Privacy Policy
Purpose
This Privacy Policy (the “Policy”) outlines how we manage and protect the information you provide when using our Website (“Website”). At Ribbon Bio GmbH (“Ribbon Bio”, “we”, “us”, “our”), we are committed to safeguarding your privacy and ensuring the security of your personal data. When you share information with us through our Website, it is utilized solely in accordance with the practices detailed in the General Data Protection Regulation (“GDPR”) of the European Union and in accordance with the country-specific data protection regulations applicable to us, such as the Austrian Data Protection Act (“DSG”).
Scope
This Policy governs the collection, use, and protection of all information gathered through our Website. It covers any personal data you provide, whether directly or indirectly, during your interactions with our Website. This includes, but is not limited to, information obtained through the submission of forms, email communications, participation in surveys, or through the use of cookies. By using our Website, you consent to the collection and use of your information as described in this Policy, and you acknowledge the importance of safeguarding your personal data in accordance with applicable data protection regulations.
Data Controller
The entity responsible for managing and controlling the personal data collected through this Website, in compliance with GDPR and other applicable data protection laws is:
Name: Ribbon Bio GmbH
Address: Brehmstrasse 14, 1110 Vienna, Austria
Phone: +43 664 2211765
Data Privacy Team Email: DataPrivacy@ribbonbio.com
Website: www.ribbonbio.com
This process may involve collaboration with Ribbon Bio’s Affiliates and/or third-party service providers acting on behalf of Ribbon Bio. These entities are carefully selected to ensure they meet our high standards for data security and privacy. They may assist in various aspects of our operations, including but not limited to, data processing, customer support, and technical services. In every instance, we ensure that these Affiliates and service providers are contractually obligated to protect your personal data in compliance with applicable laws and regulations, maintaining the confidentiality and security of your information throughout our partnership.
Data Security
As the data controller, Ribbon Bio is dedicated to ensuring the security of your data and has implemented appropriate technical and organizational measures to protect your privacy and personal data from loss, alteration, unauthorized access and disclosure. Despite these measures, it is important to note that internet-based data transmissions may have inherent security vulnerabilities, and complete protection cannot be guaranteed. If you have concerns about the security of your data with us, please contact our Data Privacy Team.
Data We Collect
We gather and utilize specific data about you to gain insights into your needs and enhance the quality of our services. Additionally, we collect data on how visitors or users interact with our Website to deliver more relevant and timely content tailored to their interests.
Some of the specific data we may collect includes, but is not limited to:
- Personal information (e.g. names, addresses)
- Contact information (e.g. email addresses, phone numbers)
- Content data (e.g. text entries)
- Usage data (e.g. websites visited, interest in content, access times)
- Metadata (e.g. device information, IP addresses)
We do not collect information from minors under the age of 18 without express consent from a guardian or parent. If you are aware that a minor’s information has been inadvertently provided to us, please contact us immediately.
How We Use Your Data
We use your personal data to provide and improve our services, enhance your user experience, and ensure the functionality of our Website. For example, we may use your contact information to communicate with you regarding updates, promotional offers, or customer service inquiries. We also use usage data, such as websites visited and access times, to analyze user behavior and improve the content and navigation of our Website. Additionally, we may process your personal data to fulfill legal obligations, protect our rights, and prevent fraudulent activities. All data processing activities are conducted in accordance with applicable data protection laws and regulations to ensure your privacy and data security.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. Once the specific purpose for processing your personal data has been achieved, we will securely delete or de-identify your data. However, we may be required to retain certain data for longer periods in compliance with legal obligations, such as those mandated by the Austrian Commercial Code or Federal Fiscal Code. These legal requirements may impose retaining your data beyond the fulfillment of the original processing purpose. If you have any questions regarding our data retention policies, please contact our Data Privacy Team.
Job Applications
If you apply for a position at our company through our application form or by email, we will collect and process your personal data for the application process. If you are hired, your data will be stored in accordance with the applicable legal requirements to manage the employment relationship. If you are not hired, your application will be deleted 6 (six) months after the decision, unless Ribbon Bio has a legitimate reason to retain it under GDPR.
Use of Cookies
Our Website uses so-called cookies to improve functionality and gather usage statistics. Cookies are small data files created by a web server and sent to your browser. These files are stored by your browser for a specific duration or throughout your visit to a website. When you make subsequent requests to the server, the browser includes the relevant cookies. This process allows websites to recognize you and tailor the experience to your preferences.
When you visit our Website, you can select which cookies you wish to allow. If you choose to decline, only those essential scripts, cookies, and other elements necessary for the basic functionality of the Website or for which Ribbon Bio has a legitimate interest under GDPR will be activated. This means that while the Website will still operate, you may experience limited functionality or reduced features, as certain personalized or tracking features will be disabled. Essential cookies are used to ensure that the Website functions correctly and that you can navigate it effectively, but they do not track your browsing activity or store personal preferences.
By using our Website and agreeing to this Policy, you consent to our use of cookies. This consent allows us to collect and process data that enhances your browsing experience, such as remembering your preferences and analyzing website performance.
Third-Party Interactions
We may utilize various technologies to enhance your experience on our Website. These third-party services may collect and process your personal data according to their privacy policies. By using our Website, you consent to the integration and interaction with these platforms, which may involve the transfer of data to these third parties. We recommend reviewing their respective privacy policies to understand how they handle your information.
Our Website may include links to external websites. Please be aware that once you leave our Website, we have no control over these external websites and cannot be held responsible for their privacy practices.
Transfer to Third Countries
Your personal data may be transferred to and processed in countries outside of your jurisdiction, including countries that may not have data protection laws equivalent to those in your home country only if it is necessary to fulfill our (pre)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. When we transfer your data to third countries (i.e. outside the European Union (EU) or the European Economic Area (EEA)), we ensure that appropriate safeguards are in place to protect your information. These safeguards may include standard contractual clauses approved by relevant regulatory authorities, binding corporate rules, or other legal mechanisms that provide an adequate level of data protection under GDPR.
By using our services and providing your personal data, you consent to the transfer of your data to third countries as described in this Policy. If you have any questions or require more information about the specific mechanisms used for data transfers, please contact our Data Privacy Team.
Automated Decision-Making
We do not engage in automated individual decision-making, including profiling, as part of our data processing activities. All decisions involving your personal data are made with human intervention to ensure fairness and transparency. We believe in providing a personalized experience without relying on automated systems to evaluate or predict personal aspects of our users.
Your Rights
You have the right to withdraw your consent for the processing of your personal data at any time, as per Article 7(3) of the GDPR. To do so, please contact our Data Privacy Team. Upon receiving your request, we will promptly stop processing your personal data unless there is another legal basis for continuing such processing. Please note that the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
In addition to the right to withdraw consent, the European data protection law grants you several other rights concerning your personal data, including the rights to information, correction, restriction, deletion, data portability, and objection. A comprehensive list of these rights under the GDPR can be found here: GDPR Rights.
If you wish to exercise any of these rights, or if you believe that the processing of your data infringes on data protection laws or that your data protection rights have otherwise been violated, you can reach out to our Data Privacy Team. Additionally, you have the right to file a complaint with the relevant supervisory authority, such as the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
Updates
This Policy is subject to periodic updates to reflect changes in our practices or legal requirements. To stay informed about any modifications, we recommend reviewing this page regularly. By doing so, you can ensure that you are aware of and comfortable with any new terms or adjustments made to our privacy practices. If significant changes are made that may impact how we handle your data, we will make reasonable efforts to notify you. Continued use of our Website after such updates constitutes your acceptance of any such revised Policy.
Last update: March 27, 2025