Data Protection Information
Last updated: 20th July, 2026
Leukocare AG (“Leukocare”, “we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable national data protection laws, and other relevant legal requirements. This Privacy Notice explains how we collect, use, disclose, store and otherwise process personal data when you visit our website; contact us; download scientific or marketing materials; register for newsletters or scientific communications; participate in webinars or events; apply for employment; interact with our marketing activities; or otherwise communicate with Leukocare. Please read this Privacy Notice carefully. It explains what personal data we collect, why we process it, how long we retain it, with whom we share it, and the rights available to you under applicable data protection law.
1. General Information
Company: Leukocare AG
Address: Am Klopferspitz 19a, 82152 Martinsried/Munich, Germany
Telephone: +49 (0)89 780 16 65 – 0
Website: www.leukocare.com · Email: info@leukocare.com
Data Protection Officer: Mr Sebastian Kraska · datenschutz@leukocare.com
2. General Data Processing Information
Leukocare processes personal data only where this is necessary for the purposes described in this Privacy Notice and a valid legal basis applies. Depending on how you interact with us, data may be provided by you, received from business partners or other legitimate sources, or collected automatically when you use our website. Purpose and legal basis: website operation, enquiries, pre-contractual and contractual communication, scientific and marketing communications, webinars and events, recruitment, legal compliance and IT security. The applicable legal bases include Article 6(1)(a), (b), (c) and (f) GDPR and, for employment data, Section 26 BDSG. Categories of recipients include public authorities where disclosure is legally required; IT, hosting, CRM, marketing, analytics, webinar and recruitment service providers; professional advisers; and other recipients where disclosure is permitted by law. Some service providers may process personal data outside the European Economic Area. Such transfers rely on an adequacy decision, the European Commission’s Standard Contractual Clauses with supplementary safeguards, or another transfer mechanism permitted under Chapter V GDPR. Personal data is retained only for as long as necessary for the stated purpose and applicable contractual, statutory and legal-obligation periods. More specific retention information is provided in Section 26.
3. Specific Information About the Website
This Privacy Notice applies to the processing of personal data through www.leukocare.com; all associated webpages and landing pages operated by Leukocare AG; contact forms; newsletter subscriptions; downloadable scientific content; marketing campaigns; webinars and events; career applications submitted through our Careers section; and communications with prospective customers, business partners, suppliers and other stakeholders. This Privacy Notice does not apply to third-party websites that may be linked from our website. We recommend reviewing the privacy notices of those third parties before providing personal data. When you subscribe to our newsletter or other electronic communications, you provide us with your email address and, where requested, optional information. We use this data to send the communications you requested. You may withdraw your consent and unsubscribe at any time using the unsubscribe link in the communication or by contacting us. Where all conditions of Section 7(3) UWG are met, we may use an email address received in connection with the sale of a product or service to advertise our own similar products or services. You can object using the unsubscribe link or the contact details in this Privacy Notice.
4. Categories of Personal Data We Process
Depending on how you interact with Leukocare, we may process identification data such as name, title, company and job title; contact information including email address, telephone number, postal address and country; professional information including employer, industry, department and business relationship; and technical information including IP address, browser type and version, operating system, device identifiers, language settings, date and time of access, pages visited, referring website, clickstream information, session identifiers and cookie identifiers. We may also process marketing and communication information relating to newsletter subscriptions, communication preferences, webinar registrations, event participation, downloaded publications, email interactions and marketing consent records. Where you apply for employment, we may process CVs, cover letters, employment history, education, qualifications, interview notes, references and other information voluntarily provided during the recruitment process. Please do not provide special categories of personal data under Article 9 GDPR unless specifically requested or legally required during the recruitment process.
5. Sources of Personal Data
We collect personal data directly from you; when you complete forms on our website; when you subscribe to communications; when you download scientific or marketing materials; when you contact us by email, telephone or other communication channels; when you register for events or webinars; when you apply for employment; automatically through cookies and similar technologies where permitted or consented to; and from publicly available professional sources, such as company websites or professional networking platforms, where permitted by applicable law.
6. Legal Bases for Processing
Depending on the purpose of the processing, Leukocare processes personal data on one or more legal bases under Article 6 GDPR: Article 6(1)(a) GDPR — consent, for example for newsletters, marketing communications, email tracking where required, or non-essential cookies; Article 6(1)(b) GDPR — performance of a contract or pre-contractual measures; Article 6(1)(c) GDPR — compliance with a legal obligation; and Article 6(1)(f) GDPR — legitimate interests, where those interests are not overridden by your interests or fundamental rights and freedoms. Our legitimate interests may include operating and securing our website, communicating with customers and business partners, improving products and services, maintaining IT security, preventing fraud and misuse, protecting legal claims, improving user experience, and measuring the effectiveness of our communications where legally permitted. Whenever processing is based on legitimate interests, we carefully assess and balance our interests against your rights and freedoms.
