Data Protection

Privacy Notices

Information according to Art. 13 und Art. 14 GDPR

These Privacy Notices provide information regarding the personal data which is processed within the NextPharma group of companies and explains what personal data is processed, for which purposes, how long we hold the personal data and your rights in this respect. Please select the privacy notice relevant to you from those below.

 

Individuals who are not connected with our Business Partners

This privacy notice provides information to individuals who are not connected with our business partners (B2B) and contact us by phone, post, email or fax.

Personal data

You decide which information is necessary for answering your queries you provide us:

·         email address

·         other data, which you provide us voluntarily

 

*Special Note – processing personal data of Children

If you are under 16 years old please do not send us your personal data (for example, your name, address and email address). If you wish to ask NextPharma a question please get your parent or guardian to do so on your behalf.

Purpose of the processing

·         answering your queries

Legal basis

·         Art. 6(1)(a) GDPR - your explicit consent

You have the right to withdraw your consent at any time.  This will not affect the validity of the processing prior to the withdrawal of consent.

Recipients of data

·         relevant internal Departments

 

Retention period

·         Upon finalization of the processing the data will be erased.

Visitors of our Website (<link www.nextpharma.com/&gt;www.nextpharma.com</link>)

This privacy notice provides information to visitors of our website.

Personal data

When you visit the NextPharma website, general information about your device hardware and interactions with our site is collected automatically:

·         IP-address

·         Data which your Browser transfers automatically  (operating system of your device, the name, language and version of your internet service provider, the last visited Website)

·         Time of your visit

Cookies
We use a so-called „session-cookie“ which temporarily saves a session-ID. It will be deleted as soon as you close the browser.  We do not use other cookies.

Purpose of the processing

·         improvement of our website functionality

·         evaluation of disturbances

Legal basis

·         Art. 6 (1)(f) GDPR – legitimate interests of the controller

Recipients of data

·         none

Retention period

·         for the time of your visit on our website

 

Individuals who are connected with our Business Partners

This privacy notice provides information to individuals who work for or on behalf of our business partners (B2B), such as contract givers, customers, suppliers, investors.

Personal data

·         private contact information (such as name, title, postal or email address) only if necessary

·         business contact information (such as job title, department, telephone and fax number, name and address of company)
 

Purpose of the processing

·         business execution (concluding and executing of agreements, customer service, management of products and materials)

·         organisation and management of the business (such as financial management, management reporting)

·         legal and/or regulatory compliance (such as litigation and defence of claims)

Legal bases

·         Art. 6 (1)(b) GDPR – performance of a contract/pre-contractual steps

·         Art. 6 (1)(f) GDPR - legitimate interests of the controller

Sources of Data

·         the individual himself

·         another person or unit within/connected with the individual’s company

Recipients of data

The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will only be shared on a strict need to know basis with: The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will only be shared on a strict need to know basis with: The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will only be shared on a strict need to know basis with:The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will be shared only

·         within the NextPharma group of companies which are located inside the Economic European Area

Consequences if personal data is not provided

·         Failure to provide us with the information required will negatively affect our ability to communicate with you, or our ability to enter into a contract with a counter-party or continuing to contract with a counter-party. Failure to provide us with the information required will negatively affect our ability to communicate with you, or our ability to enter into a contract with a counter-party or continuing to contract with a counter-party. Failure to provide us with the information required will negatively affect our ability to communicate with you, or our ability to enter into a contract with a counter-party or continuing to contract with a counter-party.negative influence on our ability to communicate with our business partners

·         negative influence on our ability to enter into and perform contracts with our counterparts

Retention period

·         during the duration of the business relationship

In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it.

 

Job Applicants

This privacy notice provides information about personal data processed in relation to individuals who apply for work with NextPharma.

Personal data

·         applications for employment, results of interviews

·         personal contact details which job applicants provide us

 

Purpose of processing

·         decision on job application

Legal Bases

·         Art. 88 GDPR in conjunction with §26 German Data Protection Law (BDSG);

·         Art. 6 Abs. 1 (a) DSGVO (consent for retention of application documents for more than 6 months).

