Features

About

FAQ

Get started
MENU

Privacy policy

Preliminary Note

With the following privacy policy, Regen Lab GmbH (hereinafter referred to as “Regen Lab”) provides information about the processing of personal data when using Regen Lab offers and associated services. Regen Lab proceeds with the greatest possible care when processing your personal data.

Name and Contact Details of the Controller

The contact person and entity responsible for processing your personal data is RegenLab GmbH, Hopfenstraße 8, 80335 Munich. Email: datenschutz-de@regenlab.com Phone: +49 (0)9324 9817434 For questions regarding data protection and the assertion of data subject rights in connection with Regen Lab’s offers, please contact the email address provided.

Collection and Storage of Personal Data as well as Type and Purpose of Their Use

Regen Lab may process the following data for the use of its offers, including data collected within the framework of the RegenLab® customer portal described further below:

  • Personal data for user identification that you provide to Regen Lab when using its offers, such as name, email address, address including location details, phone number;

  • Information that you provide to Regen Lab when registering for the newsletter, such as name and email address;

  • Information about your access device and your visits to the Regen Lab website, such as date and time and length of access, IP address of the accessing terminal device, website from which access is made (referrer URL), browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

  • Data on the use of embedded services on the website (e.g., for watching videos).

The aforementioned data are processed for the following purposes:

  • for communication and contacting customers to provide information about the products and services of Regen Lab and their execution;

  • for the general provision of the offers;

  • to improve the offers;

  • to fulfill legal obligations;

  • for marketing, advertising, and communication purposes, also to ensure comfortable use and improvement of the website.

Customer Platform (Protected Login Area)

Regen Lab provides registered users with a password-protected RegenLab® customer portal. Use of this platform occurs exclusively after prior registration and activation. In the context of registration and use of the platform, the following personal data in particular are processed:

  • Title, first name, last name

  • Email address

  • Field of expertise

  • City

  • Practice or institution

  • Customer number

In addition, technically required usage data are processed, in particular:

  • Login times

  • Accessed content

  • Use of favorite functions

The processing of this data is carried out for the purpose of providing and managing the user account, providing the content and functions of the platform, and ensuring IT security and the proper operation of the platform. No tracking beyond this takes place. The legal basis is Art. 6 Para. 1 lit. b GDPR (contract or pre-contractual measures) as well as Art. 6 Para. 1 lit. f GDPR (legitimate interest in a secure and functional platform).

Basis for Processing

The legal basis for a large part of the data processing listed above is Art. 6 Para. 1 S. 1 lit. f GDPR. The legitimate interest follows from the purposes for data collection listed above. Some data processing is required for the fulfillment of a contract and is used exclusively for this purpose (Art. 6 Para. 1 S. 1 lit. b GDPR). Some data processing operations are only possible with your express consent (Art. 6 Para. 1 S. 1 lit. a GDPR). You can revoke consent already given at any time. An informal notification by email is sufficient for this. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation. Furthermore, cookies and analysis services are used when visiting the website and using mobile offers. More detailed explanations of this can be found further below in this privacy policy.

Retention Period

The personal data processed by Regen Lab are stored in accordance with the relevant laws and regulations. If a longer retention period is required due to laws or regulations, the personal data will be stored longer in accordance with these specifications. All (received) personal data will be kept no longer than absolutely necessary.

Event Newsletter via Pardot

Regen Lab uses Pardot for sending newsletters. The provider is Pardot LLC, 950 E. Paces Ferry Rd. Suite 3300 Atlanta, GA 30326, USA (“Pardot”), in cooperation with the parent company Salesforce.com EMEA Limited, 110 Bishopsgate, London, UK, EC2N 4AY (“Salesforce”). When using Salesforce services, personal data may be transmitted to Salesforce servers in the USA. Such a transfer takes place on the basis of an adequacy decision between the EU and the USA (EU-US Privacy Framework). Salesforce has the necessary active certificate for this, which you can search for and view in the list of the US Department of Commerce available at the following link: https://www.dataprivacyframework.gov/list. Pardot uses the information for sending and evaluating the newsletters on behalf of Regen Lab. For further information on data protection at Pardot, please visit: www.salesforce.com/company/privacy/. Salesforce is also used by Regen Lab for other purposes (e.g., customer management and platform operation). More detailed information on this can be found in the section “Use of Salesforce (CRM system)”.

