Data protection declaration of Pharmaserv GmbH, as of November 2024
I. Preface
Pharmaserv GmbH ("we") is delighted that you have shown interest in our website (www.pharmaserv-logistics.com). We attach great importance to data protection. We take your privacy very seriously and would like to inform you through this privacy policy about what personal data is processed when you visit our website, to what extent and for what purpose.
II. Name and contact details of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:
Pharmaserv GmbH
Emil-von-Behring-Straße 76
35041 Marburg
Germany
Phone: +49 6421 39-2800
E-mail: info(at)pharmaserv-logistics.com
III. Name and contact details of the data protection officer
The data protection officer appointed by us is:
Stephan Menzemer,
acting on behalf of GvW Graf von Westphalen GmbH
E-mail: dataprotection@infrareal.de
IV. General information on data processing
1. Scope of the processing
We only process personal data of visitors to our website insofar as this is necessary to provide a functional website and the content and services we provide there.
2. Legal bases
Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
When processing personal data that is required to fulfill a contract with you as a contracting party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to such processing that is necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation, to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
3. Storage period
Your personal data will generally be deleted as soon as it is no longer required for the purpose of processing. Further storage may take place if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. However, your personal data will then be restricted for other processing except for the purpose of storage. This restricted data will be deleted when the storage period prescribed by the aforementioned legal provision expires. Your data cannot be deleted or restricted if this data is necessary for the assertion, exercise or defense of our legal claims.
4. Recipients of the personal data
When processing personal data, we work together with the affiliated companies of our group of companies as required, e.g. for billing purposes. In such cases, we may transfer your personal data to the affiliated companies in our group of companies. In addition, IT service providers who work for us will also receive your personal data.
V. Provision of the website and creation of log files
1. Description and scope of the processing
Each time you visit our website, our system automatically collects data and information from your device.
The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The IP address of the user
- Date and time of access
- Websites from which the user accesses our website
- Websites that are accessed by the user via our website
- This data is stored in the log files of our system. This data is not stored together with your other personal data.
2. Legal basis
The legal basis for the processing of data and log files is our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
3. Purpose
The temporary storage of your IP address by our system is necessary to enable delivery of the website to your end device. For this purpose, your IP address must be stored for the duration of the session. It is stored in log files to ensure the functionality of our website. We also use the data to optimize the website and to ensure the security of our IT systems. The aforementioned purposes represent our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
4. Storage period
The data for accessing our website is deleted when the respective browser session has ended. The data in log files is deleted after seven days at the latest. Storage beyond this period is possible. In this case, however, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing end device.
VI. Use of cookies
1. Description and scope of data processing
We also use cookies on our website that enable an analysis of users' browsing behavior (see section VIII. Google Analytics). The user data collected in this way is pseudonymized through technical measures. It is therefore no longer possible to assign this data to the user accessing websites. The data is not stored together with other personal user data.
When accessing our website, users are informed about the use of cookies for analysis purposes via an info banner and their consent to the processing of personal data in this context is obtained. Reference is also made to this privacy policy. Additonally there is information about how the storage of cookies can be prevented through browser settings.
2. Legal basis
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR and § 25 para. 2 no. 1 TDDDG.
The legal basis for the processing of personal data using cookies for analysis purposes is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
3. Purpose
The purpose of using technically necessary cookies is to simplify the use of our website for you. Some functions of our website cannot be provided without the use of cookies. These functions require your browser to be recognized even after you leave our website. The user data collected by technically necessary cookies is not used to create user profiles.
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our services. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
4. Storage period
Cookies are stored on your end device and transmitted from it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
VII Google Tag Manager
We use Google Tag Manager (GTM) from Google on our website to manage JavaScript and HTML tags for tracking and analysis with our own and third-party software (e.g. Google Analytics). The GTM is only an auxiliary service that facilitates the integration and management of our tags via a separate interface. The GTM itself does not set its own cookies. It merely triggers other tracking and analysis services tags, which in turn collect your personal data if you have given your consent. However, GTM does not access this data.
The legal basis for the use of GTM is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the above-mentioned management of our tracking and analysis services.
You can find more information about Google Tag Manager at https://support.google.com/tagmanager/answer/6102821?hl=en
VIII. Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyze your behavior as a website visitor. We receive various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is assigned to the user's end device. It is not assigned to a user ID.
We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data records and uses machine learning technologies for data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:
https://privacy.google.com/businesses/controllerterms/mccs/
IP anonymization
We have activated the IP anonymization setting on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent the processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en
IX. Google Ads
This website uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:
https://policies.google.com/privacy/frameworks?hl=en and
https://privacy.google.com/businesses/controllerterms/mccs/
X. Google Ads Remarketing
This website uses Google Ads Remarketing. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads Remarketing allows us to assign users who interact with our online offering to specific target groups so that we can then display interest-based advertising in the Google advertising network (a process known as remarketing or retargeting). Likewise, the advertising target groups created with Google Ads Remarketing can be linked to the cross-device functions of Google. This means that interest-based, personalized advertising that has been adapted to the user based on their previous usage and surfing behavior on their device (e.g. tablet) can also be displayed on another of the user's devices (e.g. cell phone).
