Data protection statement for the website of Helago-Pharma GmbH & Co. KG

General

Personal data will be generated when you visit our websites. These are data that are required in order to enable you to use our websites or to enable us to consider your settings. Apart from this, they are information that you provide to us via the contact options offered on these pages.

We use these data in order to ensure proper operation of our website and to answer your queries.

Below, we inform you concerning the data collected on our website and the purposes for which they are processed. We will inform you about the use of "cookies" and the analysis tools used on our websites, and the option for approving or rejecting them. We will inform you concerning your rights and the contact details of our data protection officer at the end of the data protection statement.

Cookies

We use cookies. Cookies are text files that are filed and stored on a computer system via a web browser.

Many websites and servers use cookies. Many cookies contain a cookie ID. A cookie ID in a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be associated with the specific web browser in which the cookie was stored. This enables the visited websites and servers to distinguish your individual browser from any other web browser that contains any other cookies. A specific web browser may be recognised and identified by a unique cookie ID.

By use of cookies, we may provide users of this website with user-friendly services that would be impossible without setting the cookie. A cookie may optimise the information and offers on our website within the meaning of the user. Cookies enable us, as mentioned before, to recognise the users of our website. The purpose of this recognition is making it easier for users to use our website. For instance, the user of a website that uses cookies does not have to enter his access data again every time when he visits the website because this is taken care of by the website and the cookie stored on the user's computer system.

You may prevent setting of cookies by our website at any time by making the corresponding setting in the web browser used and thereby permanently object to setting of cookies. Furthermore, cookies already set may be erased at any time via a web browser or other software programs. This is possible in all common web browser. If the data subject deactivates setting of cookies in the web browser used, not all functions of our website may be fully usable.

Server log files

The provider of our website will automatically collect and store information in server log files that your browser submits to us automatically. The recorded data may include

(1)   browser types and versions used,

(2)   the operating system used by the accessing system,

(3)   the website from which an accessing system reaches our website (referrers),

(4)   sub-webpages that are controlled via an accessing system on our website,

(5)   the data and time of an access to the website,

(6)   an internet protocol address (IP address),

(7)   the internet service provider of the accessing system and

(8)   other similar data and information that serve to defend against attacks on our information-technical systems.

We do not draw any conclusions concerning you when using these general data and information. Instead, this information is needed to

(1)   properly deliver the contents of our website,

(2)   optimise the contents of our website and advertisements for it,

(3)   ensure permanent function of our information-technology systems and the technology of our website

(4)   provide the criminal prosecution authorities with the information required for criminal prosecution in case of a cyberattack.

Contact form

Due to legal regulations, our website contains information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If you contact us by e-mail or via a contact form, the personal data you provide will be automatically stored. Such personal data transmitted on a voluntary basis will be stored for the purposes of processing or contacting you. There is no disclosure of this personal data to third parties.

Application options

We collect and process the personal data of applicants for the purpose of processing the application procedure. Processing may also take place electronically. This is specifically the case if an applicant transmits the corresponding application documents to us electronically, e.g. by email or via a web form on the website.

If we conclude an employment contract with an applicant, the transmitted data will be saved for the purpose of the employment, under observation of the legal requirements. If we do not conclude an employment contract with the applicant, the application documents will be deleted automatically six months after disclosure of the negative decision if deletion is not opposed by any other legitimate interests on our side.

Other legitimate interests in this meaning shall include evidence obligations in proceedings under the general law on equal treatment (Allgemeines Gleichbehandlungsgesetz; AGG). If any applicants and employers are interested in being included in an applicant pool and accordingly in longer-term storage of the data, the applicant must give his or her consent to this. In such a case, the applicant will be informed of the data protection statement of the company and the specific provisions of the company's applicant data protection. Subsequently, a written declaration of consent to processing activities is collected for the purpose of the application to ensure documentation and the applicant will at the same time be informed that he or she may revoke the consent at any time, effective for the future.

Google Maps

In the context of our Internet offer, for example to find branches and/or locations of our company, interactive maps of the map service "Google Maps API" of Google LLC are used.

The operating company is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA. When using this service, information about the use of our website as well as your IP address are transmitted to Google LLC. servers in the USA and stored.  The EU Commission's adequacy decision 2016/1250 determines an appropriate level of data protection for the USA due to the EU-US Privacy Shield.

In principle, Google undertakes not to transmit any information to third parties in its own data protection declaration, however, exceptions are possible. We can not exclude the transfer of your data to third parties, for example in the case of legally required transfers or the processing of data by third parties on behalf of Google LLC. You can find Google's privacy policy here: http://www.google.com/policies/privacy/.

