Data Privacy Statement

Below you will find information on the processing of your personal data by Helmholtz Zentrum München – German Research Center for Environment and Health (GmbH) (hereinafter “Helmholtz Munich”) in connection with the use of the Oligo Designer Toolsuite Cloud, and on your rights under data protection law.

1. Purpose of data processing

Personal data is processed to provide, operate, and ensure the functionality and security of the Oligo Designer Toolsuite Cloud service, to generate user-requested computational results, to prevent misuse, and to improve the service.

2. Categories of data processing

The following personal data is processed by for the above-mentioned purpose:

Pseudonymous user identifier obtained via Helmholtz Authentication and Authorization Infrastructure (AAI)
Uploaded genome data (processed temporarily)
Processed research outputs (e.g. designed oligonucleotides)
Voluntarily provided data (e.g. feedback or contact requests)

3. Legal basis for data processing

Processing of authentication data and research outputs is based on Art. 6(1)(b) GDPR (performance of a contract). Uploaded genome data may be processed based on consent pursuant to Art. 9(2)(a) GDPR where applicable.

4. Recipients of the data and third country transfer (other EU countries)

Within Helmholtz Munich, access to personal data is limited to staff members who require it to provide and maintain the service. Personal data is not disclosed to third parties and no transfer to countries outside the EU/EEA takes place.

5. Duration of processing, deletion of data

Personal data is stored only as long as necessary for the purposes described above. In particular:

User identifiers and research outputs are deleted upon user request, after 12 months of inactivity, or at the latest after five years.
Uploaded genome data is deleted immediately after processing.
Data from anonymous users is deleted after 30 days.

6. Automated decision-making/profiling

We do not use automated decision-making or profiling in accordance with Article 22 GDPR.

You have the following rights in connection with the processing of your personal data:

In accordance with Art. 7 GDPR, you have the right to withdraw your consent to data processing (if you have given it to us) at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
In accordance with Art. 15 GDPR, you have the right to request information about the personal data concerning you that is processed by Helmholtz Munich.
In accordance with Art. 16 GDPR, you have the right to demand the immediate correction or completion of incorrect or incomplete data stored by us.
In accordance with Art. 17 GDPR, you have the right to request the erasure of personal data concerning you that is stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation to which Helmholtz Munich is subject, for the performance of a task carried out in the public interest or for the establishment, exercise or defense of legal claims.
In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data if you dispute the accuracy of this data or if the processing of this data is unlawful.
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us;
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation. Your data will then no longer be processed unless Helmholtz Munich can prove compelling reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
According to Art. 77 GDPR in conjunction with § Section 17 BDSG, you have the right to lodge a complaint against Helmholtz Zentrum München Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH) with the competent supervisory authority. This is:

The Federal Commissioner for Data Protection and Freedom of Information (BfDI) Husarenstr. 30, D-53117 Bonn Phone: +49 (0)228-997799-0 E-Mail: poststelle@bfdi.bund.de

8. Controller within the meaning of data protection law Responsible for the processing of the above-mentioned personal data and your related applications and inquiries is the:

Helmholtz Zentrum München Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH) Ingolstädter Landstraße 1 D-85764 Neuherberg Phone: +49 (0)89-3187-0 E-Mail: info@helmholtz-muenchen.de

If you have any questions regarding data protection, please contact our data protection officer:

Helmholtz Zentrum München Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH) Data Protection Officer Ingolstädter Landstraße 1 D-85764 Neuherberg E-Mail: datenschutz@helmholtz-muenchen.de

Information pursuant to Art. 13 of the General Data Protection Regulation (GDPR)