Know what's inside.

Data Privacy Statements

GBA Gesellschaft für Bioanalytik mbH

Data Privacy Statement GBA Gesellschaft für Bioanalytik mbH

The GBA Group takes the protection of your data seriously. We have enacted technical and organizational measures to ensure that we comply with data protection regulations and that our technical partners and suppliers comply with them as well.

On our homepage, we only collect the personal and professional data that is necessary in order for us to provide our range of services. Any other information may be provided voluntarily. Furthermore, we ensure you that we will neither forward your saved information to third parties without your consent nor use it for other purposes, e.g. for third-party advertising.

The following statements are valid for all anonymous and registered, logged-in users that have read-only access. Only certain selected employees of the GBA Group have permission to write. Other internal regulations apply to them.

It is very important to us that we handle all of the data that you provide us with in a sensitive way and we ensure comprehensive data protection for you.

§1 Collection of personal data
(1) In order to use range of services on our homepage, GBA Group and all of its affiliated companies collect, process, and use certain personal data. This includes, for example, name, email address, or telephone number. 

(2) You can find out who at the GBA Group is responsible for data protection according to Article 4 Paragraph 7 of the GDPR on our website Data Protection Supervisors

§2 Purpose of collecting, processing, and using data
(1) The GBA Group collects, processes, and uses personal data from its website visitors exclusively for the purpose of enabling the user to access the desired information on the homepage or to place an order for the corresponding services.

(2) When you get in contact with us by email or via a contact form, we save the data that you provide (your email address, as well as your name and telephone number, where appropriate) in order to answer your questions. Any data accrued in this context is deleted after it is no longer necessary to save it, or we restrict the usage thereof if there are legal requirements to retain this data. 

(3) On our homepage, you have the possibility to fill out our online job application form and send it to us. We assure you that the personal data that you provide us with in the context of filling out the application form will be used exclusively in the context of your job application. This data will not be forwarded to any third parties. Data from applicants who are applying for a position that has been advertised by the GBA Group will be stored in our systems for a period of six months after the position has been filled and subsequently deleted. Data from candidates that send speculative applications will be checked and deleted if there is no suitable vacancy. If there is a suitable position, this data will be utilized in the context of the application process, especially in order to make contact. This data will not be forwarded to any third parties or countries outside the EU. Further information can be found in our Info Sheet on Data Protection for Applicants. 

(4) Personal data is saved and processed exclusively on the company’s servers in Hamburg and Ulm. Personal data is not transmitted to third parties.

(5) GBA Gesellschaft für Bioanalytik mbH utilizes cookies for the purpose of facilitating your navigation of our homepage. You can also view our homepage even if you have prevented cookies from being saved on your hard drive by selecting the corresponding setting in your browser. However, this setting could lead to limitations in the functionality of our homepage.

(6) Data that is logged while accessing the GBA Group website will only be transmitted to third parties if we are legally required to do so and/or by court order or if there is attack on the Internet infrastructure of the GBA Group and the transmission of data is necessary for the legal proceedings or criminal prosecution. Transmission for other non-commercial or commercial purposes will not occur.

§3 Protection of Privacy
The GBA Gesellschaft für Bioanalytik mbH obligates itself to protect and ensure the privacy of the user and assures that personal data will only be collected, processed, and used in accordance with the EU General Data Protection Regulation, the German Federal Data Protection Act, and the Telemedia Act and exclusively for the purposes defined in §2. The company will also obligate its employees to do so accordingly. 

§4 User Rights
(1) You have the following rights concerning the personal data pertaining to you that is stored by us:

− The right of access
− The right of correction and erasure
− The right to restrict the processing thereof
− The right to object to the processing thereof
− The right of portability

(2) Furthermore, you have the right to issue a complaint with the data protection oversight authority about our processing of your personal data. The data protection authority responsible for our company is Hamburg. 

§5 Online Applications
On our website, you have the possibility to fill out an online application form and send it to us. When you entrust this data to us in the process of filling out the application form, we assure you that we will use this personal data exclusively in the context of your job application. The data will not be forwarded to any third parties.

§6 Consent to the creation of a user account
In order to facilitate the usage of our services, we offer our customers a login area on our website where they can enter their user data. This data is then utilized in order to pre-fill certain fields of order forms. Provided the user consents to the terms of this statement, he or she agrees to allow his or her personal data to be used in this regulated way. Whether consent is granted or denied, this information is logged and the content thereof is available to the user at any time. The user has the right to revoke consent at any time. Any data processing that occurs in the context of your consent prior to the revocation of consent remains unaffected by that revocation. 

§7 Web Analytics and Cookies
(1) When using our website exclusively to obtain information, i.e. if you do not register or otherwise provide information, we only collect personal data that is transferred by your browser to our server. If you would like to view our website, we collect the following data, which is technically necessary for us in order to display our website to you and to ensure its stability and security (legal basis for this is Article 6, Paragraph 1 S. 1, letter f of the GDPR):

– IP-Address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific site)
– Access status / HTTP status code
– Amount of data transfered respectively
– Website where the request comes from
– Browser
– Operating system and its interface
– Language and version of the browser software.

(2) The use of script libraries (Google Webfonts): In order to display our content of this website correctly and in a graphically appealing way on all browsers, we utilize script libraries and font libraries such as Google Webfonts ( Google Webfonts are transmitted to the cache of your browser in order to prevent repeated loading. If your browser does not support Google Webfonts or denies access, content will be displayed in a standard font. Retrieving script libraries or font libraries automatically triggers a connection to the operator of the library. This means that it is theoretically possible – however currently unclear whether and if yes, for what purpose – the operator of the corresponding library collects data. The data privacy policy of the library operator, Google, can be found here:

(3) This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” i.e. text files that are saved on your computer and enable an analysis of your usage of this website. The information that is generated via the cookie about the usage of this website is generally transferred to a Google server in the USA and saved there. However, if IP anonymization is enabled on this website, your IP address will be shortened prior to this by Google within the member states of the European Union or in another signatory state to the agreement of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and then shortened there. On behalf of the operator of this website, Google will use this information to evaluate your usage of this website, to compile reports on the website activity, and to provide other services to the website operator relating to website and activity and internet usage.

(4) The IP address that is transmitted by your browser in the context of Google Analytics will not be combined with any other data from Google.

(5) You may prevent cookies from being saved on your computer by selecting the corresponding settings on your browser. However, please note that if you do so, you may not be able to use the full functionality of this website. Furthermore, you can also prevent Google from collecting and processing the data that is generated by the cookie and related to your usage of this website (including your IP address) by downloading and installing the browser plug-in available at the following link:

(6) This website uses Google Analytics with the extension “_anonymizeIp()”. This means that the IP addresses are further processed in a shortened form, preventing the possibility to connect the data to individual persons. Insofar as any personal reference arises through the data collected in this manner, it will be immediately prevented, and the personal data will then be immediately deleted.

(7) We use Google Analytics in order to analyze the usage of our website so that we can regularly improve it. By using the statistics that are gathered, we can improve our service for you and make it more interesting for you as a user. In the exceptional cases where personal data is transferred to the USA, Google is subject to the EU-US Privacy Shield, The legal framework for the use of Google Analytics is Art. 6 par. 1 let. f of the GDPR.

(8) Information about the third-party service provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service:, Privacy Policy overview:, Privacy Policy:

(9) This website also uses Google Analytics in order to analyze visitor flows across multiple devices, which is carried out by means of a user ID. You can deactivate the cross-device analysis of your usage in your customer account settings under the options: “my data” and “personal data.”

In general, you can configure your browser settings according to your wishes, for example, to block third party cookies or all cookies. However, please not that this could result in you not being able to use the full functionality of this website.

§8 Links to Websites Operated by Third Parties
Our website may contain links to websites operated by third parties. We have no influence on whether these third party operators comply with the terms of this data privacy statement.

