Data protection declaration
With this data protection declaration, Vetter would like to inform you how your personal data are being handled. In any case, your data are being processed in accordance with the Regulation (EU) 2016/679 (“General Data Protection Regulation” or GDPR), national legislation on data protection and the present data protection declaration.
1. Scope of application and special information on data protection
The present data protection declaration is applicable for collecting, processing and using (“processing”) your personal data in connection with the Internet offering of Vetter under https://www.vetter-pharma.com (“website”).
In Vetter’s eyes, the protection of your privacy and a maximum of transparency form the basis for a successful and trusting cooperation. Therefore, you will find the following special information below:
- Information on data protection for our suppliers
- Information on data protection for clients and other concerned parties
2. Name and address of the controller
The controller within the meaning of the GDPR and other national data protection laws is:
Vetter Pharma-Fertigung GmbH & Co. KG
88212 Ravensburg, Germany
(“Vetter“ or, respectively, “we")
3. Name and address of the data protection officer
The external data protection officer of the controller is:
Mr. Henrik von Kunhardt
85276 Pfaffenhofen, Germany
4. Use of the website
When you call up our website, your browser will transmit certain data to our web server - a technical necessity. So as to enable you to visit our website, information on (1) the browser types and versions, language, (2) the operating system and access status, (3) the referrer URL (i.e. the website visited before), (4) the sub-pages targeted, (5) the date and time of access, (6) die IP address of the user, (7) the Internet service provider, and (8) websites called up via our website is stored and used temporarily. These data are stored in the log files of the server. Such information will not be combined with other personal data of the user.
The legal basis for storing the data and the log files is Article 6 paragraph 6 lit. f) GDPR. Temporary storage of the data is necessary to correctly deliver the contents of the website. Storage in log files has the objective of optimising the website, ensuring permanent functionality of our IT systems and of arranging derivation of personal data in case of unauthorised attempts to access our server. An analysis of the data for marketing purposes does not take place.
The data are erased as soon as they are no longer necessary for achieving the purpose of their collection. In case of collection of the data to provide the website, this is the case as soon as the respective session is finished. When the data are stored in log files, this is the case after seven days at the latest. Storage beyond that is possible. In this case, the IP addresses are erased or digitally altered so that it is no longer possible to match them to the client.
5. Restricted transfer to third parties
So as to offer our website and related services (e.g. newsletter), Vetter has partly assigned the processing of personal data to specialised external providers. We select our service providers carefully and request that they process personal data only on our behalf and strictly according to our instructions on the basis of relevant agreements on contract data processing. Personal data are not sold or rented to third parties and are disclosed only if we are required to do so by law or if disclosure is lawfully ordered by public authorities or prosecutors.
The legal basis for processing personal data using cookies is Article 6 paragraph 1 lit. b) GDPR. The data collected in this manner are pseudonymised by technical means. Matching them to the user is therefore not possible. The data are not stored together with other personal data.
We use optional cookies for website analysis and marketing purposes. The legal basis is your consent in accordance with Article 6 paragraph 1 lit. a) GDPR. Details on this, on your consent and how you can revoke it can be found in our cookie declaration.
7. Newsletter and tracking pixel
On our website, Vetter offers you the opportunity of subscribing to a free newsletter. When registering for the newsletter, the data from the input mask, but at least a valid E-mail address of the user will be transmitted. These data are exclusively used for the proper mailing of the newsletter. When registering for the newsletter, (1) the IP address of the computer calling and (2) the date and time of registration are collected so as to be able to track the possible abuse of the E-mail address of a user at a later point in time. The newsletters contain an embedded miniature diagram to permit log file recording and a log file address (tracking pixel). From this tracking pixel, Vetter can see whether and when an E-mail from the person concerned was opened and which of the links in the E-mail were clicked on by this individual. Vetter uses tracking pixels for the statistical analysis of the success or failure of marketing campaigns so as to optimise the distribution of the newsletter and to even better adjust the content of future newsletters to the interests of the person concerned. For this processing of data, your consent is requested in connection with the registration process with reference to this data protection declaration. The legal basis for processing personal data after registration for the newsletter is Article 6 paragraph 1 lit. a) GDPR if the user has given their consent.
The data are erased as soon as they are no longer necessary for achieving the purpose of their collection, i.e. they are stored only as long as the subscription to the newsletter is active. Subscription of the newsletter may be terminated at any time. A link for this purpose is found in every newsletter. It is also possible to contact firstname.lastname@example.org directly at any time.
8. Online-Meetings with Microsoft Teams
8.1 Purpose of Processing
We use "Microsoft Teams" to conduct telephone conferences, Online-Meetings, video conferences or webi-nars (hereinafter referred to as "Online-Meetings"). "Microsoft Teams" is a ser-vice provided by Microsoft Corporation with headquarters in Redmont, USA.
8.2 Nature of Data Processed
When using "Microsoft Teams", different types of data are processed. The extent of the data also depends on the infor-mation you provide when participating in an online meeting. To participate in an online meeting, you must at least provide information about your name. Data types can be:
User information: First name, last name, phone (optional), e-mail address, password (if Single-Sign-On is not used), profile picture (optional), department (optional)
Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.
When dialing in by phone: information on incoming and outgoing phone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.
Text, audio and video data: You may be able to use the chat-, question- or survey functions in an online meeting. To this extent, the text entries you make are processed to display and, if necessary, log them in the online meeting. To enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed during the online meeting. You can switch off or mute the camera or microphone yourself at any time via the applications.
