Privacy Policy

We operate our websites in accordance with the following principles:


We are committed to complying with the legal provisions on data protection and strive to always uphold the principles of data avoidance and data minimisation.


Our website is aimed at adults, and children should not use it.


1. Name and address of the controller

The controller within the meaning of Regulation (EU) 2016/679 (General Data Protection Regulation/GDPR) and other national data protection laws of the Member States of the European Union as well as other data protection regulations is the following:

Intercell Pharma GmbH

represented by the Managing Director Artur Meier

Address: Altlaufstrasse 4, D-85635 Höhenkirchen

Tel: +49 (0) 8102 / 80 650 - 0

Fax: +49 (0) 8102 / 80 650 - 299

Email: info@intercell-pharma.de

Website: www.intercell-pharma.de


2. Legal basis for the processing of data

a. Processing of personal data in accordance with GDPR

We process your personal data such as your surname and first name, your email address and IP address, etc. only if there is a legal basis for this.

In particular, the following provisions are considered under GDPR:


  • Article 6(1)(1)(a) of GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • Article 6(1)(1)(b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Article 6(1)(1)(f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

However, we will still point out to you at the respective points of this data protection declaration on which legal basis the processing of your personal data takes place.


b. Processing of information according to Section 25(1) TDDDG [the German Telecommunications Digital Services Data Protection Act]

We also process information in accordance with Section 25(1) TDDDG by storing information on your terminal device or by accessing information that is already stored in your terminal device. This may include both personal information and non-personal data. The terminal device is any device connected directly or indirectly to the interface of a public telecommunications network for sending, processing or receiving messages, Section 2(2)(6) TDDDG.

Insofar as there is an exception under Section 25(2) No. 1 and No. 2 TDDDG, we do not require consent. Such an exception applies if we only access or store the information to transmit a message over a public telecommunications network or if this is absolutely necessary for us to provide a telemedia service that you expressly request. You can revoke your consent at any time.

We inform you that the revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.


3. Disclosure of personal data

The forwarding of personal data is also processing within the meaning of the previous number 3. However, at this point we would like to inform you separately about the issue of disclosure to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

A disclosure to third parties is therefore only made if there is a legal basis for the processing. For example, we share personal data with individuals or companies who work for us as data processors in accordance with Article 28 of GDPR. The data processor is anyone who processes personal data on our behalf, in particular in a relationship of instruction and control with us

In accordance with the provisions of the GDPR, we conclude a contract with each of our processors to oblige them to comply with data protection regulations and thus to ensure comprehensive protection for your data.


4. Duration of storage and deletion

Your personal data will be deleted by us insofar as it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of the public interest or for the assertion, exercise or defence of legal claims.


5. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as a website operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.


6. Collection and storage of personal data and its type and purpose of use

a. External hosting

Our website is hosted by Hetzner Online GmbH. For this reason, all personal data collected on our website is stored on the servers of our host, unless an external service of a third party is integrated. This can be the IP address, your email address, communication data or the like. The specific personal data involved can be found below in the individual functions and services we have explained. Should we use an external service of a third party, this will be made clear in the description of the respective service or tool.

The web host processes your data only on our instruction and to the extent necessary for the performance of the services on the website. The data will not be processed by the web host for its own purposes. We have entered into an order processing agreement with this company.


b. When visiting the website

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automated deletion:


  • IP address of the requesting computer
  • Date and time of access
  • Retrieved file name and URL
  • Web page from which the access is made (referrer URL)
  • Browser and, if applicable, the operating system of your computer and the name of your access provider


We process the above data for the following purposes:

  • Ensuring a smooth connection to the website
  • Evaluating system security and stability
  • Error analysis

Data that allows us to draw conclusions about your person, such as the IP address, will be deleted after 14 days at the latest. If we store the data beyond this period, this data will be pseudonymised, so that an assignment to you is no longer possible.

The legal basis for data processing is Article 6(1)(1)(f) of the GDPR. Our legitimate interest follows from the purposes listed above for data collection. In no case will we use the collected data for the purpose of drawing conclusions about your person.


c. Contact form

We provide you with a form on our website so that you can contact us at any time. To use the contact form, we need to provide a name for a personal salutation, address and a valid contact email address so that we know who sent the request and can process it.

In addition, you have the option to provide us with your telephone number on a voluntary basis.

If you submit enquiries using the contact form, your details from the enquiry form, including the contact details you provide and your IP address, will be processed in accordance with Article 6(1)(1)(b)and (f) of the GDPR for the purpose of carrying out pre-contractual measures at your request or for the purpose of exercising our legitimate interests, namely our business activities.

