Privacy Policy for Website and Online Shop

1. Controller

The controller responsible for the processing of personal data on this website and in the online shop is:

BioSign GmbH
Brunnenstr. 21
85570 Ottenhofen
Germany

Represented by the Managing Director:
Dr. Reinhard D. Beise

Phone: +49 8121 923894
Email: info@biosign.de

2. Hosting and Provision of the Website

Our website and online shop are hosted by:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

When you access our website, technical data required to deliver the website and to ensure its secure and reliable operation is processed. This may include, in particular, your IP address, the date and time of access, the page or file accessed, browser type and browser version, operating system and referrer URL.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website and online shop securely, reliably and without technical errors.

Where IONOS processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR.

3. IONOS WebAnalytics

We use the WebAnalytics service provided by IONOS to obtain statistical information about the use of our website and to optimise our online services from a technical perspective.

In particular, the following information may be analysed:

  • previously visited website (referrer),
  • page or file accessed,
  • browser type and browser version,
  • operating system used,
  • device type,
  • time of access, and
  • information regarding geographical location based on an anonymised IP address.

IONOS WebAnalytics does not use cookies. According to IONOS, the IP address is processed when a page is accessed, immediately anonymised and subsequently evaluated without any personal reference.

The analysis is carried out exclusively for statistical purposes and for the technical optimisation of our online services.

4. Contact and Email Communication

If you contact us by email, telephone or via a contact form, we process the data you provide in order to handle your enquiry.

This may include, in particular, your name, email address, telephone number and the content of your message.

For our business email communications, we use email services provided by IONOS SE. When communicating by email, the email address, technical sending and receiving data and the content of the respective message are processed.

If your enquiry relates to a contract or pre-contractual measures, the processing is based on Art. 6(1)(b) GDPR.

In other cases, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in reliably and appropriately handling enquiries addressed to us and in efficient business communication.

Where IONOS processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR.

The data will be deleted once your enquiry has been fully dealt with, provided that there are no statutory retention obligations or other legitimate reasons requiring further storage.

5. Online Shop and Orders

When you place an order in our online shop, we process the data required to perform and process your order.

This includes, in particular:

  • name and contact details,
  • billing and delivery address,
  • products ordered and order information,
  • payment method,
  • billing and payment information, and
  • information relating to delivery and order processing.

The processing is carried out for the performance of the purchase contract and, where applicable, for pre-contractual measures on the basis of Art. 6(1)(b) GDPR.

Orders received through the online shop are transferred to software operated locally by BioSign for further order processing. The customer, order, billing and shipping data required for this purpose is processed exclusively on our own systems. No data is transferred to a cloud or software provider as part of this local order processing.

Where business and transaction data must be retained in accordance with commercial or tax law, further storage is based on Art. 6(1)(c) GDPR. After expiry of the applicable statutory retention periods, the data will be deleted unless another legal basis permits or requires further storage.

6. Customer Account

You have the option of creating a customer account in our online shop.

In this context, we process the data provided during registration as well as the information required to provide and manage the customer account. In particular, the customer account facilitates the use of the shop and the processing of your orders.

The processing is carried out for the provision of the customer account requested by you and for the performance of the associated contractual and pre-contractual measures in accordance with Art. 6(1)(b) GDPR.

You may request the deletion of your customer account at any time. Data that must continue to be stored due to statutory retention obligations remains unaffected.

7. Payment Processing

Payment by Invoice

If you choose to pay by invoice, we process the data required for invoicing, accounting and payment processing.

The processing is carried out for the performance of the purchase contract in accordance with Art. 6(1)(b) GDPR.

PayPal, Credit Card Payments and Instalment Payments

In our online shop, we offer payment services provided by PayPal. Depending on the options available during the ordering process, these include, in particular, payment via PayPal, credit card payments via PayPal and instalment payment options offered by PayPal.

The provider is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

If you select a payment method provided through PayPal, the data required to process the payment will be transmitted to PayPal or collected and processed by PayPal.

Depending on the payment method selected, this may include, in particular, identification, contact, transaction, device and payment data.

PayPal processes personal data in connection with its payment services under its own responsibility under data protection law. Depending on the payment method selected, PayPal may in particular carry out identity checks, fraud prevention measures and creditworthiness or risk assessments.

Where we transmit personal data to PayPal for the purpose of processing your payment, this is done for the performance of the purchase contract in accordance with Art. 6(1)(b) GDPR.

Further information on the processing of personal data can be found in PayPal's privacy information.

