Data protection

Information on data processing on the Pharmore website

Last updated: November 2022

The protection of your rights and freedoms is important to us, PHARMORE (hereinafter: "we"), including when it comes to the topic of data protection. We therefore only process your personal data for the intended purposes. Since it is important to us that you know at all times how we process your data, information about the handling of your personal data (collected via our website) is provided below. The term "processing" covers the entire process from the collection, storage, processing and/or transfer to the deletion of the data (hereinafter referred to as "processing"). Personal data is any information that relates to an identified or identifiable person and can be directly or indirectly attributed to that person (such as name, address, contact details). When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and, where applicable, other data protection-related provisions.

This privacy policy applies exclusively to our website.

You can find the privacy policy for our business partners here. For special processing, e.g. in the context of participation in application processes, you will receive separate information on the handling of your personal data.

I. Name and address of the data controller

PHARMORE GmbH
Gildestrasse 75
49479 Ibbenbueren
Germany

E-mail: service@pharmore.de

Tel.: +49 (0) 5451 – 969 00

II. Contact details of the Data Protection Officer

PHARMORE GmbH
Data Protection Department
Gildestrasse 75
49479 Ibbenbueren
Germany

E-mail: datenschutz@pharmore.de

Tel.: +49 (0) 5451 - 5070 864

If you have any questions regarding the processing of your personal data, if you wish to exercise your rights as a data subject or if you wish to withdraw your consent, please contact our data protection officer directly. 

III. Your rights as the data subject

Within the framework of the GDPR, the data subject affected by the data processing has various rights. These rights can be asserted against the data controller, i.e. against us.
In particular, you are entitled to the following rights if the respective legal requirements are met:

• Right to access: You can request information about whether we process personal data about you. If this is the case, you have a right of access to this personal data as well as to further information related to the processing (cf. Article 15 GDPR).
• Right to rectification: In the event that personal data about you is not (or is no longer) accurate or incomplete, you may request that this data be corrected and, if necessary, completed (cf. Article 16 GDPR).
• Right to erasure or restriction: If the legal requirements are met, you may request the erasure of your personal data (cf. Article 17 GDPR) or the restriction of the processing of this data (cf. Article 18 GDPR), for example if the processing of this personal data is no longer necessary for the purposes for which we collected it.

• Right to information: If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data relating to you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort (cf. Article 19 GDPR).
• Right to data portability: Under certain conditions, you have the right to receive the personal data concerning you that you have provided to us in a specific format or to transfer this data to another controller (cf. Article 20 GDPR).

If we rely on our "legitimate interest" (Article 6 (1)(f) GDPR) when processing your personal data, you have the right to object to this data processing (including profiling) pursuant to Article 21 GDPR. In the event of an objection, we will in any case cease processing your personal data for direct advertising, and in the case of data processing for other reasons, as a rule, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

To exercise these rights or for further information about your rights, please contact our data protection officer using the contact details provided in Point II.

Ultimately, you have the right to lodge a complaint with a data protection supervisory authority of your choice if you believe that our processing of your personal data violates data protection law (cf. Article 77 GDPR). The data protection supervisory authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit NRW (LDI NRW), Postfach 200444, 40102 Duesseldorf, Germany.

IV. Purposes of data processing, legal basis and storage period

1. Accessing our website/log files

When you access our website, system-related information is collected and stored in server log files ("log files") which the browser automatically transmits to us. These are:

• IP address of the retrieving terminal device,
• Date and time of access,
• Name and URL of the retrieved file,
• Referrer URL (website from which the access was made) and accessed links,
• Information about the type of browser, the version used and, if applicable, the operating system you are using.

This data cannot be assigned to a specific person; it is not possible for us to draw conclusions about the identity of visitors to our website. The data is stored separately from other personal data; it is not merged with other data. We process this data on the basis of Article 6 (1)(f) GDPR for the delivery of the content on our website as well as to ensure the functionality of our information technology systems, to optimise our website and to evaluate system security and stability.

The data is stored for a period of 16 days and then deleted.

2. Cookies

Our website uses cookies. These are small text files that are stored on your terminal device and that your browser saves. Cookies do not damage your device and do not contain any viruses. They serve the purpose of making it easier for you to navigate through our services and enable the website to be displayed correctly. You also have the option of accessing our website without cookies. To do this, set your browser to exclude the acceptance of cookies. However, we would like to point out that you may not be able to use all the functions of our website as a result. Cookies that have been placed can be deleted at any time in the security settings of your browser.

a) Essential cookies

The use of "essential" or "technically necessary" cookies takes place in order to enable core functions of the website. In this respect, we use the:

Usercentrics consent management platform

We use the consent management service of Usercentrics GmbH, Sendlinger Strasse 7, 80331 Munich, Germany ("Usercentrics") for our cookie management. In this respect, we refer to our obligation to comply with legal requirements when using cookies and the proof thereof (storage of consent), Article 6 (1)(c) GDPR.

