Dermapharm Holding SE Privacy Policy

We, the operators of the Dermapharm Holding SE website, take the protection of your personal data very seriously and adhere strictly to data protection regulations (DS-GVO, BDSG, TMG and other legal provisions). The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as name, postal address, email address or telephone number, but also usage data such as your IP address.

We would like to inform you below about how we handle your personal data.

1. Responsible body and data protection officer

The website ir.dermapharm.de is an offer of Dermapharm Holding SE. Dermapharm Holding SE is therefore the responsible party within the meaning of Art. 5 II DS-GVO.

UYou can reach our data protection officer at datenschutz@dermapharm.com and at the address given in the imprint.

2. Collection, use and disclosure of personal data

We take precautions to protect your personal data from loss, destruction, falsification, manipulation and unauthorised access. The legal data protection regulations are of course observed. As a matter of principle, we do not pass on your data to third parties unless you have consented to this. However, for certain areas (e.g. the hosting of our website) we are dependent on the use of service providers, who we usually oblige to comply with the legal requirements by means of order processing. We also reserve the right in exceptional cases, e.g. in the event of enquiries about our products, to pass on your personal data to the currently notified and responsible manufacturer. Our employees are bound to confidentiality. If data is passed on to service providers within the scope of order processing, these service providers are also obliged to maintain confidentiality and are bound by the data protection laws, other legal regulations and this data protection declaration.

3. External links

This website may contain links to external websites which are not covered by this data protection declaration. The operator of the website provides access to the use of these external internet offers (§8 Telemedia Act), but is not responsible for their content, as he does not initiate the transmission of the information, does not select the addressee of the transmitted information and has not selected, changed or temporarily stored the transmitted information. When you leave the website, it is recommended that you carefully read the privacy policy of any other website.

4. Purposes and scope of data processing when visiting the website

4.1 Access to the website

Each time a user accesses a page of our website and each time a file is retrieved, access data about this process is stored in a log file on our server.

Each record consists of:

We store IP addresses in server log files for a period of 21 days.

This data is stored for reasons of data security in order to ensure the stability and operational security of our website.

The legal basis for this is Art. 6 para. 1 lit. f DS-GVO.

4.2 Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.

4.2.1 Use of session cookies

Our website uses so-called session cookies. These are used to store information that can associate online activities with a single browser session. This allows your terminal device to be recognised when you return to our website. These cookies are automatically deleted when you close your web browser.

Session cookies are necessary for the proper operation of our website and are used to store your progress within a session to make your browsing experience easier.

The legal basis for this is Art. 6 para. 1 lit. f DS-GVO.

4.2.2 Integration of Bing Maps

We integrate the maps of the "Bing Maps" service of the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA. In order to provide the map material, technically necessary data is processed by Google for this purpose.

The integration of Bing Maps serves the purpose of designing the website in line with requirements, in particular the presentation of the Dermapharm group of companies and in order to be able to offer you convenient map functions. The legal basis for this is therefore Art. 6 para. 1 lit. f DS-GVO.

Through Bing Maps, data about your use of this website may be transmitted to and used by Microsoft. You can prevent such data transmission by deactivating "Javascript" in your browser. However, we would like to point out that in this case you will not be able to use Bing Maps or only to a limited extent.

Microsoft Corporation is responsible for further data processing. Further information can be found at unter https://www.microsoft.com/en-us/maps/product/terms-april-2011 und
https://privacy.microsoft.com/de-de/privacystatement.

4.2.3 Use of Google Analytics

We use Google Analytics to analyse website usage. The data obtained from this is used to optimise our website and advertising measures.

Google Analytics is a web analytics service operated and provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google processes website usage data and displays this data to us in statistical form. Google is contractually committed to measures to ensure the confidentiality of the processed data and is responsible for further data processing.

During your visit to the website, the following data, among others, is recorded:

This data is transmitted to a Google server in the USA. Google Analytics stores cookies in Your web browser for a period of two years since your last visit. These cookies contain a Randomly generated user ID with which you can be recognized on future website visits. The Recorded data are saved together with the randomly generated user ID, which is what the evaluation pseudonymous user profiles. These user-related data are automatically saved after 14 months deleted. Other data are stored indefinitely in aggregated form. You should be with the capture If you do not agree, you can do this by installing the Browser add-ons for Prevent deactivation of Google Analytics .

The legal basis for the use of the service is your consent according to Art. 6 para. 1 lit. a DS-GVO. You can revoke your consent at any time here.

For more information, please visit https://policies.google.com/privacy?hl=de.

4.3. Further data processing on our website

4.3.1 Contact by e-mail, telephone, fax

If you contact us by e-mail, we will only use your personal data (name, e-mail address/telephone number/fax number, message text) to contact you. We only use your contact data to process your enquiry. Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the circumstances indicate that the matter in question has been conclusively clarified.

The processing is based on Art. 6 para. 1 lit. f DS-GVO.

4.3.2 Use of the contact form

When using the contact form, we collect your personal data (name, telephone number, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you. We only use your data to process your enquiry. Your data will then be deleted unless you have consented to further processing and use.

The processing is based on Art. 6 para. 1 lit. f DS-GVO.

4.3.3 Registration for the newsletter via form

On our website, you may be able to subscribe to newsletters containing general and product information, provided that you have expressly consented to this.

We need the following data from you:

In addition, you can optionally enter the following data:

The processing is based on Art. 6 para. 1 lit. a DS-GVO with your consent. When you register for the newsletter, the data from the input mask is transmitted to us. To receive the newsletter, it is sufficient to enter an e-mail address and the preferred language. Your consent is given within the framework of a so-called double opt-in. In this context, the IP address of the calling computer and the date and time of registration are also logged to document your consent. You have the option to revoke your consent with effect for the future at any time and to unsubscribe from our newsletter, e.g. via the unsubscribe option provided in the newsletter.

5. Changes to our privacy policy

In order to ensure that our data protection declaration always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, e.g. new services. The new data protection statement will then apply the next time you visit our website.

6. Rights of the data subject

Every data subject has the right to information pursuant to Art. 15 DS-GVO, the right to rectification pursuant to Art. 16 DS-GVO, the right to deletion pursuant to Art. 17 DS-GVO, the right to restriction of processing pursuant to Art. 18 DS-GVO, the right to object pursuant to Art. 21 DS-GVO as well as the right to data portability pursuant to Art. 20 DS-GVO, insofar as this does not conflict with any statutory provisions (in particular pursuant to Art. 15, 17 DS-GVO, Sections 34 and 35 BDSG).

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data which is carried out on the basis of Article 6(1)(e) DSGVO (data processing in the public interest) and Article 6(1)(f) DSGVO (data processing on the basis of a balance of interests).

You have the right to object to the processing of your data for the purpose of direct marketing at any time. This also applies to profiling, insofar as it is connected with such direct advertising.

To exercise your rights, simply send us a letter by post or e-mail. You can reach our data protection officer at datenschutz@dermapharm.com and at the address given in the imprint.

If you are of the opinion that the processing of your personal data is not lawful, you can lodge a complaint with a competent data protection supervisory authority (Article 77 DS-GVO in conjunction with Section 19 BDSG).

7. Data transfer to third countries

No data is transferred to countries outside the European Union (so-called third countries).

8. Use of automated decision making or profiling

As a matter of principle, we do not use fully automated decision-making or profiling pursuant to Article 22 of the GDPR. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law.

Status of the data protection declaration: 18.02.2020