Privacy Statement

Information about the use of your personal data on our website

We take the privacy of your personal data seriously and comply with applicable data protection law. We would like to inform you about the processing of your personal data. You can review this information at any time at the bottom of each page of our website under the heading "Legal Information & Data Privacy Statement".


1.     The controller and data protection officers

The controller for purposes of Article 4 number 7 General Data Protection Regulation ("GDPR") is

Eppendorf AG
Barkhausenweg 1

22339 Hamburg

(also referred to in this Data Privacy Statement as "Eppendorf", "we" or "us").  

If you have any questions or suggestions about data protection, you can also contact us by email at the address

You can contact our data protection officer at


2.     Subject of data protection and processed data

Data protection involves personal data. Pursuant to Art. 4 no. 1 GDPR these personal data consist of all information which relate to an identified or identifiable natural person; such as, for example, the name or identification number.  

Many data we process result directly from the respective context of the processing:

As soon as you visit our website, we automatically collect and store certain use data. This includes the IP address assigned to your computer which we need in order to transmit the content of our website you accessed to your computer or other end-device, (e.g. text, images, games and product information, as well as data files made available for downloading, etc.).  

We also collect and store information about the use of the website, for example, the type of browser and operating system that are used as well as the data and time when you use the website as well as the URL of the previously visited website. We process your data, in order to provide the website and the related functions to you.

When you use specific functions, for example, placing an order on our website, we also process the data which are required to provide the function.  In the case of an order, for example, we process the data you have entered to fill the order. When you complete the contact form, we use the data to conduct correspondence with you.

We also describe in this Data Privacy Statement the other categories of personal data we process with regard to the respective topic.


3.     Purposes and legal basis of the processing

3.1       We process your data on the basis of a consent you have issued (Art. 6 para. 1 lit. a GDPR) in the scope described in the respective consent and for the purposes explained there. 

3.2       We process your personal data for the following purposes on the basis of performing a contract or carrying out a pre-contractual measure (Art. 6 para. 1 lit. b GDPR):

  • to display our website
  • to process your orders, including payment as well as providing customer service (for example, returns)
  • for the purpose of ordering or cancelling subscriptions, newsletters and webinars
  • to process online applications
  • to carry out competitions or contests

3.3  We process your personal data for the following purposes in our legitimate interests, especially the protection of our IT infrastructure, assuring satisfactory customer communications and promoting the sales of our products (Art. 6 para. 1 lit. f GDPR):

  • to get to know our customers better
  • to process other contact from you (e.g. in the case of questions, suggestions or other notifications)
  • to protect against fraud
  • to optimize our offering (especially also to structure our website appropriately for the demand)
  • to maintain IT security
  • to send you information about products and activities which might be of interest to you

We process these data only to the extent your interests, fundamental rights or fundamental freedoms (especially protection of your personal data) do not outweigh our legitimate interests described above.

3.4       In exceptional situations, it is also possible that we process your data to fulfill a legal obligation (Art. 6 para. 1 lit. c), to protect vital interests (Art. 6 para. 1 lit. d) or to carry out a task in the public interest (Art. 6 para. 1 lit. e).


4.     Other collection and use of your data

4.1       Session cookies
We store so-called "cookies", in order to offer to you comprehensive functionality and to make the use of our websites (for example, online purchasing) more comfortable for you. "Cookies" are small data files which are stored on your computer by your internet browser. If you do not want to use "cookies", you can prevent the storage of "cookies" on your computer with corresponding settings in your internet browser. Please note that the functionality and extent of the functions in our offering can then be limited.


5.     Consequences of potentially not providing data

In addition to the data used to perform the contract (for example, your name, the delivery address, the ordered product, payment data etc.), we collect some data, in order to be able to provide for you the corresponding functions on our website or respond to your inquiries, for example, if you use our contact form for questions. 

If you provide these data yourself, you are not required to provide this above-mentioned voluntary information. However, we are not able to provide the corresponding functions of our website to you or process your inquiries without these data.


6.     Disclosure of data

6.1       Forwarding data to contract data processors
We need third party companies and external service providers bound by contract in order to render the services (the "Contract Processors"). In such situations, personal data are forwarded to these Contract Processors for further processing. These Contract Processors are carefully selected by us and regularly checked in order to make sure that your privacy is preserved. The Contract Processors can only use the data for the purposes we determine and are furthermore required by us under the contract to handle your data exclusively in accordance with this Data Privacy Statement as well as applicable data protection laws.  

6.2       Other transmission of data
Aside from this, we forward your personal data without your consent only in the situations permitted by law. Such a transfer of data can especially be permissible in the following situations:

  • The processing is necessary to fulfill a legal obligation or is in the legitimate interests of Eppendorf, for example, due to corresponding demands for transfer by public authorities.
  • The processing is necessary to perform a task in the public interest or in the exercise of official authority vested in Eppendorf.