Email Campaigns via Klick-Tipp

Regen Lab uses Klick-Tipp for conducting email campaigns. The provider is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, UK. When Regen Lab conducts email campaigns with the help of Klick-Tipp, Regen Lab can determine whether emails were opened and which links, if any, were clicked. The data processing is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. The lawfulness of the data processing operations already carried out remains unaffected by the revocation. For more details, please refer to the privacy policy of Klick-Tipp at: https://www.klick-tipp.com/datenschutzerklaerung. Klick-Tipp processes the data for Regen Lab as a processor within the meaning of Art. 28 GDPR exclusively on the instructions of Regen Lab (and not for its own purposes or those of third parties).

Typeform

Regen Lab uses Typeform from TYPEFORM SL, Bac de Roda, 163 (Local), 08018 Barcelona, Spain for contact forms. This allows Regen Lab to provide you with a simple way to contact them. For this purpose, the following personal data are passed on to Typeform:

  • Email address

  • First name

  • Last name

  • Phone number

  • Name of the practice

  • Street

  • Postcode / City

  • Website

  • Field of expertise

Typeform is the recipient of your personal data and acts as a processor for Regen Lab. The processing of the data specified in this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, Regen Lab cannot provide you with a contact form. The data are stored exclusively for the purpose of transmitting inquiries and answering them. The mandatory fields serve to assign and answer your concern. In addition, the following personal data are collected by Typeform with the help of cookies: Information about your terminal device (IP address, device information, operating system, browser settings). Furthermore, usage data are collected, such as the date and time you used the contact form. Typeform requires this data to ensure the display of the contact form and its functionality. This corresponds to Typeform’s legitimate interest (acc. to Art. 6 Para. 1 lit. f GDPR) and serves the execution of the contract (acc. to Art. 6 Para. 1 lit. b GDPR). Further information can be found at: https://help.typeform.com/hc/en-us/articles/360029581691-What-happens-to-my-data Further information on objection and removal options regarding Typeform can be found at: https://admin.typeform.com/to/dwk6gt The legal basis for these processing operations is your consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to the processing of your personal data at any time. The revocation can be made via the contact options provided. Your data will be processed as long as corresponding consent is available. By declaring the revocation, the lawfulness of the processing carried out so far remains unaffected.

eTermin

Regen Lab uses the service eTermin for online appointment bookings. The provider is eTermin GmbH (Im Wiesengrund 8, 8304 Wallisellen, Switzerland). For the purpose of booking an appointment, you enter the requested data and the desired date into the mask provided for this purpose. The data entered will be used for the planning, execution, and, if necessary, the follow-up of the appointment. Furthermore, eTermin records log files (number and time of page views, browser, browser version and operating system as well as an anonymized IP address). The appointment data are stored for Regen Lab on the servers of eTermin, whose privacy policy you can view here: https://www.etermin.net/online-terminbuchung-datenschutz. The data entered by you will remain with Regen Lab until you request Regen Lab to delete it, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected. The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. Regen Lab has a legitimate interest in making appointment scheduling with interested parties and customers as uncomplicated as possible. If corresponding consent was requested, processing occurs exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, provided the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent is revocable at any time. eTermin processes the data for Regen Lab as a processor within the meaning of Art. 28 GDPR exclusively on the instructions of Regen Lab (and not for its own purposes or those of third parties).

Disclosure of Data to Third Parties

A transfer of your personal data to third parties for purposes other than those listed below does not take place. Your personal data will only be passed on to third parties if:

  • you have given your express consent according to Art. 6 Para. 1 S. 1 lit. a GDPR;

  • the disclosure is necessary according to Art. 6 Para. 1 S. 1 lit. f GDPR for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data;

  • in the event that there is a legal obligation for disclosure according to Art. 6 Para. 1 S. 1 lit. c GDPR; as well as

  • this is legally permissible and necessary according to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you.

If data are passed on by Regen Lab to third-party providers and service providers, there is a proper order processing relationship between Regen Lab and the respective partners within the meaning of the GDPR. This means that the respective third-party providers and service providers may only use the respective data passed on to fulfill their tasks. The providers mentioned were selected with all care and are contractually bound to the instructions of Regen Lab within the framework of the respective order processing relationship. Regen Lab regularly checks that the protection of the rights of data subjects is complied with by the processors. Personal data can be passed on by Regen Lab to the following third parties:

  • Authorized delivery service(s) for the purpose of contract fulfillment. The categories of processed personal data are contact, name, and address data.

