Website privacy policy


1. Data protection at a glance

General notes
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is all data that can be used to identify you personally. For detailed information about data protection, please refer to (2) in the privacy policy below.

Data collection on our website
Who is responsible for data collection on this website?

Data processing on this website is carried out by the controller responsible for data processing. The data processing controller is:

PARI GmbH
Spezialisten für effektive Inhalation
Moosstraße 3
82319 Starnberg, Germany
Telefon: 08151 279-0
E-Mail: infopari.de

The controller is the natural or legal person that takes decisions, either alone or jointly with others, about the purposes and means of personal data processing (e.g. names, e-mail addresses, etc.).

Contact details for PARI GmbH’s Data Protection Officer:

PARI GmbH
Data Protection Officer
Moosstraße 3
82319 Starnberg, Germany
Telefon: 08151 279-279
E-Mail: datenschutzpari.com

How do we collect your data?
We shall only collect your personal data is if you actively disclose it to us. It may be the data you enter in our contact form or our online application system, for example.

Other, non-personal data is automatically collected by our IT systems when you visit our website. This is mainly technical data (e.g. web browser, operating system, or the time the page was viewed). This data is collected automatically as soon as you access our website.

What do we use your data for?
Non-personal, technical data is collected to ensure faultless provision of the website. Other data may be used to analyse your user behaviour.

We use personal data exclusively for the purpose that you have entrusted it to us for, e.g. as part of an application process or to process other requests from you.

What rights do you have with regard to your data?
You have the right to obtain free access to information about the origin, recipients and purpose of the personal data we have stored about you at any time. You also have the right to request that this data be rectified, blocked or erased. Please do not hesitate to contact us on the address provided in the imprint regarding this matter and if you have any other questions relating to the topic of data protection. You further have the right to lodge a complaint with the competent supervisory authority.

You also have the right to request that processing of your personal data be restricted under certain circumstances. For details regarding this matter, please refer to the privacy policy under ‘Right to restriction of processing’.

Analytics tools and tools from third-party providers
When you visit our website, your surfing behaviour may be subjected to statistical analysis. This is carried out mainly using cookies and what are known as ‘analysis programs’. Your surfing behaviour is analysed anonymously and cannot be traced back to you. You can object to this analysis or prevent it from taking place by not using certain tools. Detailed information regarding this matter can be found in the privacy policy below.

 

2. General notes and mandatory information

Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and according to both the statutory data protection regulations and this privacy policy.

A variety of personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that there may be security vulnerabilities associated with online data transfer (e.g. e-mail communication). Data cannot be completely protected against access by third parties.

Right to lodge a complaint with the competent supervisory authority
In the event of data protection legislation being violated, the data subject shall have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority responsible for us and for complaints against us is the

Bavarian Data Protection Authority
Promenade 27
91552 Ansbach
bzw. poststellelda-bayern.de

Right to data portability
You have the right to have data that we process automatically based on your consent or to perform a contract handed over to yourself or a third party in a commonly used, machine-readable format. If you request that your data be transferred directly to another controller, this shall only be done to the extent technically feasible.

SSL and TLS encryption
For security reasons, and to protect the transmission of confidential content, such as purchase orders or requests you send to us as the website operator, this website uses SSL and TLS encryption. An encrypted connection is recognisable due to the fact that the browser’s address bar changes from ‘http://’ to ‘https://’ and due to the padlock icon in your browser bar.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Access, blocking, erasure
In the context of the applicable legal provisions, you have the right, at any time, to free access to information about the personal data saved about you, its origin, the recipients and the purpose of data processing, as well as a right to rectify, block or erase the same if necessary. Please do not hesitate to contact us on the address provided (see (1)) regarding this matter and if you have any other questions relating to the topic of personal data.

Revocation of your consent to data processing
Many data processing operations can only be carried out with your express consent. You may revoke consent that was previously granted at any time. To do this, all you need to do is send us an e-mail to this effect. You do not need to submit a form. The lawfulness of data processing carried out until such time that you revoke your consent remains unaffected by said revocation.

