Source: https://3b-pharma.com/privacy_policy.php
Timestamp: 2019-04-20 08:42:48+00:00

Document:
We process personal data (Art. 4 No 1 GDPR) which we receive in the course of conducting our business as a biotech company, for example in connection with requests regarding information on our products and services. Personal data which we process include personal information such as name, address, email-addresses, IP-address and, in some instances, further data, for example regarding interest areas of the requesting person.
We process personal data in order to be able to conduct our activities and provide our services as a biotech company and in order to receive and reply to your requests. We process personal data in accordance with the following data protection-related provisions: We process personal data pursuant to Art. 6 para. 1 lit. a GDPR upon your consent, for example in order to inform you about our services. In the event that our company enters into a contractual relationship, including the initiation of a contractual relation, the processing of personal data takes place in order to fulfil contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR. In the event that our company is subject to a legal obligation which requires the processing of personal data, such as for example the fulfilment of tax obligations, or for being able to demonstrate that your consent has been given, the processing of personal data is made pursuant to Art. 6 para. 1 lit. c GDPR. In exceptional cases the processing of personal data may be required in order to protect the vital interests of the data subject or another natural person. This could for example be the case were a visitor will be injured in our premises and in consequence his name, age, health insurance data or other vital information need to be transmitted to a doctor, hospital or other third party. In that event the processing will be made pursuant to Art. 6 para. 1 lit. d GDPR. Finally, data processing activities can be conducted on the basis of Art. 6 para. 1 lit. f GDPR which covers data processing activities which do not fall under any of the afore mentioned legal provisions and which covers data processing which is necessary for the purposes of the legitimate interests pursued by us or a third party and provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject. The European legislator has explicitly mentioned that such legitimate interests could exist for example where the data subject is a client of the party responsible (recital 47 sentence 2 GDPR). As another example the legislator mentioned that the processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest (recital 47 sentence 7 GDPR).
If the processing of personal data is based on Article 6 para. 1 lit. f GDPR our legitimate interest is the conduct of our business and the related communication with you (recital 47 GDPR).
We collect and process personal data of job applicants for the purpose of conducting and processing the job application procedure on the basis of Art. 6 para. 1 lit. b GDPR. The processing may be made electronically which will in particular be the case where job applicants transmit respective application documents to us electronically, such as by e-mail or via the web form on our website. If we conclude an employment contract with the applicant, the transmitted data will be stored for the purposes of execution of the engagement relationship in compliance with the legal provisions. If we do not conclude an employment contract with the applicant the application documents will automatically be erased two months after notifying the applicant of the refusal decision, provided there are no conflicting legitimate interests of us for further data processing. Those legitimate interests within the afore meaning include, but are not limited to, obligations of providing evidence in proceedings pursuant to the German General Act on Equal Treatment (AGG).
For security reasons and in order to protect confidential information, such as requests submitted via our contact form, we use SSL-encryption. If an encrypted connection has been effected the address-line of your browser will show "https://" instead of "http://" and you might notice a locker symbol in your browser. If SSL is activated third parties cannot read data that you send to us.
We process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data. If the purpose of processing does not apply anymore and the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.
This website uses "Google AdWords Conversion Tracking" feature of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google"), pursuant to Art. 6 para. 1 lit. f GDPR. Google AdWords Conversion Tracking uses so-called "cookies", text files that are stored on your computer and that allow you to analyze the use of the website by you if you have clicked on a Google ad. The cookies are valid for a maximum of 90 days. Personal data is not stored. As long as the cookie is valid, Google and we as the website owner can see that you've clicked an ad and reached a specific landing page (e.g., order confirmation page, newsletter signup). These cookies cannot be tracked across multiple websites by different AdWords participants. The cookie generates conversion statistics in Google AdWords. These statistics include the number of users who have clicked on one of our ads. In addition, it counts how many users have come to a landing page that has been tagged with a "conversion tag". However, the statistics do not contain any data that identifies you.
We have activated the functionality IP anonymization. In case of activation of the IP anonymization, Google will shorten the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area before sending it to the USA. Only in exceptional cases, the full IP address is sent to and only then shortened by Google servers in the USA. On our behalf Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google.
12. Is there an automated decision-making process?
According to Art. 15 GDPR the data subject has the right to obtain, upon request, free of costs, information about his or her personal data stored as well as the purpose of the data processing. According to Art. 16, 17 and 18 GDPR the data subject has also the right to correct incorrect data and block and delete his or her personal data. Moreover the data subject has, subject to Art. 20 GDPR, the right to receive his or her personal data, which he or she has provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from our part. According to Art. 21 para. 1 GDPR, the data subject has also the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on Art. 6 para. 1 lit. e or f GDPR. We will comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws.
Each data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 20
 Art. 21
 Art. 6