Data Protection

I.  Introduction

This privacy policy informs you about the type, scope and purpose of the collection and use of personal data on the website https://www.4basebioag.com by the 4basebio AG (hereinafter called “we” or “us”). We are responsible for all personal data collected on this website, unless this privacy policy provides different information.

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This typically includes your name, e-mail address or telephone number. In addition, however, purely technical data that can be traced back to a person must also be regarded as personal data.

II.  Contact details of the data controller

4basebio AG
Waldhofer Str. 102
69123 Heidelberg
Deutschland
E-Mail address: [email protected]
Representative: Hansjörg Plaggemars

III.  Your Rights

On request, you have the right to obtain free information on your stored personal data. Additionally, you have the right to obtain the rectification of inaccurate personal data, the right to request restriction of extensively processed personal data as well as the right to obtain the erasure of unlawful processed personal data or data which is stored too long (as far as there are no legal obligations to store the data). Furthermore you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller (right to data portability), as far as you have handed over the data to us within the framework of a declaration of consent or for the fulfillment of a contract.

Insofar you have also a right to object in individual processes this is dealt within the description of the individual process.
In order to exercise your rights you can write an e-mail to [email protected]
In addition, you have the right to lodge a complaint with a supervisory authority.

IV.  Voluntary Provision of Data

The provision of your personal data on this website is generally neither required by law nor by contract. You are not obliged to disclose personal data on this website. However, the provision of the functions of this website requires the processing of your personal data.

V.  Data recipients

Generally, we do not transfer personal data, except we mentioned this expressively in this Privacy Policy. Nevertheless, this website is hosted by our service provider 23ccc. Within this hosting services 23ccc Limited automatically process the abovementioned personal data. This is done exclusively in accordance with our instructions and on our behalf according to a processing contract, Art. 28 GDPR.

The transfer of personal data to the abovementioned service provider is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in the use of special service providers that realize hosting better than we do. You can object to this data processing at any time if there are reasons which exist in your particular situation and which speak against the data processing. In order to do so you can write an e-mail to [email protected].

VI.  Information on Cookies

Cookies are small text files which are stored on your terminal device by the browser used when you access our website. In this way you can “recognize” individual services of a website and “remember” which settings you have made. This serves on the one hand the user-friendliness of web pages and thus the users (e.g. language settings).

VII.  Overview about the Processes

Personal data are processed on this website in the context of the following processes:

1. Contacting
2. IR Information Service subscription
3. Server-Logfiles

1.    Contacting

When you contact us (for example by e-mail or by using the contact form), the information provided by you will be stored for the purpose of processing the request and in the event that further questions arise.

Legal Basis

The processing of personal data within the frame of contacting is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in the processing of the contact information. You can object to this data processing at any time if there are reasons which exist in your particular situation and which speak against the data processing. In order to do so you can write an e-mail to [email protected].

Storage Period

The personal data stored within the scope of establishing contact will be deleted if the request has been completely clarified and it is also not to be expected that the concrete contacting will become relevant again in the future.

2.    IR Information Service subscription

We use your e-mail address to provide you with our investor information via the e-mail distribution list.

Legal Basis

This data processing is based on a consent which you have given by registering for the newsletter. According to Art. 6 (1) lit. a GDPR the processing of personal data is lawful if the data subject has given consent to the processing of his or her data for one or more specific purposes. Within the frame of registering for the subscription you have given the following consent: “I agree that 4basebio AG provides me regularly via e-mail with investor information. I can withdraw my consent to this at any time with effect for the future. For this purpose, an e-mail to: [email protected] is sufficient.”

Storage Period

Data which is stored within the frame of the newsletter registration will be deleted if you have successfully unsubscribed from the newsletter.

3.    Server Log Files

Each time you access the website, we automatically collect a series of technical data, which is personal data. These are:

User’s IP address
Name of the requested website respectively the data file
Date and time of the access
Transferred data volume
Report of successful retrieval
Browser type and version
User’s operating system
The terminal deviced used by the usre, including MAC address
Referrer-URL (the previously visited website)

This data is not combined with any other personal data that you actively provide on the website. We collect server log files for the purpose of administering the website and to be able to recognize and prevent unauthorized access.

Legal Basis

The processing of personal data within the frame of the log files is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data Our legitimate interest is in the easier administration and the ability to detect and track hacking. You can object to this data processing at any time if there are reasons which exist in your particular situation and which speak against the data processing. In order to do so you can write an e-mail to the data protection officer.

What is an IP address?

The IP address is a worldwide unique sing of numbers which is assigned to each device (e.g. smartphone, tablet, PC) connected to the Internet. The IP address depends on which Internet access your device is currently connected to the Internet. This can be the IP address that your Internet provider has assigned to you, for example, if you are connected to the Internet via your W-LAN at home. It can also be an IP address assigned to you by your mobile phone provider or the IP address of a provider of a public or private W-LAN or other Internet access. In its currently most common form (IPv4), the IP address consists of four number blocks. In most cases, as a private user, you will not use a constant IP address, as this is only temporarily assigned to you by your provider (so-called “dynamic IP address”). With a permanently assigned IP address (so-called “static IP address”) a clear assignment of user data is easier in principle. Except for the purpose of tracking unauthorized access to our website, we do not use this data on a personal basis, but only evaluate on an anonymous basis which of our websites are favored, how many accesses are made daily and the like.

Storage Period

The log data is automatically deleted after 30 days. We reserve the right to store log data longer, if there are facts which suggest that an illegal access has taken place (such as the attempt of hacking or a so-called DOS-attack).

Contacting Us

We welcome any queries, comments or requests you may have regarding this Privacy Policy. Please do not hesitate to contact us at:

4basebio AG

Waldhofer Str. 102
69123 Heidelberg

Phone: +49 (0) 6221 3540 120
Fax: +49 (0) 6221 3540 127

4basebio AG is listed on the Prime Standard segment of the Frankfurt Stock Exchange (Ticker: 4BSB; ISIN:DE000A2YN801).