Right to object to data collection in special cases and to direct marketing (Art. 21 of the GDPR)

If data processing is carried out based on Art. 6 (1) (e) or (f) of the GDPR, you have the right at any time to object to processing of your personal data on grounds relating to your particular situation; this also applies to any profiling based on these provisions. The legal basis supporting data processing in any given situation is indicated in this privacy policy. If you file an objection, we shall no longer process your relevant personal data unless we can demonstrate compelling and legitimate grounds for processing which outweigh your interests, rights and freedoms, or if processing serves to assert, exercise or defend legal claims (right to object pursuant to Art. (21) (1) of the GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing purposes; this also applies to any profiling conducted in conjunction with such direct marketing. If you object, your personal data shall no longer be used for the purpose of direct marketing (objection according to Art. 21 (2) of the GDPR).

Objection to promotional e-mails
We hereby object to contact data published in accordance with the requirement to provide an imprint being used to send us advertising and information material that has not been expressly requested. The site operators expressly reserve the right to take legal action if they are sent any unsolicited advertising information through spam e-mails, for example.

 

3. Data collection on our website

Cookies
Our website sometimes uses cookies. Cookies do not damage your computer in any way and they do not contain viruses. We do not collect any personal data with these cookies. Rather, we use cookies to make our site more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer and saved by your browser.

The cookies we most commonly use are called ‘session cookies’. They are automatically deleted after you have left our site. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognise your browser the next time you visit our site.

You can make settings in your browser so that you are informed about cookies being set and only accept cookies on a case-by-case basis for certain situations or categorically prevent the setting of the same, as well as activate automatic deletion of cookies when you close your browser. The functionality of this website may be impaired if cookies are deactivated.

Cookies that are essential for carrying out electronic communication or providing certain functions that you have requested (e.g. shopping basket functions) are stored based on Art. (6) (1) (f) of the GDPR. The website operator has a legitimate interest in storing cookies to ensure technically faultless and optimised provision of its services. If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, they are discussed separately in this privacy policy.

DocCheck cookie information
DocCheck uses what are known as ‘cookies’ – text files that are stored in the user’s browser – to facilitate the use of the services. The information that these cookies generate is only transferred to DocCheck’s servers and is not shared with the website operator or any other third parties. Data is not transferred to countries outside the EU.

a) Cookie 1: Doccheck_user_id – Enables single sign-on for all DocCheck logins. Duration = 1 session.
b) Cookie 2: Doccheck_scu_data – Used to provide appropriate content based on pseudonymised identification data (e.g. profession, country, language). Duration = 1 year.

Log data
When a user uses DocCheck’s password protection, DocCheck collects the user’s ‘log data’ (IP address, date and time of access, referrer URL, information about the hardware and software used such as browser features, device information such as resolution) from the information provider’s website that integrates the login into the website by means of ‘embedding’ or iFrame.

This data is not used to draw conclusions about the person; rather, it is used to ensure that the page or iFrame contents are presented properly and/or that the DocCheck services are secure.

Server log files
The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with other sources of data.

This data is collected based on Art. 6 (1) (f) of the GDPR. The website operator has a legitimate interest in presenting their website in a technically error-free manner and optimising the same. The server log files must be collected for this purpose.

Contact form
If you send us enquiries using the contact form, we shall store the information you provide in the form including the contact details you specified there for the purpose of processing your enquiry and in the event of any follow-up questions. We shall not disclose this data to anyone else without your consent.

The data entered in the contact form is therefore processed exclusively based on your consent (Art. (6) (1) (a) of the GDPR). You may revoke your consent at any time. To do this, all you need to do is send us an e-mail to this effect. You do not need to submit a form. The lawfulness of data processing operations carried out until such time that you revoke your consent remains unaffected by said revocation.

We shall store the information you enter in the contact form until you request that we erase the same, you revoke your consent to storage or the purpose of data storage ceases to apply (e.g. when processing of your enquiry is complete). Mandatory statutory provisions – particularly retention periods – remain unaffected.

