We take the protection of your personal data very seriously and handle your personal data confidentially and in accordance with statutory data protection regulations.
1. Data processing
We process your personal data in the following contexts:
1.1. Server log files (access data)
Server-Log-Dateien
The provider of the pages automatically processes information provided automatically by your browser, known as server log files. These include:
• Browser type and browser version
• operating system
• Referrer URL (origin address)
• Host name of the accessing computer
• Date and time of the server request
• IP address
This data will not be merged with other data sources.
The data processing is based on Art. 6 para. 1 letter f GDPR, which permits the processing of data on the basis of legitimate interest. In this case, there is a justified interest in a secure and trouble-free operation of the web server. In order to ensure this, the administration must be able to recognise and trace attacks and malfunctions of the system via the server log files. In order to recognize attack patterns, accesses to the server must be stored. As soon as this data is no longer needed, it is deleted. For technical reasons, the data is disclosed to the hosting service provider, who is, however, bound by instructions and contract to us.
1.1.2 Cookies
This internet pages use cookies. They serve to make our offer site more user-friendly, effective and secure. Cookies are small text files that your browser stores.
You will find more details on the cookies used in the respective sections of this declaration. You can revoke or grant your consent to the non-mandatory data processing at any time by calling up the "Privacy settings" in the footer of our website. In addition, the following necessary cookies are used:
• Consent to the storage of non-essential cookies: whether or not you have consented to the use of further cookies is stored in a cookie with a duration of 100 minutes.
• Session cookie: This allows your requests to be assigned to the same session. It is deleted when the session is ended.
The cookies are technically necessary to be able to display the page. They are processed on the basis of Art. 6 para. 1 letter f DSGVO. We have a legitimate interest in the technically error-free and optimized provision of our services.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of these Internet pages may be limited.
1.1.3 Contact form
If you send us enquiries using the contact form, your details from the enquiry processing form and in the event of follow-up questions will be processed and stored by us. Mandatory fields are marked accordingly. Filling in mandatory fields is necessary so that we can answer and process your enquiries. All other information is voluntary.
The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 Letter a GDPR). You can revoke this consent at any time. A revocation is only valid for the future.
We will not pass on your data to third parties without your consent or another legal basis.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or until the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.
1.1.4 DocCheck
DocCheck is an identification service that provides access to information for medical professionals on our non-public pages. It is operated by DocCheck Medical Services GmbH, Vogelsanger Straße 66, 50823 Cologne, Germany.
Registration and use takes place by entering a DocCheck user name and password. The registration procedure is carried out exclusively on DocCheck's servers, so that we do not receive any personal data in this context. Your data will only be transmitted to us with your express consent or for the purpose of legal prosecution, insofar as this is permissible under data protection law.
DocCheck uses cookies. This includes a session cookie which serves your further identification after logging into the non-public area of the website, so that you do not have to register again and again while using this area. Information on this and all other cookies for which DocCheck is required can be found in the provider's data protection declaration: http://info.doccheck.com/de/privacy/
1.1.5 Google Analytics
This website use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information is collected about your use of the website, including browser type and version, operating system used, referrer URL (previously visited page), IP address and date/time of request.
Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of these web pages is usually transmitted to a Google server in the USA and stored there. Because IP anonymization is activated on these websites, your IP address will be truncated by Google within member states of the European Union or the EEA (European Economic Area) and only transmitted anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. This transmission takes place on the basis of your consent.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 (1) a DSGVO. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookies and related to your use of the websites (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. The link is: https://tools.google.com/dlpage/gaoptout
For more information, please contact Google at https://policies.google.com/?gl=de.
1.1.6 Google-Maps
This website uses Google Maps for displaying interactive maps. Google Maps is a map service provided by Google Ireland Limited. The use of Google Maps results in information regarding the use of the website, including your IP address, being transmitted to Google in the US.
