Dear Visitor,

​Thank you for visiting our website. The protection of your privacy is very important to Evotec and we are committed to safeguarding your data and the information of the individuals and organizations with whom we interact including visitors to our websites or recipients of marketing emails. This Privacy Statement is issued by Evotec SE on behalf of itself and its domestic and international subsidiaries and affiliates (“Evotec”, “we”, “us”, or “our”) and sets out how we will treat your personal information.

​Evotec is a drug discovery alliance and development partnership company focused on rapidly progressing innovative solutions and services with leading pharmaceutical and biotechnology companies, academics, patient advocacy groups, venture capitalists and other industries which may use our services. As a strictly business-to-business focused organization, we do not market, sell, or distribute products or services directly to patients or consumers. Accordingly, and as described in more detail below, the personal information that we collect and process is generally limited to what is necessary to conduct business with other businesses operating within, but not limited to, the pharmaceutical, biotech and healthcare industries.

​This privacy statement applies to the personal information we collect through the Evotec online channels, including websites and social media pages that reference this privacy statement (“Digital Channels”); offline collection in connection with sales, marketing, partner and supplier engagement (“Analog Channels”); and third-party sources, including but not limited to ad networks and address brokers (the “Channels”). This privacy statement does not apply to personal information gathered through our “Career” page that is subject to the “Privacy Information for applicants” available here, or to third party services that post their own separate privacy policies.

​The Digital Channels may provide links to other third-party websites and features, or contain third-party cookies, that Evotec does not own or control. Information collected by third parties, which may include such things as location data or contact details, is governed by their privacy practices. We encourage you to learn about the privacy practices of those third parties.

​This privacy statement describes the types of personal information we gather, how we collect and may use that personal information, with whom we may share it, and how you may exercise your rights regarding our processing of the information.

​The privacy statement also describes the measures we take to safeguard the personal information we collect and how you can contact us about our privacy practices.

​We may amend or update this privacy statement from time to time to reflect changes in our practices with respect to the processing of personal information or changes to applicable law. We will post such amendments and updates to our websites.

Evotec SE, Essener Bogen 7, 22419 Hamburg, info@evotec.com is responsible for this website.

Click on one of the links below to go directly to the listed chapter:

1 Collection and use of personal information

1.1 What personal information we collect

1.2 How we use your personal information

1.3 Sources of personal information (where they are not collected directly from you)

1.4 Automatically collected information

1.5 Usage data

1.6 Our service providers

1.7 Google Ads remarketing

1.8 Google Analytics

1.9 Matomo

1.10 LinkedIn Insights tag

1.11 Embedded videos

1.12 Google reCAPTCHA

1.13 HubSpot & Salesforce

1.14 Encryption

1.15 Contact form, registration and downloadable content

1.16 Newsletters

1.17 E-commerce platform

2 Sharing and transmission of personal information

2.1 International transfer of personal data

3 Integrity and retention of personal information

3.1 Your rights as a user

3.2 Data Protection Officer

You may be asked to provide your personal information anytime you are in contact with Evotec. Evotec may share this personal information within Evotec with each other and use it consistent with this privacy statement. We may combine it with other information to provide anonymous, aggregated statistical information to help us improve our products, services, content, and advertising.

​We may also collect your personal information from publicly available resources such as company, university, and publications websites, and combine it with personal data we have collected about you, to complete our customer profile of you in support of our sales and marketing activities. When you use our website, we may use cookies and similar technologies. Our cookie banner shows you the list of the cookies we use, including their provider, purpose, description and other relevant information. If you wish to withdraw your consent, you can change your cookie preferences by re-accessing the cooking banner. Simply click the button located at the bottom left of the page to make changes.

