This data protection declaration describes how we, Apurano Pharmaceuticals GmbH, Birkerfeld 12, 83627 Warngau (hereinafter: “Apurano”, “we”, or “us”), responsible for data processing, collect, store and process information about individual visitors to this website.
1. Commitment to Data Protection
Personal data is all information about personal or factual circumstances that relate to an identified or identifiable person. These are e.g. B. Your name, date of birth, e-mail address, postal address or telephone number. On the other hand, no personal data is information of a general nature, with the help of which your identity cannot be determined. These are e.g. B. the number of users of a website.
In principle, we will only use your personal data in accordance with the applicable data protection laws, in particular the European General Data Protection Regulation (“GDPR”), and only as described in this data protection declaration. However, we reserve the right to use this data for additional purposes insofar as this is legally permissible or prescribed or necessary to support legal or criminal investigations. In this case, we will, to the extent required by law, inform you again about this further data processing and obtain your consent to it.
2. Processing of personal data and legal bases
Registration is not required for most of our service offerings. So you can visit our website without telling us who you are.
We only collect and process access data that your internet browser automatically transmits to us for technical reasons in order to provide the website. Depending on the access log used, the log data record contains general information with the following content: your session data (user behavior, length of stay, which links were clicked, etc.), your abbreviated or unabridged IP address, your browser version, your operating system, your website-specific settings , your cookie IDs, your pixel IDs. This data does not allow any direct conclusions to be drawn about your person and is processed to improve our website offering and to ward off attempts to attack our web server.
The legal basis for the processing of your personal data is the protection of our legitimate interests, which consist in particular of presenting you with a website optimized for your browser and enabling communication between our server and your end device (Art. 6 Para. 1 lit. f ) GDPR).
Otherwise, we only collect personal data from you if you voluntarily provide it to us on the website, e.g. B. when you set up a user account or register for a newsletter, place an order or contact us.
You can also visit the website in general without disclosing personal data. In this case, however, it is possible that you will not be able to use certain areas of the website or that we will not be able to answer an inquiry from you.
2.2. contact requests
For inquiries via our contact form, e.g. it is necessary to state your name, your address, your e-mail address, your telephone number, your reason for contacting us and your message.
We process and store the personal data provided in the contact request solely to process and answer your request and to get in touch with you.
The legal basis for the processing of your personal data is the fulfillment of our contractual obligations (Art. 6 Para. 1 lit. b) DS-GVO) or the protection of our legitimate interests, which consist in particular in contacting you and to the to communicate relevant concerns about which you have contacted us (Art. 6 Para. 1 lit. f) GDPR).
When registering for our newsletter service, among other things your name, your e-mail address and your postal address are required. If you gave us your consent to data processing when registering for the newsletter service, we process and store the personal data provided when registering for the newsletter exclusively to provide the newsletter service and you in accordance with the newsletter service you have subscribed to Communicate about Apurano events, products, services and/or promotions.
If you consented to this when registering for the newsletter, we can also analyze your user behavior when you open the relevant newsletter and process the data collected in the process for the personalization of future newsletters and other advertising communication.
The legal basis for the processing of your personal data is your consent (Art. 6 Para. 1 lit. a) GDPR).
You can revoke your consent at any time with effect for the future. You can find further information on revocation under Section 7.
2.4. Orders and Services
When ordering products and services via the website (e.g. information material, brochures, etc.) your name, your e-mail address and postal address and, if applicable, your payment details are required.
We process and store the personal data provided when you place an order solely to provide you with the products and services you have ordered. The legal basis for the processing of your personal data is Article 6 Paragraph 1 Letter b) DSGVO.
2.5. (Virtual) events
If you take part in one of our (virtual) events, we process not only your registration details [this includes in particular your first and last name, your email address and, if applicable, your uniform training number (EFN number) or lifelong doctor’s number (LANR); cf. above Section 2.1.] possibly other personal data that you transmit to us as part of your participation in the event. In particular, we process your text input if you use the chat function during an event or your voice or video signal if you activate your microphone or camera during a virtual event. If you participate in live polls, quizzes or Q&A sessions as part of a (virtual) event, we and other event participants may be able to view and analyze your answers or reactions.