Recipients of data

The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will be shared only

·         within the NextPharma group of companies which are located inside the Economic European Area 

Consequences if personal data are not provided

Personal data requested and provided by Applicants are required in order to fulfil legal requirements and/or for entering into a contract with them. Failure to provide us with the information requested which is limited to that required for these purposes may:

·         negatively affect your chances of being selected for employment

·         make the entering into contract with you not be possible

Retention period

·         data of successful candidates: according to the Privacy Notice - Employees below;

·         data of unsuccessful applicants: 6 months after closure of the application process for the position.

 

In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it or c) a longer period where the individual consents to the processing (in which case the individual has the right to withdraw their consent with effect for the future.

 

Current or Former Employees of NextPharma Every individual within the NextPharma group of companies is responsible for protecting personal data about each other as well as that of our customers, business partners and suppliers.

This privacy notice provides information about personal data processed by NextPharma in relation to individuals who are or were employees.

Personal Data

·         title

·         name, name abbreviation

·         marital status

·         personal contact information

·         birth day

·         social security data

·         tax data

·         pay roll data and bank account

·         wage and benefits information including beneficiary

·         education information

·         working time, absence, absence reason

·         employment agreement

·         job application data

·         photo (in case you provided voluntarily photo with your job application or otherwise)

We also process sensitive personal data such as data relating to individual’s health only where it is necessary for complying with employment and social security law.

Purpose of processing

·         to fulfill our obligations to comply with relevant laws and regulations

·         to enter into/execute/terminate  employment agreements

Legal basis

·         Art. 88 GDPR in conjunction with §26 BDSG

Recepients of data

·         Health Insurance/Pension insurance/Tax Authorities/Employment Agency (only legally required transfer of data)

·         authorized payroll service provider

Retention period

·         Information contained in your personal file is held for no longer than 10 years once your employment has terminated

 

In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it.

Consequences if personal data are not provided

The processing of personal data is necessary for the performance of the employment relationship. Processing of certain data (tax data, social security data, work permits) is legally required.

Failure to provide us with the information requested which is limited to that required for these purposes may

·         lead to violation of law

·         make the entering into contract with you not be possible 

 

Your Rights

Each individual whose data NextPharma processes has the right to:

 

·         Access their personal data processed by NextPharma (Art. 15 GDPR)

·         Request correction of inaccurate personal data (Art. 16 GDPR)

·         Request erasure of personal data, if this is legally permitted (Art. 17 GDPR)

·         Request restriction of processing (Art. 18 GDPR)

·         Receive personal data in a structured, commonly used and machine readable format (Art. 20 GDPR)

·         Object to processing (Art. 21 GDPR)

·         Lodge a claim with the supervising data protection authority (Art. 77 GDPR)

 

Certain data processing is performed on the basis of your consent (e.g. processing of job applications for a longer period than 6 months). In these cases, you have the right to withdraw your consent with effect for the future. This will not affect the validity of the processing prior to the withdrawal of consent.

 

 

Who can You contact for more Information?

If you have any issues, queries or complaints regarding the processing of your personal data please contact us

Controller:

NextPharma GmbH

Hildebrandstr. 12

37081 Göttingen, Germany

Tel.: +49 551 382-0
Fax: +49 551 382-470

<link info@nextpharma.com>info@nextpharma.com</link>

Data Protection Officer:

NextPharma Group of companies

Hildebrandstr. 12

37081 Göttingen, Germany

<link Datenschutz@nextpharma.de>Datenschutz@nextpharma.de</link>

<link Dataprotection@nextpharma.com>Dataprotection@nextpharma.com</link><link Dataprotection@nextpharma.com></link>

Changes to this Privacy Notice

This Privacy Notice may be changed over time. This Privacy Notice was last updated on 1 February 2019.