E-mail, phone or fax requests
If you contact us by e-mail, phone or fax, we shall store and process your request including all personal data resulting from the same (name, request) for the purpose of processing your request. We shall not disclose this data to anyone else without your consent.

This data is processed based on Art. 6 (1) (b) of the GDPR if your request is related to the performance of a contract or is required for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 (1) (a) of the GDPR) and/or our legitimate interests (Art. 6 (1) (f) of the GDPR), since we have a legitimate interest in effectively processing the requests sent to us.

We shall store the data you send to us through contact requests until you request that we erase the same, you revoke your consent to storage or the purpose of data storage ceases to apply (e.g. once processing of your request is complete). Mandatory statutory provisions – particularly statutory retention periods – remain unaffected.

Arranging appointments using Microsoft Bookings
Our website uses the Microsoft Bookings service to arrange appointments with our field sales representatives online. Microsoft Bookings forms part of the Microsoft365 service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521 (hereinafter referred to as ‘Microsoft’). Data is processed exclusively in Germany or a member state of the European Union or EEA.

The software allows you to book a telephone appointment or web meeting with a PARI Group field sales representative (e.g. for a consultation before and/or after a contract is concluded). The connection to the service is only established when you access the online booking feature using a link we send you in an e-mail. To arrange an appointment, your entries in the appointment form are transferred to Microsoft. Further information about how we handle your data can be found in the Microsoft privacy statement

The legal basis for processing your data in relation to the ‘Microsoft Bookings’ service is Art. 6 (1), sentence 1, (f) of the GDPR (legitimate interest in data processing). Our legitimate interest is that we want to give you a user-friendly option with a wide range of features so that you can quickly and easily arrange a telephone appointment with our employees if necessary. Please note that you are not obligated to use Microsoft Bookings to arrange an appointment. If you would rather not use the service, please use another of the contact options offered to arrange an appointment.

Processing
We have concluded a processing contract with Microsoft and we implement the German data protection authorities’ strict regulations when using Microsoft Bookings.

a) We only process and store the personal data that you provide in the pharmacy service (e.g. e-mail address, phone number, postal address) for the purpose of processing the appointment request. This data is processed based on Art. 6 (1) (b) of the GDPR if your appointment request is related to the performance of a contract or is required for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest (Art. 6 (1) (f) of the GDPR), as we have a legitimate interest in effectively processing your appointment request.

b) We only process and store the personal data that you provide in the pharmacy service (e.g. e-mail address, phone number, postal address) for the purpose of processing the appointment request. This data is processed based on Art. 6 (1) (b) of the GDPR if your appointment request is related to the performance of a contract or is required for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest (Art. 6 (1) (f) of the GDPR), as we have a legitimate interest in effectively processing your appointment request.

c) Your data shall not be disclosed to recipients other than those already mentioned.

d) We shall continue storing the data that you send to us using pharmacy information until you request that we erase the same, you object to data processing in special cases or the purpose that the data is stored for ceases to apply (e.g. once the appointment is complete), provided there are no statutory provisions – particularly statutory retention periods – to the contrary.

E-mail, phone or fax requests
If you contact us by e-mail, phone or fax, we shall store and process your request including all personal data resulting from the same (name, request) for the purpose of processing your request. We shall not disclose this data to anyone else without your consent.

This data is processed based on Art. 6 (1) (b) of the GDPR if your request is related to the performance of a contract or is required for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 (1) (a) of the GDPR) and/or our legitimate interests (Art. 6 (1) (f) of the GDPR), since we have a legitimate interest in effectively processing the requests sent to us.

We shall store the data you send to us through contact requests until you request that we erase the same, you revoke your consent to storage or the purpose of data storage ceases to apply (e.g. once processing of your request is complete). Mandatory statutory provisions – particularly statutory retention periods – remain unaffected.

Registration on this website
You can register on our website to use its additional features. We only use the data entered for this purpose to use the offer or service in question that you have registered for. The mandatory data requested during registration must be provided in full. Otherwise, we shall reject the registration process.

If important changes (such as changes to the scope of the offer or technically necessary changes) are made, we shall use the e-mail address provided during registration to inform you in this way.