7. Website Access and Server Log Files
When you visit our website, your browser automatically transmits certain technical information to our web servers. This information is temporarily stored in server log files and is necessary to ensure secure operation, stability and functionality. It may include IP address, date and time of access, requested webpage or resource, HTTP status code, browser type and version, operating system, language settings, referrer URL, device information and other information required to establish and maintain the connection. We process this information to provide the website, ensure system security and stability, detect and prevent misuse, cyberattacks and fraudulent activities, troubleshoot technical issues, and maintain and improve IT infrastructure. The legal basis is Article 6(1)(f) GDPR. Server log files are retained only as long as necessary unless a longer period is required to investigate security incidents or comply with legal obligations.
8. Cookies and Similar Technologies
Our website uses cookies and similar technologies to provide website functionality, analyse website usage, improve user experience and, where applicable, support marketing activities. Cookies are small text files placed on your device by your web browser. Similar technologies may include local storage, pixels, tags and software development kits. Strictly necessary cookies are required for operation, security and functionality and cannot be disabled through our consent management platform. Analytics cookies help us understand pages visited, navigation paths, visit duration, user interactions, device information and performance; they are activated only after consent where required. Marketing technologies allow us to measure campaign effectiveness, understand engagement and deliver more relevant communications; they are activated only after consent where required. The legal basis for non-essential analytics and marketing cookies is Article 6(1)(a) GDPR.
9. Cookie Consent Management
Leukocare uses a cookie consent management solution to enable visitors to manage their preferences. When you first visit our website, you are presented with a consent banner that allows you to accept all cookies, reject non-essential cookies, or manage preferences by category. Your preferences are stored and respected during subsequent visits, subject to applicable retention periods. You may change or withdraw consent at any time by reopening the Cookie Preferences available on our website. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
10. Website Analytics
Subject to consent where required, Leukocare uses website analytics technologies to understand how visitors use our website and continuously improve usability, functionality and performance. Information may include IP address where configured in anonymised or truncated form, browser type, operating system, device information, pages viewed, navigation paths, session duration, interactions, approximate geographic location and referring websites. Analytics data is evaluated in aggregated form wherever possible. We do not use website analytics to identify visitors personally. The legal basis for analytics processing is Article 6(1)(a) GDPR where consent is required.
11. Google Analytics
Subject to your consent, our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics helps us understand how visitors interact with our website by generating statistical reports. Depending on consent settings, it may process pages visited, interactions, session duration, browser information, operating system, device identifiers, approximate location and IP address subject to Google’s IP anonymisation where applicable. Google may process certain information on servers outside the European Economic Area. Where required, appropriate safeguards are implemented under Chapter V GDPR, including Standard Contractual Clauses. You may withdraw consent at any time through Cookie Preferences. Further information is available in Google’s Privacy Policy.
12. Microsoft Clarity
Subject to consent, Leukocare uses Microsoft Clarity, a website analytics service provided by Microsoft Corporation. Microsoft Clarity enables us to understand visitor interaction through aggregated usage information such as click behaviour, scrolling behaviour, navigation paths, session recordings, heatmaps, device information, browser information and general website interactions. This information helps identify usability issues and improve design, functionality and performance. Microsoft Clarity is configured to minimise the processing of personal data where possible and is used only after obtaining the required consent. The legal basis is Article 6(1)(a) GDPR. Further information is available in Microsoft’s Privacy Statement.
13. Google Ads and Remarketing
Subject to consent where required, Leukocare uses Google Ads services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to promote products and services through online advertising and measure campaign effectiveness. Where remarketing is enabled, visitors who have previously interacted with our website may be shown relevant advertisements on Google’s advertising network or participating third-party websites. Depending on consent settings, Google Ads may process pages visited, website interactions, browser and device information, cookie and advertising identifiers, approximate location, campaign performance metrics and conversion events. Google may process personal data outside the EEA; appropriate safeguards are implemented in accordance with Chapter V GDPR. The legal basis is Article 6(1)(a) GDPR. You may withdraw consent at any time through Cookie Preferences.
14. LinkedIn Insight Tag
Subject to consent, our website uses the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It enables us to analyse LinkedIn advertising effectiveness and understand interaction after visitors view or click LinkedIn advertisements. Depending on consent, LinkedIn may process IP address, browser information, device characteristics, pages visited, referrer URL, timestamps, campaign information, demographic information derived by LinkedIn and business-related audience information. Information provided to Leukocare is generally aggregated and does not enable us to identify individual visitors. LinkedIn may process personal data outside the EEA and implements appropriate safeguards where required. The legal basis is Article 6(1)(a) GDPR. Further information is available in LinkedIn’s Privacy Policy.
