Privacy Notice for Visitors of our Website

We would like to inform you about the processing of your personal data that is collected about you within the NextPharma (“NextPharma”) regarding visiting our website. In addition, we will explain the purpose of the data processing, as well as your rights in this context. 

Controller according to art. 4(7) GDPR 

NextPharma Logistics GmbH is generally the data controller for the processing associated with our website. 

NextPharma Logistics GmbH 
Stieghorster Straße 90
33605 Bielefeld
Deutschland 

Telefon: +49-521-988-326-0 
Telefax: +49-521-988-326-222 
E-Mail: Dataprotection(at)nextpharma.com 

 However, in some cases NextPharma Logistics GmbH and other affiliated companies of the NextPharma Germany BidCo GmbH are joint data controllers for the processing. In any case you can contact us on any matter concerning data privacy via the contact details below. 

Data Protection Officer 

NextPharma has appointed a Data Protection Officer for the companies based in Germany. He can be reached as follows: 

TÜV SÜD Akademie GmbH 
Westendstraße 160, 80339 München, Deutschland 
E-Mail: Datenschutzbeauftragter(at)nextpharma.com 

In case if you have Data Privacy associated questions regarding any of our companies, feel free to contact us using the following contact details: 

NextPharma Germany BidCo GmbH 
Hildebrandstr. 12, 37081 Göttingen, Deutschland 
E-Mail: dataprotection(at)nextpharma.com 

Your Rights 

In regard to processing of your personal data, you have the following rights: 

  • Access your personal data processed by NextPharma (Art. 15 GDPR) 
  • Request correction of inaccurate personal data (Art. 16 GDPR) 
  • Request erasure of personal data if this is legally permitted (Art. 17 GDPR) 
  • Request restriction of processing (Art. 18 GDPR) 
  • Receive personal data in a structured, commonly used and machine-readable format (Art. 20 GDPR) 
  • Object to processing (Art. 21 GDPR) 
  • Lodge a claim with the supervising data protection authority (Art. 77 GDPR) 

Certain data processing is performed on the basis of your consent (e.g., processing of job applications for a longer period than 6 months, getting in contact with you upon receiving a query per our website contact form). In these cases, you have the right to withdraw your consent with effect for the future. This will not affect the lawfulness of the processing prior to the withdrawal of consent. 

 If you consider that the processing of your personal data infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in the EU Member State of your residence, workplace or the place of the alleged infringement. An overview list of data protection supervisory authorities can be found, for example, here: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html 

You can contact us at any time by emailing dataprotection(at)nextpharma.com if you have any questions about your data protection rights or wish to exercise any of aforementioned rights. 

Personal data 

When you visit the NextPharma website, general information about your device hardware and interactions with our site is collected automatically (Server-Log-Data): 

  • IP-address 
  • Referrer URL (origin address) 
  • Operating system 
  • Browser type, version and language 
  • Date and time of the server request 

We store anonymized IP addresses for 60 days in server logfiles in order to ensure the security of data and the stability and safety of our website. The legal basis is Art. 6 (1)(f) GDPR. 

Hosting 

We host the content of our website at: 

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen

The purpose and scope of the processing and use of the data is determined by the controller, whereas this provider acts as a processor only and shall not process or use data for its own purposes.

The use of provider is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible.

Encryption 

To protect the security of your data during transmission, we use state-of-the-art encryption procedures via HTTPS. 

Contact form 

When using our Contact form, you decide yourself which Data do you want to share with us to enable us to reach you in regard to your question. 

  • Name 
  • Contact information (e-mail address / telephone number) 
  • Further information that you provide voluntarily 

Your details from the contact form, including the contact details you provide there, will be processed by us for the purpose of processing the enquiry. We do not pass on this data without your consent. 

The processing of this data is based on your consent (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time, for this you can contact us through dataprotection(at)nextpharma.com. 

The data you enter in the contact form will remain with the responsible internal departments until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected. 

If you are under 16 years old, please do not send us any personal data (e.g. your name, address and e-mail address). If you wish to contact NextPharma, please ask your parents or guardians to do so on your behalf. 

Cookies 

This site uses third-party website tracking technologies (including cookies) to provide and continually improve our services according to our users’ interests. The use of such tracking technologies, except for where technically necessary for the operation of the website, is subject to your consent. With the help of special consent management tool, you can view detailed information about the processing, agree to such processing of your data, revoke or change prior consent with effect for the future. 

You can view detailed information about the tracking technologies in use and processed data directly in the consent management tool. 

Usercentrics Consent Management Platform 

On this site we use the consent management tool Usercentrics CMP provided by  

Usercentrics GmbH,  
Sendlinger Str. 7, 80331 
Munich, Germany  

This tool enables us to provide our users the possibility to consent to non-necessary processing and revoke or change prior consent.  