• ​Information that you provide by filling in forms on the websites, which include information, provided at the time of registering to use the registration-only sections of the websites such as username, password and security question and answer, if applicable.
• Personal details: Your given name(s), or preferred name(s)
• Contact details: Your postal address, telephone number, fax, and email address
• Employment details: Your industry, job title/position, business activities, names of current and former employers
• ​Tradeshow related information
• ​Electronic identifying data: Unique personal identifiers (such as IP addresses, cookies, and other forms of identifiers).
• ​Email correspondence with you
• Preferences: Areas of your specific interest drawn from any of the information identified above as well as survey and online applications to create a profile about you reflecting your preferences

​We may process your personal information: for the purposes described in this privacy statement, with your consent, for compliance with a legal obligation to which Evotec is subject, or for the performance of a contract to which your company is party. If you have questions about this legal basis, you can contact the data protection officer.

The following processing activities are based on your consent (Art. 6 para 1 lit. a GDPR):

• We will use personal data for direct marketing communications about our products, services, events and promotions (such as by sending promotional materials, newsletters and other marketing communications), to conduct and facilitate surveys, marketing or sales analytics, lead generation, business development, event management, market research and development (trend analysis, financial analysis and customer segmentation), education and training
• ​We use personal information for ad retargeting and evaluation of the effectiveness of our marketing efforts (including through our participation in ad networks); and managing the effectiveness of our advertising and marketing campaigns and managing our brand
• We may use your email address to send you marketing emails to a designated email address. If you do not wish to receive such marketing emails, you may opt out by declining to receive such emails when registering or at other information collection points on our websites or by following opt-out instructions included in such emails

Processing for the performance of a contract with the company you work for (Art. 6 para 1 lit. f GDPR):

• ​The personal information we collect allows us to provide our products and services, process and fulfil orders and keep you informed about the status of your order, provide customer support, create, administer and communicate with you about your account (including any purchases and payments), and provide investor services
• ​We will use personal information to process, evaluate and respond to requests and enquiries; administer and register participants in our courses, events or webcasts
• ​From time to time we may use your personal information to verify your identity and protect against and prevent fraud and other unlawful activity, unauthorized transactions, claims and other liabilities, and manage risk exposure and quality; to maintain and enhance the safety and security of our products, services, online channels, network services, information resources and employees

• ​We may receive your personal information from third parties who provide it to us (e.g. your employer or other third parties with whom you or any affiliated organization may be connected, such as one of our customers or suppliers)
• ​We may receive your personal information from publicly available sources, online advertising companies, and social media pages or in connection with sales, marketing, and partner and supplier engagement, lists from acquired companies, events and conferences, and purchased lists

​You can manage your subscription preferences to select the type of communications you wish to receive from Evotec at any time or alternatively you will be able to unsubscribe from all communications by using the link in the footer of our emails or by sending an email to info@evotec.com. We will then not send you any further marketing communications.

• ​Web Server Logs: A web server log is a log file of activities performed by the users on our website that is created and maintained by a server (also see 1.5 “Usage Data”)
• ​IP Address: An IP address is a number assigned to your computer or router whenever you access the Internet that allows your devices and servers to recognize and communicate with each other. We store the IP address transmitted by your web browser for a period of one month in order to detect, limit and eliminate faults or errors (e.g. attacks on our servers). After this period has expired, we delete or anonymize the IP address. We use the IP address exclusively for the above-mentioned security purposes
• ​Cookies: Cookies are small files that are stored on a visitor's device. They allow information to be stored for a certain period of time and can be used to identify the visitor's computer. So-called session cookies are used to control your visit of our site, which are automatically deleted when you close your browser. You can set up your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you
• ​In some of our email messages, we use a “click-through URL” linked to content on Evotec websites or landing pages. When customers click one of these URLs, they pass through a separate web server before arriving at the destination page on our website. We track this click-through data to help us determine interest in particular topics and measure the effectiveness of our customer communications. If you prefer not to be tracked in this way, you should not click text or graphic links in the email messages. The data will help us improve and better customize our future marketing communications and/or prioritize follow-ups.

