Data protection

Responsible Party 

Controller in accordance with Article 4 Clause 7 of the EU General Data Protection Regulation (GDPR) is 


peptech GmbH,

Siemensstr. 31,

71394 Kernen i.R.,



Tel.: +49 (0)7151 2755 900



You can contact our Data Protection Officer under


This data privacy statement explains how and what personal data we collect from you through our website. Personal data means all data that can relate to you personally, such as your name, address, e-mail account(s), user behaviour.

Whenever you contact us by e-mail or through a contact form, we save the data provided by you (your e-mail account, possibly your name and phone number) to be able to deliver answers to your questions. We delete the data collected in this context after its storage is no longer necessary, or we limit its processing where it is subject to legal obligations to retain data.

If we involve contracted third party providers to support individual functions of our offer or should we want to use your data for advertisement, the relevant applicable procedures are described in detail below. Below, we also describe the established criteria for the duration of data storage period.

The data processed by us are deleted or their processing is limited in accordance with Articles 17 and 18 of the GDPR. Unless explicitly stated otherwise in this data privacy statement, the data stored by us is deleted as soon as it is no longer required for its intended purpose and no legal obligations to retain data prevent its deletion. Limitations are imposed on processing of the data which has not been not deleted because it is required for other legally allowed purposes. In other words, such data is blocked and not accessible for processing for any other purpose. This rule applies for example to the data which has to be retained for reasons associated with commercial or tax law.


Your rights

You have the following rights in respect to us regarding the personal data relating to you: You have the right to obtain information about your personal data processed by us. We hope for your understanding because in case of an inquiry submitted to us other than in writing we will most probably request proof from you in such a situation in order to confirm that you are actually the person you claim to be. 


You also have the right to adjust or to delete or to limit processing of your data to an extent legally allowed. Moreover, you have the right to object against processing of your data to an extent permitted by law. The same can be said about the right to “data transmissibility”.

Furthermore, you have the right to apply to a data protection authority with complaints concerning how your personal data is processed by us.


Collection of personal data from our website visitors

Where our website is accessed purely to gain information, i.e. where you do not register or provide us information in any other way, we only collect the personal data provided by your browser to our server. Where you want to view our website, we collect the following data necessary for technical purposes to be able to demonstrate our website to you and to ensure adequate access stability and security (the legal basis is Article 6 Paragraph 1 Section (1) Letter (f) of the GDPR): 

  • IP address
  • Enquiry date and time
  • Time zone difference to Greenwich Mean Time (GMT)
  • Enquiry content (the exact web page accessed)
  • Access status/HTTP status code
  • Data volume transmitted in each case
  • Website generating the enquiry
  • Browser
  • OS and its interface
  • Browser language and version

This data is retained for security reasons (e.g. for investigation of misuses or prevention of fraud) for maximum seven days and deleted upon expiry thereof. The data which has to be retained for a longer period as evidence will only be deleted after the relevant incident is finally clarified. 

Additionally to the data listed in the foregoing, your computer will save our cookies when you access our website. Cookies are small text files which are stored on your hard drive as files assigned to your browser and through which certain information is provided to the cookie sender (in this case to us). Cookies are not able to execute any programmes or to infect your computer with any virus. Their purpose is to make your work in the internet generally more user-friendly and effective.


Use of cookies

a) This website uses the following cookie types whose scope and functions are explained in more detail below:

  • Transient cookies (please refer to b)
  • Persistent cookies (please refer to c)

b) Transient cookies are deleted automatically when you close your browser. They include in particular session cookies. They store information about the so-called session ID with which diverse enquiries of your browser are assigned within the entire session. They enable us to recognise your computer as that of our former visitor when you return to our website. The session cookies are deleted when you close your browser.

c) Persistent cookies are deleted automatically after a pre-set period of time which can differ from cookie to cookie. You can delete the cookies at any time using the security settings of your browser.

d) You can configure your browser settings at your discretion and in particular decline acceptance of third party cookies or of all cookies. We point out, however, that in such case you will not be able most probably to make use of some of the functions at this website.


Other functions and offers of our website

Next to the possibility to use our website purely for information purposes, we offer diverse services which you can use if they are of interest for you. As a rule, to be able to use them you would be requested to provide your more detailed personal data which we use for the provision of the concerned service and which are covered by the data processing principles described in the foregoing.

We use the services of external service providers to process some of your data. We select and engage our service providers with thoroughness and care; they are bound by our instructions and monitored on regular basis.

Furthermore, we may pass on your personal data to third parties if events, contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data.


Where our service providers or partners are located in a state outside the European Economic Area (EEA), we inform you about the consequences of this situation in the description of our offer.


Objections against data processing or recalling of your data from processing

You can withdraw your agreement earlier granted us for processing of your personal data at any time. Such withdrawal of your agreement will affect the accessibility of your personal data for processing as soon as you make it known to us.

