Legal Privacy Privacy Notices DE FR FI Privacy Notices Information according to Art. 13 und Art. 14 General Data Protection Regulation (GDPR) These Privacy Notices provide information regarding the personal data which is processed within the NextPharma group of companies and explains what personal data is processed, for which purposes, how long we hold the personal data and your rights in this respect. Please select the privacy notice relevant to you from those below. Individuals who are not connected with our Business Partners This privacy notice provides information to individuals who are not connected with our business partners (B2B) and contact us by phone, post, email, fax or website contact form. Personal data You decide which information is necessary for answering your queries you provide us: email address other data, which you provide us voluntarily *Special Note – processing personal data of Children If you are under 16 years old please do not send us your personal data (for example, your name, address and email address). If you wish to ask NextPharma a question please get your parent or guardian to do so on your behalf. Purpose of the processing answering your queries Legal basis Art. 6(1)(a) GDPR - your explicit informed consent You have the right to withdraw your consent at any time by email addressed to dataprotection@nextpharma.com. This will not affect the validity of the processing prior to the withdrawal of consent. Recipients of data relevant internal Departments Retention period The data provided to us through the website contact form will be stored in TYPO3-backend for 30 days and then automatically erased. Upon finalization of the processing of your query the data will be erased by the relevant internal Department. Visitors of our Website (www.nextpharma.com) This privacy notice provides information to visitors of our website. Personal data When you visit the NextPharma website, general information about your device hardware and interactions with our site is collected automatically (Server-Log-Data): IP-address Referrer URL (origin address) Operating system Browser type, version and language Date and time of the server request We store anonymized IP addresses for 60 days in server logfiles in order to ensure the security of data and the stability and safety of our website. The legal basis is Art. 6 (1)(f) GDPR. Cookies This website uses so called “cookies”. These are small text files which are stored on your computer and which your browser can retrieve. Cookies help to make our services more user-friendly, effective and secure. The legal basis is Art. 6 (1)(f) GDPR. The data collected is anonymous and you cannot be identified through it. The collected information will not be provided to third parties and the cookies will be deleted automatically at the end of your visit. You can prevent the installation of cookies by setting your browser software accordingly. However, in this case you may not be able to use all functions of our website. Google-Maps By visiting our website you may choose to use Google Maps for displaying interactive maps. Your browser establishes a direct connection with Google’s Servers. Google transmits the content of the map directly to your browser and for technical reasons communication data is exchanged. We have no influence on the processing of your data by Google and therefore are not able to provide you with binding information about the scope and the purposes for data processing by Google. For more information please refer to the Google Privacy Policy: https://policies.google.com/privacy Individuals who are connected with our Business Partners This privacy notice provides information to individuals who work for or on behalf of our business partners (B2B), such as contract givers, customers, suppliers, investors. Personal data private contact information (such as name, title, postal or email address) only if necessary business contact information (such as job title, department, telephone and fax number, name and address of company) Purpose of the processing business execution (concluding and executing of agreements, customer service, management of products and materials) organisation and management of the business (such as financial management, management reporting) legal and/or regulatory compliance (such as litigation and defense of claims) Legal basis Art. 6 (1)(b) GDPR – performance of a contract/pre-contractual steps Art. 6 (1)(f) GDPR - legitimate interests of the controller Sources of Data the individual himself another person or unit within/connected with the individual’s company Recipients of data The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will be shared only within the NextPharma group of companies which are located inside the Economic European Area Consequences if personal data is not provided negative influence on our ability to communicate with our business partners negative influence on our ability to enter into and perform contracts with our counterparts Retention period during the duration of the business relationship In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it. Job Applicants This privacy notice provides information about personal data processed in relation to individuals who apply for work with NextPharma. Personal data applications for employment, results of interviews personal contact details which job applicants provide us Purpose of processing decision on job application Legal Basis Art. 6 (1) GDPR a) your consent (e.g. for retention of application documents for more than 6 months; b) contract: the processing is necessary for entering into an employment contract. Recipients of data The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will be shared only within the NextPharma group of companies which are located inside the Economic European Area Consequences if personal data are not provided Personal data requested and provided by Applicants are required in order to fulfil legal requirements and/or for entering into a contract with them. Failure to provide us with the information requested which is limited to that required for these purposes may: negatively affect your chances of being selected for employment make the entering into contract with you not be possible Retention period data of