In the context of CME-certified training events, we also process your registration details in order to be able to document your participation. This documentation serves solely to provide evidence and recognition of your participation in the respective training event and the approval of the corresponding CME training credits. For this purpose, we store your participant data and, upon request, transmit them to the responsible chamber (e.g. state medical association, federal pharmacist association, etc.).
We process the personal data transmitted to us in the context of a (virtual) event in order to provide you with our (virtual) events with the corresponding functionalities and, if necessary, to prove your participation to the responsible chamber. If you take part in live surveys, quizzes or Q&A sessions as part of a (virtual) event, we process your answers or reactions in aggregate and exclusively to obtain an opinion of the event participants. The legal basis for the processing of your personal data is the fulfillment of our contractual obligations, which consist in particular of offering you the respective (virtual) event and enabling your participation (Art. 6 Para. 1 lit. b) DSGVO) or our legitimate interests, which consist in particular of making (virtual) events as interactive as possible (Art. 6 Para. 1 lit. f) DSGVO) or your consent (Art. 6 Para. 1 lit. a) DSGVO), the granting of which may also be necessary can be done conclusively.
2.6. Reports of side effects (vigilance reports)
Apurano is legally obliged to find out about undesirable side effects and interactions, the lack of drug effectiveness, quality complaints and/or other aspects related to the safety or quality of Apurano products. In the case of medical devices, this also applies to products sold or supplied by Apurano.
For this reason, we are obliged to check the communication with you on our website (e.g. via the chat function during a virtual event or as part of a contact request to us) for vigilance reports. If you provide us with relevant information about Apurano products, we will evaluate and check your information (which may include information about your state of health, side effects and, if applicable, your name) in this regard. For this purpose, we may also contact you if we have any questions.
Furthermore, Apurano is legally obliged to report side effects and serious incidents with medical devices, including to the responsible health authorities, whereby we only pass on your information in pseudonymous form, so that no information that directly identifies you is communicated. We can also share this information with other Apurano group companies, provided that they are themselves obliged to report to the health authorities responsible for them.
The legal basis for the processing of your personal data is the public interest in the field of public health to ensure high quality and safety standards in healthcare and for medicinal products and medical devices (Art. 9 Para. 2 lit. i DSGVO in conjunction with Section 22 Para. 1 No. 1 lit. c BDSG).
3. Cookies and Similar Technologies
4. Disclosure of Personal Data
Apurano will not pass on your personal data to third parties or otherwise disseminate them, unless this is necessary for the performance of our services (legal basis for processing: Art. 6 Para. 1 lit. b) DSGVO), you have consented to the transfer – e.g . B. to other Apurano Group companies – consented (legal basis for processing: Art. 6 Para. 1 lit. a) GDPR) or the transfer of data is permitted on the basis of relevant legal provisions.
Apurano is entitled, within the framework of the data protection regulations, to outsource the processing of your personal data in whole or in part to external service providers who work for Apurano as processors in accordance with Art. 4 No. 8 DSGVO. External service providers support us e.g. B. in the technical operation and support of the website, data management, the provision and provision of services, marketing and website analysis, as well as the implementation and fulfillment of vigilance reporting obligations. The service providers commissioned by Apurano process your data exclusively in accordance with our instructions. Apurano remains responsible for the protection of your data, which we ensure through strict contractual regulations, technical and organizational measures and additional controls.
Personal data can also be processed in other ways and also disclosed to third parties if we are legally required to do so – e.g. by court order or to fulfill legal obligations – such as e.g. B. the official vigilance regulations – are obliged (legal basis of the processing: Art. 6 Para. 1 lit. c) DS-GVO) or this to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to Protecting legitimate interests (legal basis for processing: Art. 6 Para. 1 lit. b) GDPR), such as for the provision of joint content, products and services.
