Privacy Policy

We are pleased about your visit to our website. The protection of your personal data is an important concern for us and we want you to feel safe when you visit our website. We protect your privacy and your personal data. We process your personal data in accordance with the content of this data protection declaration, the country-specific data protection regulations that apply to us and the General Data Protection Regulation ("GDPR").

1. Name and contact details of the controller
SYNLAB Holdco GmbH (formerly SYNLAB AG), Moosacher Straße 88, 80809 Munich, ("we", "us", "our") as operator of this website ("Website"), is the controller in terms of the GDPR and other, country-specific data protection regulations for processing your personal data on this Website.

2. Contact details of Data Protection Officer
You can contact our data protection officer, at any time with all data protection issues at the contact details of the controller and at dpo(at)synlab.com.

3. Obligation to provide your personal data

There is neither a legal nor a contractual obligation to provide your personal data. However, for technical reasons, it is necessary to process some of your personal data to use this online service. You will be informed about this processing below.

4. Personal data
When visiting our Website, we process information which you have actively provided about yourself, or which has been generated by us in connection with your use of the Website. In this context we process personal data from you as follows:

• information about your visits to our Website, such as the extent of data transfer, the location from which you access data from our Website and other connection data and files and other content you access. This is usually done through the use of log files and cookies. For more information about log files and cookies, see below.

5. Purpose and personal data concerned 

5.1. Informational use
When you call up our Website, we record the data that your internet browser automatically transmits to us, such as

• the IP address of your computer
• date and time of page view
• your browser type, the browser version and your browser settings
• the operating system used (Windows, iOS, Linux etc.)
• the transferred data volume and status of transfers
• from which website the access to our Website was made
• other similar data and information which serve to avert danger in the event of attacks on our information technology systems.

The IP address of your computer is only stored in so-called log files for the time of your use of the Website and is then immediately deleted or made anonymous by a shortening. The remaining data is stored for a limited period of time. We use this data for the operation of our Website, in particular to detect and correct website errors, to determine the Website load and to make adjustments or improvements.
 

5.2 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Why do we use Google Analytics?
On our behalf, Google will use this information to evaluate your use of the Website, to compile reports on website activity and to provide us with further services related to website and internet use.

How do we use Google Analytics?
Google Analytics uses "cookies", which are text files placed on your computer, to help the Website analyse how users use the Website. The information generated by the cookie about your use of this Website is transferred to a Google server in the USA and stored there. As IP anonymisation is activated on this Website, your IP address will be shortened by Google within member states of the European Union or in other member states of the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

The legal basis of this data processing is your consent per Art. 6 (1)(a), Art .7 GDPR. When you visit our Website, a cookie notice advises you on the use of Google Analytics and asks for your consent to the use of such service. The analysis starts automatically as soon as you consent to the use of Google Analytics. In addition, please note that you may revoke your consent at any time, e.g. by selecting the appropriate settings on your browser.

Please note that if you withdraw your consent, that does not make the data processing carried out by us prior to receiving your request unlawful.

As an alternative to the browser plug-in, you can prevent the collection by Google Analytics and withdraw consent by clicking on the following link. An opt-out cookie is set to prevent future collection of your information when you visit this Website:

Disable Google Analytics data collection for this Website. You can find more information on this at https://tools.google.com/dlpage/gaoptout?hl=de and https://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection).

How long do we retain such data?
We delete the data collected via Google Analytics after two years.

Who has access to your data?
Please note that the data collected during the analysis will be forwarded to Google. The transfer of your data to the U.S. is based on the Data Privacy Framework adopted by the European Commission.

For more information on how and for how long Google will process your data, please review Google's privacy policy https://www.google.com/intl/de/policies/privacy/.

6. Disclosure of your personal data
We may transfer your personal data to

• other entities of the SYNLAB Group for the purpose of our internal business processes or in the event this is necessary for the purpose of the data processing (for example, if this is necessary to respond to your queries).
• Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as our service provider for the use of Google Analytics. For further information, please see section 4.2 above.

Please note that where it is necessary to transfer your data to a recipient outside of the European Union (EU) and the European Economic Area (EEA), we will comply with all transfer requirements applicable under data protection laws.

We do not pass on your personal data to other third parties, unless you have consented to the passing on of data or we are entitled or obliged to pass on data due to legal regulations and/or official or court orders. This may, in particular, involve the provision of information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
 

7. Data protection and third-party Websites
The Website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility (unless we are responsible under applicable law) or guarantee for third-party content or compliance with data protection conditions. Please make sure you are aware of the applicable data protection terms and conditions before you submit personal data to these websites.
 

8. Data security

All the information you send us is stored on servers within the European Union. We secure our Website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In particular, your personal data will be transmitted encrypted.
 

9. Your rights
You have the following rights:

• to receive information free of charge about the personal data stored by us about your person (right to information)
• to obtain confirmation as to whether we are processing personal data relating to you (right to confirmation)
• to demand from us that the personal data relating to you be deleted by us without delay, insofar as processing of the data is no longer necessary and the other requirements of the GDPR for deletion are also fulfilled (right to deletion)
• to request the immediate rectification and integration of incorrect personal data concerning you (right to rectification)
• to demand the restriction of the processing of your personal data (right to restrict processing)
• to receive personal data concerning you in a structured, common and machine-readable format (right to data transferability)
• to object to the processing of your personal data as follows:
  
  You have the right at any time to object to the processing of your data. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
  
  In case we process your personal data for direct marketing purposes, and you do not wish to receive advertising, you have the right to object to this at any time. This also applies to profiling insofar as it is associated with such direct marketing. If we receive such objection from you, we will stop processing your data for direct marketing purposes.
• not to be subject to a decision based solely on automated processing, including profiling, which has legal effect vis-à-vis you or affects you in a similar way (right of decision on a case-by-case basis)
• to withdraw your consent to the processing of your personal data at any time with effect for the future.

To exercise your rights or for further information on your rights, please contact our data protection officer via dpo(at)synlab.com.
 

10. Deletion and blocking of personal data after fulfilment of purpose
We process and store personal data only as long as it is necessary for the fulfilment of the purpose, at the latest, however, until the expiry of the statutory retention and storage periods. Upon fulfilment of the purpose and expiry of the statutory retention and storage periods, the personal data will be deleted or blocked in accordance with the data protection regulations.
 

11. Right of appeal
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the GDPR.

The competent lead supervisory authority for data protection under Art. 56 GDPR in the event of complaints:

Bavarian State Office for Data Protection Supervision
Promenade 27 (castle)
91522 Ansbach
Phone: +49 981 53 1300
Fax: +49 981 53 98 1300
E-mail: poststelle(at)lda.bayern.de

Last Update: 13 August 2025

SYNLAB Holdco GmbH (formerly SYNLAB AG)
Moosacher Straße 88
80809 Munich
Germany