Privacy Statement

InfectoPharm Arzneimittel und Consilium GmbH, Von-Humboldt-Str. 1, 64646 Heppenheim, Germany (hereinafter referred to as “InfectoPharm”) takes your legitimate interests in data protection very seriously and observes the provisions of the European General Data Protection Regulation (GDPR), the German Telemedia Act and, where applicable, the provisions of other applicable data protection regulations.

InfectoPharm handles the data transmitted by you carefully and with due diligence. As far as data of any kind is collected, processed or used, this is always done within the scope of the applicable legal provisions or after obtaining explicit consent from you.

InfectoPharm considers protecting the individual’s privacy on the Internet as crucial to the future of Internet-based business models and the move toward a true Internet economy. InfectoPharm has created this privacy statement to demonstrate its firm commitment to the individual’s right to privacy.

This Privacy Statement covers this website and all other sites that reference this Privacy Statement. Some InfectoPharm entities may have their own, possibly different, privacy statements. We encourage you to read the privacy statements of each of the InfectoPharm websites you visit.

The controller according to Art. 4 Para. 7 of the General Data Protection Regulation (GDPR) is:

InfectoPharm Arzneimittel und Consilium GmbH
Von-Humboldt-Str. 1
64646 Heppenheim
Germany

Email: info@InfectoPharm.com

You can contact our data protection officer at:

InfectoPharm Arzneimittel und Consilium GmbH
Thomas Fletschinger
Von-Humboldt-Strasse 1
64646 Heppenheim
Germany
Email: dsb@InfectoPharm.com

By making use of the services provided on the website and by using the website and thus supplying your data, you agree to the following data protection provisions.

You also agree to the Privacy Statement by ticking the boxes in front of the sentence “Yes, I agree to the Terms of Use and Privacy Statement of InfectoPharm”.
Together with our Terms of Use, this Privacy Statement forms the basis for the use of this website at the URL https://www.infectopharm.com (hereinafter referred to as “Website”).

Please read the following terms carefully to understand our handling of your personal data.

Global Privacy Fundamentals

Our privacy practices reflect current global principles and standards on handling personal information. These principles include notice of data use, choice of data use, data access, data integrity, security, onward transfer, and enforcement/oversight.

Consent

By using this website, you consent to the electronic collection and use of the information as described here. If InfectoPharm decides to make changes to this Privacy Statement, we will post the changes on this site so that you will always know what information we collect, and how we use it.

From time to time, as may be required by applicable law, we may also seek your explicit consent to process certain data and information collected on this website or volunteered by you.

Collection, Storage, Transmission and Processing of Data

You can visit and view our website without registering or creating a customer account. Access to certain areas, however, is only possible for specialist groups within the meaning of the Heilmittelwerbegesetz (HWG – German law on advertising in the healthcare system) with the help of a “DocCheck password”. When you visit our website, your IP address, the host name of your computer, the pages and sub-pages you visit on our website, the date and duration of your visit and the identification data of the browser (version, manufacturer) and operating system (type, version, manufacturer) you are using are stored by default. This data, however, does not contain any personally identifiable information; it is used exclusively to optimize the website. You remain anonymous as an individual personal user of the website.

When you visit our website, we may record your IP address and use cookies and other Internet technologies (referred to below as “Automated Tools” and “Embedded Web Links”) to gather general information about our visitors and their interests. The technologies used and the information collected are described in more detail below.

We may further collect and process any information and data that you volunteer to us, e.g. when you register for events, subscribe to newsletters, participate in online surveys, discussion groups or forums, or when you make purchases.

Use and Purpose of Collected Personal Data

The information InfectoPharm collects to understand your needs and interests helps InfectoPharm deliver a consistent and personalized experience. InfectoPharm will use such information only as described in this Privacy Statement or in the way specified at the time of collection. We will not subsequently change the way your personal data is used without your consent unless this is otherwise permitted by law.

We always process your personal data for a specific purpose. In particular, we process your personal data for the following purposes:

To manage our relationship with you, e.g. through our databases, in which we collect data about you from our various sources in order to get an overview of the collaboration; also, to improve and individualize our understanding of your preferences and our communication with you;
To process your orders and deliver the products and services that you have ordered;
To implement tasks in preparation of or to perform existing contracts;
To evidence transactions and ensure transparency on transfers of value;
To provide you with appropriate and current information about research, diseases, and medicines as well as our products and services;
To improve the quality of our products and services by adapting our offering to your specific needs;
To answer your requests and provide you with efficient support;
To send you surveys (e.g. to improve your future collaboration with us);
To send you communications about products or services that we advertise;
To manage communication and collaboration with you, and to facilitate collaboration between healthcare professionals (e.g. by operating a database that records collaboration with healthcare professionals, or by managing the scheduling of, for example, meetings and the creation of meeting minutes);
To track our activities (e.g. measuring interactions or sales, number of appointments/calls, issues discussed, documents presented);
To assess and structure how often you prescribe our products, what products you are interested in, under what conditions you prescribe our products, and how we can best approach you in this regard; in doing so, we can differentiate between our different products;
To assess and structure your professional and scientific interests as well as your views on new research projects/studies, so that we can determine and plan further collaboration, for example at congresses or in research projects/studies;
To automatically generate suggestions for further communication with you based on your and our activities (such as upcoming visits or events);
To invite you to events sponsored or used by us (e.g. medical events, presentations, conferences);
For the organization of events, we provide contact information to the respective hotels selected by you and other partners involved;
To grant you access to our specified IT systems so that you can use certain services of InfectoPharm;
To conduct market research, we provide contact information to market research companies that reach out to potential attendees;
To manage our IT resources, including infrastructure management and business continuity;
To preserve the company’s economic interests and ensure compliance and reporting (such as complying with our policies and local legal requirements, tax and deductions, internally defined contribution caps, managing alleged cases of misconduct or fraud; conducting audits and defending litigation);
To manage mergers and acquisitions in which our company is involved;
Archiving and record keeping;
To support recruitment inquiries;
Billing and invoicing; and
in certain cases, we are legally obliged to transfer certain data to the requesting government agency (institution or authority). The legal basis for the processing is Art. 6. Para. 1 (c) GDPR and Art. 24 Para. 2, No 1 of the German Federal Data Protection Act.
In some cases, business partners require personal information from our customers. This is usually done for the purpose of order fulfillment (e.g. in case of complaints). This is expressly provided for by law. In this case, InfectoPharm remains responsible for the protection of your data – in addition, the processor may also be responsible. The service provider works strictly in accordance with our instructions, which InfectoPharm ensures by means of strict contractual regulations.
To fulfil legal obligations to record, document and report undesirable drug effects or other drug risks to competent authorities as well as corresponding reports on medical products, cosmetics or nutritional products.

IP Addresses

We use IP addresses to help diagnose problems, to administer our website, and to gather demographic information. We may also use IP addresses or other information you have shared on this website to determine which pages on our sites are being visited and topics that may be of interest so we can provide you with information about relevant products and services. Generally, InfectoPharm will aggregate such data only in an anonymous way and will not tie it to a particular individual unless he or she has given consent. When you visit our site, we recognize only your domain name.

Cookies

a) We use cookies on our website(s). These are small files that your browser automatically creates and stores on your device (notebook, tablet, smartphone, etc.) when you visit our web pages. Cookies cannot do damage to your computer and do not contain viruses, Trojans or any other malware. The information stored in the cookie pertains to the specific device used. This, however, does not give us direct knowledge of your identity. The use of cookies serves to make using our online services more pleasant for you. For example, we use what are known as session cookies to determine that you have already visited individual pages on our website. These are automatically deleted after leaving our website.

b) In addition, to further improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our website again to use our services, we will automatically determine that you have already visited our website and what inputs and settings you have made in order to avoid having to re-enter them.

c) Furthermore, we use cookies to statistically record the use of our website and to analyze it for the purpose of optimizing our website offerings. These cookies enable us to automatically determine that you have visited our website before. These cookies are automatically deleted after a defined period of time.

d) The data processed by cookies are necessary for the purposes mentioned in order to safeguard our legitimate interests and the interests of third parties under Art. 6 Para.1 Sent. 1 (f) GDPR.

e) Most browsers accept cookies automatically. You can, however, configure your browser in such a way that no cookies are stored on your computer or that a notice is displayed before a new cookie is created. Disabling cookies completely, however, may mean that you will not be able to all the features on our website.

Email Addresses

If you choose to give us your email address or submit it through our contact form, we will communicate with you via email.

Depending on how your email application is set up, information about you may be transmitted automatically to InfectoPharm when you send an email to InfectoPharm.

Shopping or Event Registration

Our site includes order forms that you fill out to request information, products, and services.

You can also use our online portal (Venturi® attendee management system by Up2Date) to sign up for our events.

External Service Providers

We work with service providers that process certain data on our behalf. This is done exclusively in accordance with the applicable data protection laws. In particular, we have entered into commissioned data processing agreements with our service providers which satisfy the requirements of Art. 28 GDPR.

Information About the Newsletter and Consent

With the following information, we inform you about the content of our newsletter as well as the registration, sending and statistical analysis procedures as well as your right of objection. By subscribing to our newsletter, you agree to the receipt and the procedures described.

Content of the Newsletter

We send newsletters (CleverReach) and emails with promotional information (hereinafter referred to as “newsletter”) only with the consent of the recipient or a legal permission. The content of the newsletter described as part of the newsletter registration are authoritative for the consent of the users.

Sharing Data

As an international company, InfectoPharm has a global web presence. Therefore, any information that you submit to one of our websites may be sent electronically to a server in this or another country. We safeguard your privacy interests around the world by ensuring that our websites adhere to the privacy policies described in this statement.

InfectoPharm may process your data globally to process your inquiries and orders and to help improve our products and services.

Your personal data will not be transferred to third parties for any purposes other than those set out below. We will only transfer your personal data to third parties if:

a) You have given your express consent in accordance with Art. 6 Para. 1 Sent. 1 (a) GDPR, Art. 26 Para. 2 German Federal Data Protection Act (BDSG),

b) The transfer is necessary in accordance with Art. 6 Para. 1 Sent. 1 (f) GDPR for the purpose of asserting, exercising or defending legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

c) in the event that there is a legal obligation to transfer the data pursuant to Art. 6 Para. 1 Sent. 1 (c) GDPR and

d) this is legally permissible and necessary under Art. 6 Para. 1 Sent. 1 (b) GDPR, Art. 26 Para. 1 German Federal Data Protection Act (BDSG) for the execution of a contractual relationship with you or for pre-contractual measures at your request.

Transfer to a third country or an international organization is not intended and there is no automated decision making, including profiling, unless otherwise provided in this Privacy Statement.

InfectoPharm may also share such information with third parties (i. e. public authorities, business partners, service vendors, authorized third-party agents or contractors) in order to provide a requested service, including attending training courses, providing customer support, or providing you with information on services and products that may be of interest to you.

InfectoPharm may respond to subpoenas, court orders, or legal process by disclosing your personal data and other related information, if necessary. We also may choose to establish or exercise our legal rights or defend against legal claims.

We only provide these third parties with the minimum amount of personal data necessary to provide the services on our behalf or to comply to authority orders, and the third parties are not permitted to use this personal data except for the limited purpose of completing the requested service and for the purpose of order fulfillment.

We do not sell or rent your personal data to third parties for marketing purposes unless you have granted us permission to do so.

In the context of training registration and subject to your prior express consent, we will share your personal data with third parties, in this case organizers or hotels. This means that 2 weeks prior to an event, we will transfer a list of names and addresses to the conference hotel.

We may collect and possibly share personal data and any other additional information available to us in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, or violations of InfectoPharm’s terms of use, or as otherwise required by law.

If you provide us with personal data, including health or disease data, when reporting undesired drug effects, other drug risks or corresponding reports on medical products, cosmetics or nutritional products, we will pass these on to third parties (service providers, business partners) who are authorized to do so and in compliance with data protection regulations exclusively to fulfil statutory obligations to record and document and/or use them to fulfil statutory reporting obligations to competent authorities.

Circumstances may arise where, whether for strategic or other business reasons, InfectoPharm decides to sell, buy, merge, or otherwise reorganize businesses. Such a transaction may involve, in accordance with applicable law, the disclosure of personal information to prospective or actual purchasers. It is InfectoPharm’s practice to seek appropriate protection for information in these types of transactions.

Data From Public Sources and From Third Parties (e.g. IQVIA)

We collect personal data about business partners from public or external sources of information, in particular to verify their professional qualifications and identity. This data also helps us communicate and advise you according to your interests and preferences:

a) OneKey; in order to inform and advise you, we maintain your contact data and information about your specializations through OneKey™, a database operated by IQVIA Commercial GmbH & Co. OHG, Unterschweinstiege 2-14, 60549 Frankfurt am Main, Germany, with current contact data and specialization information on medical professionals.

b) Publicly available information sources (publications, websites, memberships).

c) “From third parties”; we collect publicly available information about your publications, seminar attendance, membership in scientific or professional associations, about whether you operate a website and how it is designed.

Processing takes place on the basis of the balance of interests clause in the European General Data Protection Regulation.

If you provide us your data directly or if we obtain it in any other way, the data is not automatically stored in the OneKey™ database. IQVIA may receive a message from us and will then contact you if necessary – usually by telephone – in order to reconcile your data. You can object to the collection of your data by IQVIA and InfectoPharm at any time or contact the relevant data protection officer.

Your data will primarily be stored in Germany. However, it may also be necessary for foreign group companies or business partners to access the data.

InfectoPharm also processes the personal data of medical professionals who are contacted and visited by InfectoPharm or contacted by the sales department as part of InfectoPharm’s activities.

In particular, this includes the following personal data: (name, position, business contact details, email address, telephone and fax number).

We process this data in order to sell our products and to maintain the data in our IT systems. InfectoPharm processes this data for the purpose of enterprise-wide business processes, e.g. notification, execution and follow-up of sales calls or other sales activities or the maintenance of prospect lists. In addition, the data can be used for business analytics purposes, such as the analysis of sales figures, processes or the like. The processing is then based on Art. 6 Para. 1 Sent. 1 (b) (f) GDPR. Insofar as the legitimate interest within the meaning of Art. 6 Para. 1 Sent. 1 (f) GDPR is taken into account, our legitimate interest lies in the optimization of sales processes and marketing campaigns.

Insofar as a direct collection takes place: The provision of your personal data is not a legal or contractual requirement. This means that you are not obligated to provide us with your personal data. If you decide not to provide us with your personal data, InfectoPharm sales will not be able to contact you.

Insofar as no direct collection took place: We collected your personal data from the following sources: IQVIA Commercial GmbH & Co. OHG and possibly from public sources or third parties.

We transmit your personal data to the following categories of recipients: group companies for the maintenance of IT systems, IT service providers, and possibly other business partners.

Analysis Tools

The tracking measures listed below and used by us are carried out based on Art. 6 Para. 1 Sent. 1 (f) GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. Furthermore, we use tracking measures to statistically record the use of our website and to analyze it for the purpose of optimizing our website offerings. These interests are considered legitimate within the meaning of the aforementioned provision. For the respective data processing purposes and data categories, please refer to the corresponding tracking tools described in detail below.

Privacy Statement for the Use of Google Analytics

a) Google Analytics uses “cookies”, which are text files placed on your computer to help analyze how you use the website. The information generated by the cookie about your use of this website will be generally transmitted to and stored by Google on servers in the United States of America. If IP anonymization is activated on this website, however, Google will truncate your IP address within member states of the European Union or in other member states of the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing the website operator with other services relating to website activity and internet usage.

b) You may refuse the storing of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in provided under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

c) This website uses Google Analytics with the add-on „_anonymizelp“. This means that IP addresses are processed in abbreviated form, so as to eliminate any direct tracking to a specific person. If data collected about you refers to a specific person, it is therefore eliminated immediately and the personal data thus immediately deleted.

d) We use Google Analytics to be able to analyze the use of our website and regularly improve it. The statistics we compile enable us to improve our offering and make it more interesting for you as a user. With regard to the exceptional cases in which personal data is transferred to the USA, Google is subject to the EU-US Privacy Shield at https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 Sent. 1 (f) GDPR.

e) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/us.html, data protection overview: https://support.google.com/analytics/answer/6004245?hl=en, and privacy statement: https://policies.google.com/privacy?hl=en&gl=en.

Privacy Statement for the Use of Google Maps

This website uses Google Maps API, a map service of Google LLC. (“Google”) to display an interactive map and prepare directions.

Google Maps is operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. The legal basis for the processing results from Art. 6 I (a) (f) GDPR on the basis of your voluntary provision of information for the preparation of directions and our legitimate interests in the presentation of our location as well as an easy findability of the places we have indicated on the website.

When you use Google Maps, information about the use of this website (including your IP address) is transmitted to and stored on a server belonging to Google in the USA. Google may also transfer the information generated through the use of Maps to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Google will not associate your IP address with any other data held by Google. Nevertheless, it is technically possible for Google to be able to identify at least some individual users based on the data received. It is possible that personal data and personal website user profiles may be processed by Google for other purposes, over which we have and can have no influence. You can choose to disable the Google Maps service and thereby prevent data transfer to Google by disabling JavaScript in your browser. However, please note that if you do so you will not be able to use the map feature on our website.

Google is certified under the EU-US Privacy Shield. You can find the current certificate at https://www.privacyshield.gov/list. As a result of this agreement between the USA and the European Commission, the latter has verified an adequate level of data protection for companies certified under the Privacy Shield.

The Google Privacy Statement & Additional Terms of Use for Google Maps can be found at

https://www.google.com/analytics/terms/us.html, data protection overview: https://support.google.com/analytics/answer/6004245?hl=en, and privacy statement: https://policies.google.com/privacy?hl=en&gl=en.

You can also change how Google plug-ins are loaded in your privacy settings at https://myaccount.google.com/intro.

Privacy Statement for the Use of Vimeo

Our website uses plug-ins provided by the Vimeo video portal, a service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Each time you access a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. By interacting with the Vimeo plug-ins (e.g. clicking the start button) this information is also transferred to Vimeo and stored there. The Vimeo Privacy Policy with more information on the collection and use of your information by Vimeo please refer to

Vimeo’s Privacy Policy.

If you have a Vimeo user account and do not want Vimeo to collect information about you through this website and link it to your Vimeo membership information, you must log out of Vimeo before visiting this website.

Vimeo also uses an iFrame to show video clips. This iFrame connects to Google Analytics. This is Vimeo’s own tracking system to which we have no access. You can stop tracking by Google Analytics by using the opt-out tools that Google offers for some internet browsers. Furthermore, you can prevent the collection of data generated by Google Analytics and relating to your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in provided under the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

Privacy Statement for the Use of CleverReach

Newsletter / Information Request / Use of CleverReach

(1) With your consent, you can subscribe to our newsletter, which informs you about us and our investor relations news.

(2) Subscribing to our newsletter involves what is known as a double opt-in process. This means that after your subscription, we will send you an email to the provided email address in which we will ask you to confirm that you wish to receive the newsletter. If you fail to confirm your subscription within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the subscription and confirmation dates. The purpose of this process is to prove your subscription and, where necessary, to investigate potential misuse of your personal data.

(3) The only mandatory information for subscribing to the newsletter is your email address. After your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 Para. 1 Sent. 1 (a) GDPR.

(4) You can withdraw your consent to receiving the newsletter at any time and unsubscribe from the newsletter. You can withdraw you consent by clicking on the link provided in every newsletter email or by sending an email to service@infectopharm.com.

(5) Please note that we analyze your user behavior in the context of newsletter delivery. To this end, the emails we sent contain what is referred to as web beacons or tracking pixels, which represent single-pixel image files stored on our website. The data is collected in pseudonymized form only. For the analysis, we record whether a newsletter was opened and which links were clicked, we do not, however, link this information to your data.

This information is stored for as long as you subscribe to the newsletter. It is furthermore not possible to track the opened newsletters and the clicked links if you have disabled the display of images in your email client by default. In this case, the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the tracking described above takes place.

Privacy Statement for the Use of YouTube Plug-Ins

Our website employs plug-ins provided by the Google-operated website YouTube. Operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit a site equipped with a YouTube plug-in, a connection is established to the YouTube servers. In the process, the YouTube server is informed which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube takes place in the interest of an appealing presentation of our online services. This represents a legitimate interest in the sense of Art. 6 Para. 1 (f) GDPR. For more information on the handling of user data, please refer to YouTube’s privacy policy at:

https://policies.google.com/privacy?hl=en&gl=en

Applicant Privacy Notice

(1) We process applicant data only for the purpose and in the context of the application procedure in compliance with legal requirements. The processing of the applicant data takes place in order to fulfil our (pre)contractual obligations within the scope of the application process pursuant to Art. 6 Para. 1 (b). GDPR, Art. 6 para. 1 (f) GDPR insofar as data processing becomes necessary for us, e.g. within the framework of legal proceedings (in Germany, Art. 26 of the German Federal Data Protection Act (BDSG) also applies).

(2) Collection and storage of personal data as well as type and purpose and their use

Using our applicant management tool, you apply electronically for vacancies at InfectoPharm Arzneimittel und Consilium GmbH. To do this, you must register as a user by specifying a personal username and password. In the online job application form, we will only ask you for data that we need to process your application. Data that is absolutely necessary to process your application and determine your suitability for the position are marked as mandatory fields. In addition, the form gives you the opportunity to provide us with additional information that will make it easier for us to process your application (e.g. desired salary, earliest possible starting date). Submission of this information is voluntary.