​When you visit our websites, so-called usage data is temporarily stored on the web servers for statistical purposes as a protocol in order to improve the quality of our website. This data set consists of:

• ​the page from which the file was requested
• ​the name of the file
• ​the date and time of the query
• ​the amount of data transferred
• ​the access status (file transferred, file not found)
• ​the description of the type of web browser used
• ​the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be produced

​We use this information to enable the access to our website, to control and administrate our systems and to improve the design of our website. The legal basis for the processing is Art. 6 para 1 lit. f GDPR.

​We use service providers to operate our websites, CRM, marketing automation platform and other internet services. These service providers are strictly bound to our instructions with a contract according to Article 28 GDPR.

​Service providers are helping us with the processing of your data. These service providers operate, for example, our servers on which your data is stored. In cases where service providers have access to personal data processed by us from outside the European Union or the European Economic Area, we have established contracts including Standard Contractual Clauses (which you can find here) or other measures to ensure an adequate level of data protection in the respective country. Please read as well the section about international data transfers (section 2.1.).

​ We use the Google Remarketing application. Google uses cookies to record your usage behavior on our website in order to show you interest-based online advertising for our products in the form of display ads on other pages in the Google Display Network and on the World Wide Web using Display & Video 360. The information is accordingly transmitted to Google and Google's partners.

​Data like your IP address etc is processed. The data processing is based on your consent in accordance with Art. 6 para. 1 (a) GDPR. With the new adequacy decision, regulating the EU-US data transfers Google is certified under the Data Privacy Framework offering an equivalent protection of personal data. Please see more details under 2.1. If you wish to withdraw your consent to the processing from our cookie banner, you can change your cookie preferences by re-accessing the cooking banner. Simply click the button located at the bottom left of the page to make changes.

​Any further data processing will only take place if you have given your consent to Google linking your browser history to your Google account and using information from your Google account to personalize ads that you see on the Internet. In this case, if you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data in order to form target groups.

​If you do not want Google to record your surfing behavior to display advertising, you have the following options beyond the privacy settings of your browser and the choice of cookie preferences (see Section 3.1 above):

​You can disable personalized advertising from Google: www.google.com/ads/preferences

​You can disable personalized advertising on a device basis: ​https://support.google.com/ads...

​You can deactivate personalized advertising on a browser basis: ​http://optout.networkadvertisi...

​Please note that you may have to repeat this step after deleting the cookies on your end device.

​For more information, please see Google's terms here- https://business.safety.google....

​We use the web analysis tool "Google Analytics" to design our websites according to your needs. Google Analytics creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. With the help of these cookies, we are able to recognize returning visitors and count them as such.

​The data processing is based on your consent according to Art. 6 para. 1 lit. a) GDPR and Art. 25 TTDSG (German Telecommunications-Telemedia Act), provided you have given your consent via our banner.

​Within the framework of Google Analytics and Google LLC (United States) support us as a processor in accordance with Art. 28 GDPR. The data processing is taking place outside the EU or EEA

​With the new adequacy decision, regulating the EU-US data transfers Google is certified under the Data Privacy Framework offering an equivalent protection of personal data. Please see more details under 2.1. If you click on "Accept all cookies", in our cookie banner you consent to the proccessing of your data You can revoke your consent at any time. If you wish to withdraw your consent, you can change your cookie preferences by re-accessing the cooking banner. Simply click the button located at the bottom left of the page to make changes.

​Some of our websites use Matomo on the basis of § 25 TTDSG (German Telecommunications-Telemedia Act), if you have consented to the use. Matomo is a so-called web analysis service. Matomo uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. For this purpose, the usage information generated by the cookie (including your shortened IP address) is transmitted to our server and stored for usage analysis purposes to optimize our website. Your IP address will be immediately anonymized during this process, so that you remain anonymous. The information generated by the cookie about your use of this website will not be passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings in your browser; however, you may not be able to use the full functionality of this website in this case.

​If you do not agree with the storage and evaluation of this data from your visit, you can also revoke your consent by mouse click. In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. If you delete your cookies, however, this means that the opt-out cookie is also deleted and may have to be activated again by you.

