Website morphais.com, last update: May 2022
We have created this privacy policy to inform you about how personal data is collected, processed and used when you visit our website. The careful handling of personal data is of great concern to us. During processing, therefore, we naturally comply with legal regulations and protect your privacy.
1. Contact person
The website www.morphais.com is provided by Morphais HSTL Technologies GmbH, Torstraße 164 c/o mc-quadrat oHG, 10115 Berlin (hereinafter referred to as “Morphais” or “we”). Morphais is also the controller within the meaning of the EU General Data Protection Regulation (DSGVO) for the collection, processing and use of personal data of website visitors (hereinafter referred to as “you”). Should you have any questions or suggestions regarding data protection, please do not hesitate to contact us. You are welcome to direct your data protection concerns to our data protection team by sending an email to info@morphais.com.
2. Data processing when you use our website
2.1 Visiting the site. In principle, it is possible to visit our website without providing personal data. Personal data is only collected if this is necessary for technical reasons to use our website or if you use certain functions or services offered on our website, e.g. the application form.
The following access data are automatically recorded every time our website is accessed:
It is necessary to process this data to make it possible to visit the website and to guarantee the long-term functionality, availability and security of our systems. The legal basis for this data processing is Art. 6(1) lit b DSGVO.
For the purposes described above, the access data specified is also temporarily stored in internal log files in order to generate statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are accessed increases) and for the general administrative maintenance of our website. The legal basis for this data processing is Art. 6(1) lit. f DSGVO, based on our legitimate interest in appropriately optimising our website.
The information stored in the log files does not allow any conclusions about your person and we only store IP addresses in the log files in shortened, anonymised form.
2.2. Applying to Morphais. You have the possibility to use our online application form to apply for funding.
On the basis of consent pursuant to Art. 6 (1) lit. b. and Art. 7 DSGVO, we offer applicants the opportunity to be included in our "applicant pool" for the statutory period of two years.
The application documents will be processed solely in the context of future projects and will be destroyed at the latest after the expiry of the above-mentioned period. Inclusion in the applicant pool is voluntary and dependent on the consent of the applicants. Consent can be revoked at any time and, of course, everyone also has the right to object.
Data protection information in the application process
Your applicant data will only be used for the purpose of and within the scope of the application procedure in accordance with the legal requirements. The data is processed to fulfill our (pre)contractual obligations within the scope of the application procedure in accordance with Art. 6 Para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO insofar as data processing becomes necessary for us, e.g. within the scope of legal procedures.
Applicants provide us with their data as part of the application process. The necessary applicant data results from the application forms or from the advertisements. In order to receive and process your application, we collect the following applicant data: First and last name, e-mail address, telephone number, details of your company, personal details and application documents (e.g. pitch deck). You can also voluntarily provide us with additional information that we should consider in your application (e.g. your business plan).
By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in the manner and to the extent set out in this privacy policy.
Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are voluntarily provided within the scope of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. b DSGVO . Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) a DSGVO, namely if they are required for the position. If the data is transmitted online via a form, it is transmitted to us in an appropriately encrypted form. This is not guaranteed in the case of transmission by email. The applicant must initiate the corresponding encryption himself/herself if he/she wishes to avoid third parties being able to access this data. We therefore recommend sending it by online form.
The data provided by applicants can and will be further processed.
2.3 Morphais newsletter You have the opportunity to subscribe to our Morphais newsletter, which informs you regularly about news from Morphais and our ventures, insights, new investments, milestones and events.
When registering for the Morphais newsletter, we ask you to provide your email address so that we can send you the respective newsletter. In addition, you have the opportunity to tell us your name.
We use the so-called double opt-in procedure, which means that we will only send you information by email if you click on a link in our notification email to confirm that you are the owner of the email address provided. If you confirm your email address, we will store your email address, the time of registration and the IP address assigned to you when registering until you unsubscribe from the newsletter. The sole purpose of storing this information is to send you the newsletters and to be able to prove that you registered. You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every email. It is of course also sufficient if you notify us using the contact details provided above or in each email (e.g. by email or letter). The legal basis of the data processing in connection with registering for the Morphais newsletter is your consent pursuant to Art. 6(1) lit. a DSGVO.
We use the US provider “MailChimp” for sending and managing our newsletters. MailChimp is provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404 Atlanta, GA 30318 (“MailChimp”). MailChimp offers a well-thought-out and technically convincing software solution and the provider is reliable as a security-conscious and responsible company. Since personal data is transferred to the USA in the course of processing by MailChimp, MailChimp has contractually assured us of compliance with the European Data Protection Principles. However, we inform you, that in the case of data processing outside of Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. if US security authorities store and analyse data. We will transmit the data concerning your registration for the newsletter to MailChimp, which will store it for as long as you remain registered for the newsletter.
