Handling of personal data
At Grünenthal, we believe transparency is the foundation of trustful collaboration. Below we’ll provide you with information on how we handle your personal data when you use our website. We handle your personal data because this is necessary to make certain functionalities of our website available and give you the best possible experience. Unless otherwise indicated, the legal basis for the handling of your personal data results from our legitimate interest to make available the functionalities of the website requested by you and to promote our business interests, according to (Art. 6(1) f) General Data Protection Regulation – “GDPR”).
Using our Website
Accessing our Website
When you browse to/ visit our website, your browser will transfer certain data to our web server. This is done for technical reasons so that we can provide the information you request. In particular, the following data are collected, briefly stored and used:
- IP address
- Date and time of access
- Time zone difference to Greenwich Mean Time (GMT)
- Content of request (specific site)
- Status of access/HTTP status code
- Transferred volume of data
- Website requesting access
- Browser, language settings, version of browser software operating system and surface
We will also store such data for a limited period so that we are able to initiate a tracking of personal data in the event of actual or attempted unauthorized access to our servers (Art. 6 (1) f) GDPR).
What are cookies?
Our website uses so-called “cookies”. Cookies are small text files that are stored in the memory of your terminal via your browser. They store certain information (for example your preferred language or site settings). Your browser may retransmit these to us when you revisit our website, depending on the lifespan of the cookie.
What cookies do we use?
We differentiate between two categories of cookies: (1) functional cookies which are necessary for the functionality of our website and (2) optional cookies. These are used for website analysis and marketing purposes. You can find a detailed list of the cookies that we use in the cookie banner that pops up when you access our website or by clicking on the “privacy settings” symbol.
Subject to your consent
We only use optional cookies if we have obtained your prior consent (Art. 6(1) a) GDPR). When you visit our website for the first time, a banner will appear asking you to give us your consent to the setting of optional cookies. If you consent, we will place a cookie on your computer and the banner will not appear again as long as the cookie is active. After the expiration of the cookie’s lifespan, or if you actively delete the cookie, the banner will reappear the next time you visit our website and will again ask you for your consent.
How to prevent the placing of cookies
This may, however, lead to a restriction of the functions or have adverse effects on the user-friendliness of our Website. You may object to the setting of optional cookies at any time by using the respective objection option indicated in the table above.
This website uses the web analysis software of Matomo (www.matomo.org).
This software enables us to collect and store data for statistical analysis of user behavior for purposes of optimization and marketing. For example, we can see in which sequence certain media content is selected, which webpage a user accesses after using the internal search function and how often a specific device is used to visit our website. Pseudonymous user profiles can be created and evaluated from these data for the same purpose.
We have configured the tool in a way that your IP address is anonymized. We do not create a User ID that would allow us to recognize a user across several devices. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the website visitor and is not combined with personal data about the bearer of the pseudonym. If you do not agree to the storage and evaluation of these data on your visit, you can object to their storage and use at any time.
The data collected with Matomo technology (including your anonymized IP address) are processed entirely on our servers. The data is not shared with third parties and neither do we receive information on our visitors from third parties.
These processing operations only take place if consent is granted through the consent management tool on this website in accordance with Art. 6 (1) a) GDPR. The data will be stored on your device until you choose to delete the cookie or until the cookie expires.
To provide story analytics, Shorthand collects anonymised data from your browsers
The data shorthand collects includes:
- URL used to access the story
- Referrer URL
- Date/time of access
- Times of progress through the story (scroll and section events)
- Device type (e.g., iPhone, Nexus)
- OS + version
- Browser + version
- Browser window size + orientation
- "Language" (e.g., en-US)
- Click events on the story
- Outgoing links clicked from the page
Shorthand Analytics has been designed to work without setting cookies in the browser.
Information on side effects and quality complaints
Please note that our corporate website is not intended or designed for communications regarding side effects, lack of therapeutic effect, medication errors, grey market products/counterfeit medicine, incorrect or off-label use, quality complaints and/or other issues regarding the safeness or quality of our products. We understand you may wish to report side effects or make a quality complaint. You can do this by either contacting your health care professional (e.g. physician or pharmacist) or your local health authority or by using the reporting form on our portal dedicated to the reporting of suspected adverse drug. (https://drug-safety.grunenthal.com/ or you may directly contact firstname.lastname@example.org) If you nevertheless report undesirable side effects or other issues regarding the safety or quality of our products, we will be legally bound to deal with your communication and may have to contact you for clarification purposes. Subsequently, we may have to notify the health authorities and, in this context, your information will be forwarded in pseudonymized form, which means no information by which you may be directly identified will be passed on. We may also have to forward these pseudonymized notifications to our group companies and cooperation partners, to the extent that these are likewise obliged to notify their respective health authorities.
Transfer of data for commissioned processing
We will to some extent use specialized service contractors for the processing of your data. We carefully select and regularly monitor these service contractors. They will only process personal data upon our instruction and strictly in accordance with our directives, based on respective data processor agreements. Any unauthorized reproduction, transfer, or any other use is prohibited.
Processing of data outside the EU/the EEA
Your data will partly be processed in countries outside the European Union (“EU”) or the European Economic Area (“EEA”). The respective countries may have a lower data protection level than European countries. In such cases, we will ensure that a sufficient level of protection is provided for your data, e.g. by concluding specific agreements with our contractual partners, or we will ask for your explicit consent to such processing
Information regarding your rights
You have the following rights according to applicable data privacy laws:
- right to information about your personal data stored by us;
- right to request the correction, deletion (provided that we are not legally obliged to keep the data) or restricted processing of your personal data;
- right to object to a processing for reasons of our own legitimate interest, public interest or profiling, unless we are able to proof that compelling, warranted reasons overruling your interests, rights and freedom exist, or that such processing is done for purposes of the assertion, exercise or defense of legal claims;
- right to data portability;
- right to file a complaint with a data protection authority.
- You may revoke your consent to the collection, processing and use of your personal data at any time with future effect. For further information please refer to the chapters above describing the processing of data based on your consent.
If you wish to exercise your rights, please address your request to the contact form or to our company data protection officer whose contact detail you will find below.
Do you have any questions regarding our data privacy? Then please let us know! You can either use our contact form or get in touch with our company data protection team at the following address: email@example.com
If, as the data subject, you have any questions regarding our data privacy or if you do not agree with the way Grünenthal or representatives of Grünenthal process your data, please get in touch with Grünenthal’s Global Data Protection officer by using the following email address: firstname.lastname@example.org
You can contact our data protection officer only through this email address. The data protection officer is obliged to keep your identity confidential. In case your identity could be inferred in the course of clarifying a complaint, the data protection officer will point this out to you in advance and, if necessary, ask you to release him from his obligation to secrecy.
Data Protection Supervisory Authority
You may address questions and complaints also to the Data Protection Supervisory Authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44