Aus einem kleinen Labor am Starnberger See ist ein international gefragter Partner für Diagnostik und Pharma geworden — getragen von über 230 Menschen, die Präzision jeden Tag leben.
As of: 5 November 2026
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
This privacy policy informs you about which personal data is processed when you visit our website, use our contact options, apply for a job with us and in connection with our social media presences.
Personal data is any information relating to an identified or identifiable natural person.
The controller within the meaning of Art. 4(7) GDPR is:
Microcoat Biotechnologie GmbH
Am Neuland 3
82347 Bernried
Germany
Phone: +49 (0)8158 9981 0
E-mail: info@microcoat.de
If you have any questions about data protection and the processing of your personal data, our data protection contact is available to you:
E-mail: datenschutzbeauftragter@microcoat.de
You can contact this address at any time with questions, concerns or requests regarding the exercise of your data protection rights.
Subject to the statutory requirements, you have the following rights:
Right of access under Art. 15 GDPR: You can request information as to whether and which personal data we process about you.
Right to rectification under Art. 16 GDPR: You can request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to erasure under Art. 17 GDPR: You can request the erasure of your personal data subject to the statutory requirements.
Right to restriction of processing under Art. 18 GDPR: Under certain conditions, you can request that the processing of your personal data be restricted.
Right to data portability under Art. 20 GDPR: You can request that the personal data you have provided be handed over in a structured, commonly used and machine-readable format, provided the statutory requirements are met.
Right to object under Art. 21 GDPR: You can object at any time, on grounds relating to your particular situation, to the processing of your personal data where it is based on Art. 6(1)(e) or (f) GDPR.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. This also applies to profiling related to such direct marketing.
Where we process your personal data on the basis of your consent, you can withdraw this consent at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected.
You can declare your withdrawal in particular via the settings of our cookie consent tool or via the contact options listed above.
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
As our company is based in Bavaria, the competent supervisory authority is generally:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: https://www.lda.bayern.de/
You can also contact any other data protection supervisory authority competent under Art. 77 GDPR.
When you access our website, the web server automatically collects information and stores it in so-called server log files.
This may include in particular:
IP address of the requesting device,
date and time of access,
pages and files accessed,
referrer URL,
browser and browser version used,
operating system used,
host name of the accessing computer,
HTTP status code and amount of data transferred.
The processing serves the following purposes:
ensuring a smooth connection setup,
ensuring the technical functionality of our website,
detecting and preventing attacks and misuse,
analysing technical errors,
ensuring system security and optimising our website.
The legal basis is Art. 6(1)(f) GDPR.
Our legitimate interest lies in the secure, stable and functional operation of our website.
Recipients of the data may be our hosting provider and other technical service providers commissioned with the operation and maintenance of our website.
Where service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Server log files are only stored for as long as is necessary to achieve the purposes stated.
The specific storage period depends on the technical and security-related requirements of our hosting provider.
Longer storage may be necessary in individual cases, for example to investigate security incidents.
Our website is operated by an external hosting provider.
SpaceNet GmbH
Joseph-Dollinger-Bogen 14
80807 München
Germany
Website: https://www.space.net/
Personal data is processed by the hosting provider in particular for the technical provision, maintenance and security of our website.
In particular, IP addresses, server log files, technical connection data and other information required for the operation of the website may be processed.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
Where SpaceNet processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Personal data is processed only within the scope of the contractually agreed services and instructions.
Our website may use cookies and similar technologies, for example local storage or other methods of storing and reading information on your device.
Cookies are small text files that can be stored on your device via your web browser.
We distinguish between technically necessary and non-necessary cookies.
These are required to provide basic functions of our website, for example:
technical navigation,
storing your privacy settings,
ensuring basic security functions,
providing website functions you have expressly requested.
These include in particular technologies for:
statistical analyses,
audience measurement,
usage analyses,
marketing and advertising,
external media and embedded content.
The storage of information on your device or access to information already stored there is governed by Section 25 TDDDG.
Where these operations are not strictly necessary to provide a digital service you have expressly requested, your prior consent is required.
The subsequent processing of personal data is based on Art. 6(1)(a) GDPR.
For operations that are strictly technically necessary, the exemption under Section 25(2) TDDDG may apply. The subsequent processing of personal data additionally requires a legal basis under the GDPR.
We use a cookie consent tool on our website through which you can manage your consent to the use of non-necessary cookies and similar technologies.
When you first visit our website, you can decide which categories of cookies and technologies you wish to consent to.
You can change or withdraw your consent at any time with effect for the future.
Rejecting non-necessary cookies must be just as easy as giving consent.
You can call up the settings again at any time via the corresponding function on our website.
The storage period depends on the respective cookie, its purpose and its provider.
An overview of the cookies actually used, their providers, storage periods and purposes is provided via our cookie consent tool.
On our website we use Matomo Cloud, a web analytics service provided by InnoCraft Ltd., 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand.
Matomo Cloud enables us to statistically evaluate the use of our website and to continuously improve our online presence.
