Data Privacy

Last updated
November 14, 2018

The following information explains how we deal with your personal data.

Table of contents

1. Responsible entity ("Controller")
2. General information on processing personal data
3. Data collection and processing when accessing the website
4. Data collection and processing when registering for and using our Service: Purpose and scope of processing
5. How we use your data
6. Protection of minors
7. Transfer of data via the internet
8. Use of cookies
9. Security measures
10. Onward transfer to third parties
11. Newsletter mailing
12. Use of Google Analytics
13. Use of YouTube
14. Use of Wistia
15. Google Adwords
16. Mailchimp
17. Taboola
18. Typeform
19. Zapier
20. Webflow
21. LinkedIn
22. Hotjar
23. Intercom
24. Facebook Conversion Pixel
25. Automated individual decision-making including profiling
26. Your rights as a data subject (basic information based on Arts 13, 14 GDPR)
27. Contact for questions on data protection
28. Amendment to data privacy notice

1. Responsible entity ("CONTROLLER")

Who is responsible for data processing and who can I contact?

LabTwin GmbH

Prenzlauer Allee 24

110405 Berlin

Represented by the Managing Directors:  Dr. Sven Wagner, Steffen Gloth


LabTwin Data Protection Officer:

2. General information on processing personal data

This data privacy statement applies to data including personal data which LabTwin collects about you. Personal data are data or a combination of individual data which can be used to identify you. We process your personal data in compliance with the German data protection laws and the European General Data Protection Regulation. We do not, under any circumstances, forward your personal data to third parties outside LabTwin, for advertising or marketing purposes without your consent. As an international company we use external service providers. If the data they process have personal content, contractual agreements have been concluded and organisational measures have been taken to ensure the security of your data. In our company, compliance with legal provisions and this statement is monitored by our data protection organisation. Our employees are trained in handling personal data and are bound by written agreements to comply with the data protection regulations. It is normally possible to use our website without needing to provide personal data. If personal data (for example, name, address or e-mail addresses) are collected on our website, this is always done on a voluntary basis, as far as possible. Please note that data transmission on the internet (e.g. when communicating by e-mail) can be subject to loopholes in security. Protecting your data from unauthorised access through measures such as pseudonymisation, data minimisation, compliance with erasure deadlines and keeping up with the latest technical developments is a very important goal for us. However, despite these protective measures, we cannot entirely rule out illegal processing by third parties.

3. Data collection and processing when accessing the website

Whenever a user accesses a page on our internet services or retrieves a file, access data concerning this is saved in a log on our server.

Each data record consists of:

• the page where the file was requested ("referrer URL")

• name and URL of the retrieved data

• date and time of access ("time stamp")

• data identifying the browser and operating system

• report whether access was successful (file transferred, file not found etc)

• name of your internet browser (e.g. Mozilla Firefox, Google Chrome, etc)

Legal processing (the legal basis for this is Art. 6(1)f GDPR)

This data is collected for the purpose of enabling use of the website (connection), system security, technical administration of the network infrastructure, and understanding how people use our services and analyse and use the information we have to evaluate and improve our services, research, develop, and test new services and features, and conduct troubleshooting activities. By agreeing to this data privacy statement you are giving your consent to the collection of these data by us. You may object to this data processing. If you do object to the use of the data, please note that this may restrict your use of our services. Except in the cases described above, these personal data will not be processed unless you explicitly consent to further processing.  We do not forward your data to third parties unless you have given your consent to this. However, in certain areas (e.g. hosting our website) we are dependent on our service providers who we generally oblige contractually to comply with legal requirements.

4. Purpose and scope of processing: Data collection and processing when registering for and using our Service

“System data”

If you choose to register for and use our Service, you will be automatically generating system data related to the usage of LabTwin’s Service. These are being collected for statistical information and to provide smooth functionality of our Service. These collected data include:

• Duration of membership/registration

• Number of uploaded files

• Number of entries

• Number of group entries

• Last date of activity on

• Further statistical data, if applicable.

“File and content data”

If you choose to register for and use our Service, you may be creating content or upload files of different formats (voice recordings, images, videos, Excel, Word, pdf, other).

As a result of those actions, you might supply us with such information as: your name; address and phone number; payment information; your age; your location information; personal description and photograph in Your Profile; images, video, text and voice recordings when you speak to Aiden.

