Data Protection Notice
Thank you for visiting the website of Biotest AG (hereinafter “Biotest”), thus showing your interest in our organization, products and Web pages.
WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA.
Biotest AG, Landsteinerstraße 5, 63303 Dreieich, Germany, is the entity responsible for all personal data that you provide to us in the context of our existing business relationship or for the purpose of starting a business relationship.
CATEGORIES OF PERSONAL DATA COLLECTED BY US
We may collect and process the following categories of personal data in particular:
- Contact details such as full name, business address, email address (business and privat), private address, department and title
- To enable you to visit the website, we will collect the following data
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Operating system and its access status / HTTP status code
- Amount of data transferred
- Website from which the request comes
- Browser, language and version of the browser software
- The identification number of your mobile phone and the IP address of your computer if you use our online services.
- Further business information necessarily processed in a business or other contractual relationship with Biotest or voluntarily provided by you, such as orders placed, purchases, services, any kind of procurement processes and other business activities, product feedback, your lifelong doctor’s ID number (LANR) and other information that you provide us with in the context of a business relationship or that result from it.
- Information that we obtain from public sources, databases, and from credit reporting agencies.
- Information that we are entitled to collect in order to fulfil our legal and/or regulatory, in particular pharmacovigilance, obligations, which may include information about legal disputes or legal proceedings that you or people you are in a business relationship with are involved in, or information about interactions with you that could be relevant from an antitrust perspective.
- Special categories of personal data: In connection with the registration for and provision of access to an event or seminar, we may ask for information about your health for the purpose of identifying and being considerate of any disabilities or special dietary requirements you may have. Any such information will be used only with your consent. If you do not provide any such information about disabilities or special dietary requirements, we will not be able to take any respective precautions.
FOR WHICH PURPOSES WE USE YOUR PERSONAL DATA.
We will only process your personal data for the following purposes ("Permitted Purposes"):
- For congress registrations and travel organisation.
- Initiation, implementation and administration of your contractual relationship (or the contractual relationship of your organization) with the Biotest Group
- Informing and advising within an existing business relationship through similar or associated products or services of Biotest, provided this is permitted under the applicable law.
- To enable you to visit the website technically.
- Settling disputes, fulfilling our contractual agreements and justifying, exercising, or defending legal claims.
- Maintaining and protecting the safety of our products, services and websites or other systems, preventing and identifying security risks, fraudulent or other criminal or illegal activities.
- To comply with our legal or regulatory obligations. For example, this can include storing sales documents for tax purposes or sending legally required communications and other notifications, compliance screenings or recording obligations (e.g. based on competition law, export law, trade sanctions and embargo regulations or to prevent white-collar crime or money laundering). In this regard, we may be obliged to check your contact or identity data against relevant sanction lists and confirm your identity in case of a possible match, record information about the collaboration with you if this could be relevant under anti-trust law, and notify the competent supervisory authorities, law enforcement agencies or other competent authorities, or support their investigations.
- If you have expressly given us your consent or there is another legal basis, we can use your personal data for the following purposes as well:
- Communicating with you through the communication channels in which you have agreed to be kept up to date about the latest announcements, offers and other information about products, technologies and services of Biotest (including marketing newsletters), and events and projects of Biotest;
- To implement the transparency regime of the AKG e.V. (Arzneimittel und Kooperation im Gesundheitswesen [medicinal products and cooperation in the health care sector]) by publishing the asset benefits in EUR/net paid to you as a doctor or health professional on our website http://www.biotest.com every year.
- Administering and carrying out marketing campaigns, market analyses, competitions or other promotional measures or events or
- Profiling and automated processing: We collect information about your preferences on the basis of your activities when you use our websites and any products, downloadable content (e.g. downloading images, documents, information) or other services we offer to you online. On the basis of this information (e.g. which content is downloaded, clicked or viewed for how often and how long), we create a user profile to personalise and foster the quality of our communication and interaction with you (for example, by way of newsletter tracking or website analytics). The logic behind our profiling activities is to identify areas which may be useful or otherwise of interest for you and to inform you about such areas in a more effective and targeted way. The algorithms used apply this logic and automatically deliver the targeted content or information to you.
Please note: Under the European General Data Protection Regulation (Article 21 (2)) you have the right to object to the use of your personal data for direct marketing purposes, including the profiling described above. Please refer to "Your rights" below for further explanation of your rights and how to exercise them. With regard to marketing-related types of communication (i.e. emails and phone calls), we will where legally required provide you with such information only after you have opted in and provide you the opportunity to opt out if you do not want to receive further marketing-related types of communication from us. We will not use your personal data to make automated decisions that affect you or to create profiles in any way other than that described above.