6.3       Data transfer to Third Countries
We potentially transmit your personal data in the context of a business relationship to the respectively responsible local company in the Eppendorf Group. You can find a complete list of our branches here.

We assure a reasonable level of data protection in corresponding data transmissions by concluding so-called standard agreements published by the European Commission. You can access those agreements here.

In addition, when structuring contractual relationships with service providers in Third Countries, we use the standard agreements of the EU Commission in accordance with Art. 46 para. 2 lit. c DSGVO. These are available here.


7.     Erasure of your data

We store your personal data no longer than is necessary to achieve the respective purposes of the data processing (see point 3). Especially the following time periods apply in this regard:

  • If you have concluded a contract with us or use our services, we generally process your data as long as necessary to perform the respective contract or provide the respective service and, if applicable, plus the period of time for any warranty or guarantee periods. If you have purchased a product from us, this period is normally two years after receiving the product.
  • If you send us a message or we send you a message which is classified as a commercial or business letter, we delete the message six years after the end of the year in which the letter was received.
  • It is possible when using some applications on our website that we retain back-up copies of certain information for a very limited period of time.  When the related interest has expired (for example, by correction of the error or defending against cyber-attacks), we delete these data.

8.     Your rights as the data subject

8.1       Right to information
You have the right to obtain information from us at any time on request about your personal data we have processed as set forth in Art. 15 GDPR.

This right is limited by the exceptions in § 34 German Data Protection Act (Bundesdatenschutzgesetz, "BDSG"), according to which the right to obtain information especially does not exist if the data are stored solely on the basis of retention requirements in the law or to secure data and monitor data privacy or if granting the information would require a disproportionate effort and improper use of the data processing is prevented by appropriate technical and organizational measures.

8.2       Right to correction
You have the right to demand from us the correction without undue delay of your personal data if these data are incorrect.

8.3       Right to erasure
You have the right to demand from us the erasure of your personal data under the prerequisites set forth in Art. 17 GDPR. These prerequisites are especially satisfied if the respective purpose of the processing has been achieved or otherwise no longer applies as well as if we have illegally processed your data or if you have cancelled a consent and the data processing cannot be continued on another legal basis or if you have successfully objected to the data processing (see point 7.6), and in cases where there is a duty to erase on the basis of the law of the European Union or the law of a EU Member State to which we are subject.  

This right is subject to the limitations in § 35 BDSG, according to which the right to erasure can especially not exist if there is a disproportionately high effort for erasure in the case of non-automated data processing and your interest in the erasure is considered to be low.

8.4       Right to restrict processing
You can demand from us pursuant to Art. 18 GDPR that we only process your personal data within certain restrictions. This right exists especially if the accuracy of the personal data is in dispute, if you demand restricted processing instead of erasure when the prerequisites for a legitimate demand for erasure exist (point 7.3); also in the event that the data are no longer needed for our purposes, but you require the data for the assertion, exercise or defense of legal claims as well as if the result of an objection is still in dispute.  

8.5       Right to data portability
You have the right under Art. 20 GDPR to receive from us the relevant personal data you have provided to us in a structured, common, machine-readable format as well as the transfer of these data to another controller.

8.6       Right to object
You have the right to object at any time to the processing of your personal data carried out either in the public interest or to preserve our legitimate interests for reasons resulting from your specific situation. We will stop processing your personal data unless we can prove that there are material grounds for the processing which are deserving of protection and outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend against legal claims.

If you object to the processing of your data for advertising purposes, we will, in any event, stop this processing.

8.7       Exercise of these rights
Please, contact us if you would like to exercise these rights, for example, by email to:

8.8       Right to object
If you have issued a consent to the processing of your personal data, you can revoke this consent at any time, for example, at  We will stop the processing of your personal data covered by the consent starting at that point in time unless we carry out the respective data processing on another legal basis (e.g. in order to continue to be able to fulfill contracts with you).

8.9       Right to raise complaints
If you are of the view that the processing of your personal data violates the GDPR, you also have the right to raise complaints with a supervisory authority, especially in the Member State where you have your domicile, your place of employment or at the location of a suspected violation.


9.     Amendments to this Data Privacy Statement

The services provided by Eppendorf can be changed from time to time, especially to further improve the functionality of our website.  Such changes can also have an effect on the use of your personal data.  Eppendorf accordingly reserves the right to amend this Data Privacy Statement.  You can find the respectively current version at our website under the heading "Legal Information & Data Privacy Statement".  Please use this to regularly inform yourself about the current status of the Data Privacy Statement.  

This present version of the Data Privacy Statement applies starting on 25 May 2018.