When you go to a page on our website that contains Google Maps, your browser establishes a direct connection with Google’s servers. Google transmits the content of the map directly to your browser, which integrates it into the website. For this reason, we do not have any influence on the scope of the data that Google collects in this manner. According to the information available to us, this includes the following data at a minimum:
• Date and time of the visit to our website
• Web address or URL of our website
• IP address
• The (start) address entered in the course of route planning
We have no influence on the further processing and use of the data by Google and therefore cannot accept any responsibility for this. The legal basis for data processing by Google Maps is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in optimizing the functionality of our website. If you do not want Google to collect, process or use data relating to you via our website, you can disable JavaScript in your browser settings. You will not be able to view maps in this case.
Please refer to the Google Privacy Policy to learn about the purpose and scope of the data collection and the further processing and use of the data by Google as well as your related rights and settings options for protecting your privacy: https://policies.google.com/privacy
1.1.7 YouTube plugin
We use plugins of the YouTube site operated by Google in our website. The operator is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plug-in, a connection is established to YouTube's servers. YouTube has privacy-friendly preferences so it only stores your information when you actually start a video, according to YouTube.
The legal basis is Art. 6 Para. 1 Letter f GDPR. Our legitimate interest lies in improving the quality of our website.
The connection to the YouTube server in the USA is necessary in order to be able to display the respective video on our website via your Internet browser. In the course of this YouTube will at least record and process your IP address, the date and time as well as the website you visited. In addition, a connection to the advertising network "DoubleClick" is established by Google.
If you are logged in to YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
YouTube permanently stores cookies on your terminal device via your Internet browser for the purpose of functionality and analysis of user behaviour. If you do not agree with this processing, you have the option of preventing the cookies from being saved by making a setting in your Internet browser.
Google provides further information on the collection and use of data as well as your rights and protection options in this regard in the data protection information at https://policies.google.com/privacy.
1.1.8 Vimeo
We use plugins on our website to display videos from the Vimeo platform. It is operated by Vimeo, LLC with headquarters in 555 West 18th Street, New York, New York 10011, USA.
The legal basis is Art. 6 para. 1 letter f GDPR. Our legitimate interest lies in improving the quality of our Internet presence.
When you open a web page provided with such a plugin, a connection to the Vimeo servers will be established and the plugin will be displayed. By this means, the Vimeo server will be informed which of our web pages you have visited. If you are logged into Vimeo as a member, Vimeo will assign this information to your personal user account. This information is also assigned to your user account when using the plugin, e.g. clicking the start button of a video. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo. If you do not agree with the data processing, you have the possibility to prevent the storage of cookies by a setting in your Internet browser.
Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy.
1.1.9 Share functions for social networks
On our website you can share individual pages via the "Share" links on the social networks Facebook, Twitter and WhatsApp. Only when you click on one of these links a connection will be established to the selected network and data about you will be transmitted there. The networks will use your personal information to perform the sharing function.
The data processing by us is based on your consent (Art. 6 para. 1 letter a DSGVO).
Further information is available here:
• Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, operated within the EU by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): Privacy information can be found at https://www.facebook.com/policy.php.
• Twitter (Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA): Privacy information can be found at https://twitter.com/privacy.
• WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland): Privacy information can be found at https://www.whatsapp.com/legal/#privacy-policy.
1.1.10 Doubleclick
This website uses the online marketing tool Doubleclick from Google. Doubleclick uses cookies to serve ads relevant to users and to improve campaign performance reports. Google uses a cookie ID to track which ads appear in which browser, thereby preventing them from appearing more than once. In addition, Doubleclick can use cookie IDs to capture actions related to ad requests (conversions), such as when a user sees a Doubleclick ad and later uses the same browser to visit the advertiser's website and make a purchase. According to Google, Doubleclick cookies do not contain personally identifiable information.
Because of the marketing tools used, your browser automatically connects directly to Google's server. We have no control over the extent and further use of the data collected by Google through the use of this tool and inform you therefore according to our state of knowledge: By the integration of Doubleclick Google receives the information that you called the appropriate part of our Internet appearance or clicked an announcement of us. If you are registered with a Google service, Google can assign the visit to your Google account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out your IP address and store it.
