Privacy Policy

About Clinical Excellence GmbH

Clinical Excellence GmbH is covering consulting as well as training in clinical research, including oncology drug development and cell and gene therapy development.

Privacy Policy

Thank you for visiting the Clinical Excellence GmbH website. This Privacy Policy explains how Clinical Excellence GmbH processes personal data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

A. Controller

The controller for the data processing is:

Clinical Excellence GmbH

Leipziger Str. 43b
80993 München

Germany

Phone: +49-171-6830682

B. Data Processing on the Website

I. Data Processing when visiting the Website

1. Usage Data

When you visit the Clinical Excellence GmbH website, the web server temporarily evaluates so-called usage data for statistical purposes in order to improve the quality of the website. This data consists of the following data categories:

• the name and address of the requested content,
• the date and time of the access,
• the amount of data transferred,
• the access status (content transferred, content not found),
• the description of the used web browser and operating system used,
• the referral link, which indicates from which page you reached ours,

The legal basis for the processing of usage data is Art. 6 (1) (f) GDPR. The processing is based on the legitimate interest of providing the contents of the website and ensuring a device- and browser-optimised display.

2. Storage of IP adresses for Security Purposes

In addition, Clinical Excellence GmbH stores the complete IP address transmitted by your web browser with strict purpose limitation for a period of seven days in the legitimate interest of detecting, limiting, and eliminating attacks on the website. Clinical Excellence GmbH deletes or anonymizes the IP address when this period has expired. The legal basis for the processing is Art. 6 (1) (f) GDPR.

3. Data Security

Clinical Excellence GmbH implements technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include TLS encryption for data transmission, access controls, role-based authorization, regular backups, vendor due diligence, processor agreements where required, and procedures for assessing and responding to suspected security incidents. Data is transferred from your device to the relevant server and vice versa via the internet using TLS encryption. You can usually recognize this by the closed lock symbol in the status bar of your browser and by an address line that begins with https://.

The Cyber Resilience Act may become relevant only if Clinical Excellence GmbH offers downloadable software, apps, plugins, or other products with digital elements. Ordinary consulting services, training content, PDFs, templates, and the use of pure cloud-based services are not treated in this Privacy Policy as products with digital elements unless a separate assessment confirms otherwise.

4. Use of Cookies

a) Necessary Cookies

Clinical Excellence GmbH uses cookies on the website that are necessary for operating and using the website.

Cookies are small text files that can be stored on and extracted from your device. There is a difference between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored for more than the duration of the session.

I do not use these necessary cookies for analysis, tracking or advertising purposes.

In some cases, these cookies only contain information on certain settings and are not linked to a person. They may also be necessary to enable user guidance, security and operating of the site.

The legal basis for using these cookies is the legitimate interest of Clinical Excellence GmbH according to Art. 6 (1) (f) GDPR.

You can set your browser to inform you about the use of cookies. You can also delete cookies or prevent the setting of new cookies at any time by using the appropriate browser settings. Please note that if you delete certain cookies, our websites may not be displayed correctly and some functions may no longer be available.

Provider

Consent Banner

I use a consent management platform (consent or cookie banner) on my websites. The processing in connection with the use of the consent management platform and the logging of the settings you have made is based on my legitimate interest in accordance with Art. 6 (1) (f) GDPR to provide you with my content according to your preferences and to be able to prove your consent(s). The settings you have made, the consents you have given and parts of your usage data are stored in a cookie. This ensures that it is kept for further website visits and that your consents continue to be traceable. You can find more information about this under the section "Necessary cookies".

The provider of the consent management platform acts on behalf of Clinical Excellence GmbH and is strictly bound by its instructions as a processor. A data processing agreement in accordance with Art. 28 GDPR has been concluded.

b) Optional Cookies

RankMath

I use the web analysis tool “RankMath” to track my website and marketing performance. Therefore, this tool collects Tracker; Usage Data; first name; last name; company name; email address; website; Data communicated while using the service; username; various types of Data; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).

We are supported by ONE.COM INDIA PRIVATE LIMITED as a processor in accordance with Art. 28 GDPR when using the RankMath. The data processing by ONE.COM INDIA PRIVATE LIMITED may also take place outside the EU or the EEA (especially in the USA). With regard to ONE.COM INDIA PRIVATE LIMITED, an adequate level of data protection is ensured due to the adequacy decision (EU-U.S. Data Privacy Framework). Google is also obliged to conclude standard contractual clauses with further sub-processors.