To the extent we process your personal data to support our legitimate interests, you can file an objection against such processing. That is the case in particular where processing of the concerned data is not necessary for the purpose of executing our agreement with you, which fact we point out in the description of the concerned function below. If you file an objection with us, please kindly provide reasons why we should not process your personal data the way we are processing them currently. If your objection is found to be substantiated, we will investigate the matter and either suspend processing of your data and make appropriate adjustments or disclose to you our overriding reasons to continue processing of the concerned data where protection is necessary.

You can object to the processing of your personal data for purposes of marketing and data analysis at any time. You can inform us about your marketing objection under the contact data mentioned above.


Use of Google Analytics

This website uses Google Analytics, a web analytics tool by Google LLC (“Google”). Google Analytics uses so-called “cookies”, i.e. text files stored in your computer which enable us to analyse how you use our website. The information automatically collected by cookies concerning your use of this website is typically transmitted to and stored on a Google server in the United States. Google will mask some parts of your IP address and shorten it within the EU member states or within other states – parties to the Agreement on the European Economic Area. The full IP address will be transmitted to a Google server in the United States and shortened there solely in exceptional circumstances. Upon instruction from the controller (operator of this website), Google will use this information to analyse use of the website by you, to compile reports about your website activity and to provide the website operator other services concerning use of the website and of the Internet.

Google will not associate the IP address transmitted from your browser through Google Analytics with any other data held by Google.


You can also disable acceptance of cookies by your computer by configuring your browser settings accordingly; please note, however, that in such case you most probably will not be able to make use of some of the functions at this website. Additionally you can prevent registration and transmission to Google as well as processing by Google of the data generated by cookies in respect of your use of this website (including your IP address) by downloading and installing the browser plugin available through this link:


Finally, you can prevent Google from collecting and processing data relating to your use of the website by clicking this link; in this case, an opt-out cookie is stored in your browser, which means that Google does not collect any session data. Please note: If you delete your cookies, the opt-out cookie will also be deleted and you may have to activate it again.

This website uses Google Analytics with the extension “_anonymizeIp()”. That ensures further processing of shortened IP addresses, thus disabling their direct referencing to persons. To the extent the data collected about you can be directly referenced to you, such referencing is immediately ruled out and the personal data is deleted at once.


We use Google Analytics to analyse use of our website and to be able to improve our website on regular basis. The collected statistics helps us improve our offer and position ourselves in a more interesting way for you as our user. For exceptional situations where personal data is transmitted to the USA, Google has submitted itself to the EU-US Privacy Shield The legal basis allowing us the use of Google Analytics is Article 6 Paragraph 1 Section (1) Letter (f) of the GDPR.


Information on the third party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Tel: +1 650 253 0000, E-Mail:

Utilisation terms and conditions:

Data Privacy Synopsis: and the data privacy statement:


Use of LinkedIn

The term personal data applies to all data that can be personally linked to you as a user, for example your name, address, e-mail addresses and information on your user behavior.


Operator of our LinkedIn page:

peptech GmbH

Dr. Norman Mechau

Siemensstr. 31

71394 Kernen i.R.



Tel.: +49 (0)7151 2755 900





Contact of our Data Protection Officer:


We, the peptech GmbH, together with the operator of the social network, the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, hereinafter referred to as “LinkedIn”, are the controller as defined in Article 4 paragraph 7 of the General Data Protection Regulation (GDPR). When you visit our LinkedIn page, your personal data are processed by the controller. This Privacy Policy provides you with information on which data are processed, how they are processed and the rights that you have in connection with these data processing activities.


Use of the LinkedIn portal is based on the Terms of Use of LinkedIn at and the other terms, conditions and guidelines stipulated on the website. These particularly include the LinkedIn Privacy Policy at and Cookie Policy at


If you have any questions regarding the processing of your personal data, would like to request information on or the blocking, erasure or rectification of data or would like to withdraw any consent given or object to the processing of your personal data, please contact our controller pursuant to Article 4 paragraph 7 of the European General Data Protection Regulation (GDPR). You can find the relevant contact details in Section 1 subsection 2 of this Privacy Policy. Information on how LinkedIn handles personal data on the LinkedIn portal can be found in the LinkedIn Privacy Policy at , in the LinkedIn Cookie Policy at and on the LinkedIn Help pages at or


Information on Data Processing

To provide you with our LinkedIn page and the corresponding services, we process your data according to the following legal bases: On the basis of an assessment of interests pursuant to Article 6 paragraph 1 lit. f) GDPR.

In connection with each data processing activity, we refer to the corresponding terms and concepts in the GDPR so that you can identify the basis on which we process personal data.


Your Rights

You have the following rights against us with regard to your personal data:

1. Right of access (Art. 15 GDPR) 

You have the right to receive information on your personal data. You can contact us to request information at any time. In the case of information requests that are not submitted in writing, please be aware that we may require evidence from you that proves your identity.

2. Right to rectification or erasure (Art. 16 and Art. 17 GDPR) 

You have a right to rectification or erasure of your personal data where legally entitled. We generally erase personal data when there is no longer any requirement to store these data. Such a requirement may particularly apply if we still need the data in order to perform the contractually agreed services and to investigate and fulfill or reject warranty claims and, where applicable, claims under guarantee. In the case of statutory obligations to retain data, the erasure of data will not be possible until the obligation to retain the data has expired.

