Privacy Policy

1. General information

1. Personal data (Art. 4 No. 1 GDPR)

The subject of privacy is personal data (hereinafter referred to as "data"). This means any information relating to an identified or identifiable natural person. Examples of such information include name, address, occupation, e-mail address, state of health, income, marital status, genetic characteristics, telephone number and, if applicable, user data such as IP address.

1.2 Controller (Art. 4 No. 7 GDPR)

The controller responsible for processing your personal data in the context of using the website www.hwi-group.de/ (hereinafter referred to as the "website") is HWI pharma services GmbH (hereinafter referred to as the "operator" or "controller"). The contact details are as follows:

Telephone: +49 7272 7767-0
Telefax: +49 7272 7767-11
Email: info(at)hwi-group.de

1.3 Data protection officer

The Controller has designated an external data protection officer who is reachable under the following e-mail address datenschutz@m-consecom.de.

1.4 Right to object

If you want to object to the processing of your data by the operator in accordance with this privacy policy in all or for individual measures, you can use the contact details which are mentioned under the imprint. Please note that in the event of such an objection, the use of the website and the access of the services offered may be limited or not possible at all.

2. Scope and purposes of data processing, legal bases, provision of data and storage period

2.1 Access and use of the website

Each time the website and its subpages are accessed, usage data is transferred by the respective internet browser and stored in server log files. The stored data records contain the following data:

  • Date and time of access
  • Name of the subpage which is accessed
  • IP address
  • Referrer URL (original URL from which you have accessed the website)
  • Product and version information for the browser used

The log files are evaluated by the operator in anonymised form in order to further improve the website and make it more user-friendly, find and rectify faults more quickly and control server capacities. For example, it can be understood at which time use of the website is particularly popular and the operator can make an appropriate data volume available.

The admissibility of this processing is based on Art. 6 para. 1 lit. f) GDPR stating that the processing is lawful if it is necessary for the purposes of preserving the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in providing a website with information and offering services to its customers and optimising the operation of the website.

The data processed by the operator is required to enable you to access and to use the website. This data must necessarily be processed while using a telemedia. Otherwise, you are not able to access the website.

Your IP address will be deleted or anonymised after termination of use. In the case of anonymisation, the IP addresses are changed in such a way that they can no longer be assigned to an identified or identifiable natural person or can only be assigned with a disproportionate large amount of time, costs and effort.

2.2 E-mail at a click, contact form and other contacts

If you would like to get in touch with the operator, a contact form is available therefor. You need to enter the following information in this form:

  • E-mail address
  • Salutation
  • First name
  • Last name
  • Subject
  • Message
  • Declaration on the knowledge of privacy

In addition, you can voluntarily provide the following information:

  • Titel
  • Telephone number

Furthermore, you have the option to open an e-mail directed to the operator at just one click on different areas of the website. The e-mail address linked to your e-mail program will automatically be used as the sender here. If you do not want your e-mail address to be retrieved in this way, you can change it in the settings of your respective e-mail program.

In addition, you have the possibility to contact us by mail, telephone or fax. The data provided here will be processed for the purpose of processing your contact request.

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR stating that the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The legal basis for the processing of personal data described is Art. 6 para. 1 lit. f) GDPR. It is our legitimate interest to give you the opportunity to contact us.

The provision of your data is necessary, otherwise you will not be able to send a message to the operator.

The processed personal data will be deleted after expiry of the legal retention periods, unless the controller has a legitimate interest in further storage. In any case, only those data will continue to be stored that are necessary to achieve the corresponding purpose. Wherever possible, the personal data will be anonymised.

2.3 Advertising

The operator uses your data for postal advertising purposes.

The admissibility of this processing is based on Art. 6 para. 1 lit. f) GDPR stating that the processing is lawful if it is necessary for the purposes of preserving the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The use of data for advertising purposes constitutes a legitimate interest of the operator according to Art. 6 para. 1 lit. f) GDPR. The operator is ordered to actively present its services to new and existing customers.

As a customer of the operator, you will regularly receive product recommendations by e-mail which are based on the products or services which you have already ordered. By doing this, the operator would like to provide you with information about its services that may be of interest to you on the basis of your most recent order.

The admissibility of this processing is based on Art. 6 para. 1. lit. f) GDPR in connection with § 7 para. 3 German Act Against Unfair Competition (UWG).

The personal data processed for the purpose of advertising will be deleted unless the controller has a legitimate interest in further storage. In any case, only those data will continue to be stored that are necessary to achieve the corresponding purpose.