The legal basis for the setting of this cookie and the following data processing is your consent if you have given your consent via my consent banner. You can withdraw your consent at any time. To do so, please follow this link and make the appropriate settings via my banner.

However, AdWords customer will not receive any information that personally identifies users. If you do not wish to participate in the tracking process, you can also reject the setting of a cookie required for this – for example using a browser setting that generally deactivates the automatic setting of cookies. For more details, read the Google’s privacy policy for conversion tracking.

The legal basis for the setting of this cookie and the following data processing is your consent if you have given your consent via my consent banner. You can withdraw your consent at any time. To do so, please follow this link and make the appropriate settings.

5. Social Media Plug-Ins

I do not use Social Media Plug-Ins.

6. Additional Processors

In addition to the above-mentioned processors, Clinical Excellence GmbH shares personal data with service providers that support the operation of the website and associated processes as processors pursuant to Art. 28 GDPR. These include, for example, hosting service providers. Service providers are strictly bound by the instructions of Clinical Excellence GmbH and are contractually obligated accordingly.

The following table names processors with whom Clinical Excellence GmbH works, unless they have already been identified above. If data may be processed outside the EU or the EEA in this context, this is indicated in the table.

II. Data Processing when using the Services offered

1. Contact Form

You may contact Clinical Excellence GmbH via the contact form. In order to respond, Clinical Excellence GmbH first requires the data marked as mandatory (*). These are the following data:

• First Name
• Last Name
• Email Address

In addition, there is an option to provide further personal data. These optional data are:

• Phone Number
• Company
• Job Title

The additional data that you optionally provide serves to improve communication with you and make it more specific. Clinical Excellence GmbH uses this information to ensure that the information sent to you is relevant.

The legal basis for this processing is Art. 6 (1) (f) GDPR in order to respond to your request. In addition, you can decide whether you would like to provide further information, for example your phone number. This information is provided voluntarily and is not mandatory for contacting Clinical Excellence GmbH. Clinical Excellence GmbH processes the information you provide voluntarily on the basis of your consent, Art. 6 (1) (a) GDPR.

Your data will only be processed to respond to your enquiry. Clinical Excellence GmbH deletes your data if it is no longer required and there are no conflicting legal retention obligations. Usually, this is the case seven days after handling the request.

Concerning the processing according to Art. 6 (1) (f) GDPR, you have the right to object at any time. You can also withdraw your consent to the processing of the data you provided voluntarily at any time. To do so, please contact the e-mail address stated in the imprint.

2. Newsletter Registration and Delivery

You can order a newsletter on the Clinical Excellence GmbH website. Please note that certain data is required for subscribing to the newsletter:

• First name
• Email address

The newsletter will only be sent to you, if you have given us your explicit consent due to Art. 6 (1) (a) GDPR. Once you have ordered our newsletter, you will receive a confirmation e-mail to the e-mail address you provided (so-called double opt-in).

You can withdraw your consent at any time. You can easily withdraw your consent, for example, by clicking on the unsubscribe link in every newsletter.

As part of the newsletter registration, we store further data in addition to the data already mentioned, insofar as this is necessary for us to be able to prove that you have ordered our newsletter. This may include the storage of the full IP address at the time of the order or the confirmation of the newsletter, as well as a copy of the confirmation email sent by us. The corresponding data processing is based on Art. 6 (1) (f) GDPR and in the legitimate interest of being able to account for the lawfulness of the newsletter delivery.

This service provider processes the data exclusively in accordance with instructions and on behalf of the controller. For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework). For more details, please read the Kit Privacy Policy.

3. Registration or Downloading Conentent (gated Content)

Clinical Excellence GmbH may share relevant content with you. This content can take the form of newsletters, webinars, roundtables, trainings, whitepapers, or other resources. If you wish to access this content, you must provide the following personal data:

• First name
• Email address

The personal data collected is used to understand your interests and to inform you by email about additional content that may be relevant to you. The data processing takes place on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time.

