Privacy Notice for Visitors of our Website

PLEASE READ AND REVIEW THE FOLLOWING PRIVACY STATEMENT CAREFULLY BEFORE USING THIS WEBSITE

This Privacy Statement sets forth the privacy policies and practices of Cencora, Inc. and its subsidiaries (including NextPharma Logistics GmbH) and affiliates (collectively, “Cencora”), as they relate to the collection, use and disclosure of Personal Data (as defined below) in connection with your use of our websites that link to this Privacy Statement (the “Websites”). Please read this Privacy Statement carefully and completely before using the Websites.

What is personal Data?

When we use the term “Personal Data” in this Privacy Statement, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual or household. The term does not include aggregated information that is maintained in a form that is not reasonably capable of being associated with or linked to an individual and does not apply to other information that is excluded from privacy protections under applicable law (“Deidentified Data”).

Controller

NextPharma Logistics GmbH is generally the data controller for the processing associated with our website.

NextPharma Logistics GmbH
Stieghorster Straße 90
33605 Bielefeld
Deutschland

Telefon: +49 2389 7804 0
E-Mail: Privacy@cencora.com

You can contact us on any matter concerning data privacy via the contact details below.

Data Protection Officer:

NextPharma Logistics has appointed a Data Protection Officer for the companies based in Germany.

In case if you have Data Privacy associated questions regarding any of our companies, feel free to contact us using the following contact details:

Liam Dagless
Data Protection Officer (DPO)

E-Mail: privacy@cencora.com
Telefon: +49 2389 7804 202

Your Privacy Rights: 

Under Data Protection Law you have certain privacy rights with respect to your Personal Data, including as follows:

  • Right to Object: you have the right to object at any time to the processing of Personal Data on grounds relating to your particular situation, including a right to object to the processing of your Personal Data for processing performed on the basis of legitimate interest, unless we are able to demonstrate overriding compelling legitimate grounds.
  • Right to Know/Access: You have the right to obtain confirmation from us as to whether we are processing your Personal Data and the right to access and receive a copy of such Personal Data.
  • Right to Delete/Erasure: In some cases, you may request the deletion or erasure of Personal Data concerning you.
  • Right to Rectify/Correct Inaccurate Information: If we process inaccurate, incomplete, or outdated Personal Data, you have the right to rectification.
  • Right to Withdraw Consent: Once you have consented to the collection of your Personal Data, you may withdraw your consent at any time, for this you can contact us through Privacy@cencora.com. Please note that your withdrawal of consent would not affect the lawfulness of processing based on consent before it was withdrawn.
  • Right to Data Portability: You have the right to receive the Personal Data concerning you in a structured, commonly used and machine-readable format and the right to transmit that information to another company where feasible.
  • Right to Restrict: You have the right to restrict us from processing Personal Data under certain circumstances e.g. you contest the accuracy of your Personal Data or when you believe that we are processing your Personal Data beyond the original purpose.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the competent data protection supervisory authority. You can, for example, contact the supervisory authority in the EU Member State of your residence, place of work or place of alleged infringement. An overview list of data protection supervisory authorities can be found, for example, here: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

Collection and Use of your Personal Data

Personal Data We Collect Directly from You
We may collect Personal Data directly from you when you visit our Websites, choose to use services or participate in programs or otherwise provide Personal Data directly to us. Personal Data we collect directly from you may include:

  • Contact Information: including name, email address, postal address, and/or telephone number.
  • Account Information: including your user ID and password;
  • Financial Information: payment details you provide to us for purchasing goods or   services;
  • Demographic Information: including date of birth and gender;
  • Communications Information: including information provided in messages sent through the forms, product and service preferences and/or behaviors; and future communication preferences;
  • Survey Information: information provided when you respond to questions submitted through surveys, e.g. name, contact details, date of birth and gender;
  • Marketing Information: personal details (name, contact preferences) provided in order to personalize marketing and promotional communications information based on your activities and interests to the extent it is necessary for legitimate interest purposes.

Personal Data We Automatically Collect About You
With your consent, we and our third-party providers may collect certain Personal Data from (or in connection with) your device when you visit the Websites, use our Services, or view online advertisements. This Personal Data includes:

  • Device Data: including internet protocol (IP) address, operating system and platform, device type and version, browser type and version, browser id, the URL entered and the referring/destination page, date/time of visit, language preferences, the time spent on our Websites, and any errors that may occur during the visit to our Websites.
  • Analytics data: including the path taken to/from our Websites, usage and activity on our Websites.
  • Location data: such as approximate geolocation.

We and our third-party providers may use cookies and other related technologies such as, web beacons to automatically collect this information. This helps us analyze how you use and interact with our Websites and distinguish you from other users. It also helps us and our third-party providers to determine products and services that may be of interest to you. For more information about these practices and your choices regarding cookies, please see our Cookie Policy.