3. Right to restriction of processing (Art. 18 GDPR)

 You have a right to restriction of processing of your personal data where legally entitled. You can request the restriction of the processing of your personal data under the following conditions:

a. If you contest the accuracy of your personal data for a period of time that is long enough to enable the controller to check the accuracy of the personal data

b. If the processing is unlawful and you object to the erasure of your personal data and request the restriction of their use instead

c. If the controller no longer needs the personal data for the purposes of the processing, but they are required for the establishment, exercise or defense of legal claims

d. If you have objected to the processing pursuant to Article 21 paragraph 1 GDPR pending verification as to whether the legitimate grounds of the controller outweigh your reasons

If the processing of your personal data has been restricted, these data are, with the exception of storage, only permitted to be processed with your consent, for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

If the processing has been restricted pursuant to the requirements specified above, the controller will inform you before lifting the restriction.

4. Right to notification (Art. 19 GDPR) 

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients by the controller.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another controller without being hindered by the controller to which you provided the personal data.

6. Right to object to the processing of your data (Art. 21 GDPR) 

If the processing of your personal data by us is based on an assessment of interests, you can file an objection to the processing. This is especially the case when the processing is not required to fulfill a contract with you, which is specified by us in the following description of the functions in each case. When you file such an objection, we request that you specify the reasons as to why we should not process your personal data the way we do. In the case of a justified objection, we will examine the situation and either stop or adjust our data processing activities or present you with our imperative reasons warranting protection, on the basis of which we will continue our processing activities.

7. Right to lodge a complaint with the supervisory authority 

You additionally have the right to lodge a complaint with a supervisory authority for data protection with regard to the processing of your personal data by us. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, especially in the member state of your habitual residence, your place of work or the location in which the alleged infringement took place if you believe that our processing of your personal data infringes the GDPR. The supervisory authority with which the complaint is lodged will inform the complainant about the progress and outcome of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.


Collection of personal data when you visit your LinkedIn page

LinkedIn (the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) processes personal data and information for market research and advertising purposes. LinkedIn evaluates your pattern of use to present its advertisements in a more targeted manner. Furthermore, LinkedIn enables us as the operator of the LinkedIn page to receive statistics, which it produces based on the visits of users of our LinkedIn page. The purpose of these statistics is to enable us to control the marketing of our business activities. The statistics allow us to, for example, obtain knowledge of the profiles of the users who visit and view our LinkedIn page, read posts or use applications on the page; to provide the users with more relevant content and to develop functions that may be more interesting for the users. These use profiles can in turn also be used to, for example, publish advertisements that are likely to correspond to the users’ interests both within and outside of the networks. For these purposes, cookies are normally installed on users’ devices. These cookies store information on the pattern of use and interests of the users. Furthermore, data can also be stored in the use profiles independent of the devices used by the users. This is particularly the case if users are members of LinkedIn and are logged into their account.


To gain a better understanding of how we can make our LinkedIn page more interesting for users, demographic and geographic evaluations are produced based on the information recorded by LinkedIn and provided to us, We can use this information to publish interest-based advertisements in a targeted manner without obtaining direct knowledge of the identity of the user. If you use LinkedIn on several different devices, the collection and evaluation can also occur across different devices when the users are registered members of LinkedIn and are logged into their own profile.


The user statistics produced are only transmitted to us in anonymized form. We have no access to the data that form the basis of these statistics.


We operate this LinkedIn page to present our company to and to communicate with the users of LinkedIn and other interested individuals who visit our LinkedIn page. We only want to find out which content and information attract the interest of the users of our LinkedIn page so that we can continue to make our page more attractive. The processing of the personal data of the users is carried out based on our legitimate interests in an optimized presentation of our company. The legal basis for the data processing is Article 6 paragraph 1 lit. f) GDPR.


In its Privacy Policy, LinkedIn states that some of the information collected may also be processed outside the European Union, including in the USA. This may lead to risks for you, especially with regard to it being more difficult for you to enforce your rights.


We do not disclose any personal data to third parties.


Possibilities to object on LinkedIn

Users of LinkedIn can use the LinkedIn settings for advertising preferences to influence the extent to which their user behavior is allowed to be recorded when they visit our LinkedIn page. Further possibilities can be found in the LinkedIn settings at and


Users can additionally prevent the processing of information via the cookies used by LinkedIn by blocking cookies from third parties or those from LinkedIn in their own browser settings.


Nature of joint responsibility

The agreements with LinkedIn, including those concerning joint responsibility, mainly indicate that information requests and the enforcement of further rights of the data subject should most appropriately be carried out directly via LinkedIn. As the provider of the social network LinkedIn, LinkedIn solely has the direct means of access and the information required to be able to process your inquiries and requests. LinkedIn can additionally take any required measures directly and provide information. If you nevertheless require our support, please feel free to contact us at any time.