The data entered during registration is processed based on your consent (Art. 6 (1) (a) of the GDPR). You may revoke consent that you granted at any time. To do this, all you need to do is send us an e-mail to this effect. You do not need to submit a form. The lawfulness of data processing carried out until such time that you revoke your consent remains unaffected by said revocation.

We shall store the data collected during registration for as long as you are registered on our website, after which we shall erase the same. Statutory retention periods remain unaffected.


4. Privacy policy for using our online application system

When using our online application system, you shall be directed to the website of our service provider, Rexx Systems. Rexx Systems is the processor that PARI has engaged under Art. 28 of the GDPR. This means that your data is hosted by this provider. Both PARI and the provider take technical and organisational security measures to protect the data collected from you against accidental or deliberate manipulation, loss, destruction or access by unauthorised individuals.

In the context of the application process, you have the option of entering the following information about yourself: salutation, title, first and last names, address, date of birth, phone number for contact (mobile, landline), nationality, e-mail address, desired salary, earliest start date, current notice period, photo, curriculum vitae, cover letter, references and other personal documents in support of your application.

Only the personal information that you provide as part of your application shall be stored. The information stored about you shall only be used for its intended purpose, i.e. for the application process.

Once you enter your data, it is sent directly to our external service provider’s server via an encrypted connection (TLS). An encryption method is also provided for your login.

By sending your data to us, you indicate that you agree to us processing and transferring your data solely for the application process.

To analyse the website, the provider uses Matomo open-source software to evaluate visitor access requests. To this end, your IP address is anonymised immediately after it is processed and before it is saved. Please refer to our service provider’s privacy policy to find out more about this. The latest version of the document can be found at the following link: https://www.rexx-systems.com/data-protection.php

Processing
We have concluded a processing contract with the provider and we implement the German data protection authorities’ strict regulations to the fullest extent when using Rexx Systems.

 

5. Analytics tools and advertising

Google Analytics
This website uses features provided by Google Analytics, a web analytics service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses what are known as ‘cookies’. These are text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

Google Analytics cookies are stored based on Art. (6) (1) (f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and its advertising activities.

IP anonymisation
We have activated the IP anonymisation function on this website. This means that Google shall truncate your IP address before transmitting it to the USA within member states of the European Union or other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases shall the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google shall use this information for the purpose of evaluating your use of this website, compiling reports on website activities and providing the website operator with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not associated with any other data by Google.

Browser plugin
You can adjust your browser software settings to prevent the storage of cookies; however, we would like to point out that you may then be unable to use all the features of this website in full. You can also prevent the data that the cookie generates relating to your use of the website (including your IP address) from being sent to Google, and prevent Google from processing the same by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie that prevents your data from being collected on future visits to this website is set: Disable Google Analytics.

More information about how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Processing order data
We have concluded a processing contract with Google and we implement the German data protection authorities’ strict regulations to the fullest extent when using Google Analytics.

Google AdWords und Google Conversion-Tracking
This website uses Google AdWords. AdWords is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (hereinafter referred to as ‘Google’).

In the context of Google AdWords, we use what is known as ‘conversion tracking’. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the web browser stores on the user’s computer. These cookies shall cease to be valid after 30 days and are not used for personal user identification purposes. If the user visits certain pages on this website and the cookie has not expired yet, both we and Google can detect that the user has clicked on the ad and been forwarded to this page.

Each Google AdWords customer receives a different cookie. Cookies cannot, therefore, be tracked using AdWords customers’ websites. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted to use conversion tracking. Customers find out how many users in total have clicked on their ad and been forwarded to a page featuring a conversion tracking tag. However, they do not receive any information that can be used to identify users personally. If you do not wish to take part in tracking, you can object to such use by easily disabling the Google conversion tracking cookie on your web browser under User Preferences. It shall then not be included in the conversion tracking statistics.

Conversion cookies are stored and this tracking tool is used based on Art. 6 (1) (f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and its advertising activities.

