Data protection

Thank you for your interest in our company. We take data privacy seriously.

You can generally use our website without providing any personal data. If a data subject wishes to make use of services from our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will always obtain the consent of the data subject.

The processing of personal data (e.g., name, address, email address, or telephone number of a data subject) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection provisions applicable to us.

With the following privacy policy, we want to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Data subjects are also informed through this privacy policy about their rights.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most complete possible protection of personal data processed via our website. However, data transfers over the internet can generally contain security vulnerabilities. Therefore, 100 %% protection cannot be guaranteed. Consequently, any data subject can also transmit personal data to us as an alternative, e.g., by phone.

Definitions

This privacy policy is based on the definitions used by the European legislator when adopting the GDPR (Article 4 GDPR). This privacy policy is intended to be easily readable and understandable for everyone. To ensure this, we would first like to explain the terms used. This privacy policy uses, among others, the following definitions:

  • personal data“all information relating to an identified or identifiable natural person (hereinafter referred to as the „data subject“); a natural person is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
  • Affected person“any identified or identifiable natural person whose personal data are processed by the controller.
  • Processing“any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;";
  • Restriction of processing“marking of personal data that has been stored with the aim of restricting their future processing;
  • Profiling“any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements;
  • Person responsible“the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;";
  • Recipient“a natural or legal person, public authority, agency or other body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of the data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
  • Third“a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorised to process the personal data;
  • Consent“the freely given, specific, informed and unambiguous indication of the data subject's wishes by which they signify their agreement to the processing of personal data relating to them by a statement or by a clear affirmative action.

 

2. Name and contact details of the controller

This privacy policy applies to the data processing by:

Person responsibleNEOMED PHARMA GmbH, represented by Managing Director Mr. Ingo Iven, Email: neomed-robin@t-online.de, Phone: +49 (0)451 795024, Fax: +49 (0)451 792895

3. Collection and storage of personal data, as well as type and purpose of its use

When visiting the website

You can generally use our website without revealing your identity. When you access our website, your browser automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically erased:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website you are accessing from (Referrer URL),
  • browser used and, if applicable, your computer's operating system and the name of your access provider.

The data mentioned will be processed by us for the following purposes:

  • Ensuring smooth website connection setup,
  • Ensuring a comfortable experience on our website.,
  • Evaluation of system security and stability, as well as
  • for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. Further details can be found in sections 5 and 7 of this privacy policy.

b) When using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on our website. You are required to provide a valid email address so that we know who sent the inquiry and can respond to it. Further information can be provided voluntarily. It is your free choice whether you wish to enter this data using the contact form.

The data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed.

c) For orders through our website

You can place orders on our website as a guest without registering, or you can register as a customer in our shop for future orders. Registering has the advantage for you that you can log into our shop directly with your email address and password for future orders without having to re-enter your contact details.

Your personal data will be entered into an input form, transmitted to us, and stored. If you place an order through our website, we will collect the following data, both for guest orders and for registered shop accounts:

  • Salutation, First Name, Last Name,
  • a valid email address,
  • Address,
  • Phone number (landline and/or mobile)

The collection of this data is carried out,

  • to identify you as our customer;
  • to process, fulfill, and complete your order;
  • for correspondence with you;
  • for invoicing;
  • for the handling of any potential liability claims, as well as the assertion of any claims against you;
  • to ensure the technical administration of our website;
  • to manage our customer data.

As part of the order process, you will be asked for your consent to process this data.

Data processing is carried out based on your order and/or registration and, according to Art. 6 para. 1 sentence 1 lit. b GDPR, is necessary for the specified purposes for the proper processing of your order and for the mutual fulfillment of obligations arising from the purchase contract.

The personal data collected by us for the processing of your order will be stored until the expiry of the statutory retention period and then deleted, unless we are obliged to store it for a longer period pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law retention and documentation obligations (from the German Commercial Code (HGB), German Criminal Code (StGB) or German Fiscal Code (AO)), or you have consented to further storage pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. disclosure of data

Your personal data will only be passed on by us to third parties involved in the contract processing, such as the logistics company commissioned with the delivery and the credit institution commissioned with payment matters. In cases of passing on your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.

 

When paying via PayPal, credit card via PayPal, direct debit via PayPal or „purchase on account“ via PayPal, we pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter „PayPal“), as part of the payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or „purchase on account“ via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. Further data protection information can be found in the PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

 

Your personal data will not be transmitted to third parties for purposes other than those stated above.