Personal Data We Collect from Other Sources and Third Parties
We collect Personal Data from third parties, which we may combine with Personal Data we collect automatically or directly from a user. We may collect the same categories of Personal Data as identified above from the following third parties:

  • Your Employer / Company: we may receive your Contact Information from your employer / company where you interact with the Websites through your employer / company.
  • Business Partners: we may receive your Personal Data from our business partners.
  • Service Providers: our service providers that perform services on our behalf, such as analytics providers and payment processors, collect Personal Data and often share some or all of this information with us.
  • Information Providers: we may from time to time obtain information from third-party information providers to correct or supplement Personal Data we collect. For example, we may obtain updated Contact Information from third-party information providers to reconnect with an individual. We will obtain your consent to do so where required by applicable data privacy and security rules and regulations (“Data Protection Laws”).
  • Other Sources: We may also collect Personal Data from publicly available sources or through transactions (e.g., mergers and acquisitions). We will obtain your consent to do so where required by applicable law.

Please be advised that any Personal Data provided to us by a third party may also be subject to that third party’s privacy policy.

Some of the Personal Data (e.g., financial account and location data) that we collect, and process may be considered sensitive Personal Data in certain jurisdictions. The processing of such data is necessary for providing services to you and/or personalizing our services and Websites. We adopt appropriate security measures to protect the Personal Data we process, including sensitive Personal Data. We do not expect that our processing of sensitive Personal Data would impact your rights and interests adversely.

Purposes and Legal Bases for Processing Data

We process Personal Data for the following purposes (and as required where you or we are located in the EEA/Turkey/UK in reliance on the following legal bases):

Hosting

We host the content of our website at:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen

The purpose and scope of the processing and use of the data is determined by the controller, whereas this provider acts as a processor only and shall not process or use data for its own purposes.

International Transfer of Personal Data

The Personal Data we collect may be transferred to and stored in countries or provinces outside of the jurisdiction you are into locations where we and our third-party service providers have operations, including in the USA. For example, if you are accessing a website hosted in the USA (e.g., by Cencora Corporation) from the EEA, UK or Switzerland, your Personal Data will be processed outside of the EEA, the UK and Switzerland, respectively.

Cencora has entered into intra-group data transfer agreements to ensure the lawful transfer of Personal Data between the Cencora companies.

European Transfers: If you are located in the EEA, UK, Switzerland or other countries which restrict the transfer of Personal Data, we comply with applicable data protection laws when transferring your Personal Data outside of these areas. In particular, we may transfer your Personal Data to countries for which adequacy decisions have been issued; implement appropriate and suitable safeguards such as the European Commission’s Standard Contractual Clauses for the transfer of Personal Data to our U.S. headquarters, other offices or third parties, where applicable, or where required, we will ask you for your prior consent.

Security of Your Personal Data

We use appropriate technical, administrative and physical safeguards to protect Personal Data from loss, misuse or alteration. We limit access to Personal Data to those employees, agents, contractors and other third parties who have a business need to know. You acknowledge and agree that no organization can guarantee the absolute security of Personal Data, and any transmission of Personal Data is at your own risk.

Protection of Children

Cencora will not knowingly collect, use or disclose Personal Data from a Child without obtaining prior consent from a person with parental responsibility (parent or guardian) where required by applicable law. Cencora abides by laws protecting the privacy of Children. Should a user whom we know to be under 18 provide Personal Data to us, we will use that information only to respond directly to that Child to inform him or her that we must have parental consent before receiving information about him or her and then delete it.

Sharing Your Personal Data

We may share your Personal data with the following third parties:

  • Cencora Affiliates: we may share your Personal Data with our subsidiaries and affiliates for the same purposes as are described above.
  • Service Providers: we engage third-party service providers to perform business / operational services for us or on our behalf and to whom we will disclose Personal Data. These third parties include, for example, providers of website hosting, IT services, analytics services, and payment processing services.
  • Advertising Partners and Ad Networks: we work with third-party ad networks and advertising partners to deliver advertising and personalized content on our websites. These parties may collect Personal Data directly from a browser or device when a user visits our websites e.g., through cookies. This Personal Data is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research. Please see our Cookie Policy for more information.
  • Your Employer / Company: we may disclose your Personal Data to your employer / company if you interact with our websites through your employer / company.
  • Transactions: we may disclose Personal Data to a third-party during negotiation of, in connection with, or as an asset in a corporate business transaction. Personal Data may also be disclosed in the event of a transfer, sale or merger of all or a portion of Cencora’s assets, in the event of an insolvency, bankruptcy, or receivership or other corporate change involving us or our affiliates.

Disclosing information as required by law and similar disclosures

We may disclose Personal Data we have about you: (i) if we are required to do so by law, regulation, or legal process, such as a court order or subpoena; (ii) in response to requests by government agencies, such as law enforcement authorities; (iii) when we believe a disclosure is necessary or appropriate to protect against or respond to physical, financial or other harm and injury (iv) in connection with an investigation or suspected or actual unlawful activity.