If you have a Google account, you can opt out of personalized advertising at the following link: https://adssettings.google.com/anonymous?hl=de.
This service is provided on the basis of your consent in accordance with Art. 6 (1) a GDPR and Section 25 (1) TDDDG. This consent can be withdrawn at any time.
Further information can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.
Data transfer to the US is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://policies.google.com/privacy/frameworks?hl=de and
https://privacy.google.com/businesses/controllerterms/mccs/
XI. Google Maps
We use the Google Maps service on our websites. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of Google Maps is your consent in accordance with Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR.
When you visit our websites, Google receives the information that you have accessed the respective subpages. In addition, the data mentioned in section V of this declaration is transmitted. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google account before accessing the Google Maps map. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of data collection and processing by Google can be found in Google's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://www.google.com/intl/en/policies/privacy.
XII. Contact form and e-mail contact
1. Description and scope of the processing
There is a "Call service" form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask is transmitted to us in encrypted form. The data is no longer stored on the website once it has been sent to the controller by email. The data in the input mask are
- Name
- E-Mail-Address
- Company
- Phone number
- Note
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with your e-mail will be processed by us.
2. Legal basis
The legal basis for the processing of personal data transmitted when using the "Call service" form or sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is also the legal basis.
3. Purpose
The processing of the personal data from the input mask serves us to process the contact.
If you contact us by email, our legitimate interest in processing your personal data lies in processing the contact.
4. Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the "Call service" form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
5. Right to object
If you contact us via the contact form or e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. Please send this information to info(at)pharmaserv-logistics.com. All personal data stored in the course of registration will be deleted in this case.
XIII. LinkedIn Insight Tag
The so-called Insight Tag of the social network LinkedIn is used on our website. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter "LinkedIn"). The LinkedIn Insight tag is a small JavaScript code snippet that we have added to our website.
The LinkedIn Insight tag enables the collection of data about visits to our website, including URL, referrer URL, shortened IP address, device and browser characteristics, timestamps and page views. LinkedIn does not share any personal data with us, but only provides aggregated reports on website audience and ad performance. LinkedIn also offers retargeting for website visitors so that we can use this data to display targeted advertising outside our website without identifying the member.
LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To deactivate the Insight tag on our website ("opt-out"), click here.
The LinkedIn Insight tag is used for the purpose of enabling detailed campaign reports and obtaining information about visitors to our website. As a LinkedIn Marketing Solutions customer, we use the LinkedIn Insight tag to track conversions, retarget our website visitors and gain additional information about the LinkedIn members who view our ads.
The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days.
XIV. Walls.io
We have implemented a social wall on our website. The provider of the social wall is Walls.io GmbH, Schönbrunner Straße 213/215, 3rd floor, 1120 Vienna, Austria (‘Walls.io’).
With the social wall, we can display social media content from platforms such as LinkedIn on our website without a connection to the respective provider. The content on the social wall is visible to everyone, including people who are not registered on the respective platform.
When you visit our website, your IP address is logged by the walls.io servers in order to display the social wall to you. No personal data is transmitted to social media platforms.
The legal basis for the use of Walls.io is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the platform-independent integration and display of social media content.
You can prevent the Social Wall from being displayed on our websites by deactivating JavaScript in your browser. In this case, our website may not be fully available and individual content may be missing. Further information on data protection can be found in the privacy policy of Walls.io: walls.io/privacy.
XV Integration of YouTube videos
We have included videos in our online services that are hosted on www.YouTube.com and can be played directly from our website. These are all integrated in the so-called "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the next paragraph be transmitted. We have no influence on this data transmission.
By accessing the web page with the video, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under section V of this declaration is transmitted. This takes place regardless of whether you have a user account with Google as the provider of YouTube that you are logged in to or whether you do not have a user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want a video to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other YouTube users about your activities on our website. You can object to the creation of such a user profile at YouTube.
Further information on the purpose and scope of processing by YouTube can be found in their privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.com/intl/en/policies/privacy.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/
Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified in accordance with the DPF undertakes to comply with these data protection standards.
XVI. Your rights as a data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. Right of access (Art. 15 GDPR)
In principle, you have the right to receive information about the points mentioned in Art. 15 GDPR. You also have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR.
2. Right to rectification (Art. 16 GDPR)
You have the right to have incorrect personal data concerning you corrected.
3. Right to restriction of processing (Art. 18 GDPR)
If the requirements of Art. 18 GDPR are met, you have the right to restrict the processing of your personal data, i.e. to prevent further processing for the time being.
4. Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data if further processing is no longer necessary, the processing is unlawful or you have withdrawn your consent.
5. Right to data portability (Art. 20 GDPR)
Within the limits of Art. 20 GDPR, you have the right to receive your personal data in a machine-readable format in order to forward it or have it forwarded to another controller if necessary.
6. Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
We will then no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
7. Right to withdraw your consent
You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
8. Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 31 63
65021 Wiesbaden
Phone: 06 11/140 80
E-mail: poststelle@datenschutz.hessen.de
XVII. Privacy policy for social media
Here you can find the privacy policy for our LinkedIn profile:
To the privacy policy