In addition, the Doubleclick Floodlight cookies enable us to understand whether you are performing any actions on our website after you have accessed or clicked on one of our display/video ads on Google or another platform via Doubleclick. Doubleclick uses this cookie to learn how you interacted with our sites and to send you targeted advertisements later.
You can prevent participation in this tracking process in a number of ways:
a) by setting your browser software accordingly, in particular by suppressing third party cookies, you will not receive advertisements from third parties
b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain www.googleadservices.com, https://adssettings.google.com, which will be deleted when you delete your cookies
c) by deactivating the interest-based advertisements of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, this setting being deleted if you delete your cookies
d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin
e) by means of the corresponding cookie setting. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent. The legal basis for data processing is your consent (Art. 6 para. 1 letter a DSGVO.
Further information on Doubleclick can be found at https://www.google.de/doubleclick and on data protection at Google in general: https://policies.google.com/privacy.
1.1.11 MyFonts Counter
The service MyFonts-Counter does not process any personal data, but anonymously measures the use of web fonts on our website. Further information can be found at: https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy/
1.1.12 Google reCaptcha
We use the "reCAPTCHA" service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is to check whether the data entry on our websites (e.g. in a contact form) is made by a human or automated or machine by a program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the visitor enters the page. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the visitor on the website and mouse movements made by the visitor). The data collected during the analysis is forwarded to Google.
The data processing is based on Art. 6 para. 1 letter f DSGVO. As a website operator, we have a legitimate interest in protecting our web offers from abusive automated spying and from SPAM.
For more information on Google reCAPTCHA and Google's privacy policy, please refer to the following links: https://www.google.com/intl/de/policies/privacy and https:/www.google.com/recaptcha/intro/android.html.
1.2 Further data processing
1.2.1 Business partners and contact persons
We process data about business partners (customers, suppliers, service providers, etc.) or about their contact persons. This includes names, contact details and job-related data (such as employer details and professional position).
The personal data originates either directly from the data subjects themselves or from their employer.
We need this data to protect our legitimate interests (Art. 6(1)(f) DSGVO), to communicate with our business partners and to fulfill, prepare and terminate contracts with business partners. In addition, this data is also used to provide information about our products and services and to carry out marketing activities. You may object to the use of personal data for direct marketing purposes at any time.
There are no plans to pass on the data to third parties. This data will be stored as long as it is required for the above-mentioned purposes and, if necessary, as long as legal retention periods require it. Insofar as it is necessary to fulfill these purposes, we may forward your data to external service providers. These are contractually and legally bound to confidentiality.
1.2.2 Application
You can voluntarily submit your application online via our website. We process your applicant data only for the purpose and within the framework of the application procedure and in accordance with the legal requirements.
The processing of the applicant data is carried out to fulfil our (pre-)contractual obligations within the scope of the application procedure (Art. 6 Para. 1 Letter b GDPR and § 26 BDSG, German Data Protection Act).
If you voluntarily provide us with special categories of personal data within the scope of the application procedure (within the meaning of Art. 9 Para. 1 GDPR, e.g. health data, severely disabled status or ethnic origin), we process these on the basis of the legal basis of Art. 9 Para. 2 Letter a GDPR. If we ask you for special categories of personal data during the application process, they will be processed in accordance with Art. 9 Para. 2 Letter b GDPR.
The application procedure requires that you as an applicant provide us with your applicant data. Mandatory information is marked in our online form and can be found in the job description.
You can send us your application using the online form on our website. The data will be transmitted to us encrypted according to the state of the art. You can also send us your applications by e-mail. Because e-mails are not sent encrypted by default, you are responsible for a secure transmission yourself in this case. You can also send us your application by post.
Applicant data will be deleted after a period of six months, subject to justified revocation by the applicants, so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the AGG (German General Equal Treatment Act).