More information about Google AdWords and Google conversion tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

You can make settings in your browser so that you are informed about cookies being set and only accept cookies on a case-by-case basis for certain situations or categorically prevent the setting of the same, as well as activate automatic deletion of cookies when you close your browser. The functionality of this website may be impaired if cookies are deactivated.

Google Tag Manager
This website uses Google Tag Manager, a cookie-less domain that does not collect personal data.

This tool allows ‘website tags’ (i.e. keywords that are integrated into HTML elements) to be implemented and managed using an interface. By using Google Tag Manager, we can automatically track which button, link or personalised image you have actively clicked on and can then record what contents of our website you find particularly interesting.

The tool also triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If you have disabled it at domain or cookie level, it shall remain disabled for all tracking tags implemented with Google Tag Manager.

Using Google Tag Manager is in the interest of making our website convenient and easy to use. This is a legitimate interest under Art. (6) (1) (f) of the GDPR.


6. Newsletter

Newsletter data
If you would like to receive the newsletter offered on the website, we need you to provide an e-mail address and information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or it is only collected on a voluntary basis. We use this data solely for the purpose of sending the information you have requested and do not disclose the same to third parties.

The data you enter in the newsletter subscription form is processed exclusively based on your consent (Art. (6) (1) (a) of the GDPR). You may revoke your consent to this data and your e-mail address being stored and being used to send the newsletter at any time, for example by clicking on the ‘Unsubscribe’ link in the newsletter. The lawfulness of data processing operations carried out until such time that you revoke your consent remains unaffected by said revocation.

We shall store the data you have sent us to enable us to send you the newsletter until you cancel your subscription to the newsletter, and it shall be deleted once you have unsubscribed. Data that we have stored for other purposes (e.g. e-mail addresses for the members area) remains unaffected by this.

We use the platform provided by the service provider SC Networks (EVALANCHE) to send our newsletter. The service provider meets all the data protection requirements and shall ensure that your data is protected. The service provider shall not disclose your data to third parties either. Please refer to our service provider’s privacy policy for more detailed information: https://www.sc-networks.com/data-protection/:

Conclusion of a processing contract
We have concluded a processing contract with the service provider and we implement the German data protection authorities’ strict regulations to the fullest extent when using SC Networks (EVALANCHE).

 

7. Plugins und Tools

Google Maps
This site uses Google Maps, a maps service, via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Your IP address must be stored for you to be able to use the Google Maps features. This information is generally transmitted to and stored on a Google server in the USA. The website provider has no influence over this data transfer.

Google Maps is used in the interest of displaying our website in an appealing way, and to make it easier to find the locations we mention on our website. This is a legitimate interest under Art. (6) (1) (f) of the GDPR.

More information about how Google handles user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en&gl=en.

YouTube with enhanced data protection
This website integrates YouTube videos. The operator of the site is Google Ireland Limited (hereinafter referred to as ‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in Privacy-Enhanced Mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, Privacy-Enhanced Mode does not necessarily eliminate the possibility of data transfer to YouTube partners. Whether you are watching a video or not, YouTube therefore connects to the Google DoubleClick network.

A connection to the YouTube servers is established as soon as you start a YouTube video on this website. During this process, the YouTube server is made aware of which of our pages you have visited. If you are logged into your YouTube account, you are enabling YouTube to allocate your surfing behaviour directly to your personal profile. You can prevent this from happening by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your terminal device after starting a video. These cookies enable YouTube to obtain information about visitors to this website. To name but a few examples, this information is used to collect video statistics, improve user comfort and prevent attempted fraud. The cookies remain on your terminal device until you delete them.

Once a YouTube video has been started, further data processing operations that we have no influence over may be triggered.

YouTube is used in the interest of displaying our website in an appealing way. This is a legitimate interest under Art. (6) (1) (f) of the GDPR. If consent to this effect has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively based on Art. 6 (1) (a) of the GDPR; consent may be revoked at any time.

More information about YouTube’s data protection activities can be found in its privacy policy at: https://policies.google.com/privacy?hl=en.

 

8. Links to other websites

Our website may contain links to other websites. We are not responsible for these other websites’ privacy policies or content.

Starnberg, 02. Juli 2020