5. Data transfers to third countries
We and our external service provider process your personal data within the European Union (EU) or the contracting states of the Agreement on the European Economic Area (EEA). However, in the event that your personal data is transmitted to a service provider based in a third country and processed there, Apurano ensures the protection of your personal data by means of suitable guarantees, such as B. the conclusion of standard data protection clauses.
6. Duration of storage
Your personal data will only be stored by us for as long as it is necessary to achieve the purposes for which this data was collected or – insofar as there are longer statutory retention periods (e.g. in the German Commercial Code and the Fiscal Code) – for the duration the legally prescribed storage. We will then delete your personal data. Only in a few exceptional cases can your data be stored beyond this, e.g. B. the storage is necessary in connection with the enforcement and defense of legal claims in favor of Apurano.
7. Your data protection rights
In accordance with the applicable data protection law, you are entitled to the following rights, in particular in accordance with the statutory requirements:
- Right to information, correction, deletion and restriction: You have the right to request information about your personal data stored by us at any time. When we process or use your personal information, we strive to take reasonable steps to ensure that your personal information is accurate and up-to-date for the purposes for which it was collected. In the event that your personal data is incorrect or incomplete, you can request that this data be corrected. Furthermore, you may have the right to request the deletion or restriction of processing of your personal data if e.g. B. there is no longer a legitimate business purpose for such processing in accordance with this data protection declaration or applicable law and statutory retention requirements that do not require further storage.
- Right to data transferability: You may have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format or to transmit this data to another person responsible.
- Right to revoke the consent you have given: If you have consented to the collection, processing and use of your personal data, you can revoke your consent at any time with effect for the future, but without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation is touched.
- Right of objection pursuant to Art. 21 Para. 1 and 2 DS-GVO: You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 lit e) or f) GDPR takes place. We do not process your personal data after an objection, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (cf. Art. 21 para. 1 GDPR, so-called “limited right of objection”). In this case, you must provide reasons for the objection that arise from your particular situation.
Furthermore, you have the right to object to the processing of your personal data for direct marketing purposes at any time, even without giving reasons
To enforce your data protection rights, you can contact us at any time using the contact options given in Section 11. In this case, please indicate the name of the website concerned and attach a corresponding identification of your person.
You also have the right to complain to the competent supervisory authority if you believe that your personal data is not being processed lawfully. The supervisory authority responsible for Apurano is the Bavarian State Office for Data Protection Supervision; Postal address: PO Box 606, 91511 Ansbach; Telephone: +49 (0) 981 53 1300; Email: firstname.lastname@example.org.
8. Security and Confidentiality
To ensure the security and confidentiality of the personal information we collect on the Site, we use data networks protected by, among other things, industry standard firewalls and password systems. When handling your personal data, we take appropriate technical and organizational measures to protect your data from loss, misuse, unauthorized access, disclosure, alteration or destruction and to ensure availability.
9. Personal Information and Children
Most of the services available on this website are intended for people over the age of 18. Any person requesting information about a medicine authorized for use in children must be over 18 years of age. We will not knowingly collect, use or disclose Personal Information from minors under the age of 18 without first obtaining consent from a legal guardian (e.g., a parent or guardian) through direct offline contact. The legal guardian receives (i) information about the specific type of personal data collected from the minor, (ii) for what purpose it is used and (iii) the opportunity to object to any further collection, use or storage of such information. We comply with youth protection laws.
10. Links to Other Sites
The website may contain links to other websites. We have no control over the privacy practices or the content of those other websites. Therefore, we encourage you to carefully read the privacy policies of those other websites you visit.
11. Contact Details
If you have any questions about the processing of your personal data or would like to exercise your above rights, please let us know by referring to this website
Apurano Pharmaceuticals GmbH
You can reach our data protection officer at the following contact address:
Apurano Pharmaceuticals GmbH
12. Subject to change
Status: 05 December 2022