purposes, we use data that we receive from you as part of our business relationship. This includes personal data like your purchasing behavior and browsing behavior. Profiling may be based in particular on usage data that we create with the customer's consent by measuring and evaluating the customer's interaction with electronic advertising, in particular by measuring and evaluating the opening and click rate in email newsletters.
The following categories of cookies are concerned:
– cookies that optimize the presentation or display of country-specific content (e.g. the presentation of the website in your national language and corresponding country- specific product availability and pricing),
– cookies that help us to remember your settings
– web audience cookies
You can disable or block cookies in your browser software; however, this may result in restrictions regarding the usability of our websites.
3. Third Party Analytics, Tracking, and Advertising
We work with third party online marketing services (e.g. Google Adwords and Facebook custom audience,), which provide our advertising to internet users who have previously visited our websites on their network or websites. The purpose of these services is to create advertising based on the needs and interests of the relevant internet users.
Our websites contain links to third party websites. If you follow a link to any of these websites, please note that they have their own privacy policies which should be reviewed. We have no liability or responsibility for the content or practices of these websites.
4. Recipients of Personal Data
4.1 Data transfer to our affiliates
4.2 Data transfer to third parties
We pass on your personal data as set forth below:
Service Providers: We share your personal data with third party service providers who use this data to perform services for us, such as payment processors, hosting providers, marketing technology providers, auditors, advisors, consultants, customer service and support providers.
Legally required: We may disclose your personal data if we are required to do so by law or where it is necessary to respond to claims asserted against us or comply with legal processes.
Business transfers: We may disclose or transfer personal data as part of any merger, sale, and transfer of our assets, acquisition or restructuring of all or part of our business, bankruptcy, or similar event.
5. Data Retention
We store data for as long as necessary for the provision of the service requested by you. For example, when you subscribe to a newsletter we will store the associated data at least until you unsubscribe. Based on the information we collected, we may internally indicate that you are interested in certain categories of information. This information will be kept and updated as long as we consider engaging with you.
Your IP address which is collected while browsing our websites and which can legally be considered personal data is stored for a period of time of 7 days unless a reasonably justified incident indicates a longer storage period (e.g. due to a hacking attack).
Under certain circumstances, your data must also be kept longer, e.g. if a so-called Legal Hold or Litigation Hold (i.e. a ban on deleting data for the duration of the procedure) is ordered in connection with official or legal proceedings.
Data without any personal identifiable information may be stored permanently.
6. Children's personal data
We do not knowingly process personal data of children under the age of 16, unless where we process personal data of children intentionally for our campaigns or events. If this is the case, we will inform you separately. Parents and legal guardians shall ensure that their children do not transmit any personal data through our services or websites without permission. If personal data has been transmitted by children, please inform us so that we can delete the personal data and any associated account.
7. Your Rights
You are allowed to obtain access to the personal data that StonyLab processes and can make reasonable requests to correct, amend, or delete information, where it is inaccurate.
In the event you choose to delete or thoroughly anonymize your personal data from our database, we may retain a record of your deletion request as well as records indicating the type of information deleted as evidence of our compliance with this Internet Protection Notice.
You can also exercise your rights to obtain the portability of your personal data or to request the restriction of the processing of your personal data.
In addition, whenever we processes your personal data based on its legitimate interest, you may at any time object to such processing on legitimate grounds relating to your particular situation.
In addition, you can unsubscribe or opt out of our direct marketing communication at any time. It is easiest to do this by clicking on the “unsubscribe” link in any marketing related email or communication we send you. Otherwise, you can contact us using contact detail below.
We does not endorse, nor does it participate in the practice of “spamming” (sending of unsolicited promotional e-mail). If you believe you have received such a message from us please contact firstname.lastname@example.org.
To submit any of the above mentioned requests, please contact us at email@example.com or at the mailing address listed below. Be sure to include your name and clear instructions regarding any change to your personal data or request to delete your information from our database, and we will respond to your message. In case we are unable to complete your request, we will provide you with relevant explanations in due time.
You have the right to data portability, e.g. you can ask us to provide your personal data in a structured, commonly used and machine-readable format for your use or transfer to another controller. You can lodge a complaint with a supervisory authority. Where processing is based on your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
8. Contact Details
If you have any requests or questions, please feel free to contact us via email at firstname.lastname@example.org. We will respond to questions or concerns or notify you that we need an extension of time to take action on your request without undue delay and in any event, within one month of receipt of your request.