Specific information about the application process
Affected data and legal basis for processing: Application information (e.g., name, address, email, telephone number, educational background, employment history, and any other information included in a CV or cover letter or communicated to us by you directly or by authorized third parties). The personal data collected as part of the application process is processed for the implementation of pre-contractual measures in accordance with Art. 6 (1) b GDPR. In Germany, processing is also carried out in accordance with § 26 Federal Data Protection Act (BDSG).
Processing Purpose: Implementation of application process.
Categories of recipients: Public authorities in the event of priority legislation.
External service providers or other contractors, e.g., for data processing and hosting.
Our affiliated companies in case of consideration and/or search for suitable positions within Wörwag Pharma Group.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union, e. g. email provider. Besides, our affiliated countries outside of European Union as described above.
Duration of data storage: Application data will generally be deleted within six months after the end of application process (§ 26 BDSG and § 15 Abs. 4 General Act on Equal Treatment (AGG).
Specific information for the processing of customer data/prospective parties’ data
Affected data and legal basis for processing: Data communicated for contract execution (e.g., name, email) (Art. 6 (1) b GDPR); if necessary, additional data for processing on the basis of your express consent (Art. 6 (1) a GDPR).
Processing Purpose: Execution and effective management of contracts, including making offers, processing orders, conducting sales transactions, incl. delivery creation, issuing invoices, and ensuring quality. It also supports the continuous optimization of these processes to enhance our efficiency.
Categories of recipients: Public authorities in the event of priority legislation.
External service providers or other contractors, e. g. for data processing and hosting, shipment, transport and logistics, service providers for print and dispatch of information, call center.
Other external bodies may access personal data upon the data subject's consent or when necessary due to a prevailing interest. Examples include conducting credit checks for purchases made on invoice, electronically distributing information, and enhancing our processes through quality assurance measures.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union, e. g. email provider.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years (§ 147 Fiscal Code (AO) und § 257 Commercial Code (HGB)).
Specific information for the processing of supplier data
Affected data and legal basis for processing: Data communicated for contract execution (e.g., name, email) (Art. 6 (1) b GDPR); if necessary, additional data for processing on the basis of your express consent (Art. 6 (1) a GDPR).
Processing Purpose: Execution and effective management of contracts, including processing requests, purchasing, and ensuring quality. It also supports the continuous optimization of these processes to enhance our efficiency.
Categories of recipients: Public authorities in the event of priority legislation, e. g. finance authority, customs.
External service providers or other contractors, e. g. for data processing and hosting, accounting, payment processing.
Other external bodies in so far as the data subject has given his/her consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union, e.g., email provider.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years (§ 147 AO and § 257 HGB).
Specific information for the processing of scientific experts/opinion leaders data
Affected data and legal basis for processing: Information available in public space, data communicated for contract execution (Art. 6 (1) b GDPR) or personal data available in a professional context; if necessary, additional data for processing on the basis of express consent (Art. 6 (1) a GDPR) (medical/scientific speciality, specializations, areas of expertise and interest, spoken languages, active participation in international professional events, activities in clinical trials, patient care, expert opinion writing, information about lecturing activities, memberships in medical-scientific societies and guideline committees, other professional contact data).
Processing Purpose: Contacting and addressing the most relevant scientific experts for projects, execution and effective management of contracts.
Categories of recipients: Public authorities in the event of priority legislation, e. g. finance authority.
External service providers or other contractors, e. g. for data processing and hosting, accounting, payment processing.
Other external bodies in so far as the data subject has given his/her consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union, e.g., email provider.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years (§ 147 AO and § 257 HGB).
Specific information for the processing of medical information inquiries and quality complaints
Affected data and legal basis for processing: Data (e.g., name, address, email, telephone number, medical history) communicated to us by you directly or by authorized third parties based on your consent through:
- Contact form on our website
- Per telephone
- Per E-Mail
- Social media channels (e.g., Xing, LinkedIn, YouTube)
If necessary, additional data for processing on the basis of your express consent (Art. 6 (1) a GDPR).
Processing Purpose: Processing medical information inquiries and quality complaints.
Categories of recipients: Data may be shared with public authorities under priority legislation and our affiliated companies. Additionally, employees of our affiliates across various countries may access this data as necessary for processing. Other external bodies may also access data upon the data subject’s consent or if a prevailing interest exists.
Third-country transfers: Processors could also be used outside the European Union, e. g. email provider. Affiliated companies having access to your personal data could be located outside of the European Union as well.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually:
- For quality complaints: up to 6 years after receipt the complaint (§20 German regulation on the application of good manufacturing practice in the production of medicinal products (AMWHV).
- For medical information inquiries:
- in case inquiry contains pharmacovigilance report or complain, please refer to Pharmacovigilance Data Protection Statement
- in case inquiry contains quality complain, please refer to respective terms defined above
- in case inquiry contains a request for providing samples and comes from healthcare professionals (HCPs)-up to 10 years after receipt of the inquiry (§ 47 (3), (4) Medicinal Products Act (AMG))
- in other cases:
If received from end customers-up to 12 months following the end of the calendar year in which the inquiry was submitted.
If received from HCP-up to 10 years following the end of the calendar year in which the inquiry was submitted.
Specific information for processing of adverse drug reactions reporting
Please refer to Pharmacovigilance Data Protection Statement.
Specific information for data processing for advertising purposes
Affected data and legal basis for processing: Name, contact details (e.g., email).
This processing is based on:
- For doctors and pharmacists- consent (Art. 6 (1) a GDPR)
- Our legitimate interests in conducting direct marketing activities for other data subjects, as per Art. 6 (1) f GDPR
Processing Purpose: Sending the information about our products and services, such as event invitations, promotional offers via post, e-mail or fax.
Categories of recipients: Public authorities in the event of priority legislation, e. g. finance authority.
External service providers or other contractors, e. g. for data processing and hosting.
Other external bodies in so far as the data subject has given his/her consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: Processors could also be used outside the European Union, e.g., email provider.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years (§ 147 AO and § 257 HGB).
Specific information for data processing for lotteries
Affected data and legal basis for processing: Name, contact details (e.g., email).
Processing is based on consent (Art. 6 (1) a GDPR).
Processing Purpose: Contacting lottery participants before and after a lottery event in order to establish the identity of the participants, contact winners, send prizes and check their delivery.
Categories of recipients: Public authorities in the event of priority legislation.
External service providers or other contractors, e. g. for data processing and hosting, delivery services.
Other external bodies in so far as the data subject has given his/her consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union, e.g., email provider.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years (§ 147 AO and § 257 HGB).