successful candidates: according to the Privacy Notice - Employees below; data of unsuccessful applicants: 6 months after closure of the application process for the position. In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it or c) a longer period where the individual consents to the processing (in which case the individual has the right to withdraw their consent with effect for the future. Current or Former Employees of NextPharma Every individual within the NextPharma group of companies is responsible for protecting personal data about each other as well as that of our customers, business partners and suppliers. This privacy notice provides information about personal data processed by NextPharma in relation to individuals who are or were employees. Personal Data title name, name abbreviation marital status personal contact information birth day social security data tax data pay roll data and bank account wage and benefits information including beneficiary education information working time, absence, absence reason employment agreement job application data photo (in case you provided voluntarily photo with your job application or otherwise) We also process sensitive personal data such as data relating to individual’s health only where it is necessary for complying with employment and social security law. Purpose of processing to fulfill our obligations to comply with relevant laws and regulations to enter into/execute/terminate employment agreements Legal basis Art. 6 (1) GDPR: (a) your explicit consent (b) contract: the processing is necessary for conclusion and performance of the employment contract (c) legal obligation: the processing is necessary for you to comply with the law (d) vital interests: the processing is necessary to protect someone’s life (f) legitimate interests: the processing is necessary to protect NextPharma’s or an third party’s legitimate interest, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests Relevant national laws Recepients of data Health Insurance/Pension insurance/Tax Authorities/Employment Agency (only legally required transfer of data) authorized payroll service provider Retention period Information contained in your personal file is held for no longer than 10 years once your employment has terminated In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it. Consequences if personal data are not provided The processing of personal data is necessary for the performance of the employment relationship. Processing of certain data (tax data, social security data, work permits) is legally required. Failure to provide us with the information requested which is limited to that required for these purposes may lead to violation of law make the entering into contract with you not be possible Your Rights Each individual whose data NextPharma processes has the right to: Access their personal data processed by NextPharma (Art. 15 GDPR) Request correction of inaccurate personal data (Art. 16 GDPR) Request erasure of personal data, if this is legally permitted (Art. 17 GDPR) Request restriction of processing (Art. 18 GDPR) Receive personal data in a structured, commonly used and machine readable format (Art. 20 GDPR) Object to processing (Art. 21 GDPR) Lodge a claim with the supervising data protection authority (Art. 77 GDPR) Certain data processing is performed on the basis of your consent (e.g. processing of job applications for a longer period than 6 months, getting in contact with you upon receiving a query per our website contact form). In these cases, you have the right to withdraw your consent with effect for the future. This will not affect the validity of the processing prior to the withdrawal of consent. Who can You contact for more Information? If you have any issues, queries or complaints regarding the processing of your personal data please contact us Controller NextPharma GmbH Hildebrandstr. 12 37081 Göttingen, Germany Tel.: +49 551 382-0 Fax: +49 551 382-470 info(at)nextpharma.com Data Protection Officer NextPharma Group of companies Hildebrandstr. 12 37081 Göttingen, Germany Datenschutz(at)nextpharma.de / Dataprotection(at)nextpharma.com Who is my data controller NextPharma GmbH is usually the data controller for the processing of your personal data. However, in some cases NextPharma GmbH and its affiliates are joint data controllers or an affiliate is the only data controller of your personal data. Each company is listed below, and if you wish to identify the controller for any specific reason, please use the contact details as set forth below: NextPharma Germany BidCo GmbH Hildebrandstr. 12, 37081 Göttingen, Germany dataprotection@nextpharma.com NextPharma GmbH Hildebrandstr. 12, 37081 Göttingen, Germany dataprotection@nextpharma.com allphamed Pharbil Arzneimittel GmbH Hildebrandstr. 12, 37081 Göttingen, Germany dataprotection@nextpharma.com PenCef Pharma GmbH Hildebrandstr. 12, 37081 Göttingen, Germany dataprotection@nextpharma.com Pharbil Waltrop GmbH, Im Wirrigen 25, 45731 Waltrop, Germany dataprotection@nextpharma.com NextPharma Logistics GmbH, Stieghorster Straße 60, 33605 Bielefeld, Germany dataprotection@nextpharma.com PHARBIL Pharma GmbH Reichenberger Straße 43, 33605 Bielefeld, Germany dataprotection@nextpharma.com NextPharma Oy Niittyhaankatu 20, 33720 Tampere, Finland dataprotection@nextpharma.com NextPharma SAS 17 route de Meulan, B.P. 45 F-78520 Limay, France dataprotection@nextpharma.com NextPharma Technologies Holding Ltd Suite 612/613, 83 Victoria Street London SW1H 0HW, United Kingdom dataprotection@nextpharma.com Changes to these Privacy Notices These Privacy Notices may be changed over time. These Privacy Notices were last updated on 26 October 2020. Company News & Events Jobs & Careers Group Services Pharmaceutical Development Clinical Trials Services Analytical and Microbiological Services Commercial Manufacturing & Packaging NextPharmas Centres of Excellence Penicillins - Berlin Modified Release & Analytical Services - Bielefeld Liquid filled hard capsules - Edinburgh Solids & CTS - Göttingen Cephalosporins - Göttingen Liquids & Suppositories - Limay Lipid based formulations & Softgels - Ploërmel Hormones & Semi-solids - Waltrop Ophthalmics - Tampere © 2021 - NextPharma Technologies. All rights reserved. Legal Privacy