Privacy policy
Our handling of your data and your rights in accordance with the European General Data Protection Regulation (GDPR)
We process your personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Data Protection Act. Below we inform you about us and the type, scope and purpose of data collection and use:
Who we are
The controller responsible for data processing is NUTROPIA PHARMA GmbH, Moosham 29, A – 5585 Unternberg. You can reach us at the telephone number +43 6476 805 – 0 and by e-mail at office@nutropiapharma.com.
Our company’s data protection coordinator is Dr Markus Schlick, telephone number +43 6476 805 – 116,
e-mail address datenschutz@nutropiapharma.com.
Collection and processing of data
We process the personal data that you provide to us as a customer, employee, supplier and/or person interested in our services (marketing, competitions, customer cards), for example as part of an enquiry or to conclude a contract. On the other hand, we process personal data that we have legitimately obtained from publicly accessible sources (e.g. pharmacy directory, EUDRA GMP, land register, company register, trade register, press, media, websites).
Relevant personal data are personal details (first name and surname, address and other contact details, date of birth, nationality, health-related data) and legitimisation data (e.g. ID card data). In addition, this may also include order data, data from the fulfilment of our contractual obligations (turnover data in payment transactions, credit limits, product data, information about your financial situation (e.g. creditworthiness data), advertising and sales data, data about your use of our offered telemedia (e.g. time of access to our websites, newsletter) and other data comparable to the categories mentioned.
Purpose of the collection of data
Data processing is carried out for the following purposes:
Contract fulfilment and pre-contractual correspondence
Company controlling
Information about changes to the GTC or data protection notices
Sending of marketing information (e.g. boss info) or invitations to events
Notification as part of a competition
Processing of services (e.g. Sanodat, marketing department)
Ensuring IT security and IT operations
Measures for business management and further development of services and products
Legal bases for data processing are
Consent (Art. 6 para. 1 lit a GDPR)
If you have given us your consent to process personal data for specific purposes (e.g. forwarding data to manufacturers as part of promotional discounts), this processing is lawful on the basis of your consent.
Revocation of consent
We process your personal data for the purpose of direct marketing. You have the right to object at any time to processing for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
Any consent given can be revoked at any time for the future. This also applies to the revocation of consent given to us before 25 May 2018. Please send your cancellation to +43 6476 805 – 0 or by email datenschutz@nutropiapharma.com.
Use and disclosure of personal data
If you have provided us with personal data, we will only use it for purposes such as processing contracts, invitations to various events, responding to your enquiries and for technical administration. As part of our business relationship, you only need to provide the data that is required for the establishment, execution and termination of the business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order or will no longer be able to fulfil an existing contract and may have to terminate it.
We will only pass on or transfer personal data to third parties if this is necessary for the purpose of processing the contract or for billing purposes or if you have given your prior consent.
Stored personal data will be deleted if you revoke your consent to storage, if your data is no longer required to fulfil the purpose for which it was stored or if its storage is or becomes inadmissible for other legal reasons. Data for billing and accounting purposes are not affected by a request for deletion within the statutory retention period.
Data access
Within the company, access is granted to those departments that need it to fulfil our contractual and legal obligations as well as for the maintenance and upkeep of operations, advertising and marketing (e.g. accounting, sales, purchasing department, logistics and marketing). The principle of least privilege is applied here. Processors engaged by us (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories of accounting / tax consultants, IT services, logistics, telecommunications, data security service providers, consulting and advisory services as well as sales and marketing.
With regard to the transfer of data to recipients outside the company, please note that we will only pass on your data if this is permitted by law, you have given your consent and / or the contracted service provider has contractually agreed to confidentiality and data security measures with us.
Data retention and data security
The data will be processed in personalised form for as long as this appears reasonable for the purposes of their processing, in particular for the duration of our business relationship.
The data is also processed and stored on the basis of various retention and documentation obligations, including those arising from the Austrian Commercial Code, the Federal Fiscal Code and other legal obligations. For example, accounting data is stored for a period of eight years. In addition, until the end of any legal disputes in which the data is required as evidence. Personal data that we process in connection with our marketing services will be deleted four years after the last contact with you.