4. Registration to Clinical Excellence Training Academy and purchasing of digital products

If you wish to register for the Clinical Excellence Training Academy, you must provide the following personal data:

• first name
• last name
• email address

• street and house number
• zip code
• city
• country

In this case, there is also an option to provide further personal data. These optional data are:

• Company Name
• Business Tax Number

More details can be found on the LearnWorlds website:

Terms of Service, Privacy Policy, Cookie Policy, Data Security

More details can be found on the Quaderno website:

Terms of Service, Privacy Policy, Cookie Policy, Data Processing Agreement, Subprocessors,  Security Policy

5. Storage Period

Unless Clinical Excellence GmbH has already informed you in detail about the storage period, personal data is deleted when it is no longer required for the aforementioned processing purposes and no legitimate interests or other legal reasons for storage prevent deletion.

C. Your Rights as a Data Subject

When processing your personal data, the GDPR grants you certain rights as a data subject:

I. Right of access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data of you is being processed; if this is the case, you have the right to obtain information about the processed personal data and to receive the information listed in detail in Art. 15 GDPR.

II. Right to rectification (Art. 16 GDPR)

You have the right to request the rectification of any inaccurate personal data relating to you and, where applicable, the completion of any incomplete data, without delay.

III. Right to erasure (Art. 17 GDPR)

You have the right to request the erasure of your personal data without delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies.

IV. Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing, for the duration of the assessment by the controller, if one of the requirements listed in Art. 18 GDPR is met, e.g. if you have objected to the processing.

V. Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.

VI. Right to withdraw consent (Art. 7 GDPR)

If the processing of data is based on your consent, you are entitled to withdraw your consent to the processing of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the withdrawal of consent is only effective for the future. Processing that took place before the withdrawal is not affected.

VII. Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 (1) (f) GDPR (data processing for the protection of legitimate interests) or on the basis of Art. 6 (1) (e) GDPR (data processing for the protection of public interests or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

VIII. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint can be asserted in particular with a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the suspected infringement.

IX. Asserting your rights

Unless otherwise described above, please contact the controller of the data processing at the following address:

Jessica.Cordes@clinical-excellence.com.

D. AI Use Notice for This Page

The content was created with AI assistance and underwent human review and editorial control by Clinical Excellence GmbH, represented by Jessica Cordes.

E. Use of Artificial Intelligence (AI) and Transparency

Clinical Excellence GmbH uses artificial intelligence (AI) to support selected consulting, training, digital product, marketing, and content creation activities. AI may support the drafting, structuring, editing, translation, or visual preparation of text, images, templates, checklists, examples, training materials, and AI-supported client deliverables. AI is used as a support tool. Professional judgment, client context, regulatory understanding, and final editorial responsibility remain with Clinical Excellence GmbH. More detailed information on AI-supported content generation, AI labeling, human review, and the role of Clinical Excellence GmbH as a deployer of generative AI systems is provided in the AI Transparency Policy.

Where personal data is processed in connection with AI-supported workflows, the data categories may include prompts, uploaded or shared documents, images, contact details, business communications, webinar registrations, learning platform data, course registration data, purchase-related information, and content submitted for consulting, training, or digital product support. Such data is processed only for the relevant purpose, such as responding to requests, preparing or improving materials, providing training or digital products, supporting client deliverables, managing business communications, or documenting consent and transactions. The applicable legal basis, recipients, retention periods, and transfer safeguards are described in the relevant sections of this Privacy Policy.

I. Legal and Industry Standards

Clinical Excellence GmbH complies with applicable data protection requirements, including the GDPR. For AI governance, Clinical Excellence GmbH aligns relevant practices with the EU AI Act, the Code of Practice on Transparency of AI-Generated Content, and recognized AI governance principles, including ISO/IEC 42001:2023 where appropriate. This statement does not represent a claim of certification under ISO/IEC 42001:2023.

II. Data Subject Rights Regarding AI

You may request information about whether personal data relating to you is processed in connection with AI-supported workflows. Clinical Excellence GmbH does not use personal data from the website to make solely automated decisions within the meaning of Art. 22 GDPR that produce legal effects or similarly significant effects concerning you.

F. Changes to this Privacy Policy

This Privacy Policy is currently valid and effective as of August 2026.

Due to the further development of the website and services described above or due to changed legal or official requirements, it may become necessary to amend this Privacy Policy.

You can access and print the most current Privacy Policy at any time.