In our newsletters, we use market-standard technologies to allow us to measure interactions with the email (e.g. opening of the email, which links are clicked on). We use this data for general statistical evaluations as well as to optimize and further develop our content and customer communication. This is done with the help of small graphics (pixels) embedded in the emails. The data is collected in pseudonymous form only and not linked to your other personal data. The legal basis for this is our aforementioned legitimate interest pursuant to Art. 6(1) lit. f DSGVO. With our newsletters, our aim is to share content that is as relevant as possible for our users and to better understand what the readers are actually interested in. If you do not want your usage behaviour to be analysed in this way, you can unsubscribe from the newsletter at any time or disable the display of graphics in your email client by default. The data about how you interact with our newsletters is stored in pseudonymous form for 30 days before being completely anonymised.
3. Cookies and usage analysis
3.1 General use of cookies and comparable technologies. When you visit and use our website, a variety of cookies and comparable technologies (e.g. storage of data in the local memory of your device, so-called local storage technology or counting pixels, which serve to (temporarily) store information on specific users or usage processes) are used. Cookies are small text files stored in your web browser’s memory that contain information that can be used to recognise you when you visit web servers later on. Cookies cannot execute any programs or transfer viruses to your computer. For reasons of readability for cookies and the comparable technologies mentioned, the term "cookies" is used in the following.
The primary purpose of our own cookies is rather to make using our service as time-saving and user-friendly as possible.
We use cookies in particular:
We do this to be able to make your use of our website more convenient and personalised. The processing of the respective cookies is based on our aforementioned legitimate interests, meaning the legal basis is Art. 6(1) lit. f DSGVO.You can prevent the storage of cookies by adjusting your browser settings to disable the acceptance of cookies via this website. If you do not accept cookies, however, this may in some cases lead to considerable functional restrictions on our website.Other cookies are used to analyse the use of our websites for statistical purposes. This enables us to find out, for example, which type of device was used to access our websites and how the use was made. This enables us to adjust the pages and the layout and the individual page elements to the most important browser types and end devices and to adapt them to actual usage habits. We only use these analysis cookies if you agree to this use via our cookie banner. The legal basis for the data processing in connection with the analysis cookies is your consent Art. 6 (1) lit. a DSGVO. You can revoke your consent by calling up the cookie settings and declining all optional cookies via the cookie settings adjustment button at the bottom of the page.We also use cookies for advertising purposes when we use techniques to display ads or references to our job advertisements on other pages and, for example, in social networks for users who have already visited our website (so-called retargeting). We also only use these marketing cookies if you agree to this use via our cookie banner. The legal basis for the data processing in connection with the marketing cookies is your consent, Art. 6 (1) lit. a DSGVO. You can revoke your consent by calling up the cookie settings and changing the corresponding selection there.
3.2 Cookies and other technologies from third-party providers. In addition, we also use cookies and technologies from third-party providers for analysis and marketing purposes as part of the statistical recording and analysis of general usage behaviour based on access data. We use the results of such analyses to improve our website and adapt it to the actual needs of our users. The legal basis for the individual examples of data processing described below is Art. 6(1) lit. f DSGVO, based on our legitimate interest in the demand-oriented design and continuous optimisation of our website and in the advertising of our services.
Google Analytics. Google Analytics. Our website uses the web analytics service Google Analytics, which is offered for users from the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses analysis cookies to record your access data when you visit our website. On our behalf, Google combines the access data into pseudonymous user-profiles and transmits it to a Google server in the USA. Your IP address is anonymised beforehand. We can therefore not determine which usage profiles belong to a particular user. The data collected by Google can therefore neither identify you nor determine how you actually use our website. It is only possible to see that a user has already visited the site within the last 14 months. In the event that personal data is transferred to the USA in the course of processing by Google, we have contractually agreed with Google to observe the European data protection principles. However, in the case of data processing outside of Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. if US security authorities store and analyse data. Data transfer to the USA is only carried out if you have agreed to the use of Google Analytics within the framework of our cookie banner. You can revoke your consent at any time by deactivating the web analysis by Google via the cookie settings. On our behalf, Google uses the information generated by cookies for the purpose of evaluating the usage of our website, compiling reports on website activity, and providing us with other services relating to website usage and internet usage. For further information, please refer to the Google Analytics privacy policy.