The data is protected against unauthorised access with appropriate security measures for each system architecture (privacy by design). The security measures include, for example, encrypted transmission, encrypted storage, a role authorisation concept, a data backup concept and physical protection measures for the servers.
The security measures are continuously revised in line with technological developments and audited on an ongoing basis.
Information, rectification, erasure, cancellation
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The restrictions according to GDPR apply.
Upon written request, we will be happy to inform you at any time about the personal data stored about you. Please address your request to Dr Markus Schlick, telephone number +43 6476 805 – 116, email address datenschutz@nutropiapharma.com.
If your data processed by us is incorrect, please let us know. We will correct it immediately and inform you.
In the event that you no longer wish us to process your data, please inform us informally by calling +43 6476 805 – 0, e-mail address datenschutz@nutropiapharma.com. We will of course delete your data immediately and inform you accordingly. If there are compelling legal reasons for not deleting your data, we will inform you immediately.
Profiling (scoring)
We sometimes process your data automatically with the aim of evaluating certain personal aspects (profiling). We use profiling, for example, to provide you with targeted information and advice about products. This enables needs-based communication and advertising, including market and opinion research.
Automated decision-making does not take place in any case.
Cookies
Cookies are small text files that are sent when you visit a website and are temporarily stored on the website user’s hard drive. If the corresponding server of our website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can then analyse the information received through this procedure in various ways. For example, cookies can be used to control the display of adverts or make it easier to navigate a website. If the user of the website wishes to prevent the use of cookies, they can do so by making local changes to their settings in the Internet browser used on their computer, i.e. the programme for opening and displaying Internet pages (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).
Use of Facebook plugins (Like button)
Plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our website. You can recognise the Facebook plugins by the Facebook logo or the “Like” button on our website. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/.
When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook’s privacy policy at en.facebook.com/policy.php.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on the user’s computer, to help the website analyse how users use the site. The information generated by the cookie about the use of this website by the user (including the IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to analyse the use of the website, to compile reports on website activity for the website operator and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate the user’s IP address with any other data held by Google. The consumer may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of the pharmacy’s website. By using the website, the consumer consents to the processing of data about him/her by Google in the manner and for the purposes set out above.
Note: IP anonymisation is active on this website for this tool.
To prevent Google Analytics from collecting data on this website in the future (the opt-out only works in the browser and only for this domain), please use the following link. An opt-out cookie will be stored on your device. If you delete your cookies in this browser, you must click on this link again.
Fonts
The fonts are provided by Google (Google Fonts)
Lead info
We use the Lead–Generation–Service from Leadinfo B.V., Rotterdam, Netherlands. This recognises visits from companies to our website based on IP–addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two First–Party–Cookies to analyse user behaviour on our website and processes domains from form entries (e.g. ““).e.g. “leadinfo.com“) to correlate IP–addresses with companies and improve services. Further informationcan be found at www.leadinfo.com. On this page:www.leadinfo.com/en/opt–out you have an opt–out option. In the event of an opt–out, your data will no longer becollected by Leadinfo.
Targeting and advertising cookie
These cookies collect information about the usage behaviour of users of our website to ensure that only advertising material that may be of interest to our users is presented. Targeting and advertising cookies can also be used to recognise a return visit to our website or a visit to a website that is part of our company’s advertising partner network. IP addresses are only stored in anonymised and encrypted form. The selection of information displayed can be based on the user’s interests or on which adverts they have previously viewed. It also ensures that adverts are displayed correctly and prevents the same advert from being shown too often. These cookies are also used to measure the efficiency of advertising campaigns. These cookies are stored for three months. To view the anonymised data stored by you or to delete it (opt out), please use the following link: https://site.adform.com/privacy-center/platform-privacy/opt-out/
Possibility to lodge a complaint
Finally, we would like to inform you that you have the option of lodging a complaint with the data protection authority.
