Privacy Policy

Information in accordance with Article 13 and 14 GDPR

In order to provide certain services to our website visitors, business partners and job applicants (in the following collectively referred to as “data subject“, “you“), we process your personal data (in the following also referred to as “data“).

For the purpose of transparency and in accordance with Articles 13 and 14 of the General Data Protection Regulation (“GDPR“), we, therefore, want to inform you about the data processing as follows:

  1. General information

The controller of the data processing activities as described in this data protection information is

  • imd BIOTECH GmbH, Muthgasse 11/2, 1st Floor, 1190 Vienna, Austria (in the following referred to as “imd BIOTECH”, “we“, “us“).

For any request and further information regarding the processing of your data, please contact us at

  1. How and why we process your data


  • Website

We use cookies and log-files for the functioning of our website. In the course of your use of our website, we collect and process the following data: IP address and IP location, referrer URL, number, duration and time of views of your interactions with the website, search engines and keywords you used to find us, information about browser type, device type, screen resolution, internet service provider and operating system. We collect this data automatically with cookies (provided by third parties) based on your consent pursuant to Art 6 (1) lit a GDPR (or in conjunction with Section 96 (3) Austrian Telecommunication Act in the case of so-called “persistent” cookies, which are stored on your device).

You can refuse the storage of individual cookies via configuration in the cookie banner or you may withdraw your consent to storage at a later time via configuration of your browser. When cookies are stored on the basis of your voluntary consent, your data may be transferred to recipients in third countries outside the EEA, in particular to the US. The European Court of Justice, however, considers that the US does not offer an adequate level of data protection to data subjects; in particular, there is a potential risk that your data may be viewed by US authorities for control and monitoring purposes. With your consent, you agree that cookies from third-party providers in the US or from other insecure third countries may be used and you accept a possible lower level of data protection (Art 49 (1) lit a GDPR).

Cookies that are absolutely necessary for the structure or functioning of the website (technically necessary cookies) cannot be deactivated. If this involves data, the processing is based on our legitimate interest pursuant to Art 6 (1) lit f GDPR to ensure the functionality of the website. For further information on the cookies we use see our Cookie Information below.

  • Marketing

If you subscribe to our marketing channel or other promotions (e.g. surveys), we process your data you voluntarily provide, in particular your contact details (such as name, postal address, email address), in order to send you up-to-date information on relevant news about our services and products by e-mail or postal means. The data processing is based on your explicit consent according to Art 6 (l) lit a GDPR in connection with Section 107 Abs 2 Austrian Telecommunications Act. You can withdraw your consent at any time with effect for the future by sending an email to Your data will be stored until your valid withdrawal.

  • Contact Form

If you contact us via the contact form as offered on our website, via any of our message boards or via, the data you provide will be processed in order to handle and respond to your inquiry, in particular: name, email, any data provided in the text.

We process the data for the purpose of your contact with us in the context of (pre-)contractual relationships in accordance with Art 6 (1) lit b GDPR or based on our legitimate interest in accordance with Art 6 (1) f GDPR. This data will be stored for the duration of your open inquiry and beyond that in accordance with statutory retention and documentation obligations (e.g. in accordance with the Austrian Company Code and the Austrian Federal Tax Code).

  • Social Media Plugins

Social media plugins are embedded on our website, which lead to our social media profiles. When you click on a corresponding social media icon, data is transmitted to third parties (the respective social media service). After opening the social media service, we have neither influence on the use of cookies nor access to data collected there. We use plugins of the following social media services:  – LinkedIn.

  • Business partner relationships

In the course of our daily business, we make use of various service providers and their offers to simplify our business processes.

We process your data for the performance of our contractual duties according to our contractual relationship with you (Art 6 (1) lit b GDPR), for compliance with other legal obligations (Art 6 (1) lit c GDPR) and/or for the purpose of legitimate interests, except where such interests are overridden by your interests in the confidentiality of your data (Art 6 (1) lit f GDPR).

We store the aforementioned data in any case for the duration of active business relationship and beyond that in accordance with the statutory retention and documentation obligations (e.g. in accordance with the Austrian Company Code and the Austrian Federal Tax Code).

  • Job Applications

If you apply for a job with imd BIOTECH, the data you provide within the application process will be processed (in particular curriculum vitae, contact details). The processing of your data is based on the performance of pre-contractual measures, namely the application procedure aiming to conclude an employment contract according to Art 6 (1) lit b GDPR or your explicit consent if you would like imd BIOTECH to keep your application on file according to Art 6 (1) lit a GDPR.

Your data will be deleted after 7 seven month in accordance with the provisions of the Austrian Equal Treatment Act (Gleichbehandlungsgesetz, GlBG) unless imd BIOTECH will keep your data on file based on your explicit consent.