The legal bases for processing of your personal data are set forth in Article 6 of the European General Data Protection Regulation. Depending on the above permitted purposes for which we use your personal data, the processing is either necessary for the performance of a contract or other business agreement with Biotest or for compliance with our legal obligations or for purposes of legitimate interests pursued by Biotest or third parties, always provided that such interests are not overridden by your interests or fundamental rights and freedoms. In addition, the processing may be based on your consent where you have expressly given that to us.
LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA
- Visiting the website: the legal basis for a handling of your personal data follows from the necessity of a handling for the provision of the functionalities requested by you on this website (Art. 6(1)(f) DS-GVO).
- Participation in the congress and travel organisation: the legal basis for handling your personal data follows from Art. 6(1)(b) of the GDPR, as a contract is created between you and Biotest AG when you register for a congress.
HOW WE COLLECT AND USE YOUR PERSONAL DATA.
We will typically collect your personal data directly from you when you interact with us, e.g. when you visit our website, communicate with us in relation to our products and services, submit an order, register to receive our newsletter or participate in our customer surveys.
WHERE WE PROCESS YOUR PERSONAL DATA
Biotest is a globally operating enterprise. In the course of our business activities, we may transfer your personal data also to recipients in countries outside the European Economic Area (“third countries”), in which applicable laws do not offer the same level of data protection as the laws of your home country. When doing so we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data, in particular by entering into the EU Standard Contractual Clauses which are available under Standard Contractual Clauses. You may contact us any time using the contact details below if you would like further information on such safeguards.
HOW WE PROTECT YOUR PERSONAL DATA
We maintain physical, electronic and procedural safeguards in accordance with the technical state of the art and legal data protection requirements to protect your personal data. These safeguards include implementing specific technologies and procedures designed to protect your privacy, such as secure servers, firewalls and SSL encryption. We will at all times comply with applicable laws and regulations regarding the confidentiality and security of personal data.
WHO WE SHARE YOUR PERSONAL DATA WITH
We may share your personal data as follows:
- With our affiliates within Biotest Group worldwide if and to the extent required for the Permitted Purposes and legally permitted. In such cases, these entities will then use the Personal Data for the same purposes and under the same conditions as described above. Please refer to our website (https://www.biotest.com/de/en/company/biotest_at_a_glance_/global_locations.cfm) for a list of Biotest Group affiliates with contact details.
- We may also instruct service providers (so called data processors) within or outside of Biotest Group, domestically or abroad (e.g. shared service centres or cloud providers), to process personal data for the Permitted Purposes on our behalf and in accordance with our instructions only. Biotest will retain control over and will remain fully responsible for your personal data and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal data when engaging such service providers.
- With congress organizations, travel agencies, hotels to ensure your participation. it cannot be excluded that your data is forwarded in this context to third countries that do not have an adequate level of data protection (e.g. USA). Please inform yourself about the data processing at the respective hotel group.
- With courts, law enforcement authorities, regulators or attorneys if legally permitted and necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
- With credit reference agencies and other companies for use in credit decisions, for fraud prevention and to collect debts.
- We share information about the specialisation of healthcare professionals (especially doctors and pharmacists) with IQIVIA Commercial GmbH & Co. OHG for information and advice purposes.
- We may also share your personal data with third parties if we sell or buy any business or assets, in which case we may disclose personal data to the prospective seller or buyer of such business or assets, along with its professional advisers. If Biotest or substantially all of its assets are acquired by a third party, personal data held by us about customers and other contacts will be one of the transferred assets.
- Otherwise, we will disclose your personal data only when you direct or give us permission, when we are required by applicable law or regulations or judicial or official request to do so, or when we suspect fraudulent or criminal activities.
HOW LONG WE STORE YOUR PERSONAL DATA
We will hold your personal data as long as required to provide the services, products or information you have requested and to carry out and administer our business relationship with you. If you have asked us not to communicate with you, we will hold this information as long as required to comply with your request. We are also legally required to keep certain types of personal data for certain periods under applicable law (e.g. due to retention obligations under commercial or tax laws). Your personal data will be promptly deleted when it is no longer required for these purposes.
Subject to certain legal conditions, you may request access to, rectification, erasure or restriction of processing of your personal data. You may also object to processing or request data portability. In particular you have the right to request a copy of the personal data that we hold about you. If you make this request repeatedly, we may make a charge for this. Please refer to Articles 15-22 of the EU General Data Protection Regulation for details on your data protection rights.