Aggregated information

We may share anonymous usage data on an aggregate basis with third parties to help us perform analysis and make improvements. Additionally, we may share anonymous usage data on an aggregate basis in the normal course of operating our business; for example, we may share information with subsidiary organizations to show trends in the use of our services.

Other disclosures

At your direction or request, or when you otherwise consent, we may share your Personal Data for purposes other than those that are listed above.

If you would like to obtain information regarding the names and contact details of the parties with whom we share your Personal Data, their processing purpose and method, the categories of Personal Data shared with them, and the method and procedures for exercising your rights with them, please contact us using the contact details set out at the end of this Privacy Statement. Please note however that we may not be able to fulfil this request in all instances.

Retention

Personal Data will be stored and kept as long as needed to carry out the purposes described in this Privacy Statement or as otherwise required by applicable Data Protection Laws. Because these needs can vary for different data types in the context of different services, actual retention periods may vary.

When determining the retention period, we consider various criteria, such as the type of service requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with services, the impact on the services we provide if we delete some Personal Data from or about you, mandatory retention periods provided by applicable law, including Data Protection Laws, and the U.S. statute of limitations.

Unless we are required or permitted by law to keep your Personal Data for a longer period of time (e.g., in pending litigation matters or where the law requires us to), when this Personal Data is no longer necessary to carry out the purposes for which we process it, we will delete your Personal Data or keep it in a form that does not permit identifying you. If there is any Personal Data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of that Personal Data.

Categories of Personal Data we will sell or share and related information

When we engage in digital advertising, we may sell the following categories of Personal Data (according to the broad definition of “sell” under select state Data Protection Laws) or we may share (according to the broad definition of “share” under select state Data Protection Laws) them for purposes of cross-context behavioral advertising: personal identifiers (IP address); and internet or other electronic activity information.

These categories of Personal Data are sold to or shared for cross-context behavioral advertising to advertising networks and other companies that facilitate digital advertising. We engage in such sales and sharing to facilitate digital advertising that is able to reach people that are most likely to be interested in the services we provide.  We do so by allowing third parties to place cookies or other tracking technologies on our website that may collect information about your online activities over time and across different websites or applications.  For more information about the use of cookies and other tracking technologies, see the section “Cookies, Web Beacons and Other Technologies” below.

In certain jurisdictions, you may opt out of such sales and sharing of Personal Data, by clicking here.

Cookies and other Tracking Technologies

We may use cookies, pixel tags, web beacons and other similar tracking technologies (“tracking technologies”) to automatically collect information through our website. Tracking technologies are essentially small data files placed on your computer, tablet, mobile phone, or other devices that record certain pieces of information when you visit our website. We may use these tracking technologies to help identify irregular behavior, prevent fraudulent activity and improve security, as well as making it possible for you to save your preferences and help us understand how you interact with our website.

We also allow third parties to use tracking technologies on our website for analytics and advertising.  They assist in helping display advertisements, tailor advertisements to your interests and to assist in determining if you require assistance or are having problems navigating on our website.   Some of these third parties are our service providers that may use certain technologies to record your interactions with the sites, including without limitation, your keystrokes and mouse clicks, and information about when, how and from where you accessed our sites.  This information is used to help us manage our sites and provide a good user experience.  The service providers we use in this regard agree not to sell or disclose any of the recorded information to third parties (other than subcontractors who assist in providing this service to us or for legal compliance purposes at our direction).  Other third parties use the tracking technologies to collect information about how you interact with other website and advertisements across the Internet to provide advertising that is tailored to your interests and which may appear on our website or on other website or platforms.

You may set your browser to notify you when you receive a cookie. Many web browsers also allow you to block cookies. You can disable cookies from your computer system by following the instructions on your browser or at www.youradchoices.com.

Social Media

We also operate various social media channels in addition to this website. We currently have presences on Facebook, Instagram, XING and LinkedIn. You can reach our pages there via the corresponding buttons on our website. We expressly point out that you use these pages and their functions on your own responsibility. When visiting our presence on the aforementioned platforms, personal data may be transmitted to and processed by the operator of the respective platform, such as IP address, processor type used and browser version including plug-ins. The data collected about you in this context will be processed by the provider of social media and may also be transferred to countries outside the European Economic Area (EEA).

If you are logged in with your personal user account while visiting such a website, the operator can assign the visit to your account. If you wish to avoid this, you should log out of the operator of the respective platform before visiting our online presence there or deactivate the “stay logged in” function, delete the cookies present on your device and close and restart your browser.

The purpose and scope of the data collection and the further processing and use of the data by the operator of the respective platform as well as your rights in this regard and setting options for protecting your privacy can be found in the respective data protection notices:

We do not collect or process any further data from your use of our presence on the corresponding social media platforms.

Changes to this privacy notice

We reserve the right to amend this data protection declaration if necessary, so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new privacy notice will then apply to your next visit. This privacy notice was last updated on 01.12.2025.

© 2025 NextPharma Logistics GmbH. All rights reserved.