Data protection notice for our flyer

• 1 Information about the collection of personal data

(1) In the following we inform you about the processing of personal data, if you became aware of us due to our flyers. Personal data is all data that can be related to you personally, e.g. name, address, email address, telephone number. In this way, we would like to inform you about our processing operations and at the same time comply with the legal obligations, in particular from the EU General Data Protection Regulation (GDPR).

(2) The responsible party pursuant to Article 4 (7) of the EU General Data Protection Regulation (DSGVO) is COLDPLASMATECH GmbH, represented by the Managing Director Dr. Carsten C. Mahrenholz, Bahnhofstraße 31/32, 17489 Greifswald, Germany, e-mail: info@coldplasmatech.de. You can reach our data protection officer at info@coldplasmatech.de or at our postal address with the addition "the data protection officer".

• 2 Processing of personal data when contacting and forwarding your data to a study center

(1) When you contact us, the contact data provided to us, such as your name, telephone number, address and email address, if applicable, will be processed by us in order to answer your questions. The personal data provided to us will only be stored if there is a legal retention period. The legal basis is Art. 6 para.1 p.1 lit. b DSGVO.

(2) If you are interested in participating in our study, we will search for the study center in your vicinity where we offer our services. With your consent, we will forward your personal data (name, address, telephone number, email) to the relevant study center for the purpose of contacting you through the relevant study center. The legal basis is Art. 6 para. 1 p.1 lit. a DSGVO. You can revoke your consent at any time. Such revocation affects the permissibility of processing your personal data after you have expressed it to us. The permissibility of processing your data until the time of your revocation remains unaffected.

(3) At present, the forwarding of your data in accordance with Paragraph 2 may take place to the following study centers:

• 3 More receivers

In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are regularly monitored. An order processing contract has been concluded. The order processors are Gesundheitsforen Leipzig GmbH, Hainstr. 16, 04109 Leipzig, who forward your data to the study centers on our behalf, and our IT service providers.

• 4 Source reference regarding our flyer "Your help is needed! Patients wanted for study."

If you have received the flyer "Your help is needed! Patients wanted for study", we have obtained the personal data used for this purpose (name, title, address) from ArztData AG, Schloßstraße 2, 22041 Hamburg.

• 5 Your rights

You have the following rights vis-à-vis us as data controller with regard to the personal data concerning you:

• Right of access: You can request information in accordance with Art. 15 DSGVO about your personal data that we process.

• Right to rectification: If the information concerning you is not (or no longer) accurate, you can request a rectification in accordance with Art. 16 DSGVO. If your data is incomplete, you can request that it be completed.

• Right to erasure: You may request the erasure of your personal data in accordance with Art. 17 DSGVO.

• Right to restriction of processing: You have the right to request restriction of your personal data in accordance with Art. 18 DSGVO.

• Right to object to processing: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out on the basis of Article 6 (1) sentence 1 lit. e or lit. f DSGVO, in accordance with Article 21 (1) DSGVO. In this case, we will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 (1) DSGVO). In addition, according to Art. 21 (2) DSGVO, you have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing; this also applies to any profiling, insofar as it is related to such direct marketing. We refer you to the right to object in this privacy policy in connection with the respective processing.

• Right to withdraw your consent: If you have given your consent for processing, you have a right of withdrawal in accordance with Art. 7 (3) DSGVO.

• Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format ("data portability") as well as the right to have this data transferred to another data controller if the prerequisite of Art. 20 (1) lit. a, b DSGVO are met (Art. 20 DSGVO).

• Pursuant to Art. 77 DSGVO, you may lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The competent data protection authority is: The State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Vorpommern, Schwerin Castle, Lennéstraße 1, 19053 Schwerin, Germany.