The legal basis for the described data processing is Art. 6 (1) lit. a DSGVO, based on your consent, which you have given via our cookie banner. If you have not given your consent to the use of the analysis cookies, your data will not be collected within the context of Google Analytics. The data collected with Google Analytics is stored for a period of 14 months and then completely deleted.
You can prevent the collection of data generated by the cookie and relating to your use of our website and the processing of this data by Google on all websites and revoke any consent you may have given by downloading and installing a browser add-on provided by Google (the add-on does not work in conjunction with mobile devices).
You also have the option of changing the settings in Google ad personalisation settings in general.
You can also disable the Google cookie at any time by going to our cookie settings linked above and changing the appropriate choice.
For further information about Google Analytics, please refer to Google’s privacy policy.
a. Google Tag Manager. Our website uses Google Tag Manager, a service, which is offered for users from the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.. The Google Tag Manager is used to manage tracking tools and other services, so-called website tags. A tag is an element that is stored in the source code of our website, for example, to record predefined usage data. The Google Tag Manager works without the use of cookies. The Google Tag Manager ensures that the usage data required by our partners (cf. the data processing procedures described above) is forwarded to them. The Google Tag Manager itself does not collect any personal data itself. The tool ensures that other tags are triggered, which in turn may collect data and which are further explained in this privacy notice. If no consent is given to the use of the analysis and marketing cookies, no data will be processed in connection with the Tag Manager. You can also read more about the Tag Manager in Google's Tag Manager information. The use of the Tag Manager is technically necessary.
b. Hotjar. We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
4. Links to other websites and online content
Our website may contain links to websites and online content of other providers not affiliated with us. If you activate these links, we no longer have any influence on which data is collected by the respective providers and which data they record. For more detailed information on data collection and use, please refer to the privacy policies of the respective providers.
5. Features from social networks
Social plug-ins from various social networks are integrated into our website:
Social plug-ins can be recognised by the logos of the individual providers.
If you retrieve an article or a subpage on our website that contains these social plug-ins, a direct connection is established with the servers of the respective social networks, and from there the visible image of the plug-in and the functions behind it are transmitted directly to your browser, which then integrates them into the presentation of our site. If you are logged in to the respective social network at that moment with your username and password, the information that you are visiting our site will be transferred to the social network and the respective provider may assign this information to your user account. If you interact with the social plug-ins, for example by using the Instagram “like” or Twitter “Tweet This” function, the content of our pages will be linked to your Instagram or Twitter profile.
If you are not a member of the respective social networks or have logged out of the providers’ websites before visiting our website, it is still possible that at least your IP address will be transmitted and stored there.
We would like to point out that the content and scope of data collected directly by and transmitted to the social networks via the social plug-ins, but also the storage period of up to 250 days and the purposes for which the data is used, are determined exclusively by the respective providers. However, we receive statistics from the providers about the use of and visits to our company profiles on the social networks (e.g. information about the number of hits, interactions such as likes and comments, and summarised demographic and other information or statistics). We do not provide the respective social networks with any information about our customers, but only with certain general parameters about our company and the services offered in our company profile. The social networks use this information to compile more detailed statistics. In addition, the providers may use the data for their own purposes, over which we have no further influence. For further information, please refer to the providers’ privacy notices, links to which are provided above.
If we receive your personal data within the scope of our social media profiles (e.g. in the context of communication), you are entitled to the rights stated in this data protection declaration (see section 7 "Your rights"). You can address your enquiries regarding data processing within the scope of our company profiles to us via the contact data mentioned in section 1.
If you also want to assert your rights against the social network provider, the easiest way to do so is to contact the respective provider directly. The provider knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of data processing and can implement appropriate measures at your request if you exercise your rights. The contact details can be found in the data protection information linked above. We are also happy to support you in asserting your rights as far as we are able to.
The legal basis for the aforementioned data processing is Art. 6 (1) lit. b DSGVO if we receive and process your data in the context of an enquiry from you via our social media profiles and the legal basis for linking and operating our company profiles in the social networks, including receiving statistics on the use of our company profiles is Art. 6 (1) lit. f DSGVO based on our legitimate interest in our corporate communications in the respective social networks. The legal basis of the data processing in the context of any social plug-ins is your consent Art. 6 (1) lit. a DSGVO if you have agreed to the use of marketing cookies via the cookie banner. If you do not give your consent, the data processing described here will not be carried on our website.
