Principles on data processing at Acnos Pharma GmbH
You are visiting this page because you want to find out how we handle your personal data.
In order to fulfil our information obligations according to article 12 et seq. of the General Data Protection Regulation (GDPR), we would be pleased to provide you our principles on data procession below:
Who is responsible for processing personal data?
The data processor is:
Acnos Pharma GmbH
Kurbrunnenstr. 22
52066 Aachen
Germany
represented by Jochen Storandt.
Phone: +49 241 990363-95
eMail: info@acnospharma.de
Contact details of the data protection officer:
By post at the above address and the addition “data protection officer” or by email: datenschutz@acnospharma.de.
Which data of yours are processed by us? And for what purposes?
If we have received data from you, we will only process it for the purposes for which we received or collected it.
Data processing for other purposes can only be considered if the necessary legal requirements pursuant to article 6 para. 4 GDPR have been met. In this case, we will of course comply with any information obligations pursuant to article 13 para. 3 GDPR and article 14 para. 4 GDPR.
What is the legal basis for this?
The legal basis for the processing of personal data is article 6 GDPR, unless there are specific legal provisions. In particular, the following legal basis can be considered here:
• Consent (article 6 para. 1 lit. a) GDPR)
• Data processing for the performance of contracts (article 6 para. 1 lit. b) GDPR
• Data processing for the purposes of a legitimate interest (article 6 para. 1 lit. f) GDPR)
• Data processing to fulfil a legal obligation (article 6 para. 1 lit. c) GDPR)
If personal data is processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.
If we process data on the basis of a legitimate interest, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of article 21 GDPR.
How long is the personal data stored?
We process the data as long as this is necessary for the respective purpose.
Insofar as legal storage obligations exist – e.g. in commercial law or tax law – the relevant personal data will be stored for the duration of the storage obligation. After the retention period has expired, we will check whether further processing is necessary. If a legal obligation no longer exists, the data is deleted.
At the end of a calendar year, we always check the data with regard to the need for further processing. Due to the amount of data, this check is carried out with regard to specific data types or purposes of processing.
Of course, you can at any time (see below) request information about the personal data we have stored about you and, if this is not necessary, request that the data be deleted or that processing be restricted.
To which recipients will the data be forwarded?
Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the passing on is permissible on the basis of a weighing of interests within the meaning of article 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent in this respect.
Where is the data processed?
Your personal data will be processed by us exclusively in computer centres of the Federal Republic of Germany.
Your rights as a data subject
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, get access to the personal data by us.
In the case of a request for information which is not made in writing, we ask for your understanding that we may then demand proof from you that you are the person you claim to be.
Furthermore, you have the right to correction or deletion or to restriction of the processing to the extent to which you are legally entitled to do so.
Furthermore, you have the right to object to the processing within the scope of the statutory provisions. A right to data protability also exists within the framework of data protection regulations.
In particular, you have a right to object under article 21 (1) and (2) GDPR against the processing of your data in connection with direct advertising if this is done on the legal ground of a legitimate interest.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority complain to a data protection supervisory authority about the processing of personal data by us.