Data protection
The protection of your personal data is very important to us. Therefore, we process your data exclusively on the basis of the statutory regulations.
This information describes how Institut AllergoSan Pharmaceuticals Research & Sales GmbH, its affiliates, and those medical companies that are served or assisted by one of the aforementioned companies ("we") process personal data and personal interests collected from you ("data").
1. Processing your data
All data that you provide us with when you conclude a contract with us (e.g. purchase one of our products) or make a request to us (e.g. question about a product or of personal interest) will be used by us - unless consent for more extensive data processing has been given - exclusively for those purposes that are necessary for the fulfillment of the contract or to answer your request (Art. 6 (1) (b) DSGVO (General Data Protection Regulation)).
Only if you give your consent in accordance with Art. 6 (1) (a) GDPR, will we use your data, which you make available to us with this consent, also for other purposes, such as the sending of scientific information in newsletters etc. The exact intended purpose results from the respective declaration of consent. Your consent to the processing of your data is voluntary and you can refuse this consent without adverse consequences for you.
It is possible to revoke your consent at any time, although we point out that even after this revocation, all the data processing operations that may be required for the fulfillment of contracts or legal obligations may continue to be performed by us. Until we receive your revocation your data may be lawfully processed by us.
If you revoke your consent to the processing of your data, you will not be disadvantaged and we will no longer provide you with any promotional information.
2. Transmission of your data to recipients
Your data will be transmitted with your consent to the companies named in your declaration of consent that are affiliated with us, as well as to medical companies supervised or supported by us (see www.allergosan.com/datenschutz for an up-to-date list). These companies may only process your data to the extent that you have consented to.
In addition, we outsource some data processing to external service providers. These so-called order processors will only be able to access your data to the extent necessary for their service provision. Order processors are also subject to the strict rules of data protection law and are bound by the processing purposes that we contractually mandate, so they may not use your data for other purposes.
We make your data accessible to the following order processors:
- IT service providers used by us (e.g. storage space)
- Logistics service providers (e.g. parcel services)
- Communication service provider (e.g. fax sending, letter delivery)
- Credit institutions for the purpose of payment
- Tax advisors
- Legal representatives or courts in the event
Many of these recipients are located outside the European Union (EU) or process your data there. We only transfer your data to countries for which the EU Commission has decided that they have an appropriate level of data protection comparable to the EU ("Privacy Shield").
Your data will not be disclosed to third parties for their commercial use unless you expressly consent to such disclosure in a separate statement.
3. Storage time
Your information will be retained by us only for as long as we reasonably deem necessary to achieve the above purposes and as permitted by applicable law. In any case, we store your data as long as there are statutory retention requirements or limitation periods of potential legal claims have not yet expired.
4. Data processing when using our website
a.Storage of access data in server log files
You can visit our websites (see www.allergosan.com/datenschutz for an up-to-date list) without giving any personal information. We only store access data in so-called server log files, such as the name of the requested file, the date and time of the retrieval, the amount of data transferred and the requesting provider. These data are evaluated solely to ensure trouble-free operation of the site and to improve our offer and do not allow us to draw any conclusions about you. These websites do not process any personal data without your active involvement. If we collect personal data (e.g. name, address, e-mail address), this takes place always on a voluntary basis and requires the active completion and sending of a form. This data is only used for the direct sending of information by us, expressly desired by you (the exact purpose is derived from the respective declaration of consent).
b. Contact with us
If you contact us via the contact form on the website or by e-mail, your data will be used exclusively to process your request and will not be processed without your explicit consent).
c. Cookies
Our website uses so-called cookies These are small text files that are stored on your device using the browser. They do not cause any harm. We use cookies to make our offer user-friendly and customized to your interests. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow this only in individual cases. Disabling cookies may limit the functionality of our website.
d. Web Analysis Tools
Our website uses features of various web analytics services, which we describe below. We have concluded an appropriate data processing contract with the providers. The data processing is conducted on the basis of the legal regulations of the § 96 (3) Telecommunications Law as well as the art 6 (1) a) (consent) and / or f (legitimate interest) of the General Data Protection Regulation. Our concern in the sense of the GDPR (legitimate interest) is the improvement of our offer and our website.
i. Google Analytics
Google Analytics is a web analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies, which enables an analysis of how users use the website. Your IP-address will be collected but immediately pseudonymized (by deleting the last 8 bits). As a result, only a rough localization is possible. The information generated thereby is transmitted to the server of the provider and stored there. Google uses this information on our behalf to help, amongst others, to evaluate your use of our websites and compile reports on website activity. Google keeps the user data for 50 months. You can prevent this by setting up your browser so that no cookies are stored. In addition, you can prevent the collection of the cookie generated and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the http://tools.google.com/dlpage/gaoptout?hl=de available browser plugin. Further information about terms of use and data protection by Google can be found at http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.
ii. Google Ads
We use Google Ads, an analytics service provided by Google, and, as part of that, conversion tracking. Google Ads places a "conversion cookie" on your device when you click on an ad displayed by Google. These cookies lose their validity after 30 days and are not for personal identification. If you visit certain pages on our site, Google and we may recognize that you have clicked on the ad and have been redirected to this page. The information obtained through conversion cookies is used to generate statistics that tell us the total number of users who have clicked on the ad displayed by Google and viewed a page that has a conversion tracking tag.
In addition to conversion tracking, we also use remarketing, shared-interest audiences, custom-shared audiences, in-market audiences, similar audiences, and demographic and geographic targeting.