We will only disclose your personal data to third parties if:

  • you have given your express consent in accordance with Art. 6(1) sentence 1 lit. a GDPR,
  • the disclosure for the assertion, exercise, or defense of legal claims is necessary pursuant to Art. 6(1)(1)(f) GDPR and there is no reason to believe that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for disclosure pursuant to Article 6(1) sentence 1 lit. c GDPR, as well as
  • This is legally permissible and, pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, necessary for the performance of contractual relationships with you.

As part of the ordering process, your consent will be obtained for the disclosure of your data to third parties.

 

5. Use of Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your device and do not contain viruses, Trojans, or other malware.

The cookie stores information that arises in connection with the specifically used end device. However, this does not mean that we immediately gain knowledge of your identity.

The use of cookies is, on the one hand, to make our services more enjoyable for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our site.

Furthermore, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific, set period. If you visit our site again to use our services, it will automatically recognize that you have been with us before and which entries and settings you have made, so that you do not have to enter them again.

Secondly, we use cookies to statistically record the use of our website and evaluate it for the purpose of optimizing our services for you (see section 7). These cookies allow us to automatically recognize on subsequent visits that you have been with us before. These cookies are automatically deleted after a defined period.

The data processed by cookies is necessary for the stated purposes of protecting our legitimate interests as well as those of third parties in accordance with Art. 6(1)(f) GDPR.

Most browsers accept cookies automatically. However, you can configure your browser to not save cookies on your computer or to always display a notification before a new cookie is created. However, disabling cookies completely may prevent you from using all the functions of our website.

6. Links to Third-Party Websites

The links published on our website are researched and compiled with the utmost care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. The provider of the website to which reference is made is solely liable for illegal, incorrect, or incomplete content, as well as for damages resulting from the use or non-use of the information. Liability of the party who merely points to the publication by means of a link is excluded. We are only responsible for external references if we have positive knowledge of them, i.e., also of any unlawful or punishable content, and it is technically possible and reasonable for us to prevent their use.

7. Analysis and Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we aim to ensure a needs-based design and the continuous optimization of our website. Furthermore, we use the tracking measures to statistically record the use of our website and to analyze it for the purpose of optimizing our services for you. These interests are to be considered legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be taken from the corresponding tracking tools.

Google Analytics1

For the purpose of needs-based design and continuous optimization of our websites, we use Google Analytics, a web analytics service provided by Google Inc.(https://www.google.de/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter „Google“). In this context, pseudonymized usage profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website such as

  • Browser Type/Version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Hostname of the accessing computer (IP address),
  • Server request time,

will be transmitted to and stored on a Google server in the United States. The information will be used to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage for market research and to tailor these websites to user needs. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Your IP address will not be associated with any other data held by Google. IP addresses are anonymized so that they cannot be linked to any individual (IP masking).

You can prevent the installation of cookies by adjusting your browser settings. However, we would like to point out that in this case, you may not be able to use all functions of our website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on. (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking the aforementioned link. An opt-out cookie will be set, which will prevent the future collection of your data when you visit our website. The opt-out cookie is valid only in this browser and only for our website, and it is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

For more information on data privacy regarding Google Analytics, please see the following link in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de

Google Ads Conversion Tracking

To statistically record the use of our website and evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. If you reached our website via a Google ad, Google Adwords will set a cookie (see section 5) on your computer.

These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages on the AdWords customer's website and the cookie has not yet expired, Google and the customer can tell that the user clicked on the ad and was redirected to that page.

Each Adwords customer receives a different cookie. Therefore, cookies cannot be tracked across the Adwords customers' websites. The information collected using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in the tracking process, you can also decline the setting of a cookie required for this purpose. For example, you can do this via your browser settings, which generally disable the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain „www.googleadservices.com“. Google's privacy policy for conversion tracking can be found at the following link: https://services.google.com/sitestats/de.html

 

8. Social Media Plugins

We use social plugins from social networks (e.g., Facebook, Twitter, Google+) on our website based on Art. 6(1)(f) GDPR to increase our company's visibility. The underlying advertising purpose is to be considered a legitimate interest within the meaning of GDPR. The respective provider is responsible for ensuring data protection compliant operation. We integrate these plugins using the so-called two-click method to best protect our website visitors.

Facebook

Our website uses social media plugins from Facebook to make your use more personal. We use the „LIKE“ or „SHARE“ button for this. This is a service provided by Facebook.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection with Facebook's servers. Facebook transmits the content of the plugin directly to your browser, which then integrates it into the website.