15. HubSpot CRM and Marketing Platform
Leukocare uses HubSpot, a CRM and marketing automation platform provided by HubSpot Ireland Limited and HubSpot, Inc. HubSpot supports customer relationship management, website forms, newsletter subscriptions, marketing communications, event registrations, downloadable content and other interactions with website visitors. Depending on your interaction, HubSpot may process name, company, job title, business email address, telephone number, country, communication history, website interactions, downloaded content, form submissions, newsletter preferences, event registrations, cookie identifiers, IP address, browser information and marketing preferences. HubSpot-related marketing cookies and tracking technologies are activated only after consent where required. Personal data may be stored or accessed outside the EEA; appropriate safeguards are implemented where required. The legal basis may be Article 6(1)(a), (b) or (f) GDPR depending on the processing activity.
16. Contact Forms
Our website provides contact forms through which visitors may submit enquiries regarding products, services, collaborations, scientific activities, business opportunities or other matters. When you submit a contact form, we process information you voluntarily provide, including name, company, email address, telephone number, country, subject and any additional information in your message. The information is used solely to process your enquiry, communicate with you and, where appropriate, establish or maintain a business relationship. The legal basis is generally Article 6(1)(b) GDPR where an enquiry relates to a potential contractual relationship, or Article 6(1)(f) GDPR for general business enquiries. Your information will not be used for unrelated marketing purposes unless you separately consent.
17. Downloadable Scientific and Marketing Content
Leukocare provides scientific publications, white papers, brochures, technical documents, webinars and other informational resources. Before providing certain content, we may request name, company, professional role, email address, country and areas of professional interest. This enables us to provide requested content, understand our professional audience, improve future educational resources, follow up where appropriate, and maintain distribution records where applicable. Where you consent, we may also use this information to send related scientific or marketing communications. The legal basis is Article 6(1)(b) GDPR where necessary to provide requested content, Article 6(1)(a) GDPR where marketing consent has been obtained, or Article 6(1)(f) GDPR for legitimate interests in providing scientific information to professional audiences.
18. Scientific and Marketing Communications
Leukocare communicates with healthcare professionals, researchers, customers, business partners and other interested stakeholders regarding scientific developments, products, services, publications, webinars, events and corporate news. Where required, marketing communications are sent only after consent; in certain B2B contexts, communications may be based on legitimate interests where permitted and after balancing rights and freedoms. You may receive scientific publications, technical information, product developments, conferences, webinars, educational content, company news, newsletters and business updates. You may withdraw consent or object at any time using an unsubscribe link or our contact details. Leukocare uses Contrast, a webinar platform operated by AirfairCTWW SAS in Paris, France, to organise, stream, record and provide webinars. It may process registration, attendance, technical and interaction data to manage access, provide recordings, secure the service, analyse performance and conduct permitted follow-up. Webinar registration and engagement data may be synchronised with HubSpot where its integration is enabled. Further information is available in Contrast’s Privacy Policy: https://help.getcontrast.io/en/articles/5650538-privacy-policy.
19. Email Tracking Technologies
Where permitted by law and, where required, based on consent, Leukocare may use email tracking technologies in scientific communications, newsletters, marketing emails and other electronic communications. These may include tracking pixels that determine whether an email has been delivered, opened, viewed on different devices, whether links are clicked and whether recipients interact with content. Information may include email address, date and time opened, click behaviour, browser type, device information, IP address, approximate location and delivery information. We use this to improve communication relevance and quality, understand topic interest, evaluate effectiveness, optimise future campaigns and maintain marketing activity. The legal basis is Article 6(1)(a) GDPR where consent is required, or Article 6(1)(f) GDPR where permitted in specific B2B contexts after documented balancing of interests.
20. Newsletters
If you subscribe to our newsletter or other electronic communications, we process the data necessary to provide requested information, including name, company, professional role, email address, country, communication preferences, consent records, subscription status and information relating to subscription management. Where required by law, newsletters are sent only after confirmation through a double opt-in procedure. You may withdraw consent and unsubscribe at any time by clicking the unsubscribe link in every newsletter or contacting us directly. Once you unsubscribe, data will no longer be used for newsletter distribution, except where retention is necessary for legal compliance or legal claims. The legal basis is Article 6(1)(a) GDPR.
21. Recruitment and Career Applications
If you apply for a position with Leukocare, we process personal data solely to manage recruitment and evaluate your application. This may include identification and contact details, curriculum vitae, cover letter, employment history, education, qualifications, certificates, references, interview notes, salary expectations, availability and voluntary information. Access is limited to employees and authorised service providers requiring it for the process. The legal basis is Article 6(1)(b) and (c) GDPR and Section 26 BDSG where applicable. If we wish to retain your application for future roles, we will request consent where required. Unsuccessful applications are generally deleted after completion unless longer retention is required by law or for legal claims.