In particular, the following information may be processed:
pages and subpages accessed,
date and time of access,
time spent on the site and interactions,
origin of visitors (referrer),
browser and operating system used,
device used,
IP address (anonymised or truncated, depending on the configuration),
pseudonymous visitor IDs and technical usage information.
The analysis serves to improve our website, optimise its usability and analyse the reach and use of our digital offerings.
Use for advertising purposes or for creating personalised advertising profiles is not intended.
The storage of information on your device or access to information already stored there takes place, where necessary, on the basis of your consent pursuant to Section 25(1) TDDDG.
The subsequent processing of personal data is based on Art. 6(1)(a) GDPR.
Non-necessary analytics and tracking technologies are only activated after you have given your prior consent.
The recipient of the data collected in the course of web analytics is InnoCraft Ltd. as the provider of Matomo Cloud.
InnoCraft Ltd. processes the data on our behalf. The data processing is governed by the Matomo Cloud Data Processing Agreement (DPA).
InnoCraft Ltd. uses further sub-processors to provide the service. These include in particular technical infrastructure and hosting providers.
Further information on data processing and sub-processors is available at:
https://matomo.org/matomo-cloud-dpa/
https://matomo.org/matomo-cloud-dpa/subprocessors/
According to the provider, Matomo Cloud data is stored in European data centres. The regular hosting location is Frankfurt am Main; backup copies are stored in Dublin, Ireland.
InnoCraft Ltd. has its registered office in New Zealand. Where personal data is transferred to third countries in the course of providing the service and support, this is done in compliance with the requirements of Art. 44 et seq. GDPR and on the basis of the applicable transfer mechanisms.
The usage data collected is only stored for as long as is necessary for the analysis purposes stated.
The specific storage period depends on the settings made in Matomo Cloud and the deletion periods we have defined.
You can withdraw your consent at any time with effect for the future via the cookie settings on our website.
The lawfulness of processing carried out before the withdrawal remains unaffected.
Further information on data processing by Matomo is available at:
https://matomo.org/matomo-cloud-privacy-policy/
Our website may use fonts from the Google Fonts service.
Whether the fonts are embedded entirely locally on our web server or externally via Google servers is currently being technically reviewed.
If the fonts are embedded locally, they are provided directly from our server. In this case, no connection to Google servers is established to transfer the fonts.
If the fonts are embedded externally, a connection to Google servers may be established when you access our website. In particular, your IP address and technical connection information may be transmitted.
External embedding is only carried out in compliance with the applicable data protection requirements.
Further information on Google Fonts is available at:
https://developers.google.com/fonts/faq
Google's privacy policy:
https://policies.google.com/privacy
Videos from the YouTube platform may be embedded on our website.
The provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, USA, may also be involved in certain processing operations.
When you access a page containing a YouTube video, information may be transmitted to YouTube.
This may include in particular:
IP address,
technical information about the device,
browser information,
information about the website accessed,
information about the use of the video.
If you are logged in to YouTube at the same time, YouTube may be able to associate your usage behaviour with your user account.
Where possible, we use privacy-friendly embedding, whereby videos are only loaded after appropriate consent has been given.
The storage of or access to information on your device takes place, where necessary, on the basis of Section 25(1) TDDDG.
The subsequent processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR.
A transfer of personal data to the USA cannot be ruled out.
Any such transfer is only carried out in compliance with the requirements of Art. 44 et seq. GDPR.
You can withdraw your consent at any time via our cookie consent tool.
Further information on data processing by Google is available at:
https://policies.google.com/privacy
If you contact us via the contact form on our website, we process the personal data you submit in order to handle your enquiry.
This may include in particular:
first and last name,
company and position,
e-mail address,
phone number,
content of your message,
date and time of contact,
any other information you provide voluntarily.
This information is used to assign and process your enquiry and to enable us to respond to you.
Providing the information marked as mandatory is necessary for us to process your enquiry. Any further information is voluntary.
Depending on the content of your enquiry, the processing is based on:
Art. 6(1)(b) GDPR, where your enquiry relates to the performance of pre-contractual measures or the performance of a contract.
Art. 6(1)(f) GDPR, where the processing serves to handle general business enquiries on the basis of our legitimate interest in efficient communication.
Art. 6(1)(a) GDPR, where separate consent is required in an individual case and has been obtained.
Within our company, only those persons who need your data to process your enquiry have access to it.
In addition, technical service providers, in particular our hosting and e-mail providers, may be engaged as processors.
We only store your personal data for as long as is necessary to process your enquiry.
Once your enquiry has been fully processed, the data is deleted unless statutory retention obligations or other legal grounds require longer storage.
If a contractual relationship is established, the relevant retention periods under commercial and tax law also apply.
We maintain company profiles on social networks, in particular on Instagram and LinkedIn.
Through these platforms, we provide information about our company, our activities, products and services as well as current developments.
When you visit our company profiles, interact with our content or contact us via the respective platforms, personal data may be processed by the platform operators.