Google Remarketing enables us to reach users who have already visited our website and present our advertising according to their interests. Google AdWords also uses user behavior on Google Network ("Display Network") websites over the last 30 days, and the contextual search engine to determine what common interests and features users of our website have. Based on this information, AdWords will then find new potential customers for marketing purposes whose interests and characteristics are similar to those of users of our website.
Further information about Google AdWords Terms of Service and Privacy, can be found at http://www.google.com/policies/technologies/ads/ .
iii. Hotjar
To improve the user experience on our websites, we use the software Hotjar (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). By using Hotjar we can measure and evaluate user behavior (mouse movements, clicks, scroll height, etc.) on our website. For this purpose, Hotjar places cookies on users' devices and save users’ data e.g. browser information, operating system, retention time on the page, etc. Further information about data processing by Hotjar can be found atwww.hotjar.com/privacy.
iV. HubSpot
We also use the service, HubSpot for various reasons. HubSpot is a US software company with a branch office in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500. HubSpot is an integrated software solution that allows us to cover different aspects of our online marketing. These include: Email marketing, social media publishing & reporting, reporting, contact management (e.g. user segmentation & CRM), landing pages and contact forms.
Our registration service allows visitors to our website to learn more about our company, download content and make their contact information and other demographic information available. This information and the content of our website will be stored on servers of our software partner, HubSpot. They may be used by us to get in contact with visitors of our website and to determine which of our company’s services are of interest to them. All information collected by us is subject to this privacy policy. We use all information collected exclusively to optimise our marketing measures.
More information about the HubSpot privacy policies: https://legal.hubspot.com/privacy-policy?__hstc=126461458.d172fb6ce77416dc0204e0edccefeb00.1619080587812.1619080587812.1619080587812.1&__hssc=126461458.1.1619080587813&__hsfp=3707404404
More information from HubSpot about the EU privacy policies: https://legal.hubspot.com/data-privacy?__hstc=126461458.d172fb6ce77416dc0204e0edccefeb00.1619080587812.1619080587812.1619080587812.1&__hssc=126461458.1.1619080587813&__hsfp=3707404404
You can find more information about the cookies used by HubSpot at: https://knowledge.hubspot.com/articles/kcs_article/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser?__hstc=126461458.d172fb6ce77416dc0204e0edccefeb00.1619080587812.1619080587812.1619080587812.1&__hssc=126461458.1.1619080587813&__hsfp=3707404404
The following data in particular may be collected and processed by HubSpot as part of the effort to optimise our marketing measures:
- Geographic position
- Browser type
- Navigation information
- Referrer URL
- Performance data
- Information about the use of the application
- Mobile app data
- Registration information for the HubSpot subscription service
- Files displayed locally
- Domain name
- Pages viewed
- Aggregated use
- Version of the operating system
- Internet service provider
- IP address
- Device identifier
- Duration of visit
- Where the application was downloaded from
- Operating system
- Events that occur within the application
- Times of access
- Click stream data
- Device model and version
We will also use HubSpot in the future to provide contact forms. We use the HubSpot service to make online forms available to you. To do this, we share your data with HubSpot who processes the data exclusively on our behalf. Please see the corresponding HubSpot privacy statement. Please note here: If you contact us using contact forms, personal data may be sent to service providers in third-party countries. The security of the transmission is generally safeguarded using standard data protection clauses which ensure that the processing of personal data is subject to a level of security corresponding to that of the GDPR. If the standard data protection clauses are an insufficient guarantee to establish an adequate level of security, your acknowledgement of the privacy statement as part of the contact forms is considered consent in the context of Art 49 (1) (a) GDPR which justifies a data transfer to third-party countries.
If you would prefer that the mentioned data was not collected and processed by HubSpot, you can refuse your consent or revoke it at any time with effect for the future. The personal data will be stored for as long as they are required to fulfil the purpose of processing. The data will be deleted as soon as they are no longer required to achieve the purpose.
e. Newsletter
You have the opportunity to subscribe to our newsletter via our website. For this we need your declaration that you agree to receive the newsletter. In addition, we collect and process information voluntarily provided regarding personal data and areas of interest in order to provide you with targeted information. Subscription to the newsletter can be canceled at any time.
5. Your rights in connection with your data
Under current data protection laws, you are, among other things, entitled (under the conditions of applicable law),
- to request information as to whether and what data we have stored about you and to obtain copies of this data,
- to demand the rectification of or addition to your data that is incorrect or incomplete or not processed in accordance with the law,
- to demand the deletion of your data, provided that no legally recognized reason against deletion exists (legal retention periods),
- to demand we restrict the processing of your data under the following conditions:
- you dispute the accuracy of your personal information,
- instead of deleting illegally processed data, you demand the use of it be restricted,
- you need processed data to assert, exercise or defend legal claims,
- when exercising the right of opposition, for the duration of the clarification as to whether legitimate reasons require further data processing,
- in certain circumstances to object to the processing of your data or to revoke the prior consent given for processing (the lawfulness of any data processing we have performed until your withdrawal is not affected),
- to request data transmission,
- to know the identity of third parties to whom your data will be transmitted, and
- to file a complaint with the competent data protection authority.
6. Our contact data
If you have questions about the processing of your data or if you want to exercise your rights, please contact us:
In the case of requests for information, we request you to send a copy of an official photo ID for the purpose of identification.
I have read, understood and accepted the privacy statement.