​Your visit to this website is currently recorded by Matomo web analysis.

​Click here to revoke your consent so that your visit is no longer recorded.

​Our website uses the tool "LinkedIn Insight tag" an analysis and tracking tool of LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser that enables the collection of, among other things, the following data: IP address, URL, device and browser properties, timestamp, and page events (e.g. page views).

​IP addresses are shortened (if used to reach LinkedIn members across devices) or hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days. The tag reports to LinkedIn what actions you have performed on our website and your possibly identifying data. With the data, LinkedIn can recognize that you have visited our website, what you have clicked on and if you have clicked on a link on LinkedIn that connects you to our website. This allows LinkedIn to show you interest-based content. LinkedIn may associate this data with your user account and use it for its own purposes.

​LinkedIn does not share any personal data with Evotec, but offers anonymized reports on website audience and display performance. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. Evotec can use this data to display targeted advertising outside of its website without identifying you as a website visitor. The purpose of the data collection is to analyze visits to our website and campaign results in order to provide you with interesting information.

​Your personal data is processed exclusively on the basis of Art. 6 (1) lit. a GDPR; if you wish to withdraw your consent, you can change your cookie preferences by re-accessing the cooking banner. Simply click the button located at the bottom left of the page to make changes. More information about data protection on LinkedIn can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal...;

​To make our site as appealing and informative as possible, we embed videos that are not hosted on our servers. In order to prevent the automatic downloading of third-party content when you visit our websites with embedded services, we only show locally stored preview images of the video as a first step. This does not provide the third-party provider with any information.

​Only after you click on the preview image, will third-party content be downloaded. This provides the third party with information that you have accessed our site and with the usage data technically required for this purpose (e.g. your IP address, time and date). The legal basis for the embedding processing is your consent if you have previously given your consent by clicking on the preview image. We have no influence on the further data processing performed by the third-party provider.

Please note that when you start a video with a click, your personal data may be transferred outside the EU/ EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49 (1) (a) GDPR. See more information in section 2.1 International data transfers.

If you do not agree with the data processing by Google or by Vimeo, please refrain from clicking the video. For more information, we refer to YouTube's and Vimeo’s privacy policy accordingly, which are available at https://www.youtube.com/privac..., https://vimeo.com/privacy.

In order to protect the security and integrity of our website, we utilize Google reCAPTCHA. This service is designed to identify and prevent automated software (bots) from engaging in abusive activities on our site, such as spamming or creating false accounts.

In order to determine whether a user is a human or a bot, Google reCAPTCHA functions automatically and analyzes various data such as IP address, the amount of time spent on the website, and mouse movements made by the user on our website (regardless of whether you visit pages that contain web forms or not). The data collected in this way is used to determine whether the input comes from a person or an automated program. This data is sent to Google, where it may be stored and analyzed. We have no influence on the further data processing by the third-party provider. The legal basis for this data processing is your consent if you have given your consent via our cookie banner.

It is important to note that this service may involve transferring your personal data to Google servers located in the United States (Google LLC), With the new adequacy decision, regulating the EU-US data transfers Google is certified under the Data Privacy Framework offering equivalent protection of personal data as the EU. Please see more details under 2.1. You can revoke your consent at any time. If you wish to withdraw your consent, you can change your cookie preferences by re-accessing the cooking banner. Simply click the button located at the bottom left of the page to make changes. If you do not provide your consent reCAPTCHA will not be activated. However, that may limit your possibility to submit the webforms e.g. contact forms in our website.

We use HubSpot and Salesforce for our online marketing activities. With HubSpot and Salesforce we cover these aspects of our online marketing:

• Hosting content including news related to events
• E-mail marketing (trade fair invitations, new content promotion, new services)
• Landing Pages and Contact Forms
• Reporting (for example, reporting about the use of our website)

Visitors of our website are able to learn more about our company, download content, and provide us with their contact details or other information. The legal basis for the processing of your data is Art. 6 para 1 lit. f to improve our online services.

