Data Processing Policy at ABX-CRO

Who is responsible for data processing?

Responsible according to data protection law:

Further information about our company and contact details can be found on our website.

Which personal data will we process? And for what purpose?

Data that we receive from you will only be processed for the purpose that they were given to us or compiled for. Processing of data for other purposes will only be possible as long as the legal requirements according to article 6 para.4 GDPR are met. All information requirements in the sense of article 13 para. 3 GDPR will be met.

Which legal regulations apply?

As long as no further specific legal regulations are applicable, the legal regulations for the processing of personal data are generally article 6 GDPR. The following points must be taken into consideration:

• Consent (Art.6 para.1 a) GDPR)
• Data processing to fulfill contractual requirements (Art.6 para.1 b) GDPR)
• Data processing to weigh interests (Art.6 para.1 f) GDPR)
• Data processing to fulfill legal requirements (Art.6 para.1 c) GDPR)

When your personal data is processed upon your consent, you have the right to withdraw your consent from ABX-CRO at any time for the future.

When personal data is processed for the purpose of weighing of legitimate interests, as the person concerned you have the right at any time to raise an objection to the processing of your personal data according to guidelines in article 21 GDPR.

How long will data be saved for?

Data will only be saved for as long as necessary for the purpose it is intended for.

Personal data will be saved for as long as legally required – e.g. commercial law or tax law. After the elapse of the legal term, an inspection will determine whether further processing is required. If there are no other requirements then the data will be deleted.

We generally carry out an inspection of the necessity of further data processing at the end of a calendar year. Because of the quantity of data, this inspection focuses on the specific types of data or the purpose of processing.

You may at any time (see below) ask for information about data that has been saved about you and if it is not legally required you can request to have the data deleted or restrict the processing.

To whom will the data be transferred to?

Your personal data will generally only be transferred to a third party to fulfill contractual obligations between yourself and ABX-CRO, or if necessary for the purpose of weighing of legitimate interests in the sense of article 6 para. 1 f) GDPR, or if we are legally required to transfer the information and provided that we have the consent to do so.

Where will the data be processed?

Your personal data will be processed exclusively in data centers in the Federal Republic of Germany.

Your rights as data owner

You have the right to access the information about your personal data that is being processed by us. Furthermore you have the right to data rectification, deletion or restriction of the processing as long as this is legally permissible.

Please be aware that we will require suitable proof of identification for access requests so as to avoid any data violations by third parties. Furthermore the law entitles you to object to the processing. The same is valid for data portability.

In particular, you have the right to object to the processing of your data when it is for the purpose of direct marketing when it is obtained for weighing of legitimate interests in accordance with article 21 para.1 and 2 GDPR.

Our data protection officer

Our company has a designated data protection officer who can be reached as follows:

Or via E-Mail to datenschutz@abx-cro.com

Your right to lodge a complaint

In the case of disaccord or justified suspicion of violation, you have the right to lodge a complaint to the responsible data protection authority. The contact details for responsible authority can be found below.

Regulatory Authority