When you speak to Aiden, a voice recording is sent to Aiden’s cloud, where we process your request and other information to fulfill your request and improve your experience and our services. The more you use Aiden, the more the service adapts to your speech patterns, vocabulary, and personal preferences. For example, we use your recordings to train our speech recognition and natural language understanding systems. The more data we use to train these systems, the better Aiden works, and training Aiden with voice recordings from a diverse range of customers helps ensure Aiden works well for everyone.

LabTwin and its employees do not have viewing rights to the content of any data or files that you enter, upload, download, administer, or handle in any other way within the digital lab notebook provided by LabTwin. Exceptions will be made only with your explicit consent or after your explicit request, or after you explicitly granted access to your content by publication of your data.

In accordance with the GDPR’s principles of data reduction and minimisation, we only collect personal data on our website if these are either necessary for your purpose, we are obliged to do so by legal requirements or a contract, we have a legitimate interest in them and/or you have provided them voluntarily. If you enter personal or business data (e.g. e-mail address, name, address) you explicitly do so on a voluntary basis. We process your contact, business and business-relevant data on the basis of legal provisions within the context of an existing or new business relationship. By entering the data you further declare your willingness to have the data you have entered collected, processed or used for the legitimate purpose or for the purpose you designate. We will only process and save your entered data for as long as the purpose requires this to be done and will erase it after the purpose has been satisfied or after the end of the relevant retention period. There will not be any collection, processing or use for any other purpose. Your consent to use of your data can be withdrawn at any time, with effect for the future. If you do object to the use of the data, please note that this may restrict your use of our services. The following are possible ways we can use your data:

On the basis of legal requirements:

• In order to implement our General Terms and Conditions

• In order to manage our business and to protect against/investigate possible fraudulent transactions

On the basis of contractual purposes:

• In order to process payments for purchases and other services

• In order to process your job applications

• If legally permitted, in order to deliver user-specific unsolicited offers and information about LabTwin products and services,

• In order to develop and provide advertising adapted to your interests

Based on your consent: Contacting you, sending samples, prizes, products and information, notifying you at your request of competitions, programmes or offers, supplying other services which we have offered you.

Contact form (the legal basis for this is Art. 6(1)a GDPR):  There are a several contact forms on our website which can be used for electronic contact. If you use the relevant contact form to write to us, we will process your data entered in the contact form to get in touch with you and respond to your questions and requests. We follow the principles of data minimisation and data reduction by requiring you to only enter the data we absolutely need to make contact with you. These are your first and last name, your e-mail address, postal code, country, choice of topics and the text field itself. All other data are voluntary fields and can be entered optionally (e.g. for a more individual response to your questions).

Online chat (the legal basis for this is Art. 6(1)a, f GDPR): If you contact us through chat, we process the data you have entered solely to contact you and respond to your question. We follow the principles of data minimization and data reduction by requiring you to only enter the data we need to contact you. These are your name, the selected topic and the text field itself. You have the option of transferring additional information, e.g. images of articles. In addition, your IP address is processed for technical reasons and to ensure legal compliance. All other data are voluntary fields and can be entered optionally (e.g. for a more individual response to your questions).

Facebook Leads ads (the legal basis for this is Art. 6(1)a, f GDPR): If you use the relevant contact form on a Facebook Lead ad we will process your data entered in the contact form to get in touch with you. We follow the principles of data minimisation and data reduction by requiring you to only enter the data we absolutely need to make contact with you. These are your first and last name and your e-mail address. Based on our legitimate interest: Determining the effectiveness of our advertising, developing new products and services, analysing the use of our products, services and websites, learning how you came to our website.

5. How we use your data

We will use the data we store to provide the products and services you request, to We will use the data we store to provide the products and services you request, to inform you of other products and services offered by LabTwin, to administer our websites and services (e.g. newsletter) and to comply with our legal rights and obligations with regard to data processing.

6. Protection of minors

As a general rule, children and individuals under 16 do not provide us with any personal data without the consent of their parents or guardians. We do not ask for any personal data from children and we assure you that we do not knowingly collect personal data on children, use such data in any way or disclose such data to third parties without authorisation.

7. Transfer of data via the internet

The internet is a worldwide open platform. Due to how the internet operates and the systemic risks, all your data transfers are at your own risk. For your security we offer our services exclusively through encrypted transmission.