22. Embedded Content and Third-Party Services
Our website may include embedded content or services from selected third parties, such as videos, maps, documents or interactive content. When accessed, your browser may establish a direct connection with the provider, which may receive IP address, browser and device information, pages visited, date and time of access and technical information required to display the content. Where embedded services require non-essential cookies or similar technologies, they activate only after consent. Providers process personal data under their own responsibility; please review their applicable privacy notices. The legal basis is Article 6(1)(a) GDPR where consent is required or Article 6(1)(f) GDPR where strictly necessary.
23. Social Media Presence
Leukocare maintains corporate profiles on selected social media platforms, including LinkedIn and YouTube, to communicate with customers, business partners, researchers, healthcare professionals, applicants and other stakeholders. Platform operators process personal data under their own responsibility and may use cookies, advertising identifiers, analytics and tracking mechanisms. If you interact with our pages, we may process the information you voluntarily provide to communicate with you and manage our online presence. Providers may process data outside the EEA and combine collected information with other data they hold. The legal basis for our processing of interactions is Article 6(1)(f) GDPR.
24. Recipients of Personal Data
Within Leukocare, access is restricted to employees and authorised personnel who need data for professional responsibilities. Where necessary, data may be shared with selected third parties acting on our behalf, including IT and cloud hosting providers, website hosting providers, CRM and marketing providers, analytics providers, recruitment providers, legal advisers, auditors, consultants and public authorities where required by law. Processors act under Article 28 GDPR and are contractually required to follow documented instructions, implement appropriate safeguards, maintain confidentiality and comply with data protection law. We do not sell personal data to third parties.
25. International Transfers of Personal Data
Some service providers and business partners may process personal data outside the EEA, including countries that may not provide the same level of data protection as the European Union. Where no adequacy decision exists, Leukocare implements appropriate safeguards in accordance with Chapter V GDPR, including the European Commission’s Standard Contractual Clauses, supplementary technical and organisational measures where appropriate, binding corporate rules where applicable, or another recognised transfer mechanism. Before international transfers, we assess the recipient country’s protection level and implement additional safeguards where necessary. Further information may be requested using our contact details.
26. Data Retention
We retain personal data only as long as necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory or contractual obligations. Retention depends on the processing activity. Server log files are retained only for a limited period necessary for security and technical operation; contact enquiries until resolved and follow-up completed; marketing consent records as required to demonstrate compliance; newsletter subscriptions until consent is withdrawn or cancelled; recruitment records in accordance with employment and data protection legislation; and contract-related information for the contractual relationship and statutory limitation periods. When data is no longer required, it is securely deleted, anonymised or otherwise disposed of under our internal retention policies.
27. Technical and Organisational Security Measures
Leukocare has implemented appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access control procedures, role-based permissions, authentication, encryption during transmission where applicable, secure network architecture, monitoring and logging, regular security updates, backup and recovery procedures, employee confidentiality obligations and regular review. Although we continuously strive to protect data using appropriate security standards, no electronic transmission or storage method can be guaranteed to be completely secure.
28. Automated Decision-Making and Profiling
Leukocare does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. Website analytics and marketing technologies are intended solely to improve functionality, user experience and communication effectiveness and are not used to make automated decisions about individuals.
29. Your Rights
Subject to applicable data protection law, you have rights of access under Article 15 GDPR; rectification under Article 16 GDPR; erasure under Article 17 GDPR; restriction of processing under Article 18 GDPR; data portability under Article 20 GDPR; withdrawal of consent at any time with future effect; and objection where processing is based on Article 6(1)(f) GDPR. Where data is processed for direct marketing, you may object at any time and it will no longer be processed for that purpose. To exercise your rights, please contact us using the details in this Privacy Notice.
30. Right to Lodge a Complaint
If you believe that processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement, in accordance with Article 77 GDPR. This right is without prejudice to other administrative or judicial remedies.
31. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in legal requirements, regulatory guidance, our processing activities or the services we provide. The most recent version will always be published on our website together with the date of the latest revision. Where required, we will notify you of material changes through appropriate means.
Contact Us
For questions about this Privacy Notice or the processing of personal data, please contact Leukocare AG by email at info@leukocare.com or by telephone at +49 (0)89 780 16 65 – 0. For data protection enquiries or to exercise your rights, please contact our Data Protection Officer, Mr Sebastian Kraska, at datenschutz@leukocare.com. Further company information is available at www.leukocare.com.