  • Payment service providers, for the purpose of contract fulfillment. The processed categories of personal data are data required for payment processing.

  • Accountants, for the purpose of contract fulfillment. The categories of processed personal data are contact, name, and address data, as well as data for payment processing.

  • Software suppliers, for the purpose of contract execution. The categories of processed personal data are contact, name, and address data.

  • Website service providers and administrators, for the purpose of contract execution. The processed categories of personal data are contact, name, and address data.

Use of Salesforce (CRM system)

Regen Lab uses the CRM system Salesforce to manage customer relationships and to check and activate user accounts on the customer platform. Within this framework, a comparison of the data provided during registration with existing customer data may take place. The provider is Salesforce.com EMEA Limited, 110 Bishopsgate, London, UK. Processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR (contract or pre-contractual measures) as well as Art. 6 Para. 1 lit. f GDPR (legitimate interest in efficient customer management and the avoidance of misuse of the platform). Regen Lab uses the Data Processing Addendum (DPA) provided by Salesforce: https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/data-processing-addendum.pdf In the context of using Salesforce, processing of personal data may also take place in third countries, in particular the USA. The transfer takes place on the basis of the EU-U.S. Data Privacy Framework and additionally on the basis of Standard Contractual Clauses of the EU Commission. Salesforce is certified under the EU-U.S. Data Privacy Framework. A current list of certified companies can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search. However, it cannot be excluded that authorities in these third countries may obtain access to the transmitted data and that data subject rights may not be enforceable in the same way as within the European Union.

Cookies

Regen Lab uses technical and functional cookies to optimize the website. Cookies are small text files that are sent when visiting a website to make the user experience more efficient. According to law, Regen Lab may store cookies on your device if these cookies are strictly necessary for the use of the website. For other types of cookies, your consent is required. Regen Lab recommends that you accept cookies in connection with the usability of the website. Visitors to the website have the option to log in. The cookies used by Regen Lab are functional cookies: These cookies ensure the proper functioning of the website. These cookies have no influence on personal privacy, so that no consent needs to be obtained or given. These cookies store, for example, the settings of your browser so that the website can be optimally displayed, or so that the website remains accessible, but also cookies that ensure that no further cookies can be placed. The data processed by cookies are necessary for the aforementioned purposes to protect the legitimate interests of Regen Lab and third parties according to Art. 6 Para. 1 S. 1 lit. f GDPR. With your consent, Regen Lab also places “tracking cookies” on your computer. These cookies are used by Regen Lab to track which pages you visit in order to create a profile of your online behavior. This profile is not linked to your name, address, email address, or similar, but only serves to tailor advertising to your profile so that it is as relevant as possible to you. Most browsers accept cookies automatically. You can however configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. You can object to the use of cookies on the corresponding button. Full deactivation of cookies may however result in you not being able to use all the functions of the website.

Google Analytics

Regen Lab’s website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). For this web analysis service, Google Analytics also uses cookies, which in turn enable an analysis of your use of the website. The information generated by the cookie about the use of the website is transmitted to a Google server in the USA and stored there. If IP anonymization is activated on the website, your IP address will be shortened beforehand by Google within member states of the EU or in other contracting states to the Agreement on the European Economic Area. In a few exceptional cases, the full IP address may be transmitted to a Google server in the USA and then shortened there. Based on this information that is stored, Google can then evaluate your use of the website in order to then provide a compilation of a report on website activities. Based on this report, Google can also provide the website provider with further services related to website use and internet use. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data. If this evaluation based on your stay on the Regen Lab site is not in your interest, you can prevent the storage or installation of cookies by setting your browser software accordingly. At the same time, Regen Lab informs you that in this case you may not be able to use all functions of the website to their full extent. By using this website, you agree to the processing of the data collected about you by Google in the manner described above and for the purpose stated above. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