Personal data of our visitors might be transmitted to the US affiliates of our providers in which data protection laws might not offer an adequate level of protection. When data are transferred under these circumstances, the authorities may have access to the data, without any legal recourse being available. In such cases, we ask you for your consent to perform this transfer based on Art. 49 para. 1 (a) GDPR. (please see section 2.1 of the privacy policy).

This information is partly stored on servers of our software partner HubSpot and Salesforce. This information can be used by us to contact visitors of our website and to determine which services of our company are of interest for them. The statistical usage data of our online marketing offers helps us to optimise the website functions and to provide our website visitors with content that is tailored to their interests. HubSpot is subject to the TRUSTe's Privacy Seal.

All information we collect is subject to this privacy policy. We use the information collected exclusively to optimize our services.

More information about the data protection regulations of HubSpot

More information from HubSpot regarding EU data protection regulations

More information regarding Salesforce it can be found in the privacy policy of Salesforce (link).

More information about the cookies used by HubSpot can be found here and here.

To protect your data from unwanted access, we use encryption to encrypt the transport channel of email communication with you between your and our email-server. Your information is transmitted from your email server to our server and vice versa via the internet using at least 128-bit TLS encryption (Transport Layer Security) if your emails server supports this. You can recognize this by checking the source code of the email.

We also encrypt the transport channel of your data between your and our webserver with at least 128-bit TLS encryption. You can recognize the encrypted communication with our webserver at the lock next to the address bar.

You may contact us via our websites or microsite/landing pages to enquire about a service, register for an event or to download content (e.g., posters, publications, presentations, videos and other materials and rich media resources). During this process, we may ask you for your contact details that you give us voluntarily. We also collect data each time you download a particular piece of content. We use this data for forwarding your request to the responsible department as well as keeping you informed about our research, new services or our events or other information that is relevant to you based on your consent. You can withdraw your consent concerning the use of this data at any time by sending us an email and by using the unsubscribe buttons on any marketing emails. We will not use your data any further after the withdrawal of your consent.

On our website you have the possibility to subscribe to our free newsletter. For the subscription we use the double opt-in procedure. Once you have submitted the registration form to us, you will receive a confirmation email from us. Your subscription will only be activated after you have clicked on the link in the confirmation e-mail. By subscribing to the newsletter, you agree to receive advertising in the form of newsletters. We process your personal data in accordance with Article 6(1)(a) GDPR on the legal basis of consent.

You can unsubscribe from the newsletter at any time. To do so, use the unsubscribe link at the end of each e-mail. Your e-mail address will then be deleted from the distribution system immediately.

Our e-commerce platform is used to serve our business clients and their needs. Through this platform you have the possibility to request quotations or order services directly through the e-commerce platform. You have the option to navigate the e-commerce platform as a guest and to request quotations. Another option is to register in the platform in order to receive tailor-made and/ or confidential material e.g. pricing material, protocols etc. In this case your personal data Name, Email, Company, Job title, Country will be processed in order to establish the relevance of this material for you.

We use this data for forwarding your request to the responsible department in order to process your request as well as keeping you informed about our research, new services or our events or other information that is relevant to you based on your consent. You can withdraw your consent anytime by unsubscribing from the marketing communication. To do so, use the unsubscribe link at the end of each e-mail. Moreover, we process data of registered users for the conduction of optional surveys for the improvement of our services. The data collected on our e-Store is not anonymous as the information is collected from you as a registered user who has shown an interest in our services.

We will delete your data if they are no longer required and there are no legal obligations to retain them. For the e-commerce platform and for the conduction of surveys we use external service providers to offer you better and personalized services. Details about the providers can be found under section 1.6. and 2.1.

Please be aware that tracking might take place in the pages of the e-commerce platform, if you have consented through our cookie banner. If you wish to withdraw your consent, you can change your cookie preferences by re-accessing the cooking banner. Simply click the button located at the bottom left of the page to make changes.