This may include in particular:
profile information,
comments and messages,
reactions and interactions,
IP address,
technical usage information,
device and browser information,
information about the use of our company profiles.
We have only limited influence on the data processing carried out by the platform operators.
We operate a company presence on Instagram.
The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.
When you visit our Instagram company profile, personal data may be processed by Meta.
Meta may provide us with statistical analyses of the use of and interaction with our company profile. These are referred to as Instagram Insights.
These analyses may include in particular information on reach, page views, interactions and demographic characteristics.
Where joint controllership pursuant to Art. 26 GDPR exists for certain processing operations in connection with Instagram Insights, the respective responsibilities are governed by the agreement in force between Meta and us.
Further information:
Meta's privacy policy:
https://www.facebook.com/privacy/policy/
Information about Instagram:
https://help.instagram.com/519522125107875
Information on joint controllership:
https://www.facebook.com/legal/terms/page_controller_addendum
We operate a company presence on LinkedIn.
For users in the European Economic Area, the provider is generally LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
When you visit our company profile or interact with our posts, personal data may be processed by LinkedIn.
This includes, for example, profile information, interactions, comments, messages and technical usage data.
LinkedIn may provide us with statistical analyses of the use of our company profile.
Further information can be found in LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy
Information on joint controllership for certain page analytics:
https://legal.linkedin.com/pages-joint-controller-addendum
Where applicable, we process personal data in connection with our social media presences on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Our legitimate interest lies in modern corporate communication, public relations and providing information about our products and services.
The platform operators' own privacy policies additionally apply to data processing carried out by them.
If you apply for a job with us, we process your personal data for the purpose of carrying out the application process and deciding whether to establish an employment relationship.
This may include in particular:
first and last name,
contact details,
cover letter and CV,
references and certificates of qualification,
details of your professional experience,
information about your availability,
other information you voluntarily provide to us as part of your application.
We only process personal data that is necessary for the respective application process or that you provide to us voluntarily.
The legal basis is Section 26(1) BDSG in conjunction with the relevant data protection provisions, insofar as the processing is necessary for the decision on establishing an employment relationship.
Where special categories of personal data are processed, the requirements of Art. 9 GDPR also apply.
Within our company, only those persons involved in the selection and decision-making process have access to your application data.
After an unsuccessful application process has been concluded, your application data will generally be deleted no later than six months after notification of the decision, unless statutory retention obligations or other legal grounds prevent deletion.
If you have expressly consented to being included in our talent pool, your data may be stored for the period specified in your consent.
You can withdraw your consent at any time with effect for the future.
If you are hired, the data required for the employment relationship will be transferred to our personnel records.
We only pass on personal data to third parties if this is necessary to fulfil the respective processing purposes, if there is a legal obligation, if you have given your consent or if there is another legal basis.
Possible recipients include in particular:
hosting and IT service providers,
technical service providers for website maintenance and support,
providers of communication and e-mail services,
providers of cookie consent systems,
where applicable, external service providers supporting administrative processes.
Where service providers process personal data on our behalf, the necessary data processing agreements pursuant to Art. 28 GDPR are concluded.
Personal data is only transferred to countries outside the European Union or the European Economic Area in compliance with the statutory requirements of Art. 44 et seq. GDPR.
Such a transfer may in particular be based on the following mechanisms:
an adequacy decision of the European Commission pursuant to Art. 45 GDPR,
appropriate safeguards pursuant to Art. 46 GDPR, in particular EU standard contractual clauses,
where applicable, other statutory derogations pursuant to Art. 49 GDPR.
For transfers to the USA, the EU-US Data Privacy Framework may be relevant in particular, provided that the respective recipient is certified accordingly and the certification covers the data processing concerned.
Further information is available on request via our contact options.
We generally only process and store personal data for as long as is necessary for the respective processing purposes.
Once the respective purpose no longer applies, the data is deleted unless statutory retention obligations or other legal grounds prevent deletion.
Statutory retention obligations may arise in particular from the German Commercial Code (HGB) and the German Fiscal Code (AO).
The specific storage period depends on the respective data category, the purpose of processing and the relevant statutory provisions.
For security reasons and to protect the transmission of confidential content, our website uses SSL or TLS encryption.
You can recognise an encrypted connection by the address bar of your browser beginning with “https://” and, where applicable, by the padlock symbol.
Encryption protects transmitted data from unauthorised access by third parties during transmission.
Decision-making based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR generally does not take place in the context of the processing operations described here.
We reserve the right to amend this privacy policy if this becomes necessary due to legal, technical or organisational changes.
This may be the case in particular in the event of changes to our website, the technologies used, the service providers engaged or the applicable legal requirements.
The current version published on our website applies.
If you have any questions about the processing of your personal data, the exercise of your rights or this privacy policy, you can contact us at any time.
Microcoat Biotechnologie GmbH
Am Neuland 3
82347 Bernried
Germany
Phone: +49 (0)8158 9981 0
E-mail: info@microcoat.de
Data protection contact:
datenschutzbeauftragter@microcoat.de