ChanPharm GmbH — Data Protection Information
Privacy Policy for website users, applicants and business partners of ChanPharm GmbH
The protection of your personal data ("data") is of particular concern to us. In this statement, we therefore inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation ("GDPR") about how we, as the controller within the meaning of Article 4 No. 7 GDPR, process your data in connection with the visit and use of this website, with contact requests, job applications and business relationships with us.
The controller responsible for data processing in connection with your visit to and use of this website, your contact requests, job applications and business relationships with us is:
ChanPharm GmbH
Leidesdorfgasse 14/6
1190 Vienna, Austria
+43 1 997 80 51
office@chanpharm.com
(hereinafter "ChanPharm")
When you visit our website, we process your personal data falling into the following categories:
We collect this data automatically using so-called cookies (for more details, see point 3).
In the event of contact or an application to ChanPharm, we (additionally) process data falling into the following categories:
If you are a business partner (or their shareholder, employee or representative) of ChanPharm, we process your data that you provide to us as part of the initiation of the contractual relationship or during the ongoing contractual relationship, such as:
Our website uses cookies and similar technologies ("cookies") provided by third-party providers to make the website user-friendly. Cookies are small text files that are temporarily stored on your terminal device with the help of the browser and/or that your browser stores. In addition, you will find third-party plug-ins on our website, which provide the website with additional functionalities. When you visit our website, these plug-ins are deactivated by default, so they do not send any data to third parties without action on your part.
The collection of your data in connection with cookies and plug-ins is based on your consent pursuant to Article 6 (1) (a) GDPR (or in conjunction with Section 165 (3) TKG in the case of so-called "persistent" cookies, which are stored on the user's terminal device).
You can refuse the storage of individual cookies or the activation of plug-ins by means of configuration in the cookie banner. Any consent given for the use of cookies and the activation of plug-ins can be revoked at any time with effect for the future by means of configuration in the cookie banner (accessible via the button located at the bottom right edge of the screen) or alternatively via your browser settings.
When cookies are set or plug-ins are activated on the basis of voluntary consent, user data is in some cases transferred to recipients in third countries outside the EEA, in particular to the USA (for transfers to third countries, see point 6).
Cookies that are strictly necessary for the functioning of the website (technically necessary cookies) cannot be refused or deactivated. In these cases, data processing is based on our legitimate interest pursuant to Article 6 (1) (f) GDPR to be able to provide our website in a functional manner and to ensure its stability and security.
On our site, you will find external links that lead to third-party websites. When you visit our website, these buttons do not send any data to third parties without action on your part.
By clicking on an external link, you will be redirected to the website of a third party. After redirection, we have no influence on the use of cookies and on the data collected by the third-party provider. The third-party providers use their own cookies and process your data in accordance with their own privacy policies. We recommend that you check the respective privacy policies before voluntarily providing data to these providers.
Please note in this context that clicking on external links on our website may lead to the transfer and processing of your data in third countries outside the EEA, in particular the USA (for transfers to third countries, see point 6).
In the event of inquiries via our contact form, telephone, letter or email, we process your data (in particular name, email address, address, telephone number and other data provided) for the purpose of processing your inquiry. Data processing is carried out depending on the inquiry on the basis of the fulfillment of (pre-)contractual obligations pursuant to Article 6(1)(b) GDPR or on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, such as, in particular, maintaining relationships with potential business partners, providing information to interested parties, system security and the detection and appropriate handling of malware.
If you apply to us via the contact form on the website or via email, we process the data transmitted to us (e.g. application documents, name, contact details) as part of processing your application on the basis of the fulfillment of (pre-)contractual obligations pursuant to Article 6(1)(b) GDPR and, if applicable, for the purpose of keeping records on the basis of your express consent pursuant to Article 6(1)(a) GDPR.
If you are a business partner (or its shareholder, employee or officer) of ChanPharm, we process your data for the purpose of handling the business relationship (e.g. service provision, handling of claims from the contract, invoicing) on the basis of the fulfillment of (pre-)contractual obligations pursuant to Article 6(1)(b) GDPR as well as for the fulfillment of legal obligations pursuant to Article 6(1)(c) GDPR (e.g. proper accounting) and to protect our legitimate interests pursuant to Article 6(1)(f) GDPR, such as the interest in the proper handling of business relationships.
We process your data for as long as this is necessary to fulfill the purpose underlying the respective processing, as well as in accordance with statutory documentation and retention obligations. If data processing is no longer necessary, your data will be deleted by us.
Application data will be stored by us for seven months from the day on which the rejection of your application was communicated to you. If you give your consent to this, we will also store your data for longer for the purpose of keeping records.
Cookies
Session cookies (transient cookies) are only required for the duration of your current session and are deleted again or lose their validity as soon as you leave our website or your current session expires.
Persistent cookies are stored for a maximum period of 2 years.
In the course of processing for the above-mentioned purposes and, if necessary, due to legal or official obligations, your data will be transmitted by us to the following recipients:
Insofar as your data is processed by our service providers (processors), we ensure that they only process your data within the scope of our order and for the respective purposes mentioned above.
If the above-mentioned recipients of your data are located outside the EEA and it has not been established by a decision of the EU Commission that the country in question has an adequate level of data protection, we ensure that the transfer takes place on the basis of standard contractual clauses or otherwise in accordance with Articles 46, 47 or 49 GDPR.
Insofar as we process data from you, you have the right to information about the processing purposes, the categories of data processed, the recipients of this data, the storage period, the rights to which you are entitled, the origin of the data and the existence of automated decision-making.
You are entitled to request the rectification of incorrect or incomplete data concerning you. You are entitled to request the erasure of data concerning you, provided that the processing of the data is not lawful and there are no legal obligations on our part against the erasure.
You are entitled to request the restriction of the processing of your data in certain cases.
You are entitled to request the transfer of your data that you have provided to us in a structured, commonly used and machine-readable format. You have the right to have the data transmitted by us directly to a controller, insofar as this is technically feasible.
You are entitled at any time, for reasons arising from your particular situation, to object to the processing of data concerning you. If you object, we will no longer process data concerning you unless we can demonstrate that our reasons for processing outweigh your interests.
You have the right to withdraw processing of your data which is based on your consent at any time. The lawfulness of the data processing carried out up to that point remains unaffected.
If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna (www.dsb.gv.at).