Who is responsible for the data processing?
According to data protection law, the controller is
Queisser Pharma GmbH & Co. KG, Schleswiger Str. 74, 24941 Flensburg
You can find further information about our company, details about authorised representatives and further contact opportunities in the legal notice on our website: https://www.queisser.com/privacy/
What data regarding your person do we process? And for what purposes?
If we receive data from you, we will generally only process this data for the purposes for which we received it or collected it.
A data processing for other purposes will only be considered if the necessary legal requirements exist according to Art. 6(4) GDPR. In such a case, we will naturally comply with a possible duty to provide information according to Art. 13(3) GDPR and Art. 14(4) GDPR.
What is the legal basis?
In the absence of any other specific legal provisions, the legal basis for the processing of personal data is generally Art. 6 GDPR. In this case, the following possibilities are considered:
- Consent (Art. 6(1)(a) GDPR)
- Data processing for the fulfilment of contracts (Art. 6(1)(b) GDPR)
- Data processing on the basis of a balancing of interests (Art. 6(1)(f) GDPR)
- Data processing for the fulfilment of a legal obligation (Art. 6(1)(c) GDPR)
If your personal data are processed on the basis of your consent, as regards our company, you have the right to withdraw this consent with future effect at any time.
If we process data on the basis of a balancing of interests, as the data subject, in consideration of the provisions of Art. 21 GDPR, you have the right to object to the processing of your personal data.
For how long will the data be stored?
We will process the data for as long as this is required for the appropriate purpose.
Insofar as legal storage obligations exist – in terms of commercial or tax law, for example – the personal data in question will be stored for the duration of the storage obligation. After the storage obligation has elapsed, we will verify whether a further processing is necessary. If no such necessity exists, the data will be erased.
We will generally verify data concerning the requirement for further processing towards the end of a calendar year. Due to the volume of data, this verification will take place in terms of specific types of data or processing purposes.
At any time, it is naturally the case that you can (see below) request access to the data concerning your person which is stored in our company, and if no necessity for processing exists, demand the erasure of the data or a restriction of processing.
To which recipients are the data forwarded?
Your personal data will only generally be forwarded to third parties if this is required for the implementation of the contract with you, the forwarding of the data is permitted on the basis of a balancing of interests according to Art. 6(1)(f) GDPR, we are legally obliged to forward the data, or you have provided your respective consent.
Where are the data processed?
We will only process your personal data in data processing centres in the European Union.
Video surveillance in the area of our company buildings
Video surveillance is used to exercise domiciliary rights, to prevent criminal offenses and to assert, exercise or defend legal claims. It is also used for access control purposes.
The legal basis is Art. 6 para. 1 lit. f) GDPR, whereby our interests arise from the aforementioned purposes and interests. Insofar as special categories of personal data are processed, this is done on the basis of Art. 9 para. 2 lit. f) in conjunction with Art. 6 para. 1 lit. f) GDPR. Art. 6 para. 1 lit. f) GDPR.
We save the video recordings on our own servers. The storage period of the video recordings is a maximum of 7 days, e.g. in order to still have a reasonable period of time for any necessary viewing of the video recordings in the event of weekends in connection with public holidays. Access to the data is subject to a restrictive authorization concept. The data may be saved for a longer period of time for specific reasons, e.g. to enforce legal claims.
Your rights as a “data subject”
You have the right to access the personal data that we process about you.
In the case of a request for access which does not occur in writing, please understand that we may request proof from you that you are the person that you claim to be.
You further have the right to rectification or erasure or to the restriction of processing, insofar as the legal entitlement exists.
You also have the right to object to the processing in the scope of the legal provisions. The same applies to the right to data portability.
In particular, according to Art. 21(1) and (2) GDPR, you have the right to object to the processing of your data in the context of direct advertising if this takes place on the basis of a balancing of interests.
Our Data Protection Officer
We have appointed a Data Protection Officer in our company. She can be contacted as follows:
Queisser Pharma GmbH & Co. KG
– Data Protection Officer –
Schleswiger Str. 74
24941 Flensburg
Email:
Right to lodge a complaint
You have the right to complain about our processing of your personal data to a supervisory authority for data protection.
Version: 30/05/2018