5.1 Additional information on our Instagram page
If you visit our Instagram page, your data may also be processed in countries outside the European Union where the level of data protection is lower than in the European Union (e.g. the USA). We have contractually agreed with Meta to comply with the European Data Protection Principles, in the case of data processing outside Europe. However, it may in individual cases be possible that the rights of EU citizens cannot be enforced or cannot be fully enforced, e.g. if US security authorities store and analyse data. Please therefore check carefully what personal information and messages you share on Instagram and, if in doubt, use other contact options offered by us to get in touch with us.
For more information on the type and scope of the statistics that we receive from Meta about the visits and interactions with our page (so-called insights), please also see the Instagram information on page insights. Here you will also find a detailed description of the data that is processed when you visit the fan page to create these statistics (e.g. the content accessed, likes, subscriptions, recommendations and comments as well as clicks, mouse movements and date, time, Instagram user ID and demographic data. If you want to assert your rights against Meta, you can use an online form from Meta or contact us as mentioned above.
5.2 Additional information on our Twitter profile
We are responsible for our tweets and information shared by us. Twitter provides the technical platform and infrastructure for message exchange. If you communicate with us via Twitter and respond to our tweets, your data may also be processed in countries outside the European Union where the level of data protection is lower than in the European Union (e.g. in the USA). We have contractually agreed with Twitter to respect the European data protection principles. However, when data is processed outside Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. when US security authorities store and analyse data. Please check carefully what personal information and messages you share on Twitter and, if in doubt, use other contact options offered by us.
We may also receive statistics from Twitter about the reach of our social media activity (e.g. the number of hits, interactions such as retweets and aggregated demographic and other information or audience insights and other statistics about followers).
5.3 Additional information on our LinkedIn profile
We are responsible for our own content in our LinkedIn company profile and information shared by us there. LinkedIn provides the technical platform and infrastructure for the social network. If you communicate with us on LinkedIn, your data may also be processed in countries outside the European Union where the level of data protection is lower than in the European Union (e.g. the USA). We have contractually agreed with LinkedIn to respect the European Data Protection Principles. However, when data is processed outside Europe, it may in individual cases not be possible to enforce the rights of EU citizens, or not fully enforce them, e.g. when US security authorities store and analyse data. Please check carefully what personal information and messages you provide via LinkedIn and if in doubt, use other contact options we offer.
We may also receive statistics from LinkedIn regarding the use of our social media presence (such as the number of views of articles and posts, interactions such as "likes" and comments, and aggregated demographic and other information such as aggregated positions and locations of followers and group members or other statistics).
6. Disclosure of data
In principle, we will only pass on the data we collect if:
Part of the data processing described in this privacy policy may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, this may, in particular, include data centres that store our website and databases, IT service providers that maintain our systems, and consulting firms. If we pass data on to our service providers, they may use the data exclusively for the fulfilment of their tasks. We have carefully selected and commissioned the service providers. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of data subjects, guarantee an appropriate level of data protection and are carefully monitored by us.
In addition, data may be disclosed in connection with official requests, court orders and legal proceedings if this is necessary to pursue or enforce rights.
7. Your rights
You have the right to information about how we process your personal data at any time. When providing this information, we will explain the data processing to you and provide you with an overview of the data stored about you.
If data stored by us is incorrect or no longer up to date, you have the right to have this data corrected.
You may also demand that your data be erased. Should the erasure not be possible in exceptional cases due to other legal regulations, the data will be blocked so that it is only available for that legal purpose.
You are also entitled to have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect. You also have the right to data portability, which means that on request we will send you a digital copy of the personal data you have provided.
In order to assert your rights described here, you can contact us at any time using the contact details provided in Section 1 above. This also applies if you wish to receive copies of safeguards in order to prove an adequate level of data protection.
In addition, you have the right to object to data processing if it occurs based on Art. 6(1) lit. f DSGVO or for direct marketing purposes. Finally, you have the right to lodge a complaint with our competent data protection supervisory authority. You can assert this right by contacting a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The competent supervisory authority in Berlin is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.
Right of withdrawal and objection. Pursuant to Art. 7(3) DSGVO, you have the right to withdraw the consent you gave us at any time. As a result of this, we will cease the data processing based on this consent with future effect. This withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
If we process your data on the basis of legitimate interests pursuant to Art. 6(1)(f) DSGVO, you have the right under Art. 21 DSGVO to object to the processing of your data, and to give us reasons which arise from your particular situation which, in your opinion, show that your legitimate interests override ours. If your objection is to data processing for direct marketing purposes, you have a general right of objection, which we will implement without requiring you to give reasons.
If you would like to make use of your right of withdrawal or objection, it is sufficient to simply notify us using the contact details provided above.