Privacy Policy
With this Privacy Policy, we inform you about the processing of personal data and related rights when using the website www.lasken.health as well as all associated applications, services, products, and tools.
Throughout this Privacy Policy, the masculine form is used to refer to persons irrespective of their gender. This usage serves for simplification and includes all genders equally.
We comply with the Regulation (EU) 2016/679 of the European parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), the Croatian Act on Implementation of the GDPR, the Croatian Electronic Communications Act, and other applicable data protection laws.
1. Who is Responsible for Data Processing?
The controller responsible for data processing within the meaning of the GDPR is:
Lasken AI d.o.o. Ilica 71 R-10000 Zagreb Croatia Email: service@lasken.health PIN (OIB): 05878229469
2. Collection of General Data and Logs When Visiting Our Website
When you use our service at app.cooperationplatform.de, various data are automatically collected and processed by us. These include:
- Visited website
- Time and date of access
- Source/reference from which you reached our site or which you access via our site
- Browser used and its version
- Operating system used
- IP address used
- Cookie ID
- Number of visits
The data is used to correctly deliver the content of our website, ensure the functionality of the website, optimize our website content, and guarantee the security of our information technology systems.
The above data is stored temporarily for a maximum of 10 days. Afterwards, the data is deleted. Should data need to be retained for evidentiary purposes or due to official or legal requirements, for example to investigate misuse cases, the data will be exempt from deletion until the matter is finally clarified.
3. Your Contact with Us
You can contact us through various means (e.g., telephone, contact form, email, fax, or letter).
In this case, all data relevant for communication are collected, including in particular your concern, first and last name, email address, and, if applicable, address and telephone number.
Data you transmit to us in connection with your inquiry will be used exclusively to process your order, respond to your inquiries, provide offers, and, if applicable, initiate and fulfill contracts with you.
You may object to the use of your data for processing your inquiry at any time with future effect.
The data are deleted once they are no longer necessary for the purpose of their collection. For non-contractual data, this is the case after final clarification of your inquiry. For contractual data, deletion occurs once they are no longer required for processing and no statutory retention obligations exist.
4. Registration and Contract Conclusion for the Lasken Platform
To provide the contents and services of the Lasken Platform to our B2B users, registration of a user account and subsequent login are required.
The following personal data are processed:
- First and last name
- Salutation
- Academic degree (if applicable)
- Position and department within the legal entity
- Corporate name and address
- (Business) email address
- (Business) telephone number
- Other voluntarily provided data related to the corporate profile, inquiries, and interaction with our services.
Registration uses a double opt-in process, meaning you will receive an email to confirm your registration. This confirmation is necessary to prevent misuse by unauthorized parties.
Where personal data are not provided by the data subject directly, they were provided by the claimant managing the user account of the legal entity.
The purpose of processing your personal data and that of contact persons during registration and the ongoing business relationship is the initiation and execution of our business relationship, service provision, and enabling the publishing of corporate profiles, posting and displaying cooperation requests, and facilitating contact between matching users.
Personal data stored in the user account will be deleted when no longer required for the stated purposes, particularly after contract completion and expiration of statutory retention periods.
5. Marketing
If a contractual relationship exists with you, we use your collected email address to inform you by email about similar own services, provided you have not objected.
You may object to receiving further information emails at any time, e.g., via the unsubscribe link included in each email. No costs other than the transmission costs according to the basic rates will arise.
If consent is withdrawn, we will delete your data used for marketing purposes.
6. Newsletter
If you consent to receiving our newsletter, we will use your name and email address for sending the requested newsletter.
We use a double opt-in process for registration. Your IP address, date, and time of registration are also stored for security reasons.
Your data are used exclusively for sending the newsletter and is not passed on to third parties unless legally required.
Your data will be stored until you unsubscribe and will be deleted thereafter.
7. Legal Bases for Processing Your Personal Data
We rely on one or more of the following legal bases when processing the personal data you provide to us: (i) your consent; (ii) the performance of a contract we are about to enter into or have already entered into with you; (iii) our legitimate interests, provided that these interests do not override your fundamental rights and freedoms; or (iv) compliance with legal or regulatory obligations.
8. Recipients and Categories of Recipients of Your Data
We generally do not disclose your personal data to third parties who are not directly involved in providing services on our behalf. Personal data are disclosed to third parties only if legally permitted, required, or if you have given your consent.
We may share your personal data with carefully selected external service providers who support us in operating our business and service. These include:
- IT service providers (e.g., hosting, support, maintenance)
- Agencies, print service providers (for marketing activities)
- Payment service providers
- Legal and other professional advisors
- Public authorities, regulators, law enforcement bodies, and/or courts, where required by applicable law or where necessary to exercise or defend our legal rights.
9. Data Storage Location
We host the contents of our website and services with the following provider:
Amazon Web Services (AWS)
Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (AWS).
When you visit our website, your personal data collected through use of our website, registration, profile creation, and inventory data are processed on AWS servers located in Frankfurt, Germany.
Personal data may also be transferred to AWS's parent company in the USA. The European Commission has adopted an adequacy decision (EU-US Data Privacy Framework) recognizing certified US companies as ensuring adequate data protection. Amazon is certified under this framework.
We have concluded a Data Processing Agreement (DPA) with AWS. This ensures that AWS processes personal data exclusively in accordance with our instructions and in compliance with GDPR.
Further information can be found in the AWS privacy policy: https://aws.amazon.com/de/privacy/
The use of AWS is based on Article 6(1)(f) GDPR (legitimate interests: availability, recoverability, and backup of data). Where consent is obtained, processing is based on Article 6(1)(a).
Consent can be revoked at any time.
10. Data Security Measures
We take the protection of your personal data seriously and apply a combination of physical, technical, and organizational safeguards to reduce the risk of accidental loss, unauthorized access, misuse, alteration, or disclosure. While we make every effort to maintain a high level of security, no system can be guaranteed to be completely secure.
Access to your personal data is limited to our personnel who need it to perform their duties. They are authorized to process the data only in accordance with our instructions and are bound by strict confidentiality obligations.
11. Your Rights
You have a range of rights in relation to the personal data we collect and process about you. A summary of these rights is provided below:
- Right to access your personal data: You have the right to request access to and receive a copy of the personal data we hold about you. This includes information about the purposes of processing, the categories of data involved, the recipients or categories of recipients to whom the data has been or may be disclosed, and the expected retention period.
- Right to correction: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
- Right to erasure (“right to be forgotten”): You have the right to request the deletion of your personal data where there is no longer a valid basis for its processing, or where you have exercised your right to object.
- Right to restrict the use of your data: You may request that we limit the processing of your data, particularly when the accuracy of the data is disputed, the processing is potentially unlawful, or we no longer require the data for the original purposes.
- Right to object to the use of your personal data: You have the right to object to the processing of your personal data if it is based on our legitimate interests or used for direct marketing.
- Right to data portability: Where the processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request that it be transferred to a third party.
- Right to lodge a complaint: If you have concerns about how your personal data is being handled, you may contact us. If we cannot resolve the issue to your satisfaction, you have the right to contact the Croatian Personal Data Protection Agency or another relevant EU supervisory authority.
12. Changes to this Privacy Policy
We strive to ensure that our Privacy Policy always complies with current legal requirements.
As a result, we may amend this Privacy Policy periodically. The amended version will be published here stating its effective date. If you are registered with us, you will be informed about significant changes by email.
13. Contact Us
Your privacy is important to us. If you have any questions regarding our Privacy Policy, feel free to contact us by email at: service@lasken.health