R-Pharm Germany GmbH
Heinrich-Mack-Str. 35
89257 Illertissen

Telefon: +49 7303 12-0
https://r-pharm.de

Please select your language.

Bitte wählen Sie Ihre Sprache.

  • Druckansicht

Privacy Policy of R-Pharm Germany GmbH

Data protection declaration according to the European General Data Protection Regulation (EU) 2016679 (EU-GDPR)

1. Name and address of the controller

The controller within the meaning of the EU GDPR, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

R-Pharm Germany GmbH
Heinrich-Mack-Str. 35
D-89257 Illertissen
Phone:      +49 (7303) 730312 - 0
E-Mail:      r-pharm-germany@r-pharm.com

2. Name and address of the data protection officer

The data protection officer of the controller is:

Mr. Christoph Larsen
DS Privacy Policy Christoph Larsen
Nordring 35
D-51647 Gummersbach
Germany
Phone: +49 (22 61) 56 09 20
E-Mail: datenschutz@r-pharm.com

3. External Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. These may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions in relation to this data.

We use the following hoster:

New Media Muennich GmbH
Hauptstraße 68
D-02742 Friedersdorf, Germany

Order processing

We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

4. Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that in these countries no level of data protection comparable to that of the EU can be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

5. Use of cookies

The Internet pages of the R-Pharm Germany GmbH use cookies. Cookies are data that are stored by the Internet browser on the user's computer system. The cookies can be transmitted to a page when a page is called up and thus enable an assignment of the user. Cookies help to simplify the use of websites for users.

It is possible at any time to object to the setting of cookies by changing the setting in the Internet browser accordingly. Lawte Cookies can be deleted. It should be noted that if cookies are deactivated, not all functions of our website may be fully usable.

6. Creation of log files

Each time the website is accessed, R-Pharm Germany GmbH collects data and information through an automated system. These are stored in the log files of the server.

The following data may be collected:

  1. Information about the browser type and version used
  2. The user's operating system
  3. The user's Internet service provider
  4. The IP address of the user
  5. Date and time of access
  6. Websites from which the user's system reaches our website (referrer)
  7. Websites accessed by the user's system via our website

The processing of the data serves to deliver the contents of our website, to ensure the functionality of our information technology systems and to optimize our website. The data of the log files are always stored separately from other personal data of the users.

7. Ways to contact us

On the website of R-Pharm Germany GmbH there is a contact form that can be used for electronic contact. Alternatively, it is possible to contact us via the e-mail address provided. If the data subject contacts the controller via one of these channels, the personal data transmitted by the data subject will be automatically stored. The storage serves solely for the purposes of processing or contacting the data subject. The data will not be passed on to third parties.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – statutory retention periods – remain unaffected.

8. Routine deletion and blocking of personal data

The controller processes and stores personal data of the data subject only for as long as this is necessary to achieve the purpose of storage. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other regulations to which the person responsible for the processing is subject.

As soon as the storage purpose ceases to apply or a storage period prescribed by the regulations expires, the personal data will be routinely blocked or deleted.

9. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the EU GDPR and you have the following rights vis-à-vis the controller:

9.1 Right

You can request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing exists, you can request information from the controller about the following information:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data that are processed;
  3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
  4. the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
  5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. all available information on the origin of the data, if the personal data are not collected from the data subject;

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate guarantees pursuant to Art. 46 EU GDPR in connection with the transfer.

9.2 Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.

9.3 Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of your personal data:

  1. if you contest the accuracy of the personal data concerning you for a period of time that enables the controller to verify the accuracy of the personal data;
  2. the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
  3. the controller no longer needs the personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims, or
  4. if you have objected to the processing pursuant to Article 21 (1) of the EU GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

If the processing of your personal data has been restricted, this data may only be processed – apart from its storage – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

9.4 Right to erasure

9.4.1. You may request the controller to delete the personal data concerning you without undue delay and the controller is obliged to delete this data without undue delay if one of the following reasons applies:

  1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent on which the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a EU GDPR was based, and there is no other legal basis for the processing.
  3. You object to the processing in accordance with Article 21 (1) of the EU GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21 (2) EU GDPR.
  4. The personal data concerning you has been unlawfully processed.
  5. The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
  6. The personal data concerning you have been collected in relation to information society services offered in accordance with Article 8 (1) of the EU GDPR.

9.4.2. Where the controller has made the personal data concerning you public and is obliged pursuant to Article 17(1) of the EU GDPR to erase them, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the erasure by such controllers that you, as the data subject, have requested the erasure by such controllers of any links to such personal data or of copies or replications of such personal data.

9.4.3. The right to erasure does not exist if the processing is necessary

  1. to exercise the right to freedom of expression and information;
  2. to comply with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 EU GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) EU GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
  5. to assert, exercise or defend legal claims.

9.5 Right to information

If you have asserted the right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis the controller to be informed about these recipients.

9.6 Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data have been provided, provided that:

  1. the processing is based on consent pursuant to Art. 6 para. 1 lit. a EU GDPR or Art. 9 para. 2 lit. a EU GDPR or on a contract pursuant to Art. 6 para. 1 lit. b EU GDPR and
  2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

9.7 Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 lit. e or f EU GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services, you have the possibility – notwithstanding Directive 2002/58/EC – to exercise your right to object by automated means using technical specifications.

9.8 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

9.9 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of your personal data infringes the EU GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the EU GDPR.

10. Disclosure of data to third parties

Google Analytics

This website uses Google Analytics including advertising functions and reports according to demographic characteristics and interest. Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly, see also https://tools.google.com/dlpage/gaoptout/; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Google Maps

This website uses Google Maps to display a site plan. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.  By using this website, you agree to the collection, processing, and use of the automatically collected data and the data entered by you by Google, one of its representatives, or third-party providers.

The terms of use for Google Maps can be found under Terms of use for Google Maps. Detailed details can be found in google.de's Privacy Center: Transparency and Choices and Privacy Policy.

facebook Social Plugins

We use components of the provider facebook.com on our site. Facebook is a service of facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.  With each individual call-up to our website, which is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from facebook. Through this process, facebook is informed which specific page of our website is currently being visited by you. If you visit our site and are logged in to facebook during this time, facebook recognizes which specific page you are visiting through the information collected by the component and assigns this information to your personal account on facebook. Further information can be found in Facebook's privacy policy under https://www.facebook.com/about/privacy/. If you do not want Facebook to associate the data collected via our website directly with your profile, you must log out of the corresponding service before visiting our website. You can also completely prevent the plugins from loading with add-ons for your browser, e.g. with the script blocker "NoScript". In addition, external tools are available on the market with which Facebook social plugins with add-ons for all common browsers can be blocked https://adblockplus.org/de/. An overview of the Facebook plugins can be found under https://developers.facebook.com/docs/plugins/.

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time you access a page of this website that contains LinkedIn elements, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to assign your visit to this website to you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or their use by LinkedIn.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en

Further information can be found in LinkedIn's privacy policy at:

https://www.linkedin.com/legal/privacy-policy.

Instagram Social Plugins

We use components of the provider Instagram on our site. Instagram.com is a service of Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this regard and setting options for the protection of your privacy can be found in Instagram's privacy policy: https://help.instagram.com/155833707900388/.  If you do not want Instagram to associate the data collected via our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g., with the script blocker "NoScript" (http://noscript.net/).

YouTube plugins

We use the provider YouTube for the integration of videos. YouTube is operated by YouTube LLC with its principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

On some of our websites we use plugins from the provider YouTube. When you access the Internet pages of our website provided with such a plugin – for example, our media library – a connection to the YouTube servers is established and the plugin is displayed. This transmits to the YouTube server which of our Internet pages you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. When using the plugin, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of the companies.

Further information on data processing and information on data protection by YouTube (Google) can be found under https://www.google.de/intl/de/policies/privacy/.

Handling of applicant data

We offer you the opportunity to apply to us (e.g., by e-mail, post or via online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing, and use of your data is carried out in accordance with applicable data protection law and all other legal provisions and that your data will be treated as strictly confidential.

Scope and purpose of data collection

If you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes in the context of job interviews, etc.), insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.

If the application is successful, the data you submit will be stored in our data processing systems based on § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.

Retention period of data

If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right to store the data transmitted by you with us based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application).

The data is then deleted, and the physical application documents are destroyed. The storage serves in particular for purposes of proof in the event of a legal dispute. If it is apparent that the data will be required after expiry of the 6-month period (e.g., due to an imminent or pending legal dispute), deletion will only take place if the purpose for further storage no longer applies.

Longer storage can also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.

Inclusion in the applicant pool

If we do not make you a job offer, it may be possible to include you in our applicant pool. In the event of admission, all documents and information from the application will be transferred to the applicant pool to contact you in the event of suitable vacancies.

Admission to the applicant pool takes place exclusively based on your express consent (Art. 6 para. 1 lit. a GDPR). The submission of consent is voluntary and bears no relation to the ongoing application process. The data subject can revoke his consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after the consent has been given.

11. Legal basis of processing

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU-DSGVO as legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b EU-DSGVO as legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c EU-DSGVO as legal basis.

If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-DSGVO as legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f EU-DSGVO as the legal basis for the processing. The legitimate interest of our company lies in the execution of our business activities.

12. Duration of storage of personal data

Personal data will be stored for the duration of the respective statutory retention period. After expiry of the period, the data will be routinely deleted, unless there is a need for the initiation or fulfilment of the contract.

Quelle: http://germany.r-pharm.com/Privacy_Policy_of_R-Pharm_Germany_GmbH

Manage your consents