8. Use of cookies

Our internet pages also use so-called cookies. These are small text files which are stored on your computer, which your browser saves. They do not damage your computer and do not contain any viruses. Cookies help make our service more user-friendly, effective and secure. Some cookies ("session and functionality cookies", e.g. for language setting and order transactions) are essential for ensuring key functions of the website. Without them the website cannot be used as intended. Most of the cookies we use are so-called session cookies, which are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

We use cookies to make our service more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser and offer you services even if you change pages. Some functions of our website cannot be offered without the use of cookies. These require your browser to be recognised even after changing pages. We need cookies and store the associated data for the following applications: shopping cart, language settings, login information. User data collected by technically required cookies are not used to create user profiles. You can set your browser to notify you when cookies are set and only allow cookies on a case by case basis, or to block cookies in specific cases or generally. You can also activate the automatic deletion of cookies when you close your browser. If you reject the use of cookies (a possible setting in your browser) you can still use our website (although use may be restricted).You can learn more about how to manage cookies on the most popular browsers (including deactivating them) at the following links:



Mozilla Firefox:

On our website we use session cookies (technically necessary), functional cookies for web analytics and marketing cookies. The legal basis for processing personal data using session cookies is Art. 6(1)f GDPR. The legal basis for processing personal data using cookies for web analytics and marketing cookies is Art. 6(1)a GDPR, provided that the user consents to this. On accessing our website the user is notified of the use of cookies and has the opportunity to deselect individual cookies in the banner, except for the session cookies which are required for operation. The default setting for cookies is to accept them. This setting obtains your consent to process the personal data used in this connection before the processing starts. In connection with this, there is also notification of the data privacy statement: For reasons based on your particular situation, you have the right to object to the processing of your personal data at any time in accordance with Art. 6(1)f GDPR. You will find further information about cookies at Cookie-Policy.

8. Security measures

We have taken extensive measures to protect the security of your data. The data you have transferred to us e.g. by entering it in HTML pages (contact forms) is transferred to LabTwin through the public data network in encrypted form (SSL – Secure Socket Layer), and stored and processed there. This page uses SSL encryption for reasons of security and to protect the transfer of confidential content, e.g. the enquiries you send us as page operator. An encrypted connection is shown by the change in your browser's address line from "http://" to "https://" and the lock symbol in your browser line. If SSL encryption is activated, any data you transfer to us cannot be read by third parties.

9. Onward transfer to third parties

We do not forward your personal data to third parties (i.e. outside of LabTwin) without your prior consent. An exception to this is onward transfer of data to service providers such as a package delivery services or forwarding agents, if the transfer is necessary for processing orders or delivering goods. Logistics service providers receive the data which is necessary for delivery in order to carry out their own processing. We restrict ourselves to only transferring the data which is necessary for delivery. In addition, other service providers are used in contract preparation and processing, e.g. IT service providers or hosting services for the website. These companies work as processors for LabTwin and may only use personal data in accordance with our instructions. LabTwin has contractually obliged these service providers to comply with the German data protection level and monitors them. One further exception is the transfer of data within LabTwin in order to process orders, deliver goods, providing services, or for accounting and invoicing purposes. Otherwise there is no transfer of data to third parties without your consent. In all these cases, transfer is in accordance with the prevailing national and European data protection provisions; the scope of transferred data is limited to the necessary minimum.

10. Newsletter mailing

If you subscribe to a newsletter we have offered, we will store your name and e-mail address, together with information which allows us to check that you are the owner of the e mail address entered and agree to receive the newsletter. Your address is also needed for postal mailing. If you order the newsletter through our contact form, we process your request exclusively for the requested newsletter; we do not use your data for other purposes, nor do we transfer your data to third parties. Our registration system sends a registration e-mail with a confirmation link to ensure that you actually want the selected newsletter (double opt-in procedure). Processing is done on the basis of Art. 6(1)a GDPR with your consent. You can withdraw the consent to store the data and e-mail address and to use it to mail the newsletter at any time, for example with the "Cancel my subscription" link in the newsletter.

11. Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Analytics uses Cookies. Processing is for the purpose of analysing this website and its visitors. For this, Google will use the information that has been obtained to analyse your use of the website on behalf of the operator of this website, to generate reports on website activity and provide other services to the website operator in connection with the website and internet use. Google does not combine the IP address transmitted by your browser in connection with Google Analytics with other data. Google Analytics uses cookies which enable an analysis of your use of the website. The information about your use of this website which has been generated by the cookies is generally transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website. This means that Google first truncates your IP address within the member states of the European Union or other member states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and truncated there in exceptional cases. Your data may also be transferred to the USA.transfer of data to the USA requires an Adequacy Decision by the European Commission. Processing takes place in accordance with Art. 6(1)f GDPR based on the legitimate interest in providing a needs-based and goal-oriented website. We have signed a contract on processing with Google and are fully meeting the strict requirements of the German data protection authorities for using Google Analytics. You have the right to object at any time for reasons based on your particular situation to this processing of your personal data based on Art. 6(1)f GDPR. You can also block storage of the cookies by making an appropriate setting on your browser; however, please note that in this case, you may not be able to fully use all the functions of this website. You can also block the transfer of the data generated by the cookie to Google relating to your use of the website (including your IP address) as well as the processing of the data by Google by downloading and installing the browser plugin at the following link []. In order to block logging by Google Analytics on multiple devices you can set an opt-out cookie. These cookies block the future logging of your data when you visit this website. You must set the opt-out on all the systems and devices you use in order to cover them all. Click here to set the opt-out cookie: Deactivate Google Analytics.

You can find more information on use conditions and data protection at or

12. Use of YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is a company affiliated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).The function shows videos on YouTube in an iFrame on the website. The "Privacy enhanced mode" option is activated. This means that YouTube will not store any information concerning visitors to the website. If you visit one of our pages with a YouTube plugin, a connection is established with YouTube servers. This notifies the YouTube server which of our pages you visited. If you are logged in to your YouTube-account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. You can find further information on handling user data in YouTube's privacy statement at:

13. Use of Wistia

Our website has embedded videos from the online video provider Wistia. Wistia is a service of Wistia, Inc., 17 Tudor Street, Cambridge, MA 02139, USA. We use a special mode of the video player ("privacy mode") which only collects anonymised use data, avoids session and cookie tracking and anonymises the user's IP address. You can find further information on data protection and the cookies used on the internet at

14. Google Adwords

We have integrated Google AdWords on this site. Google AdWords is an Internet advertising service that allows advertisers to run both Google and Google Network search engine results. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google's search engine results only when the search engine retrieves a keyword-related search result. On the Google Network, ads are distributed to topic-related sites using an automated algorithm and according to pre-defined keywords. The operating company for the services of Google AdWords is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google AdWords is to promote our site by displaying interest-based advertising on third-party websites and in the search engine results of Google's search engine, and by displaying third-party advertisements on our site. If an affected person reaches our website via a Google ad, a so-called conversion cookie will be placed on Google's information technology system by Google. The data and information collected through the use of the conversion cookie is used by Google to provide visitor statistics for our website. These visit statistics are then used by us to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify the data subject. The conversion cookie stores personally identifiable information, such as the websites visited by the affected person. The affected person can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting your browser used and thus permanently contradict the setting of cookies. Furthermore, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs. In addition, the data subject has the opportunity to object to Google's interest-based advertising. To do this, the person concerned must access the link from each of the browsers they use and make the desired settings there. Additional information and Google's privacy policy can be found at here.

15. Mailchimp

We are using Mailchimp (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA) for the purposes of sending you personalized emails to keep you informed about our product and services. To ensure that you are the owner of the specific email address, we are using the so-called double opt-in method. This means, we will only send you newsletters by email if you have confirmed your email address by clicking on a notification link. If you confirm your email address, the registration data, the time of registration and the IP address used for registration will be saved until you unsubscribe from the newsletter. The storage serves the purpose to send you the newsletter and to prove your registration.

16. Taboola

We make use of the services of Taboola (, Inc., 1115 Broadway, 7th Floor, New York, NY 10010, USA., which provides a remarketing feature. This allows users of our website and other websites using Taboola‘s services to display interest-based ads. Link to privacy policy: to Opt-Out: We are using Taboola, a platform to purchase media which provides display advertising space.Further information can be found in the Taboola privacy policy at:

17. Typeform

We use Typeform ( to collect customer feedback. The responsible entity is: TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain. Personally identifiable information, including name, email address, company name & country; and other information, including plan details and sign up data, is submitted to Typeform’s servers, and saved there when a user chooses to follow a link to one of our surveys. The user’s responses to the survey, including service rating and comments, are submitted to Typeform’s servers and saved there when a user submits the survey. Typeform may give this information to further parties where legally required to do so, or these parties are contracted to by Typeform. You may find further information about Typeform’s data processing and data protection here:

18. Zapier

We use Zapier to connect and share data between multiple web services. The responsible entity is: Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104-5401. Any information, including Personally identifiable information, collected by any other service listed in this privacy policy, may be submitted to Zapier’s servers, located in the United States, and saved there when a user takes an action that results in the submission of information to the original service. Zapier may give this information to further parties where legally required to do so, or these parties are contracted to by Zapier. You may find further information about Zapier’s data processing and data protection here:

19. Webflow

This website is hosted by Webflow ( Some of the data centre’s more notable security features are as follows: Protection against distributed denial of service (DDoS) attacks; Webflow provides SSL certificates for all sites hosted in Webflow. More information about hosting can be found here: Full details of Webflow’s data centre can be found here:

20. LinkedIn

Our website uses functionality of the LinkedIn network, offered by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time you access one of our pages that contains functions of LinkedIn, a connection to LinkedIn's servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the "Recommend button" of LinkedIn and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We point out that we as provider of the pages have no knowledge of the content of the transmitted data and their use by LinkedIn. You can find more information in the data protection policy of LinkedIn:

21. Hotjar

If you have given your consent to cookies, we use Hotjar in order to better understand our users' needs and to optimize our service and users' experience. This is provided by Hotjar Ltd, Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. Hotjar is a technology service that helps us better understand our users' experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don't like, etc.) and this enables us to build and maintain our service by means of user feedback. Hotjar uses cookies and other technologies to collect data on our users' behavior and their devices (in particular the IP address of the device (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar's Privacy Policy.If you do not want to be recorded by Hotjar, you can disable it by setting the DoNotTrack header in your browser. For more information and more about Hotjar's data processing, please visit:

22. Intercom

We use third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as your email address and sign-up date) to Intercom, Inc, 55 2nd Street, 4th Floor, San Francisco, CA 94105, United States. (“Intercom”) and utilize Intercom to collect data for analytics purposes when you visit our website or use our product. Intercom analyzes your use of our website and/or product and tracks our relationship so that we can improve our service to you. We may also use Intercom as a medium for communications, either through email, or through messages within our product(s). As part of our service agreements, Intercom collects publicly available contact and social information related to you, such as your email address, gender, company, job title, photos, website URLs, social network handles and physical addresses, to enhance your user experience.

For more information on the privacy practices of Intercom, please visit . Intercom’s services are governed by Intercom’s terms of use which can be found at

23. Facebook Conversion Pixel

We use the "conversion pixel" or visitor action pixel from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook”) to track the effectiveness of Facebook ads for statistical and market research purposes. By calling this pixel from your browser, Facebook can see whether a Facebook ad was successful. For this we receive exclusively statistical data from Facebook without reference to a specific person. In particular, if you are logged in to Facebook, we also refer to their privacy information. Please click here if you wish to revoke your consent to conversion pixels. Alternatively, you can disable the Facebook Pixel on the Digital Advertising Alliance page at the following here.

24. Nachverfolgung Automated individual decision-making including profiling

There is no automated individual decision-making, including profiling, on our websites.

25. Your rights as a data subject (basic information based on Arts 13, 14 GDPR)

You have the right to obtain information at any time, without charge, concerning your stored personal data, their origin and recipients, the purpose of data processing as well as the right to rectification, blocking, restriction or erasure of this data. You also have the right to receive personal data which you have provided to a responsible entity ("controller") in a structured, commonly used and machine-readable format. You can also withdraw at any time consent you have given to the processing and use of your data, unless this is required directly to perform an existing contract or for compliance with an overriding legal obligation. You can contact us about this and with further questions about your personal data at the address given in the Impressum. On request we will notify you in writing in accordance with prevailing law as to what personal data relating to you (if any) we have stored.

26. Contact for questions on data protection

If you have questions about processing of your personal data, you can contact our Data Protection Officer and their team directly, who are also available for requests for information, applications or complaints:


27. 1. Your right to information

Under the General Data Protection Regulation our customers have rights including the right to information without charge on their stored data. On request we will notify you in writing in accordance with prevailing law as to what personal data relating to you (if any) we have stored.

27. 2. Your right to complain to a supervisory authority

If you have a complaint, you can contact the responsible supervisory authority:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Friedrichstr. 219

10969 Berlin

28. Amendment to data privacy notice

We reserve the right to update this data privacy statement periodically. Updates to this data privacy statement will be published on our website. Amendments take effect on publication on our website. We advise you to visit this page regularly in order to stay informed of any updates. This is the current data privacy statement as of NovemberNovember 2018.