We will not disclose or share your personal data to third parties, except in the following circumstances and in accordance with applicable law:

• With your consent
• To our global affiliates, subsidiaries, divisions and groups worldwide and third-party service providers, who act on our behalf and instructions to fulfil product orders, deliver services, provide IT support, and fulfil the other purposes set forth above
• To our affiliates, who work with us to improve our and their products, services and business practices
• As required by applicable law, including, without limitation, in response to any government or regulatory agency request, to cooperate with law enforcement investigations, or upon receipt of any court order, and
• To courts and public authorities when required by the applicable regulation to protect you, us, or third parties from harm, including fraud or instances where somebody’s physical safety is at risk.

We are not responsible for the privacy policies of websites to which our websites may link. If you provide any information to such third parties, different rules regarding the collection and use of your personal data will apply. We strongly suggest you review such third party’s privacy policies before providing any data to them. We are not responsible for the policies or practices of third parties.

Evotec is an international business and, at times, will need to transfer your personal data within our group of companies or to approved third-party providers. In some cases, we may transfer your data from inside to outside of the European Union and the European Economic Area.

The personal data that we collect may be processed by Evotec-affiliated companies and trusted third parties. In some cases, we may transfer personal data to third countries outside the EU. Some of the countries to which your personal data is transferred may not offer an adequate level of protection equivalent to the protection offered by the laws in the EU. In such cases, to ensure that your personal data remains protected when it is transferred outside of the EU, we make sure that appropriate measures are implemented, including our intragroup agreement, or Standard Contractual Clauses issued by the European Commission. The relevant parts of the contracts concluded within our group of companies can be found here (2021/914/EC).

The EU Commission has adopted an adequacy decision for the US concerning EU-US data transfers. Specifically, the US has introduced new safeguards and mechanisms ensuring an adequate level of data protection 'essentially equivalent to the level of protection within the EU', for companies that are certified under a framework which is called Data Privacy Framework (DPF).

Some of our business partners are certified under the DPF e.g. Google, Microsoft. Others may transfer your data to countries (including the United States when the provider is not certified under the DPF) in which data protection laws do not offer an adequate level of protection. When data are transferred under these circumstances, the authorities may have access to the data, without any legal recourse being available. In such cases, we ask you for your consent to perform this transfer based on Art. 49 para. 1 (a) GDPR.

If you wish to withdraw your consent, you can change your cookie preferences by re-accessing the cooking banner. Simply click the button located at the bottom left of the page to make changes.

We will retain your personal information for the period necessary to fulfill the purposes outlined in this privacy statement. When assessing these periods we carefully examine our need to collect personal information at all and if we establish a relevant need, we only retain it for the shortest possible period to realize the purpose of collection unless a longer retention period is required by law. Subsequently, or if you ask us to do so, we will delete your personal data.

As a user according to Art. 12-22 GDPR you have the following rights. You have the right to request information about what personal data is stored by us, for what purpose it is stored as well as receive a copy of your data. In addition, you may have incorrect data corrected or data deleted that is inadmissible or no longer necessary to be stored. Additionally, you have the right to demand the restriction of the processing of your data, to have your automatically processed data transferred, if we process them by your consent or contract, and to complain to a regulator, if you believe that the processing of your data by us is unlawful.

Finally, you have the right to object to the processing, if your data are processed due to Art. 6 para. 1 lit. f GDPR. We will then cease to process your data unless there are demonstrable compelling reasons for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. You can assert this right in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

We are at your disposal for information, wishes or suggestions on the subject of data protection.

Our data protection officer will be happy to provide you with information or suggestions on the subject of data protection:

Peter Suhren

FIRST PRIVACY GmbH

web: www.first-privacy.com

e-mail: office@first-privacy.com

phone: +49 421 69 66 32 80

When making an inquiry, please include the entity that is affected by the inquiry.