  1. Data Transfers

We engage service providers (processors according to Art 4 No. 8 GDPR) as far as this is necessary to render our services to you. We have contractually obliged our processors to comply with applicable data protection laws according to Art 28 GDPR.

We may also transfer your data to other parties such as banks, tax accountants, lawyers and accounting or consultant firms. Where legally obliged to, we also transfer you data to public authorities and or institutions.

If recipients of your data are located outside the EEA and it has not been established by a decision of the EU Commission that the country concerned has an adequate level of data protection, we will ensure that the transfer takes place on the basis of standard contractual clauses (as amended from time to time) or otherwise in accordance with Articles 46, 47 or 49 GDPR.

  1. Data Security

imd BIOTECH takes all necessary and appropriate technical and organizational measures to protect the rights and freedoms of data subjects as well as reviews these measures on a regular basis. Accordingly, our service providers and employees are contractually obliged to adhere to all standards of applicable data protection laws. Please note that e-mails are sent using commercially available software programs, some of which are not encrypted. If contents to be transmitted are particularly confidential or worthy of protection for data subjects, they should be transmitted to imd BIOTECH by post or end-to-end encrypted.

  1. Your rights


  • Information and Access

You are entitled to obtain information by imd BIOTECH as to which data are being processed and to get access to that data upon your request. We will provide you with one copy of the data undergoing processing free of charge, unless the disclosure may adversely affect the rights and freedoms of others.

  • Withdrawing consent

Should you have consented to a specific use of your data by imd BIOTECH (e.g. marketing), you can withdraw that consent at any time, by or contacting us under

  • Rectification and Erasure

You are entitled to request rectification of inaccurate data or completion of incomplete data concerning you without undue delay.

You are entitled to request erasure of data without undue delay, if

(i)  Data are no longer necessary in relation to the purposes for which they were collected,

(ii)  You object to the processing,

(iii) Data have been unlawfully processed,

(iv) Data have to be erased for compliance with a legal obligation applicable to imd BIOTECH.

However, imd BIOTECH is not obliged to execute such erasure if processing is necessary

(i)  for exercising the right of freedom of expression and information,

(ii)  for compliance with a legal obligation to which imd BIOTECH is subject,

(iii)  for the establishment, exercise or defence of legal claims.

  • Restriction of Processing

You are entitled to request the restriction of processing of data in the following circumstances and for the following periods of time:

(i)  you contest the accuracy of the data concerning you; restriction of processing may be affected for a period enabling us to verify the accuracy of the relevant data,

(ii)  the processing is unlawful and you oppose the erasure of the data and request the restriction of their use instead,

(iii)  we do no longer need the data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims,

(iv)  you have objected to processing, for the period until the verification whether our legitimate grounds override those of you.

  • Data Portability

You are entitled to data portability, namely to receive your data which you have provided to imd BIOTECH and which is processed

(i)  based on the concluded contract

(ii)  and by automated means

in a structured, commonly used and machine-readable format.

You are entitled to request that the data is transmitted directly to another controller by us, where technically feasible. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

  • Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of data concerning you which is based on our legitimate interests according to Art 6 para 1 point f GDPR. If you object to processing of your data we shall cease to process this data unless our legitimate interests to processing your data prevail.

  • Right to file complaint

If you believe your data protection rights have been infringed in any way, you can complain to the competent supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde,


We keep this Privacy Statement under regular review and may place any updates on this website. This Privacy Statement was last updated on October 28, 2021



Cookie Information

What is a cookie?

A cookie is a small file that can be stored on your device that allows your browser to remember things about your use of a website. These cookies can be strictly technically necessary for the correct functioning of the website (e.g. by remembering log-ins or previously selected site preferences or feedback information to the host of the website) or just help us understand your browsing behaviour.

What types of cookies do we use?

Our website uses strictly technically necessary cookies. These cookies are essential to provide you with the services of our website. If you set your browser to block all cookies, then the website’s functions and services will not work for you, we would not even be able to save your preferences about cookies.

As stated, our website also uses cookies like Google Analytics to collect data about the use of our website/your browsing behaviour (technically non-necessary cookies). Google Analytics works by saving cookies on your device and passing on information about your use of our website to the Google Servers, where they are analysed for us, so that we can understand your use of the website.

List of cookies used on our Website:

Is it possible to reject the use of cookies on this website?

Regarding strictly technically necessary cookies, which are required for the functioning of the website, it is not possible to reject the use of these cookies on this website. However, you are able to modify the application of technically non-necessary cookies (e.g. Google Analytics,) in our cookie banner or in your browser settings.

Google Analytics

You have the option to reject the use of Google Analytics on our website and prevent any cookies this tool places on your device. To deactivate Google Analytics on this website (or on others) you are required to install this browser extension/add-on:

Please note that imd BIOTECH GmbH is not responsible for the functioning or content of third party cookies.