We process further data that you provide to us on a voluntary basis (such as the above-mentioned telephone number) on the basis of your consent pursuant to Article 6(1)(1)(a) GDPR - You can revoke this consent at any time for the future, simply write us an email to this effect

info@intercell-pharma.de

The enquiries and the associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.


d. Use of Google Maps


Our website uses the Google Maps API. By using Google Maps, information about your use of this website (including your IP address) may be transferred and stored on a Google server (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in the United States.

Google may transfer the information obtained through Maps to third parties if this is required by law or if third parties process this data on behalf of Google. However, your IP address will not be associated with any other data from Google under any circumstances. However, we must point out to you that it would be technically possible for Google to identify individual users on the basis of the data received.

We have no influence on whether your personal data and personal profiles are processed by Google for other purposes. If you want to avoid this in any case, you can deactivate the Google Maps service and thus prevent the data transfer to Google. All you have to do is disable JavaScript in your browser. In this case, no data will be transferred, but you will no longer be able to use the map display on our website.

We have entered into a contract with Google for order processing.

The Google Privacy Policy can be found here.

Through the integration of Google Maps, Google Fonts are also dynamically loaded by Google, without any active action from the website operator or visitor. These web fonts are integrated by a server call, usually a Google server in the USA. As a result, the following may be transmitted to the server and stored by Google:


  • Name and version of the browser used
  • Web page that triggered the request (referrer URL)
  • Operating system of your computer
  • Screen resolution of your computer
  • IP address of the requesting computer
  • Language settings of the browser or operating system used by the user

The possible transfer of this data to Google in the USA is based on an adequacy decision, the EU-US Data Privacy Framework, which requires companies to be certified. Google LLC from the USA is certified according to this. For more information on the Data Privacy Framework, please visit: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/eu-us-data-transfers_de

For more information, please refer to Google's privacy policy, which can be found here.

The use of Google Maps provides a service to you, so that you can find our location accurately and, if necessary, better plan your visit to us. The use of Google Maps is based on your consent in accordance with Article 6(1)(1)(a) GDPR.


7. Rights of the Data Subject

You have the following rights:

a. Right of Access In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right of access includes information regarding:


  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom your data has been or will be disclosed;
  • the envisaged storage period or at least the criteria for determining that period;
  • the existence of a right to rectification, erasure, restriction of processing, or objection;
  • the right to lodge a complaint with a supervisory authority;
  • the origin of your personal data, if it was not collected by us;
  • the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details.


b. Right to Rectification Pursuant to Art. 16 GDPR, you have the right to demand the immediate rectification of inaccurate or incomplete personal data stored by us.


c. Right to Erasure In accordance with Art. 17 GDPR, you have the right to request the immediate erasure of your personal data stored by us, unless further processing is necessary for one of the following reasons:


  • the personal data is still necessary for the purposes for which it was collected or otherwise processed;
  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing under European Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89(1) GDPR, insofar as the right mentioned in section (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing;
  • for the establishment, exercise, or defence of legal claims.


d. Right to Restriction of Processing Pursuant to Art. 18 GDPR, you may request the restriction of the processing of your personal data for one of the following reasons:


  • you contest the accuracy of your personal data;
  • the processing is unlawful and you oppose the erasure of the personal data;
  • we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise, or defence of legal claims;
  • you have objected to the processing pursuant to Art. 21(1) GDPR.


e. Right to Notification If you have requested the rectification or erasure of your personal data or a restriction of processing pursuant to Art. 16, Art. 17, or Art. 18 GDPR, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You may request that we inform you about these recipients.


f. Right to Data Portability You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to request the transfer of this data to a third party, provided that the processing was carried out by automated means and is based on consent pursuant to Art. 6(1)(a) or on a contract pursuant to Art. 6(1)(b) GDPR.


g. Right to Withdrawal of Consent Pursuant to Art. 7(3) GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In the future, we may no longer continue the data processing that was based on your withdrawn consent.


h. Right to Lodge a Complaint In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR.


i. Right to Object If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without the requirement to specify a particular situation. If you wish to exercise your right of withdrawal or objection, simply send an email to info@intercell-pharma.de.


j. Automated Individual Decision-Making, Including Profiling You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

is necessary for entering into, or the performance of, a contract between you and us;

is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

With regard to cases (1) and (3), we implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least including the right to obtain human intervention on our part, to express your own point of view, and to contest the decision.


8. Changes to this Privacy Policy

From time to time, it is necessary to adapt the content of this Privacy Policy. We therefore reserve the right to amend it at any time. We will publish the updated version of the Privacy Policy in the same location as this current version.

Status: 30 July 2025