If you do not wish the data to be transmitted, you can deactivate the map service and thus prevent the transfer of data to Google LLC. To do this, you must deactivate the JavaScript in the browser.

Social media

YouTube

We have integrated components of the service YouTube on our website. YouTube is an internet video portal that enables video publishers to publish video clips free of charge and other users to view, evaluate and comment on them free of charge as well. YouTube permits publication of any kind of videos, so that complete film and TV programs, as well as music videos, trailers or videos produced by the users directly can be called up via the internet portal.

The operator company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

With every call of an individual page of our website on which a YouTube component (YouTube video) was integrated, the web browser on your system will automatically be caused by the respective YouTube component to download a presentation of the corresponding components from YouTube. Within the context of this technical process, YouTube and Google will be informed of which specific sub-page of our website you visit.

If you are logged in with YouTube at the same time, YouTube will recognise the specific sub-page you visit during every call of the website by you and throughout the duration of your respective stay on our website. This information will be collected by the YouTube component and assigned to your YouTube account by YouTube. If you activate any YouTube component integrated on our website, the data and information transmitted by it will be assigned to your personal YouTube user account and stored and processed by YouTube and Google.

YouTube and Google will be informed via the YouTube component that you have visited our website if you are logged in with YouTube at the same time at which you call up our website; this is done independently of whether you click the YouTube component or not.

If this kind of transmission of such information to YouTube and Google is not desired by you, you may prevent transmission by logging out of your YouTube account before calling up our website.

For further information and the applicable provisions on data protection of YouTube see https://www.google.de/intl/de/policies/privacy/.

Other providers

If any links are placed to websites of other providers beyond the information contained here, this data protection statement shall not apply to their contents. Collection of data by the operators of the respective pages is not within our knowledge or influence. Please note the data protection notes on the respective page.

• Purposes and legal basis of processing activities, processor, passing on data to third parties in third countries

We shall only use your personal data provided to us for the purposes for which they are intended. The legal basis for processing of your data may specifically be preparation and processing of a contract, advertising, quality assurance, fraud prevention or keeping statistics.

Another legal basis for processing of your data may be consent given by you for use and forwarding of your personal data. You may withdraw your consent informally again at any time.

Personal data shall only be transmitted to state facilities and authorities based on mandatory national provisions. The persons charged by us with processing of the data are obligated to secrecy and lawful processing of the data. In case of further processing of your personal data for any other purpose than the initial one, we will inform you accordingly.

We use support from external service providers (processors) for certain technical processes concerning data analysis, processing and/or storage.

Both we and the processor are obligated to comply with the technically-organisational measures according to sect. 32 GDPR and the external service provider is obligated to confidentiality in addition to this. Processing takes place only on our order and upon our instruction. Processing of your personal data beyond these processing activities shall only take place with your explicit consent or in the cases required by authority or court.

Data transmission to third countries (countries outside of the European Economic Area – EEA) shall only take place as far as this is necessary to perform the contract, required by law or if you have given your consent to this. We will inform you separately concerning any details if required by law.

Duration of data storage

We store the personal data collected by you from the time of their collection. The data collected in this manner are stored by us for the term of our business relationship, among others comprising the initiation and processing of a contract. Beyond this, we are subject to different storage and documentation obligations that result, inter alia, from the Commercial Code (Handelsgesetzbuch; HGB) or the Tax Code (Abgabenordnung; AO). The time limits stipulated there for archiving are up to ten years. Finally, the storage duration in light of the possibility of defending against legal claims is also determined according to the statutory expiration periods, e.g. usually 3 years according to §§ 195 et seqq. of the German Civil Code (Bürgerliches Gesetzbuch; BGB), and in certain cases also up to thirty years.

Rights of the data subject (information for data subjects according to chapter 3 GDPR)

You as the data subject have the following rights:

• the right to information according to sect. 15 GDPR
• the right to rectification according to sect. 16 GDPR
• the right to erasure according to sect. 17 GDPR
• the right to restriction of processing of the data to specific purposes according to sect. 18 GDPR
• the right to data portability according to sect. 20 GDPR and
• the right to object to processing of personal data according to sect. 21 GDPR.

Beyond this, you have the right to complain to a data protection authority according to sect. 77 GDPR.

Contact and data protection officer

This data privacy statement shall apply to the website of

Helago-Pharma GmbH & Co. KG

Neuhofer Weiche 48, 19370 Parchim
E-Mail: info@helago.de

Phone: +49 (0) 3871 - 63 63 32

Fax: +49 (0) 3871-63 63 99

You can reach our data protection officer as follows: