Privacy policy and information of the data subjects according to article 13 and article 14 EU data protection basic regulation

General information

Details of the responsible entity

Company:
phi Pharma International GmbH & Co. KG

Legal representative:
Frank Messer

Address:
Carl-Zeiss-Strasse 31, 55129 Mainz, Germany

Contact details Data Protection Officer:
Dr. Sebastian Kraska
Attorney at law, Dipl.-Kfm.

External data protection officer
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.; This email address is being protected from spambots. You need JavaScript enabled to view it.

General data processing information

Data concerned:

Personal data is only collected if you provide it to us of your own accord. No personal data is collected beyond this. Any processing of your personal data that goes beyond the scope of the legal permissions will only be carried out on the basis of your express consent.

Purpose of processing: execution of the contract.

Categories of recipients:

Public bodies in the case of overriding legal provisions.
External service providers or other contractors.
Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.

Third-country transfers:

In the context of the execution of the contract, processors outside the European Union may also be used.

Duration of data storage:

The duration of data storage is based on the statutory retention obligations and is usually 10 years. Data in the sense of the TFG is stored in accordance with the legal retention obligation of at least 30 years after the last entry.

Specific information about the website

Use of a newsletter

When registering for our newsletter, you provide us with your e-mail address and optionally other data. We use this information exclusively to send you the newsletter. The data you enter when registering for the newsletter will be stored by us until you unsubscribe from our newsletter. You can unsubscribe at any time using the link provided for this purpose in the newsletter or by sending us a corresponding message. By unsubscribing, you object to the use of your e-mail address.

Usage data

When you call up our web pages, you transmit data to our web server (out of technical necessity) via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
access status (file transferred, file not found, etc.)
Web browser and operating system used
complete IP address of the requesting computer
amount of data transferred

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. In addition, the data is processed in anonymized form for statistical purposes; it is not compared with other data or passed on to third parties, even in excerpts.

Use of "session cookies

Session cookies are stored exclusively for the duration of your use of our website. The purpose of these cookies is to identify your computer during a visit to our website, to enable multilingualism of the website content and to be able to determine the end of your visit. In order to use the full functionality of our website, it is necessary to allow session cookies for technical reasons. The session cookies are deleted as soon as you leave our website or end the browser session.

Information on further data processing procedures

Specific information on the application procedure

Data concerned:

Application details

Purpose of processing:

Implementation of application procedure.

Categories of recipients:

Public bodies in case of overriding legal provisions.
External service providers or other contractors, including for data processing and hosting.
Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest, including customers and interested parties in the context of order acquisition.

Third-country transfers:

In the context of the execution of contracts, processors outside of the European Union may be used, including email providers.

Duration of data storage:

Application data is generally deleted within four months after notification of the decision, unless consent has been given for longer data storage in the context of inclusion in the applicant pool.

Specific information on the processing of customer data/prospect data.

Data concerned:

Data disclosed for the purpose of executing the contract; if applicable, data going beyond this for the purpose of Processing on the basis of your express consent.

Purpose of processing:

Contract performance, including but not limited to quotations, orders, sales and invoicing, quality assurance.

Categories of recipients:

Public bodies in the case of overriding legal provisions.
External service providers or other contractors, including for data processing and hosting, shipping, transport and logistics, service providers for printing and mailing information.
Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for overriding interest, including for credit information for purchase on account, for electronic dispatch of information, for quality assurance purposes.

Third country transfers:

Within the scope of the execution of the contract, processors outside of the European Union may be used, including email providers.

Duration of data storage:

The duration of data storage is based on the statutory retention obligations and is usually 10 years. Data in the sense of the TFG is stored in accordance with the statutory retention obligation of at least 30 years after the last entry.

Specific information on the processing of employee data.

Data concerned:

Data communicated for the purpose of executing the contract; if applicable, data going beyond this for the purpose of Processing based on your explicit consent.

Purpose of processing:

Contract performance in the context of the employment relationship.

Categories of recipients:

Public authorities in the case of overriding legal provisions, including the tax office, social security institutions, employers' liability insurance association, customs, BfArM, police, the Mainzer Netze as well as the operator of the security system NTA Systemhaus GmbH & Co. KG.
External service providers or other contractors, including for data processing and hosting, for payroll accounting, for travel expense accounting, for insurance services, for the vehicle use.
Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for reasons of overriding interest, e.g., for order acquisition, for Insurance benefits.

Third-country transfers:

Within the scope of the execution of contracts, processors outside of the European Union may be used, including email providers.

Duration of data storage:

The duration of data storage is based on the statutory retention obligations and is usually 10 years.

Specific information on the processing of supplier data.

Data concerned:

Data communicated for the purpose of executing the contract; if necessary, any additional data for Processing on the basis of your express consent.

Purpose of processing:

Contract performance, including inquiries, purchasing, quality assurance.

Categories of recipients:

Public authorities in the case of overriding legal provisions, including the State Office for Social Affairs, Youth and Supply, BfArM, tax office and customs.
External service providers or other contractors, including for data processing and hosting, for Shipping, transport and logistics, accounting and payment processing.
Other external bodies insofar as the data subject has given his or her consent or a Transfer is permissible for predominant interest.

Third country transfers:

In the context of the execution of the contract, processors outside of the European Union may be used, including email providers.

Duration of data storage:

The duration of data storage is based on the statutory retention obligations and is usually 10 years. Data in the sense of the TFG is stored in accordance with the statutory retention obligation of at least 30 years after the last entry.

Specific information on the use of video conferencing/webinar software.

Data concerned:

Data provided for the use of the video conferencing software or the webinar software (esp. First name, last name, e-mail address; optional: sound transmission; optional: image transmission; optional: questions when using chat functions); to the extent technically necessary Processing of data from your system to establish the connection with the provider of the Conference software.

Purpose of processing:

Conducting video conferences or webinars.

Categories of recipients:

Public bodies in case of overriding legal provisions. External service providers or Other contractors, including for data processing and hosting. Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.

Third-country transfers:

Processors outside the European Union are used (here: United States of America); corresponding legal agreements have been concluded with the service provider.

Duration of data storage:

Recording of video conferences takes place only with previously documented consent of the participants. The technical data is deleted if it is no longer required.
The duration of the data storage is otherwise based on the statutory retention requirements and is generally 10 years.

Further information and contacts

In addition, you can at any time assert your rights to information, correction or deletion or to restriction of processing or the exercise of your right to object to processing, as well as the right to data portability. Here you will find the possibility to contact us by e-mail (This email address is being protected from spambots. You need JavaScript enabled to view it.) or letter [phi | Pharma International - Imprint]. You also have the right to contact the data protection supervisory authority in the event of complaints.