This processing is necessary to fulfil a legal obligation (Art. 7 para. 1 GDPR) to which we are subject (Art. 6 para. 1 sentence 1 lit. c GDPR).  

The consent data (given consent and revocation of consent) are stored for one year. 

Usercentrics GmbH acts as a processor for us and is the recipient of your personal data. 

The processing takes place in the European Union. Further information on objection and removal options vis-à-vis Usercentrics can be found at: usercentrics.com/de/datenschutzerklaerung/ 

Google Tag Manager 

On this website we use a Google Tag Manager tool. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This tool enables us to manage and deploy marketing and analytics tags.

Use of tags will be performed only in case if you consent to it.

Use of Google Tag Manager enables us to manage implemented tags as well as control what data is being transmitted to further services (such as Google Analytics) and to anonymize that data prior to transmission.

Further information about Google Tag Manager and Google’s privacy policy can be found at https://policies.google.com/privacy and https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google Analytics 

On this website we use a web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Analytics to analyze the use of our website in order to continually improve the user experience as well as assess effectiveness of our marketing activities.

This processing will be performed only in case if you consent to it.

To ensure high level of data privacy when using Google Analytics we have implemented in conjunction with Google Tag Manager, in a so-called server-side tracking configuration, to prevent transmitting your personal data (cookies, IP-Addresses) directly and ensure that data that is being transmitted to Google Analytics is anonymized. Also, this enables us to implement first-party cookies instead of third-party ones, which limits cross-site tracking. 

More information on Google’s terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

YouTube Video

On this website we offer you an option to view videos stored on YouTube Video.  This is a video player service. It can be used by user to watch, like, share, comment and upload videos. The provider is Google Ireland Limited (“Google”), Gordon House, 4 Barrow Street, Dublin, Ireland. 

This processing is based on your consent (pursuant to GDPR Art. 6(1)(a)) and only takes place if you have consented to it. You have the option of refusing the processing of your data via consent management tool, in which case a cookie will be used to save your choice. 

In case if you consent to use of this service, the following data is being processed through the use of this service: Device information, IP address, Referrer URL, Videos viewed.

If you consent to the use of YouTube Video, your browser establishes a direct connection to Google’s servers. Google transmits the content directly to your browser and, for technical reasons, communication data is exchanged. We have no influence on the processing of your data by Google and can therefore not provide you with any binding information on the scope and purposes of data processing by Google. For more information, please see the Google privacy policy: policies.google.com/privacy;

Cloudflare Turnstile

On this website we use Cloudflare Turnstile. The provider is Cloudflare Inc., (“Cloudflare”) 101 Townsend St., San Francisco, CA 94107, USA. We use this service to ensure that input in the contact form on our website is done by persons and not by automated programs. For this purpose, Cloudflare Turnstile analyzes the behavior of a web visitor. IP address, duration of display of the webpage as well as activity on the webpage are being collected and sent to Cloudflare for this purpose.

This processing is based upon Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that inquiries coming via our contact form are genuine and we are not subject to automated mass messaging or spam.

For more information, please see the Cloudflare privacy policy: https://www.cloudflare.com/en-gb/cloudflare-customer-dpa/

Cloudflare is certified in accordance with the “EU-US Data Privacy Framework” (“DPF”), a framework defined by the agreement between the European Union and the US, which aims to ensure compliance with EU Data Protection standards for data processing in the US. Companies certified under the DPF are obliged to comply with these standards. You can receive more information and check the status of the certification at the following link: https://www.dataprivacyframework.gov/list

Social Media 

We also operate various social media channels in addition to this website. We currently have presences on Facebook, Instagram, XING and LinkedIn. You can reach our pages there via the corresponding buttons on our website. We expressly point out that you use these pages and their functions on your own responsibility. When visiting our presence on the aforementioned platforms, personal data may be transmitted to and processed by the operator of the respective platform, such as IP address, processor type used and browser version including plug-ins. The data collected about you in this context will be processed by the provider of the social media and may also be transferred to countries outside the European Economic Area (EEA). 

If you are logged in with your personal user account while visiting such a website, the operator can assign the visit to your account. If you wish to avoid this, you should log out of the operator of the respective platform before visiting our online presence there or deactivate the “stay logged in” function, delete the cookies present on your device and close and restart your browser. 

The purpose and scope of the data collection and the further processing and use of the data by the operator of the respective platform as well as your rights in this regard and setting options for protecting your privacy can be found in the respective data protection notices: 

We do not collect or process any further data from your use of our presence on the corresponding social media platforms. 

Changes to this privacy policy 

We reserve the right to amend this data protection declaration if necessary, so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new privacy notice will then apply to your next visit. This privacy notice was last updated on July 22, 2024.