If Online-Meetings are to be recorded, we will inform you transparently in advance and - if necessary - ask for your consent. The fact of the recording will also be displayed in the application. If it is necessary for the purpose of recording the results of an online meeting, we will log the chat content. However, this will usually not be the case. In the case of webinars, we can also process the questions asked by webinar participants for the purposes of recording and follow-up of webinars. Automated decision making in the sense of Art. 22 DSGVO is not used.
The personal data will be deleted as a matter of principle if there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfil contractual services, to check and grant or ward off warranty and, if appli-cable, guarantee claims.
8.3 Legal Basis
As far as personal data of employees of Vetter are processed, § 26 BDSG is the legal basis for data processing. If, in connection with the use of "Microsoft Teams", personal data are not required for the establishment, execution or termination of the employment relationship, but are nevertheless an elementary component of the use of "Microsoft Teams", Art. 6 para. 1 lit. f) DSGVO is the legal basis. In these cases, we are interested in the effective conduct of Online-Meetings.
In addition, the legal basis for data processing in the conduct of Online-Meetings is Art. 6 para. 1 lit. b) DSGVO, insofar as the meetings are conducted within the framework of contractual relationships.
If no contractual relationship exists, the legal basis is Art. 6 para. 1 lit. f) DSGVO. Here too, we are interested in the effective implementation of Online-Meetings.
8.4 Transfer of Data
Personal data processed in connection with participation in Online-Meetings will not be passed on to third parties without express consent, unless they are specifically intended for disclosure.
The provider of "Microsoft Teams" necessarily obtains knowledge of the above-mentioned data to the extent that this is necessary to carry out our contract processing agreement with "Microsoft".
8.5 Deletion of Data
As a matter of principle, we delete personal data when there is no need for further storage. A requirement can exist in particular if the data is still needed to fulfil contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory storage obligations, deletion shall only be considered after the expiry of the respective storage obligation.
9. Contact form and E-mail contact
Our website includes a contact form you may use for getting in touch with us electronically. If you make use of this opportunity, the following need to be transmitted: (1) last name, (2) company name, (3) country, (4) E-mail, (5) your message. The voluntary transmission of your (1) first name, (2) job title, (3) telephone no., (4) business segment makes it easier for us to process your query. At the time the message is sent, (1) the IP address and (2) the date and time are also stored.
These personal data are exclusively processed for the purpose of contacting you. The other personal data processed during the transmission process serve to prevent abuse of the contact form and to ensure the safety of our IT systems. For such processing of data, your consent is requested in connection with the transmission process with reference to this data protection declaration. Alternatively, contact is possible through the E-mail address provided. In this case, the personal data transmitted with the E-mail will be stored. The data will exclusively be used for processing the conversation.
The legal basis for processing personal data is Article 6 paragraph 1 lit. a) GDPR if the user has given their consent. The legal basis for processing data transmitted in connection with sending an E-mail is Article 6 paragraph 1 sentence 1 lit. f) GDPR. If the aim of the E-mail contact is conclusion of a contract, a further legal basis for processing is Article 6 paragraph 1 sentence 1 lit. f) GDPR.
The data are erased as soon as they are no longer necessary for achieving the purpose of their collection. For the personal data from the input mask of the contact form and those sent by E-Mail, this will be the case when the respective conversation with the user ends. As a rule, the conversation is over when it can be inferred from the circumstances that the matter concerned has been cleared up conclusively and there are no statutory times of retention. The additional personal data collected during the transmission will be deleted after a period of 7 days at the latest.
10. YouTube components
Our website uses YouTube components (“YouTube videos“) of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google (”YouTube“). The video portal YouTube allows video publishers to publish and users to view all kinds of videos. Additional information on YouTube may be called up under https://www.youtube.com/yt/about/de/. Whenever you call up a sub-page of our websites in which a YouTube video is integrated, the Internet browser on the device of the user is instructed to download the YouTube video from YouTube. If the user is logged in at YouTube at the same time, YouTube will see which specific website the user visits when an individual page containing a YouTube video is called up. This applies even when the user does not click on a YouTube video. This information is collected by YouTube and Google and allocated to the respective YouTube account of the user. Vetter has no influence on the type and scope of the data collected by YouTube. With regard to the purpose and scope of data collection and the further processing and use of the data by YouTube and your rights and setting options in this respect to protect your privacy, please refer to the privacy statement published by YouTube which may be called up under https://www.google.de/intl/de/policies/privacy/. If the user does not wish the transfer of such information to YouTube and Google, he/she can prevent this by logging out from his/her YouTube account before calling up our website.
11. Your rights
Due to the applicable data protection laws, you have the right to (1) confirmation of and information about the processing of personal data pursuant to Article 15 GDPR; (2) rectification pursuant to Article 16 GDPR, erasure pursuant to Article 17 GDPR or restriction of processing personal data pursuant to Article 18 GDPR; (3) the right to object to processing on grounds relating to your personal situation pursuant to Article 21 GDPR. This right does not apply if Vetter can show compelling legitimate reasons for processing which override your interests, rights and freedoms or if processing serves to assert, exercise or defend legal claims. Moreover, you have (4) the right to data portability pursuant to Article 20; (5) the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR; the right to withdraw consent to collection, processing and use of your personal data with an effect for the future pursuant to Article 7 GDPR.
If you wish to exercise these rights, please feel free to contact our data protection officer or the relevant contacts provided at any time.
12. Status of the present data protection declaration
Vetter reserves the right to update this data protection declaration from time to time. Any changes made will be in effect when published on this website. Therefore, Vetter recommends to visit this website on a regular basis to catch any updates that have been made.