DATA PRIVACY POLICY

If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request.This data is processed on the basis of Art. 6 Para. 1 b GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing the inquiries sent to us in accordance with Art. 6 Paragraph 1 f GDPR or on your consent in accordance with Art. 6 Paragraph 1 a GDPR, if this has been requested.The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed or a purchase contract is concluded). Mandatory legal provisions – in particular retention periods – remain unaffected.

5. INTEGRATION OF SERVICES AND SOCIAL MEDIA

We use websites in social networks to communicate with customers, interested parties and users who are active there and to be able to inform them about us. It is possible that user data is also processed outside of the European Union. The US is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. There could be risks for the user because z. B. the enforceability of own rights can be difficult. Furthermore, user data may be processed for analysis purposes. In this way, profiles can be created from user behavior and the interests of the user derived from it. These profiles can be used to e.g. B. To place advertisements inside and outside the platforms that are likely to meet the interests of the users. For these purposes, cookies may be stored on the user’s computer, through which the usage behavior, the interests of the user and / or the length of stay are saved. In the case of requests for information and the assertion of user rights, we point out that these can be most effectively asserted with the respective providers. Only the providers have access to the relevant user data and can take appropriate measures directly and provide specific information. For a detailed description of the respective processing, we refer to the following information on the respective providers. LinkedIN We have integrated a link to the LinkedIn network platform on our website.The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. Details on how they handle your personal data can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy. Matomo We use the “Matomo” software (www.matomo.org) on this website if you have given us your consent to do so on the banner. The website operator uses the open source tool “Matomo” from InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand for statistical analysis. Matomo is deactivated when you visit our website. Matomo stores cookies on your device. These are text files that are saved on your computer and that enable the website operator to analyze the use of his website. For this purpose, the information obtained by the cookie about usage is transferred to the website operator’s server and saved so that usage behavior can be evaluated. Your IP address will be anonymized immediately. The website operator would like to further improve the website and adapt it even more to the needs of the users. The following information is collected and stored on the server of our website host Mittwald:

• IP address of the calling system of the user
• the website accessed
• the website from which the user came to the accessed website (referrer),
• the URL with the anonymized IP address is saved
• the sub-pages that are accessed from the accessed website
• the length of time spent on the website- the frequency with which the website is accessed.

The raw data of the processing described here will be deleted after a storage period of 90 days. The IP address transmitted by your browser using Matomo will not be merged with other data collected by us. The legal basis for the processing of the data is Art. 6 Para. 1 a GDPR with the consent of the user. You can change or withdraw your consent  fromthe cookie declaration on our website at any time. Please include your consent ID and date when contacting us regarding your consent. Your consent applies to the following domains: www.richterbiologics.eu Your current status: Only necessary cookies. The cookie statement was last updated by Borlabs on October 7th, 2020.

6. APPLICATIONS

You can use our applicant management tool provided by d.vinci HR-Systems GmbH to apply directly to us online for an advertised vacancy or on your own initiative (as of February 16, 2026). If you send us an application, we process the associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Art. 6 Abs. 1 lit. b) DSGVO (contract initiation) and – if you have given consent – Art. 6 Abs. 1 lit. a) DSGVO. Consent may be withdrawn at any time. Within our company, your personal data is only shared with persons involved in processing your application. If the application is successful, the data you have provided will be stored in our data processing systems for the purpose of carrying out the employment relationship on the basis of Art. 6 Abs. 1 lit. b) DSGVO. If special categories of personal data pursuant to Art. 9 DSGVO are processed (e.g. health data), the legal basis is § 26 Abs. 3 BDSG bzw. Art. 9 Abs. 2 lit. b) DSGVO in conjunction with Art. 6 Abs. 1 lit. b) DSGVO

We process your data using the applicant management tool provided by d.vinci HR-Systems GmbH. After receiving your application, it is reviewed by the individuals responsible for recruitment. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. The next steps are then coordinated. Within the company, only those persons who need access to your data for the proper execution of our application process have access to it. The works councils at the respective locations may access the application data within the scope of their statutory duties. Furthermore, the data may be passed on to the representatives for severely disabled persons if you have indicated that you have a severe disability.

If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to store the data you have submitted based on our legitimate interests (Art. 6 Abs. 1 lit. f) DSGVO) for up to 6 months from the end of the application process (rejection or withdrawal). The data will then be deleted and the physical application documents destroyed. The data is stored primarily for evidence purposes in the event of a legal dispute. If it is apparent that the data will be required after the six-month period has expired (e.g., due to an impending or pending legal dispute), deletion will only take place once the purpose for further storage no longer applies. Data may also be stored for longer if you have given your consent (Art. 6 Abs. 1 lit. a) DSGVO) or if statutory retention obligations prevent deletion.

If we do not offer you a position, there is the possibility of adding you to our talent pool. If you are added to the talent pool, all documents and information from your application will be transferred to the talent pool so that we can contact you if a suitable vacancy arises. You will only be added to the talent pool with your explicit consent (Art. 6 Abs. 1 lit. a) DSGVO). Providing consent is voluntary and unrelated to the ongoing application process. You may withdraw your consent at any time. In this case, the data in the talent pool will be permanently deleted unless legal reasons require retention.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. It is technically impossible to completely protect data from access by third parties. Alternatively, you can access our secure application platform via the embedded software tools on our websites. The data processing notices for this platform are provided for each position we offer.

Supplementary Information on the Processing of Personal Data Not Collected from the Data Subject (Art. 14 GDPR)

If we process personal data during the application process that we have not received directly from you, the following additional information applies: Data categories that we may process in this context include information about you that is publicly available on the internet or can be researched via social media platforms (e.g., from professional networks such as LinkedIn or XING). Furthermore, it may be data about previous employment relationships or data about you that is transmitted to us by employees as part of our employee referral program. The legal basis for this data processing is Art. 6 Abs. 1 lit. f) DSGVO, whereby our interest lies in identifying the most suitable applicants for the respective positions. If we process personal data about you that we have not collected from you directly, we will inform you separately about the source of the personal data unless you already have this information. For all other information required under Art. 14 DSGVO, please refer to the information provided in this privacy policy.