2.4 Newsletter

You can additionally subscribe to an e-mail newsletter in order to obtain further information about the operator’s services. The newsletter is sent out using the so-called double opt-in process, i.e. you will only receive a newsletter by e-mail if you have previously explicitly confirmed that the newsletter service is to be activated. Once you have activated the newsletter, you will receive a notification e-mail containing a link for activation. You will only receive the newsletter if you click on this link. You can deactivate the newsletter at any time. For this purpose, please contact the operator or use the unsubscribe link provided in each newsletter. The admissibility of this processing is based on Art. 6 para. 1 lit. a) GDPR stating that the processing is lawful if the data subject has given consent to the processing of his or her personal data for one or more specific purposes. The provision of your data is optional but is required to receive the newsletter.

Your data will be deleted after withdrawal of your consent, unless the controller has a legitimate interest in further storage. This may be the case if the operator needs to continue to store your data according to a contract conclusion with you. In any case, only those data will continue to be stored that are necessary to achieve the corresponding purpose.

You can change this processing here: https://t0e10a092.emailsys1a.net/159/1434/2ddc23c468/unsubscribe/form.html

2.5 Use of cookies

The operator uses so-called cookies, which are small data packets normally consisting of letters and numbers and stored on a browser when you visit certain websites. Cookies enable the website to recognise your browser, track you visiting various sections of the website and identify you when you return to the website. Cookies do not contain any data that identifies you personally, but the information concerning you stored by the operator can be assigned to the data obtained from and stored in the cookies.

Information that the operator obtains from you using cookies may be used for the following purposes:

  • Improving the user-friendliness of the website
  • Evaluating the use of the website
  • Operating the website
  • Preventing fraud and improving the security of the website
  • Individual design of the website considering the needs of users

Cookies do not cause any damage on a browser. They neither contain any viruses nor allow the operator to spy on you. Cookies used:

  • Persistent cookies are automatically deleted when your browser is closed (session cookies).

The operator enables you an optimised browsing on the operator’s website by using cookies. The operator only processes these data in anonymised form.

The admissibility of this processing is based on Art. 6 para. 1 lit. f) GDPR stating that the processing is lawful if it is necessary for the purposes of preserving the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in the optimised presentation of its website.

The provision of the data is necessary in order to be able to access the operator's website without errors. If you do not accept cookies or if you delete cookies that have already been set, this may lead to functional limitations of the website.

2.6 Google-Analytics

The operator uses the web analysis service Google Analytics of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service uses the cookies described above to collect information such as your operating system, your browser, your IP address, the website accessed previously as well as the date and time of your visit to the operator’s website. The information generated by the cookies about the use of the website will be transferred to a Google server (possibly in a third country such as the USA) and stored there. Google will use this information in order to evaluate the use of the website, compile reports on the website activity for the operator and render further services relating to website activity and internet use. If this is prescribed by law or if third parties process this data on behalf of Google, Google will share this information with these third parties.

This website uses Google Analytics with the addition "_anonymizeIp()". This means that the IP addresses are further processed in a shortened form, thus excluding personal references. The full IP address is transferred to a Google server and shortened there only in exceptional cases.

Further information about Google Analytics, the data processed by Google and the privacy settings offered by Google can be found directly at Google: https://support.google.com/analytics/answer/6004245?hl=en
https://policies.google.com/privacy

https://safety.google/privacy/privacy-controls/

The operator indicates that Google has undertaken to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from the Member States of the EU and Switzerland (see https://www.privacyshield.gov/list). You will find further information at https://www.google.de/policies/privacy/frameworks/.

When using Google Analytics, no direct personal data is stored, only the internet protocol address. This information is used to automatically recognise you the next time you visit the operator’s website and make navigation easier for you.

The admissibility of this processing is based on Art. 6 para. 1 lit. a) GDPR stating that the processing is lawful if the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

The personal data collected in the context of the use of tracking tools will be deleted after 14 months, unless the controller has a legitimate interest in further storage. In any case, only those data will continue to be stored that are necessary to achieve the corresponding purpose. Wherever possible, the personal data will be anonymised.

You can withdraw your consent to this processing here.

You are not obliged to provide this personal data. However, the consequence of not providing personal data is that you will not be able to use the website or will not be able to use it to its full extent.

2.7 Google Maps

The operator offers you on its website the possibility to use the map service Google Maps by linking. This service is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit the Google Maps site, Google stores and processes your personal data in accordance with Google's applicable privacy provisions and terms of use (see section 2.6 above). Please note that we have no control over the collection and use of data by Google.

If you follow the links during your visit to our website and are logged into your personal user account, the information that you have visited our website may be forwarded to Google and stored there. Your visit to this website can then be linked to your user account. You need log out of your account before clicking on the link to prevent this.

