Information regarding the Processing of Data
1. Name and contact details of the Processing Agent and of the company Data Protection Officer
InnoCur Pharma GmbH
Hanauer Landstraße 146
60314 Frankfurt am Main
Telephone: + 49 69/4005536-00
Telefax: + 49 69 4005536-99
Contact details of the data protection officer:
PROLIANCE GmbH / datenschutzexperte.de
Data protection officer
2. Collection and storage of personal data and the manner and purpose of its use
a) When visiting the website
When you visit our website www.innocur.de, the browser you are using on your device will automatically send data to the servers on which our website is hosted. This data is stored temporarily in a log file. The following data are collected, without any action on your part, and stored until it is automatically deleted:
- IP address of the querying computer,
- date and time of access,
- name and URL of the file requested,
- website from which access is made (referrer URL),
- browser used and possibly the operating system of your computer, as well as the name of your access provider.
We will process the abovementioned data for the following purposes only:
- ensuring a smooth connection is established to the website,
- ensuring a comfortable user experience on our website,
- assessing the system security and stability, and
- for other administrative purposes.
The basis for lawful processing of data is laid out in Article 6(1) Point (f) of the General Data Protection Regulation (GDPR) of the European Union. The data collection purposes listed above constitute our legitimate interest. In no case do we use the collected data for the purpose of profiling your person.
b) When subscribing to our newsletter
Provided you have given your consent in accordance with Article 6(1) Point (a) of the GDPR, we will use your email address to send our newsletter regularly to you. To receive our newsletter, you only need to provide an email.
You can unsubscribe at any time, for example by following the link at the end of each newsletter. Alternatively, you can express your wish to unsubscribe at any time by sending an email to firstname.lastname@example.org.
c) When using our contact form
For enquiries of any kind, you can make use of the contact form provided on our website. To use this form, you do need to provide an email address so that we know who is making the enquiry and so that we can send you our reply. Any other information is provided voluntarily.
We process data provided for the purpose of establishing contact in accordance with Article 6(1) Point (a) of the GDPR, based on your freely given consent.
The personal data we collect for the use of our contact form will be automatically deleted after the services in answer to your enquiry have ended.
3. Disclosure of data
We will not disclose your personal data to third parties for any purposes other than those listed below.
We will only disclose your personal data to third parties if:
- you have given your explicit consent, in accordance with Article 6(1) Point (a) of the GDPR,
- it is necessary to disclose this data, in accordance with Article 6(1) Point (f) of the GDPR, for the establishment, exercise or defence of legal claims, and no grounds exist to assume you have an overriding and legitimate interest in the nondisclosure of your data,
- for compliance with a legal obligation to disclosure in accordance with Article 6(1) Point (c) of the GDPR, and
- it is legally permitted and necessary for the performance of a contract with you in accordance with Article 6(1) Point (b) of the GDPR.
A cookie is used to store data that arises in connection with the specific device used. This does not mean, however, that we can in any way identify you directly from this data.
Furthermore, we set temporary cookies, also for the purpose of optimising user friendliness, that are stored on your device for a certain, specified period of time. The next time you visit our website to make use of our services, it will be automatically recognised that you have already visited us, and what input and settings you made, so that you do not need to make them again.
The data processed through cookies are necessary for the abovementioned purposes for the protection of our legitimate interests and those of third parties in accordance with Article 6(1) Point (f) of the GDPR.
Most browsers accept cookies automatically. You can, however, configure your browser so that it will not store any cookies on your computer, or to provide a warning before any new cookie is set. Completely disabling cookies, however, can result in you being unable to use all functions of our website.
5. Analytical tools
The following tracking measures we employ are taken on the basis of Article 6(1) Point (f) of the GDPR. We employ these tracking measures to ensure the user-oriented design and continual optimisation of our website. We also use these tracking measures to collect statistics on the use of our website and to analyse this use for the purpose of optimising our services for you. These interests are legitimate in the sense of the abovementioned regulation.