Collected or processed:

• Date and time of the visit
• Device information
• Browser information
• Anonymised IP address
• Opt-in and opt-out data

Cookies that have been placed are deleted automatically after the end of your visit. The consent data (consent given via the consent tool and, if applicable, revocation of consent) is stored by Usercentrics GmbH and retained for three years. After that, the data is immediately deleted.

b) Functional cookies

The "functional" cookies are used to analyse the use of the website, to optimise our Internet services or to provide you with a better user experience. If you consent to the use of cookies for analysis purposes or to improve the user experience within the scope of consent management, we invoke your consent for their use in accordance with Article 6 (1)(a) GDPR. Further information on the data used for analysis purposes and thus processed in the course of this can be found below:

Authorisation procedure via DocCheck

We use the DocCheck Login of the provider DocCheck Community GmbH, Vogelsanger Strasse 66, 50823 Cologne, Germany ("DocCheck") as an authorisation procedure on our website. We use this procedure to comply with our legal obligation, according to which certain content on our website may only be made accessible to professionals (after prior registration and authentication). In this respect, we refer when processing data to Article 6 (1)(c) GDPR.

Registration is carried out on the DocCheck servers. Usernames and passwords are also verified on these servers. When using the DocCheck login, DocCheck processes your data, starting from our website, which has integrated the login via "embed" or iFrame. The following data is collected or processed:

• IP address
• Access date
• Access time
• Referrer URL
• Information about hardware and software used (e.g. browser properties, device information such as resolution)

This log data is not used to draw conclusions about your person; it is used to ensure the correct display of the page or iFrame content and/or the security of the DocCheck services. Cookies placed for this purpose are deleted automatically after the end of your visit.

Further information on data processing by DocCheck is available at http://info.doccheck.com/de/privacy/. 

OpenStreetMap

We have integrated the OpenStreetMap map function on our website. This is a service provided by the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom. This allows us to show you interactive maps directly on the website, allowing you to use them comfortably.

By using this map function, data is forwarded to OpenStreetMap and processed there.

The following data is collected or processed:

• IP address
• Browser and device type
• Operating system
• Location information
• Date and time of your request

The data is deleted as soon as it is no longer required for the purpose of processing.

Further information on data processing by OpenStreetMap is available from

https://wiki.osmfoundation.org/wiki/Privacy_Policy

3. Your contact with us

If you send us enquiries via the contact options offered on our website (post, e-mail, telephone or via the contact form), your details including the contact data you have provided (name, e-mail address and, if applicable, address and/or telephone number) will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The legal basis is Article 6 (1)(b) and (1)(f) of the GDPR. Legitimate purposes are for processing and answering user requests.

After processing your contact enquiry, we delete the data unless this is necessary for processing contractual relationships with you or we are legally obliged to retain the data beyond this.

V. Sharing of personal data with third parties

Your data will not be passed on to third parties – unless expressly explained in Section IV. In particular, we do not share your data with recipients located outside the European Union or the European Economic Area, with the possible exception of processing operations described in Section IV.

In some cases, we use external service providers for the processing of personal data within the scope of commissioned processing pursuant to Article 28 GDPR (in particular IT service providers, hosting). These service providers are carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. We operate our website in the cloud of Host Europe GmbH.

Your data will only be disclosed, e.g. to supervisory authorities and law enforcement agencies, within the framework of legal regulations if it is necessary for the prevention and detection of fraud and other criminal offences or to ensure the security of our data processing systems. The legal basis for this is Article 6 (1)(c) GDPR, i.e. the fulfilment of legal obligations, and the protection of our legitimate interests according to Artice 6 (1)(f) GDPR. Legitimate interest is ensuring the security of our data processing systems.

VI. Links to third party websites

We link to websites of other providers not affiliated with us (third parties). We would like to point out that we have no influence on what data is processed by these providers when you as a user click on these links. As data processing by third parties is beyond our control, we cannot accept any responsibility for this. Further information on the processing of data by these providers can be found in the respective data protection information.

VII. Information regarding data security

We secure your personal data processed by us against loss, destruction, access, alteration or dissemination by unauthorised persons by taking appropriate technical and organisational measures to ensure an adequate level of security and confidentiality of the personal data. These measures take into account the state of the art, the cost of their implementation, the nature of the data processed and the risk involved in the processing.

For reasons of security and to protect the transmission of confidential content, such as the enquiries that you send to us as the operator of the site, this website uses SSL or TLS encryption. If SSL or TLS encryption is activated, the data you send to us cannot be intercepted by third parties.

Please note that data on the Internet generally cannot always be transmitted securely. Especially in e-mail traffic, protection cannot be guaranteed when exchanging data. We ask you not to send sensitive data (including health-related aspects) to us by e-mail. 

VIII. Adaptation of the information on data processing

We will revise our information on the processing of personal data from time to time in order to adapt it to the state of the art or to changes in the law. We therefore recommend that you regularly inform yourself about changes here. The current status is November 2022.