§9 Contact
For further information concerning the way personal data is handled by the GBA Laboratory Group, you may contact either the manager responsible for data protection or the external data protection officer: Data Protection Supervisors

§10 Newsletter

When you sign up for our newsletter, we at least need your e-mail address, since we otherwise cannot send the newsletter to you. We process the personal data that is transferred in the context of the newsletter registration for the purpose of fulfilling the contract, on the basis of Article 6 par. 1 let. B) of the GDPR.

You receive newsletters from us with content from the fields of business corresponding with what you have selected.

You confirm your registration by means of a double opt-in; that means, after you sign up for the newsletter, you receive an email from us with a reference to this information and to a confirmation link. Only after clicking on this confirmation link are you actually placed on the newsletter mailing list. We use this process in order to ensure that it is actually you who has signed up your e-mail address to receive our newsletter and that you want to receive the newsletter. Additionally, we as a company have the obligation to produce proof of this. For the purpose of proof, we log your registration to the newsletter. For this, we save the time and date of the registration and of the confirmation. We process this data on the basis of Art. 6 let. f) of the GDPR, because in the case of any potential legal disputes, we have a legitimate interest in having proof that you have registered for the newsletter. This interest is not outweighed by any apparent legitimate interest you may have in not having this data processed. On the contrary, the double opt-in process is also in your own interest, because it is the only way to ensure that no unauthorized third parties undertake the registration in place of you.

Additionally, we gather statistics on which users open the newsletter and which users have clicked on which links in the newsletter so that we can understand which content is interesting for our users. When registering for our newsletter and confirming the registration through the double opt-in procedure, you provide express consent to the collection of these statistics in terms fo Art. 6 let. a) in combination with Art. 7 of the GDPR. Otherwise you unfortunately cannot use our newsletter.

We use the service provider Inxmail for our newsletter.

Of course, you also have the possibility to opt out from receiving future issues of the newsletter at any time after registering for our newsletter. There is an opt-out link at the end of each issue of the newsletter.

§11 Use of the contact formula, email inquiries

If you would like to get in contact with us by using the contact form, we ask you for a variety of personal information so that we can respond to you for the purpose of addressing your concern.

That includes:

  • E-mail address
  • Company
  • First and last name
  • Telephone number if you would like use to call you back
  • Your matter of interest (e.g.: feedback).

The legal basis for this processing is Art. 6 par. 1 let. b of the GDPR, because we can only reply to you and address your concern when we have some method of contacting you. We use this data exclusively for responding to you to address that matter you communicated to us.

The aforementioned is also valid for an inquiry sent by e-mail.

The data that you enter into the contact form will be sent to us directly by e-mail. After that time, this data is not continuously saved on the server.


Data Protection Supervisors


GBA Gesellschaft für Bioanalytik mbH

Mark Piekereit
Gesellschaft für Bioanalytik mbH
Goldtschmidtstrasse 5
21073 Hamburg
Tel.: +49 40 797172-0
Ulrike Glöde
DonLuigi IT-Service D. Ortmann
Helbingstrasse 66
22047 Hamburg
Tel.: +49 40 59468180

GBA Pharma GmbH

Thomas Ritzengruber-Marlovits
GBA Pharma GmbH
Fraunhoferstrasse 11a
82152 Martinsried
Tel.: +49 89 899229-0
Gerald Lill
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Tel.: +49 941 2986930

Pharmacelsus GmbH

Dr. Klaus Biemel
Pharmacelsus GmbH
Science Park 2
66123 Saarbrücken
Tel: +49 0681 3946-7523
Ralf Müller
Gesellschaft für moderne Informationstechnologie mbH
Bruchbrunnenstrasse 19
66123 Saarbrücken
Tel.: +49 681 960214-20

Institut Pieldner

Horst U. Pieldner
Julius-Hölder-Str. 20
70597 Stuttgart
Tel: 0711 722094-0


Ulrike Glöde
DonLuigi IT-Service D. Ortmann
Helbingstraße 66
22047 Hamburg
Tel.: 040 59468180




GBA Gesellschaft für Bioanalytik mbH

GBA Pharma GmbH