2.8 YouTube

The operator uses videos from YouTube on the website. YouTube is a service from YouTube LLC ("YouTube"), 901 Cherry Ave., San Bruno, CA 94066, USA, and is provided by it. YouTube LLC is a subsidiary of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The integration of YouTube videos takes place in the so-called extended privacy by means of a so-called iFrame. This means that YouTube or Google does not set any cookies to record your usage behaviour on our website when implementing the videos. If you click or tap on an implemented video and, as a result, are redirected to another website or app, your user behaviour may be recorded there in accordance with the policies and terms of use of that website or app.

When loading this iFrame, YouTube or Google may collect and process information (including personal information). It cannot be ruled out that YouTube or Google may also transfer the information to a server in a third country (such as the USA). This occurs regardless of whether YouTube provides a user account that you are logged in or whether there is no user account.

The data may be used by YouTube or Google for the purposes of advertising, market research and/or designing its website to meet specific needs. This may also include a link to your account if you are logged in there. If you do not wish this, you need to log out before use.

The operator uses YouTube videos to provide you with different videos on various topics. If personal data is transferred to YouTube or Google, the admissibility of this processing is based on Art. 6 para. lit. 1 f) GDPR, which states that the processing is lawful if it is necessary for the purposes of preserving the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The use of data for the purpose of making videos available to illustrate our services and products constitutes a legitimate interest according to Art. 6 para. 1 f) GDPR.

The provision of the data is neither prescribed by law nor necessary for the conclusion of a contract. The consequence of not providing personal data is that you will not be able to use the website or will not be able to use it to its full extent.

For more information about the purpose and scope of data collection and processing by YouTube, please see Google's Privacy Policy and Terms of Use (see section 2.6 above).

2.9 Web presence on social media (Xing, LinkedIn)

In addition to this website, we also maintain presences on social networks (Xing, LinkedIn) which you can access via the corresponding buttons on our website (linking). As soon as you visit such a presence, these services store and process personal user data in accordance with the applicable terms of use. Please note that we have no control over the collection and use of data by social networks.

If you follow the links during your visit to our website and are logged into your personal user account, the information that you have visited our website may be forwarded to the respective social network and stored there. The visit to this website can then be assigned to your user account. You need to log out of your account before clicking on the link to prevent this.

The purpose and scope of the data collection by the respective service and the further processing of your data there as well as your rights in this regard are stated in the respective privacy provisions of the following providers:

Xing: https://privacy.xing.com/de/datenschutzerklaerung
LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

3. Right of access, to rectification, erasure, restriction, object and data portability

3.1 Right of access (Art. 15 GDPR)

Upon request, the operator will provide you with information as to whether data is processed concerning you. The operator makes every effort to process requests for information as quickly as possible.

3.2 Right to rectification (Art. 16 GDPR)

You have the right to obtain from the controller an immediate rectification of inaccurate personal data concerning you.

3.3 Right to erasure (Art. 17 GDPR)

You have the right to obtain from the operator the erasure of personal data concerning you immediately and the operator is obliged to erase personal data immediately if one of the grounds stated in Art. 17 para. 1 lit. a)-f) GDPR applies.

3.4 Right to restriction (Art. 18 GDPR)

You have the right to obtain from the controller restriction of processing if one of the grounds stated in Art. 18 para. 1 a)-d) GDPR applies.

3.5 Right to object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 para. 1 lit. e) or (f) GDPR, including profiling based on those provisions. The operator shall no longer process your personal data unless the operator demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the establishment, exercise or defence of legal claims.

If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You have the right to object, on grounds relating to your particular situation, to processing of your personal data for scientific or historical research purposes pursuant to Art. 89 para. 1 GDPR unless the processing is necessary for the performance of a task in the public interest.

Please use the contact address specified in the imprint for your notification.

3.6 Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data, which you provided to the operator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the operator to which the personal data have been provided, unless the processing is based on a consent pursuant to Art. 6 para. 1 lit. a) GDPR, Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and the processing by automated means.

4. Withdrawal of consent

If you have given your consent to the processing of your personal data and withdraw it, the processing shall not be affected before its withdrawal.

5. Right to complain

You have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR).

6. Recipients

The data collected when you accessing and using the website and the information you provided when contacting will be transmitted to the server and stored there. In addition, your data can be transferred to the following categories of recipients:

  • Persons working for the controller who are engaged in the processing (e.g. marketing department, personnel management, customer service, secretariat)
  • Processor (e.g. computer centre, IT service provider, software support)
  • Operator's contractual partners (e.g. shipping providers, banks, tax advisers)
  • Public bodies (e.g. authorities)

7. Links to third-party websites

When visiting the website, content linked to third-party websites may be displayed. The operator has neither access to the cookies or other functions used by third parties nor can control them. Such third-party websites are not subject to the operator's privacy provisions.

Latest version: 21.08.2019

Hotline

Monday - Friday
08:00 - 17:00 o´clock

+49 7272 7767-0