By using the application portal, you expressly agree that we may process and use the data you provide to us for the purpose of processing your application in compliance with data protection regulations and this Privacy Statement.

Each time you access our applicant management tool, your web browser automatically sends us technical information such as information about the browser you are using, information about the operating system, time and date of your visit. This information is used exclusively for statistical purposes and the demand-oriented design of our website. The user remains anonymous at all times.

(3) Access to the data
The data provided by you will be treated confidentially. In dealing with a specific job application, only persons who are involved in filling this position are granted access to the data you have provided. Specifically, these are the employees of the HR department of InfectoPharm, its management, and the respective heads of departments.

(4) Data security
The data is transmitted via a secure, encrypted connection. InfectoPharm takes appropriate measures in its own area of responsibility to protect your data from unauthorized access by third parties. For the technical aspects of the online application process, we use the services of Haufe Lexware, a service provider that provides the technical infrastructure only. We verified that the service provider has taken all necessary technical and organizational measures to ensure data protection in the online application process.

(5) Deletion of the data
We will only store and use your information for as long as is necessary to decide whether to enter into an employment relationship with you. If you receive a rejection of your application, the application process is complete. 6 months after receipt of the rejection notice, the documents uploaded by you will be deleted and your data will be anonymized. The anonymized data is used for statistical purposes only and does not allow us to draw any conclusions about the data subject. If, however, during the application process you have given your consent to us storing your data beyond the application process in order to take them into account for new job openings, we will delete the documents and anonymize your data 12 months after receipt of the rejection notice. The anonymized data is deleted after 24 months.

If you have been accepted for a job in the application process, the data from the applicant data system will be transferred to our personnel information system and deleted 10 years after termination of employment.

Invoices for any reimbursement of travel expenses are archived in accordance with tax regulations.

Links to Other Websites

Our website may contain links to other sites. InfectoPharm is not responsible for the privacy practices or the content of third-party websites or websites that are not owned by InfectoPharm or its affiliates.

Data Retention

InfectoPharm will not retain your personal data longer than is necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations.

Data Subject Rights

You have the right in accordance with

a) Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your personal data have been or will be disclosed, the planned storage period, the existence of the right to rectification, deletion, restriction or objection of processing of personal data, the right to lodge a complaint with a supervisory authority, the origin of your data where the personal data was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved;

b) Art. 16 GDPR, to demand without delay the correction of incorrect data or the completion of your personal data stored by us;

c) Art. 17 GDPR to request the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

d) Art. 18 GDPR to restrict the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you reject its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims, or if you have filed an objection to the processing in accordance with Art. 21 GDPR;

e) Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another person responsible;

f) Art. 7 Para. 3 GDPR, to revoke your consent to us at any time. As a result, we will no longer be allowed to continue processing the data based on this consent in the future and

g) Art. 77 GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of the registered office of our company.

The competent supervisory authority for data protection for InfectoPharm Arzneimittel und Consilium GmbH is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit[The State Commissioner for Data Protection and Freedom of Information Hesse] Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
Postfach 31 63, 65021 Wiesbaden, Germany

Phone +49 611 14080
Fax: +49 611 1408 – 900

Email: poststelle@datenschutz.hessen.de,

https://www.datenschutz.hessen.de

For the assertion of the aforementioned rights as well as for questions regarding data protection, you can contact the person responsible or send an email to dsb@infectopharm.com.

Right to Object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 Para. 1 Sent. 1 (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to exercise your right of withdrawal or objection, simply send an email to dsb@infectopharm.com.

Data Security

a) While you visit our website, we use the common SSL procedure (Secure Socket Layer) with the highest possible encryption level supported by your browser. As a general rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we will resort to128-bit v3 technology instead. Whether an individual page of our website is transmitted in encrypted form is indicated by the display of the closed key/lock symbol in the lower status bar of your browser. The data that you enter in the form for registration in the job exchange will also only be transmitted to us in encrypted form.

b) We also use appropriate technical and organizational security measures to protect your data against accidental or intentional tampering, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Sale and Delivery of Goods

Our sale and delivery of goods are exclusively governed by our general terms and conditions of sale and delivery valid at the time the contract is concluded.

Changes to This Privacy Statement

In the event of new developments such as changes to the applicable data privacy laws, we will, if necessary, update this privacy statement accordingly.

Last updated: 10/01/2019