By integrating the plugins, Facebook receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly by your browser to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by pressing the „LIKE“ or „SHARE“ button, the corresponding information will also be transmitted directly to a Facebook server and stored there. The information will also be published on Facebook and visible to everyone.

Facebook may use this information for advertising, market research, and personalized design of Facebook pages. To this end, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook.

If you do not want Facebook to associate the data collected through our website with your Facebook account, you must log out of Facebook before visiting my website.

You can find information about the purpose and scope of data collection, and how Facebook further processes and uses your data, as well as your rights and settings options for protecting your privacy, in the Data Policy of Facebook, which you can view at the following link: https://www.facebook.com/about/privacy/

b) Twitter

Our website integrates plugins from the short message network of Twitter Inc. (Twitter). You can recognize the Twitter plugins (tweet button) by the Twitter logo on our page. You can find an overview of tweet buttons at this link on Twitter: https://dev.twitter.com/web/tweet-button

When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thus receives the information that you visited our page with your IP address. If you click the Twitter „tweet button“ while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or how Twitter uses it.

If you do not want Twitter to be able to associate visits to our pages with your Twitter user account, please log out of your Twitter user account.

You can find more information about this in Twitter's Privacy Policy, which you can view here: https://twitter.com/de/privacy

c) Google „ +1 “ button

Our website uses the „+1“ button of the social network Google, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The button is marked with a „+1".

The „+1“ button is shorthand for „that's pretty cool“ or „check this out.“ The button is not used to track your visits to the web.

If a page of our website contains the „+1“ button, your internet browser will load and display this button from the Google server. The website of our online presence that you visit will be automatically communicated to the Google server. When displaying a +1 button, Google does not permanently log your browser history, but only for a period of up to two weeks.

Google stores this data about your visit for this period for system maintenance and troubleshooting purposes. However, this data is not structured by individual profiles, usernames, or URLs. This information is also not accessible to website publishers or advertisers. The use of this information is solely for maintenance and troubleshooting within Google's internal systems. Your visit to a page with a +1 button is also not evaluated by Google in any other way.

No further analysis of your visit to a website of our internet presence with a „+1“ button will be carried out.

Giving a +1 is a public action, meaning that anyone who performs a Google search or views content on the web that you have +1'd can potentially see that you have marked that content with a +1. Therefore, only +1 content if you are completely sure you want to share that recommendation with the world.

Clicking this +1 button serves as a recommendation to other users in Google search results. You can publicly share that you like our website, that our website has your approval, or that you can recommend our website. If you have registered for Google+ and are logged in, the +1 button will turn blue when clicked. Additionally, the +1 will be added to the +1 tab in your Google profile. On this tab, you can manage your +1s and decide whether you want to make the +1 tab public.

To save your +1 recommendation and make it publicly accessible, Google collects information about the URL you recommended, your IP address, and other browser-related information through your profile. If you revoke your +1, this information will be deleted. All your +1 recommendations are listed on the +1 tab of your profile.

Further information and Google's current data protection regulations can be found at https://www.google.com/intl/en/policies/privacy/. Further information from Google regarding the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.

9. Rights of data subjects

You have the right:

  • according to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if they were not collected from me, as well as about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
  • pursuant to Art. 16 GDPR, to immediately request the rectification of inaccurate or the completion of your personal data stored by us;
  • request the deletion of your personal data stored with us, pursuant to Art. 17 GDPR, insofar as processing is not required for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful, but you refuse to have the data erased, and we no longer need the data but you require them for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
  • in accordance with Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request the transfer to another controller;
  • according to Art. 7 Paragraph 3 GDPR, you can revoke your consent at any time. This has the consequence that we are no longer allowed to continue processing the data based on this consent for the future and
  • according to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your place of habitual residence or place of work or of our company's registered office for this purpose.

10. Right of Objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to: neomed-robin@t-online.de

11. Data Security

We use the widespread SSL (Secure Socket Layer) procedure in connection with the highest encryption level supported by your browser during website visits. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed depiction of the key or lock symbol in the lower status bar of your browser.

We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

12. Timeliness and Amendment of this Data Protection Policy

This privacy policy is currently valid and updated as of March 2018.
Due to the further development of our website and offerings, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on our website via the following link: https://neomed-pharma.com/datenschutz

 

(1) Data protection authorities require the conclusion of a data processing agreement for the permissible use of Google Analytics. A corresponding template is available at http://www.google.com/analytics/terms/de.pdf Offered by Google.

 

Well: Sample Privacy Policy created by attorney Andreas Gerstel (http://www.anwaltblog24.de/)