Google AdSense

Regen Lab’s website uses Google AdSense, a service for embedding advertisements from Google Inc. (“Google”). For this service for embedding advertisements, Google AdSense also uses cookies and text files that are stored on your terminal device and enable an analysis of the use of the website. In addition, Google AdSense also uses web beacons (invisible graphics). Due to the web beacons, information such as visitor traffic on websites can be evaluated. Using the cookies and web beacons, information about the use of the website, including your IP address, is generated. The delivery of advertising formats is then transmitted to a Google server in the USA and stored there, as with Google Analytics. The stored information can then be passed on by Google to its contractual partners. Nevertheless, the information about your IP address collected by Google will not be merged with other data stored by you. If this collection of information based on your stay on the Regen Lab site is not in your interest, you can prevent the storage or installation of the cookies by setting your browser software accordingly. At the same time, Regen Lab informs you that in this case you may not be able to use all functions of this website to their full extent. By using this website, you agree to the processing of the data collected about you by Google in the manner described above and for the purpose stated above. When using Google services, personal data may be transmitted to Google servers in the USA. Such a transfer takes place on the basis of an adequacy decision between the EU and the USA (EU-US Privacy Framework). Google has the necessary active certificate for this, which you can search for and view in the list of the US Department of Commerce available at the following link: https://www.dataprivacyframework.gov/list.

Matomo

Regen Lab uses the web analysis tool “Matomo” for statistical evaluation and optimization of the website. Matomo creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your terminal device and read by Regen Lab. This allows Regen Lab to draw conclusions about anonymized or pseudonymized user behavior. This allows Regen Lab to improve its websites and adapt them even more to the needs of users. The data processing is based on your consent according to § 25 Para. 1 TTDSG, Art. 6 Para. 1 lit. a GDPR, provided you have given your consent. You can revoke your consent at any time. For more details, please refer to Matomo’s privacy policy at: https://matomo.org/privacy/

Vimeo

Regen Lab’s website uses the provider Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011, USA (“Vimeo”), to play embedded videos. If you access an embedded video on Regen Lab’s website, a connection to the Vimeo servers is established. This transmits to the Vimeo server which website you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When you click the start button of a video, this information can also be assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo. Regen Lab uses this service within its online offer on the basis of a legitimate interest. The legal basis is Art. 6 Para. 1 lit. f GDPR. When using Vimeo services, personal data may be transmitted to Vimeo servers in the USA. Such a transfer takes place on the basis of an adequacy decision between the EU and the USA (EU-US Privacy Framework). Vimeo has the necessary active certificate for this, which you can search for and view in the list of the US Department of Commerce available at the following link: https://www.dataprivacyframework.gov/list.

Spotify

Regen Lab uses an embedded audio player from the provider Spotify within the protected customer platform to provide audio content. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. When accessing a page with an embedded Spotify player, a connection to Spotify’s servers is established. Personal data, in particular the IP address as well as information about the terminal device used and usage behavior, are transmitted to Spotify. If you have a Spotify user account and are logged in during use, Spotify can assign the visit to your user account. The use of Spotify is based on Art. 6 Para. 1 lit. f GDPR. The legitimate interest consists in the provision of audio content within the customer platform. It cannot be excluded that personal data may also be transmitted to third countries within the framework of using Spotify. The transfer takes place on the basis of the EU-U.S. Data Privacy Framework and additionally on the basis of Standard Contractual Clauses of the EU Commission. A current list of companies certified under the EU-U.S. Data Privacy Framework can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search Further information on data processing by Spotify can be found at: https://www.spotify.com/de/legal/privacy-policy/

Use of Social Networks

Regen Lab is represented in social networks, among other things, to communicate with customers and interested parties and to provide information about its offers. In doing so, user data can be processed by the respective social networks for advertising and market research purposes. For this purpose, for example, cookies are stored on the users’ terminal devices. Based on the information obtained in this way, for example, advertising activities can be carried out within the social networks or on third-party sites. In this context, there is also the possibility that Regen Lab can access aggregated information. The legal bases for the data processing carried out by the social networks on their own responsibility can be found in the privacy policy of the respective services. Below you will find corresponding links where you can also obtain further information on data processing and your data subject rights:

  • Facebook (North America: Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA; rest of the world: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

    • Facebook Fan Page in joint responsibility (Page Insights Supplement regarding the controller)

    • Further information on Page Insights data and related data protection inquiries

    • Facebook Privacy Policy

    • Opt-Out

  • Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

    • Instagram Privacy Policy

  • LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)

    • LinkedIn company page in joint responsibility (Page Insights Joint Controller Addendum)

    • LinkedIn Privacy Policy

    • Opt-Out

  • WhatsApp Channel

    • Regen Lab uses the services of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“WhatsApp”) to operate a public WhatsApp channel. Regen Lab informs you that you use the interactive functions of the WhatsApp channel on your own responsibility.

    • The legal basis for this processing is Art. 6 Para. 1 lit. a GDPR. You gave your consent by “subscribing” to the WhatsApp channel. You can revoke your consent at any time by canceling the subscription.

    • Regen Lab cannot track which user data WhatsApp collects. Regen Lab also has no access to the collected data or your profile data. Information about the collection of data and further processing by WhatsApp can be found in WhatsApp’s privacy notice: https://faq.whatsapp.com/763734008756778?lang=en

    • When using WhatsApp services, personal data may be transmitted to WhatsApp servers in the USA. Such a transfer takes place on the basis of an adequacy decision between the EU and the USA (EU-US Privacy Framework). WhatsApp has the necessary active certificate for this, which you can search for and view in the list of the US Department of Commerce available at the following link: https://www.dataprivacyframework.gov/list.

Cvent

Regen Lab uses services from the event platform Cvent to conduct events. The Cvent platform is operated by Cvent Deutschland GmbH (Bockenheimer Landstraße 17-19, 60325 Frankfurt am Main) in cooperation with the parent company Cvent Inc. (1765 Greensboro Station Place, 7th Floor, Tysons Corner, VA 22102 USA, “Cvent”). When registering for a Regen Lab event via Cvent, Regen Lab receives information from Cvent about the registration made and associated data such as name, company, address, email address, phone number, billing information, etc. The processing of this data is necessary for the fulfillment of the contract (Art. 6 Para. 1 lit. b GDPR). Cvent’s privacy policy is available at the following link: https://www.cvent.com/sites/default/files/files/2024-03/German_2.15.24_Cvt%20Global%20Privacy%20Policy.pdf When using Cvent services, personal data may be transmitted to Cvent servers in the USA. Such a transfer takes place on the basis of an adequacy decision between the EU and the USA (EU-US Privacy Framework). Cvent has the necessary active certificate for this, which you can search for and view in the list of the US Department of Commerce available at the following link: https://www.dataprivacyframework.gov/list.

Zapier

Regen Lab uses Zapier, a tool from Zapier Inc. (548 Market St #62411, San Francisco, California 94104, USA), to optimize services. Zapier may, in particular, obtain access to the contact data of customers or interested parties. Zapier processes this data for Regen Lab as a processor within the meaning of Art. 28 GDPR exclusively on the instructions of Regen Lab (and not for Zapier’s own purposes or those of third parties). Further information on data protection at Zapier is available at https://zapier.com/privacy/. When using Zapier services, personal data may be transmitted to Zapier servers in the USA. Such a transfer takes place on the basis of an adequacy decision between the EU and the USA (EU-US Privacy Framework). Zapier has the necessary active certificate for this, which you can search for and view in the list of the US Department of Commerce available at the following link: https://www.dataprivacyframework.gov/list.

Microsoft Forms

Regen Lab uses the tool “Microsoft Forms” to conduct online surveys and ordering processes. The survey tool Microsoft Forms is operated by Microsoft Ireland Operations Limited (One Microsoft Place South County Business Park Leopardstown Dublin 18, Ireland) in cooperation with the parent company Microsoft Enterprise Service Privacy Microsoft Corporation (One Microsoft Way Redmond, Washington 98052, USA). Insofar as Microsoft Forms processes personal data or uses cookies, Microsoft is responsible for the data processing. For the provision of the Microsoft Forms service, Microsoft cookies are used on the survey page. Further information on data protection at Microsoft is available at https://privacy.microsoft.com/de-de/privacystatement. In particular, for the execution of ordering processes, Regen Lab collects the following personal data via a Microsoft Forms form:

  • Customer status

  • Title

  • First name

  • Last name

  • Company

  • Street

  • Postcode

  • Email address

  • Confirmation of acknowledgment of the privacy policy (with prior reference to the corresponding link)

Microsoft Forms is the recipient of your personal data and acts as a processor for Regen Lab. The processing of the data specified in this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, Regen Lab cannot provide you with a contact form. The data are stored exclusively for the purpose of transmitting inquiries or orders and their answering and processing. The mandatory fields serve to assign and process your concern. When using Microsoft services, personal data may be transmitted to Microsoft servers in the USA. Such a transfer takes place on the basis of an adequacy decision between the EU and the USA (EU-US Privacy Framework). Microsoft has the necessary active certificate for this, which you can search for and view in the list of the US Department of Commerce available at the following link: https://www.dataprivacyframework.gov/list.

Storepoint

Regen Lab uses the service provider Storepoint Inc. to search for branches. The legitimate interest (Art. 6 Para. 1 S. 1 lit. f GDPR) serves as the legal basis for this. Insofar as Storepoint Inc. processes personal data or uses cookies, Storepoint Inc. is responsible for the data processing. Further information on data protection at Storepoint Inc. and a reference to GDPR compliance is available at https://storepoint.co/privacy.

Shlink

Regen Lab uses the open-source tool Shlink to shorten website links (URLs). Any personal data collected for this purpose are processed exclusively by Regen Lab on its own servers for the purposes stated above and on the basis of the legal grounds stated above. No transfer of any personal data to Shlink takes place.

Notes on Links to External Websites

No liability is assumed for the content of the links (references) to other (external) websites provided on this website. The respective operators are exclusively responsible.

Transfer of Data to Third Countries

As shown in this privacy policy, Regen Lab uses services whose providers are partly based in third countries – not located in the EU or the EEA – or process personal data there. In such countries, a different level of data protection than in the EU may prevail. In this case, and if no adequacy decision of the EU Commission exists for the countries, Regen Lab has taken corresponding measures to guarantee an adequate level of data protection for possible third-country transfers. This includes, among other things, the use of the corresponding Standard Contractual Clauses of the EU Commission as well as necessary additional measures. In the event of data transmission to third countries without a corresponding adequacy decision or suitable guarantees, the risk may exist that third-country security authorities may gain access to transmitted data and your data subject rights may be extremely difficult to enforce.

Data Subject Rights

You have the right:

  • according to Art. 15 GDPR, to request information about your processed personal data. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data were or are disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, provided they were not collected by Regen Lab, as well as about the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;

  • according to Art. 16 GDPR, to immediately request the rectification of incorrect or the completion of your personal data stored by Regen Lab;

  • according to Art. 17 GDPR, to request the erasure of your personal data stored by Regen Lab, unless the processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;

  • according to Art. 18 GDPR, to request the restriction of the processing of your personal data, provided that you dispute the correctness of the data, the processing is unlawful but you reject their erasure and Regen Lab no longer requires the data, but you require them for the assertion, exercise, or defense of legal claims or you have lodged an objection against the processing according to Art. 21 GDPR;

  • according to Art. 20 GDPR, to receive your personal data that you have provided to Regen Lab in a structured, common, and machine-readable format or to request the transfer to another controller;

  • according to Art. 7 Para. 3 GDPR, to revoke your once given consent to Regen Lab at any time. This has the consequence that Regen Lab may no longer continue the data processing that was based on this consent for the future and;

  • according to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or Regen Lab’s company headquarters (see below).

Right to Object

Insofar as your personal data are processed on the basis of legitimate interests according to Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right, according to Art. 21 GDPR, to lodge an objection against the processing of your personal data, provided there are reasons for this arising from your particular situation. If you lodge an objection, Regen Lab will no longer process your personal data unless Regen Lab can demonstrate compelling legitimate grounds for processing which outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

Exercising Your Rights

If you would like to complain about the way Regen Lab handles your personal data, or would like to exercise one of the rights mentioned above (including the right of revocation or objection), you can contact Regen Lab by phone at +49 (0)9324 9817434 or by email at datenschutz-de@regenlab.com. Regen Lab will answer your request as quickly as possible.

Data Security

Regen Lab takes the protection of your personal data seriously and, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, takes appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Changes to the Privacy Policy

Regen Lab can change the privacy policy at any time. The current version will be published on the website. Therefore, always pay attention to the current version on the website. Should the new privacy policy have an impact on your data already collected by Regen Lab, Regen Lab will inform you by email. This privacy policy was last updated on 01.04.2026.

Important:

The masculine form used on this page always refers equally to female, male, and diverse individuals. For the sake of readability, we generally refrain from using plural forms.