top of page


Thank you for visiting our website and your interest in our company! ​


The protection of your personal data is very important to us. We would therefore like to inform you below which data from your visit we use and for what purposes. This data protection declaration is aimed at interested parties who contact us and at our customers as well as cooperation and business partners. It applies to all processing of personal data carried out by us, both in the context of providing our services and in our online presence. If you have any further questions about how we handle your personal data, please feel free to contact us (see contact details below).


​We strive to protect your personal data in the best possible way and treat your data responsibly and in accordance with current data protection regulations and legal provisions. We would like to point out that data transmission over the Internet (e.g. when communicating via email) can have security gaps. Complete protection of data from access by third parties is not possible. ​




“Personal data” is information that can be used to draw conclusions about a specific person, such as name, address, date of birth, telephone number, etc. ​




Visitor data – web analysis – cookies For security reasons and to protect the transmission of confidential content, our website uses SSL or TLS encryption, which means that data transmitted to us cannot be read by third parties. When you use our website, your browser data is transmitted to our server; this is necessary to ensure the stability and security of our website. The server log files may include the date and time of access, country of origin, the IP address (shortened and no longer assignable to a specific person) and browser data. There is currently no web analysis tool in use. Only technically necessary cookies are used. “Cookies” are text files that are stored on your computer. Cookies cannot access, read or modify any other data on the computer. Cookies also cannot run programs or transmit viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.

contact details

If you contact us by email or using the contact form, the data you provide (name, address, telephone number, email address, etc.) will be used to process the request and in the event of follow-up questions or any subsequent customer relationship, Cooperation or business relationship stored with us. You can revoke your consent at any time by sending us an informal email. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention requirements. We will not pass on this data without your consent. Please note that emails on the Internet are generally not sent encrypted. As a rule, emails are encrypted during transport, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. Therefore, no responsibility can be accepted for the transmission path of the emails. ​


Customer data

We collect, process and use personal data in order to be able to carry out the fulfillment of a contract or pre-contractual measures and as part of communication regarding these processes. The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected. ​


Applicant data

If the application is successful, the applicant's data will be further processed for the purposes of the employment relationship. If the application is unsuccessful, the applicant data will be deleted 6 months after the decision so that we can answer any follow-up questions about the application or fulfill our obligations to provide proof.

Social Media

We maintain online presences within social networks in order to communicate with the users active there and/or to offer information about us and our activities. We would like to point out that user data may reach and be processed outside the European Union, which, from the perspective of the European Union (“EU”), does not guarantee an “adequate level of protection” for the processing of personal data that corresponds to EU standards. As a rule, these providers offer equivalent protection within the framework of standard contractual clauses, but enforcing user rights could be more difficult. The detailed processing of data and options for objection can be found in the data protection declarations of the respective operators of the platforms and networks. In the event of requests for information or the assertion of data subject rights, the most effective way is to contact the respective provider directly. If you still need help, please feel free to contact us. ​


Social media links ​


Social networks are only integrated on our website as links to the relevant services. After clicking on the integrated button, you will be redirected to the respective provider's website. Only after forwarding is user information transferred to the respective provider. Details on the purpose and scope of data collection as well as the further processing and use of the data by the respective provider, as well as your related rights and setting options to protect your privacy, can be found in the data protection information of the relevant provider:

Facebook & Instagram

For our Facebook and Instagram presence we use the service and technical platform of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We expressly point out that Facebook Ireland Ltd. collects, stores and, if necessary, uses your personal data for business purposes. This includes, in particular, your IP address and data collected by the cookies stored on your device. Further information about the use of personal data by Facebook Ireland Ltd. available at: (Facebook privacy policy) and (Instagram privacy policy). ​




Our website can use plugins from the YouTube site operated by Google. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an attractive presentation of our online offerings. Further information on how to handle user data can be found in YouTube's privacy policy at:

Google Maps

Maps from Google Maps from Google Inc. are integrated into this website. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. By integrating Google Maps, we are able to conveniently show you the locations of our partner network, we can provide you with the most important information about these locations, the directions show you the best way to get there, and you can use them to plan your journey to plan. The use of Google Maps is part of our customer service. When using Google Maps, cookies may be stored on your computer or data about the use of this website will be forwarded to Google and stored by Google, including, among other things, your IP address, the latitude and longitude coordinates and, if applicable, the start address you entered . We cannot influence this data storage by Google, we can only inform you about it. By selecting the permitted cookies in our cookie banner, you can decide whether you want to use Google's services. Please note that if you do not accept it, the functionality of individual services may not be guaranteed. The Google servers are distributed across data centers around the world. However, most of the servers are located in America. For this reason, it may well happen that your data is stored in the USA. You can view the locations of the Google data centers here: Google uses the so-called standard contractual clauses as the basis for data processing in third countries, such as the USA. Through these clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. Further details can be found in Google's privacy policy:




external serviceprovider ​


As part of our work, it may happen that we entrust other companies or people with the performance of certain tasks that contribute to our work; this takes place within the framework of order processing contracts. Our external service providers are also contractually obliged to maintain confidentiality and not to use the data in any other context or for their own purposes or to pass it on to third parties or market it. ​


Public bodies ​


If we are obliged to disclose your personal data to public authorities due to legal requirements or a court request, such as courts, law enforcement authorities, regulatory authorities, etc., we must comply with this request after careful examination. ​




We do not carry out automated decision-making or profiling in accordance with Article 22 GDPR. ​




We process your personal data for the following purposes:

– to make our website available to you and to further improve and develop it,

– to collect usage statistics – to detect, prevent and investigate possible attacks on our website,

– to answer your inquiries or to be able to handle any resulting activities and

– to maintain our customer relationships. ​




If you have given your consent to process your personal data for a specific purpose, then this processing is based on Art. 6 Para. 1 lit a GDPR. If such processing is necessary to fulfill a contract with you or to carry out pre-contractual measures, this is done in accordance with Art. 6 Para. 1 lit b GDPR. In some cases, e.g. to fulfill tax obligations, there may be a legal obligation to process personal data; the legal basis for this is Art. 6 Para. 1 lit c. Ultimately, processing can be based on Art. 6 Para. 1 lit f GDPR. This is the case if the processing is carried out to protect our overriding legitimate interest, provided that your interests, fundamental rights and freedoms do not outweigh this. Such a legitimate interest can be assumed if you are a customer, cooperation partner or business partner of ours. If the processing of personal data is based on Art. 6 Para. 1 lit f GDPR, our legitimate interest is the processing of our business activities.


We adhere to the principles of data minimization. We therefore only store your personal data for as long as is necessary to achieve the stated purposes or as required by the various retention obligations provided for by law. Once the respective purpose no longer applies or these deadlines have expired, the relevant data will be blocked or deleted routinely and in accordance with legal regulations. If none of the above reasons for retention apply, data that is no longer required will be deleted by default after 12 months. ​




We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Of course, we strictly adhere to data confidentiality. Our security procedures are regularly reviewed and adapted to technological advances. ​




You have the right to free information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can contact the responsible supervisory authority. ​




healthfactories biotech GmbH

Bräumühlweg 5c

5202 Bergheim, Austria ​


Tel.: +43 6245 2320080




If you have any questions about data protection, please feel free to contact us. ​




We reserve the right to adapt this data protection declaration from time to time so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration. The current version of the data protection declaration will then apply to your next visit. ​


The current status is March 2023.

bottom of page