If you have given us your consent for the processing of your personal data, you can withdraw your consent at any time with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. In case consent is withdrawn, we may only further process the personal data where there is another legal ground for the processing or we are legally obliged to do so.
For any of the above requests, please send a brief description of your personal data concerned stating your name, customer number or other identification number (if applicable) as proof of identity to the contact address below or by email to email@example.com. We may require additional proof of identity to protect your personal data against unauthorised access. We will carefully consider your request and may discuss with you how it can best be fulfilled.
If you have any concerns about how your personal data is handled by us or wish to raise a complaint on how we have handled your personal data, you can contact us at the contact address below to have the matter investigated. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the competent data protection supervisory authority in your country.
OBLIGATION TO PROVIDE PERSONAL DATA.
As a general principle, you will provide us with your personal data entirely voluntary; there are generally no detrimental effects on you if you choose not to consent or to provide personal data. However, there are circumstances in which Biotest cannot take action without certain of your personal data, for example because this personal data is required to process your orders, provide you with access to a web offering or newsletter or to carry out a legally required compliance screening. In these cases, it will unfortunately not be possible for Biotest to provide you with what you request without the relevant personal data.
WEB SERVER LOGS.
We evaluate those Web Server logs for statistical purposes on a regular and anonymous basis in order to ascertain which pages of our website are visited. Thereby, we can get a more precise idea as to the use of our website. This is generally referred to as “Web statistics” and it enables us to optimise our services. In addition, we may use that information in cooperation with your Internet provider and/or public authorities in the event of a misuse of the system to locate the originator of such misuse.
This website uses Internet Protocol (IP) addresses. An IP address is a number assigned to your computer by your Internet provider to provide you with access to the Internet. IP addresses are used as a part of the Web Server log data referred to above. To this end, IP addresses will, however, be shortened, or anonymised, by us so that we are unable to derive the names of persons from the IP address.
Some of our Web pages use so-called “web beacons” - also referred to as “single-pixel GIFs” - or measurement codes that render it possible to prepare Web Server logs. A web beacon is a graphic image on a Web page or in an email that renders it possible to track the visited pages. That information is automatically gathered in a Web Server log when you visit our Web pages. The Web Server automatically recognises certain data such as your IP address, the date and time of your visits, the pages on our website visited by you, the website visited by you before, the browser (e.g., Internet Explorer) and operating system (e.g., Windows 7) used by you, as well as the domain name and address of your Internet provider (e.g., AOL).
Please note that your refusal to create cookies on your computer may result in certain restrictions in visits of Web pages of Biotest or in your no longer being able to access certain parts of this website (or linked Web pages).
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and facilitate an analysis of the use of the website by you. The information regarding the use of the website by you generated by the cookie will normally be transmitted to a server of Google in the USA and will be stored there. In the event of an activation of the IP anonymisation on this website, however, your IP address will be shortened before by Google within the Member States of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and be shortened there. Google will use such information on behalf of the operator of this website to analyse your use of the website, to compile reports on the website activities and to provide to the website operator other services relating to the website and Internet use.
The IP address transmitted by your browser through Google Analytics will not be combined with other data by Google. You can prevent the storage of cookies by setting your browser software accordingly; we hereby inform you, however, that you may in such case be unable to use all functions of this website in full. You can also prevent the collection and processing by Google of the data (including your IP address) relating to your use of the website generated by the cookie by downloading and installing the browser plug-in available through the following link. (http://tools.google.com/dlpage/gaoptout?hl=de).
Please note that the transmission of data through the Internet is not secure and that there exists the danger of third parties intercepting and using the data. You are free to provide us with your data by mail or over the phone at any time to the following address or under the following phone number, respectively:
Tel.: +49 - 6103 / 801 - 0
LINKS TO OTHER WEBSITES.
This website also contains links to other websites. The guidelines and procedures described here do not apply for these linked websites. May we ask you to visit those websites directly to obtain information regarding data protection, safety, the collection of data and the provisions relating to data transmission. Biotest may not be held liable for any actions taken from, or the contents of, those websites.
HOW TO GET IN TOUCH WITH US.
If you have any further questions on “data protection at Biotest” or if you want to assert your rights, you can contact our Data Protection Officer at the following postal address:
Data Protection Officer
63303 Dreieich, Germany
or by email at: firstname.lastname@example.org
CHANGES TO THIS DATA PROTECTION NOTICE
This Data Privacy Notice was last updated in January 2021. We may make changes to or amend this Data Protection Notice as required to reflect any changes to the way in which we use your personal data or changing legal requirements. So you may wish to check for changes from time to time or when you provide us with personal information. Changes will apply from the date they are posted on our website.
Status of January 2021