The respective data processing purposes and data categories are described separately for each tool.
i) Google Analytics1
For the user-oriented design and continual optimisation of our web pages, we use Google Analytics, a web analysis service provided by Google Inc.(https://www.google.de/intl/de/about/),1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In this context, pseudonymised user profiles are created and cookies are used (see Point 4). The information produced in the cookie regarding your use of this website, such as the
- browser type and version,
- operating system used,
- referrer URL (previously visited site),
- hostname of the accessing computer (IP address), and
- time of the server request,
is sent to a Google server in the USA and stored there. This information will be used for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and Internet usage for the purposes of market research and user-oriented design of these web pages. This information is also transferred to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Your IP address will never be associated with any other data held by Google. IP addresses are anonymised so that they cannot be traced back to the users (IP masking).
You can prevent the installation of cookies on your computer by setting your browser accordingly; however, we must point out that in this case not all functions of the website will be available to you in their full capacity.
You can also prevent Google’s recording of the cookie-generated data regarding your use of the website (including your IP address) and prevent Google’s processing of this data by downloading and installing the browser add-on available at the link(https://tools.google.com/dlpage/gaoptout?hl=en).
Alternatively to this add-on, especially when browsing on mobile devices, you can also prevent Google Analytics from tracking your data by clicking the following link. This will set an opt-out cookie that prevents the collection of your data on future visits to this website. The opt-out cookie only applies to the browser you are currently using and only for our website, and is stored on your device. If you delete the cookies from this browser, then you will have to reset the opt-out cookie.
For more information about the data protection in connection with Google Analytics, consult Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
8. Rights of the data subject
You have the right:
- according to Article 15 of the GDPR to request information regarding your personal data that we process. In particular, you can obtain information about the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored; the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; information as to the source of any data that was not collected by us; the existence of automated decision-making, including profiling, and, if applicable, meaningful information as to their details.
- according to Article 16 of the GDPR to request the rectification of inaccurate or completion of incomplete data concerning you that we have stored.
- according to Article 17 of the GDPR to obtain from us the erasure of personal data concerning you without undue delay provided the processing is no longer necessary for exercising the right of free expression and information; for compliance with a legal obligation; for reasons for public interest; or for the establishment, exercise or defence of legal claims;
- according to Article 18 of the GDPR to obtain from us the restriction of processing of your personal data provided you contest the accuracy of the personal data; the processing is unlawful but that you oppose the erasure and we no longer require the data but you still require them for the establishment, exercise or defence of legal claims; or you have objected to its processing pursuant to Article 21 of the GDPR;
- according to Article 20 of the GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller;
- according to Article 7(3) of the GDPR to withdraw at any time any consent you have given us. This will result in us being unable to continue any future data processing based on this consent; and
- according to Article 77 of the GDPR to lodge a complaint with a supervisory authority. As a rule, you can refer to the authority in your normal place of residence, of your workplace, or of our location for this purpose.
9. Right to object
According to Article 21 of the GDPR, you have the right to object at any time to any processing of your personal data which is based on legitimate interests according to Article 6(1) Point (f) of the GDPR, provided grounds exist relating to your particular situation or if the objection is to direct marketing. In the latter case, you have a general right to object, which we shall respect without you having to specify any particular situation.
If you wish to exercise your right to object or to withdraw, all you need to do is send an email to email@example.com.
10. Data security
For the security of visits to our website, we employ the widely used SSL (Secure Socket Layer) method in conjunction with the highest encryption level that your browser supports. In most cases, this is 256-bit encryption. If your browser does not support 256-bit encryption, then we will fall back on 128-bit v3 technology. Which of the pages on our website are transferred in encrypted form can be recognised by a symbol of a key or of a closed padlock in the address bar or in the lower status bar of your browser.
We also employ suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are continually improved to reflect technological progress.
1For the reliable use of Google Analytics, data protection authorities require an agreement on contracted data processing to be concluded. Google provides an appropriate template at https://www.google.com/analytics/terms/gb.html (or https://www.google.com/analytics/terms/ for more languages).