1.2.3 Events
for participants in events organized by Aristo Pharma
Purposes of data processing
We process your personal data for the following purposes:
- to be able to plan the event and manage your participation
- to check your eligibility to participate in certain events, if applicable
- if necessary, to check your eligibility for reimbursement of travel costs and expenses and to be able to make the reimbursement
- if necessary, to create a list of participants
- if necessary for the creation and publication of photos
- possibly for sending samples/information material (at your request)
- if necessary for the planning of a field visit (at your request)
- if necessary for reporting participation to the Medical Association
- possibly due to the documentation obligations with regard to the AKG Pharma Code of Conduct
- to send you further information on products and services of Aristo Pharma and Aristo Pharma Vertriebs GmbH at a later date
Legal basis
We process your personal data on the following legal bases:
- for the execution of the participation contract
- if applicable, on the basis of your consent
- where applicable, due to legal requirements, in particular in the areas of tax and accounting
- based on our legitimate interests in compliance with the Pharma Code of Conduct and marketing measures
Recipients
Your personal data may be disclosed to the following recipients:
- the organizer of the event, for example INTERPLAN Congress, Meeting & Event Management AG, m:con - mannheim:congress GmbH, Berufsverband der Frauenärzte e.V.
- the IT service providers Time Change GmbH, Communication & Destination (for the provision of the web-based software "Etool" for registration), ProfitBricks GmbH (hosting of the website), Picibird UG (for maintenance and upkeep of the website)
- Responsible medical associations (transmission of continuing education points)
- Aristo Pharma Vertriebs GmbH, Wallenroder Straße 8-10, 13435 Berlin for the dispatch and administration of invitations and for marketing measures
- Banks and companies for the processing of payment transactions
Origin of the data
For events that are not organized by Aristo Pharma itself, the following data about you may be transmitted to us by the organizer: Name, contact details, registered event.
Storage period
Personal data is stored for as long as it is required for the above-mentioned purposes and for as long as statutory retention periods require. As a rule, the storage period is 10 years due to accounting and tax requirements.
Your rights as a data subject
As a data subject, you have the following rights, provided the legal requirements are met:
- Right of access, Art. 15 GDPR
- Right to rectification, Art. 16 GDPR
- Right to erasure, Art. 17 GDPR
- Right to restriction of processing, Art. 18 GDPR
- Right to data portability, Art. 20 GDPR
- Right to object, Art. 21 GDPR
If the processing is based on your consent, you have the right to withdraw this consent to the processing of the data at any time with effect for the future. You may then no longer be able to participate in the event.
If the data processing is based on a weighing of legitimate interests, you have the right to object to this data processing. There must be legitimate reasons for this arising from your particular situation.
You also have the right to complain to the data protection supervisory authority about data processing.
Provision of the data
You must provide us with the personal data that is necessary for us to fulfill the above-mentioned purposes. Where information is mandatory, this is marked as a mandatory field; unfortunately, participation in the event is not possible without this information. You can provide all other information voluntarily.
2. Your rights
You as a data subject have the following rights, providing that the legal prerequisites are fulfilled:
• Right of access to personal data, Art. 15 GDPR
• Right to rectification of personal data, Art. 16 GDPR
• Right to erasure of personal data, Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to data portability, Art. 20 GDPR
• Right to object, Art. 21 GDPR
Insofar as the processing of data is based on your consent, you have the right to retract your consent at any time with effect for the future.
You have the right to submit a complaint to the data protection authorities regarding the processing of your data.
Responsible party and data protection officer
The responsible party for data processing is, unless otherwise stated above:
Aristo Pharma GmbH
Wallenroder Straße 8 - 10
13435 Berlin
Phone: +49 (0) 30 - 710 94 - 4200
Email: info@aristo-pharma.de
The data protection officer can be contacted via: fox-on Datenschutz GmbH, Pollerhofstr. 33a, 51789 Lindlar, DSB@fox-on.com