8. Shipping with DHL

We ship our goods using DHL.

For the purpose of delivering your order, we transmit to DHL, in particular, the recipient's name and delivery address.

Where available from the order, we also transmit the recipient's email address and telephone number to DHL. These additional contact details are used to facilitate communication in connection with the delivery and to support reliable and customer-friendly delivery.

The transmission of data required to perform the delivery is based on Art. 6(1)(b) GDPR.

Where the email address and telephone number are additionally transmitted to support and optimise delivery, the processing is based on our legitimate interest in reliable and customer-friendly shipping in accordance with Art. 6(1)(f) GDPR.

9. Order, Shipping and Service Communications

In connection with your order, we send you transaction-related emails. These include, in particular, confirmation that your order has been received as well as any further communications required to process your order.

Once your order has been dispatched, we send you a shipping confirmation. This contains the DHL tracking ID for your shipment, which you can use to track the delivery status of your order.

These messages are used exclusively for the performance and processing of your order and do not constitute newsletters or marketing emails.

The processing of the data required for this purpose is based on Art. 6(1)(b) GDPR.

We use our IONOS-hosted email account to send these emails.

10. Cookies and Similar Technologies

The online shop uses technically necessary cookies or similar technologies where these are required to provide the shop functions requested by you.

These may include, in particular, functions for managing a session, the shopping cart, ongoing orders and other technically necessary shop settings.

Where the storage of information on your device or access to information already stored on your device is strictly necessary to provide a digital service expressly requested by you, this is carried out in accordance with the applicable legal requirements for technically necessary functions.

We currently do not use our own analytics or marketing cookies and do not use Google Analytics.

According to IONOS, IONOS WebAnalytics operates without cookies.

11. External Links and External Content

Our website contains links to online services provided by third parties. When you click on such a link, you leave our website and access the service offered by the respective external provider.

Only when you access the external service may personal data, in particular your IP address, be transmitted to the respective provider. The respective provider is generally responsible for the data processing carried out there.

This also applies in particular to links to externally provided videos, for example on YouTube.

YouTube videos are not embedded or loaded directly from YouTube servers on our website. Where preview images are used, these are hosted on our own web space. A connection to YouTube is only established when you follow the corresponding external link.

12. No Newsletter and No Google Analytics

We currently do not offer a newsletter and do not use Google Analytics.

Should we use additional analytics, marketing or newsletter services in the future, we will update this Privacy Policy accordingly and, where required by law, obtain consent before using such services.

13. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential information, our website uses SSL/TLS encryption.

This applies in particular to data that you transmit to us via forms or as part of an order.

14. Storage Period

Unless a more specific storage period is stated in this Privacy Policy, we store personal data only for as long as is necessary for the respective purpose of processing.

Where statutory retention obligations apply, in particular retention obligations under commercial or tax law, the data concerned will be stored for the duration of the applicable statutory period.

Once the purpose of processing no longer applies or the statutory retention periods have expired, the data will be deleted unless another legal basis permits or requires further storage.

15. Your Rights

Where the statutory requirements are met, you have the following rights under the General Data Protection Regulation in particular:

  • right of access to the personal data processed by us in accordance with Art. 15 GDPR,
  • right to rectification of inaccurate or incomplete data in accordance with Art. 16 GDPR,
  • right to erasure in accordance with Art. 17 GDPR,
  • right to restriction of processing in accordance with Art. 18 GDPR,
  • right to data portability in accordance with Art. 20 GDPR, and
  • right to object to certain processing activities in accordance with Art. 21 GDPR.

Where processing is based on your consent, you may withdraw your consent at any time with effect for the future in accordance with Art. 7(3) GDPR. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

To exercise your rights, you may contact us at:

BioSign GmbH
Brunnenstr. 21
85570 Ottenhofen
Germany
Email: info@biosign.de

16. Right to Object under Art. 21 GDPR

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.

17. Right to Lodge a Complaint with a Supervisory Authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

In particular, you may contact the data protection supervisory authority responsible for us or any other supervisory authority competent under the applicable legal provisions.

18. Data Protection for myQiu and Other Applications

This Privacy Policy applies to the BioSign GmbH website, including the online shop.

Separate privacy information applies to myQiu and, where applicable, other applications and services provided by BioSign GmbH that involve separate processing of personal data.

The relevant privacy information will be provided within the respective service or in connection with its use.

19. Updates to this Privacy Policy

We will update this Privacy Policy if changes to our website, online shop or the services we use make this necessary.

Last updated: September 2026