ELISABETH PHARMACON
I. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
ELISABETH PHARMACON, spol. s r.o.
Rokycanova 4437/5
Brno-Zidenice, 615 00
Czech Republic
Tel .: +420 542 213 851
E-mail: gdpr@elisabeth.cz
Website: www.elisabeth.cz
II. General information on data processing
1. Scope of processing of personal data
Generally, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
2. Legal basis for the processing of personal data
Insofar as we obtain your consent for processing of personal data, Art. 6 para. 1 lit. a) EU General Data Protection Regulation (GDPR) as legal basis.
When processing personal data that is required to fulfill a contract of which you are a party, Art. 6 para. 1 lit. b) GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfill a legal obligation to which ELISABETH PHARMACON is subject, Art. 6 para. 1 lit. c) GDPR is the legal basis for such processing.
If the processing of personal data is necessary to safeguard legitimate interests of ELISABETH PHARMACON , Art. 6 para. 1 lit. f) GDPR serves as legal basis.
If a transfer of personal data to other companies of the ELISABETH PHARMACON Group based in a third country takes place, the transfer is based on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c) GDPR.
3. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage fulfilled. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
III. Provision of the website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
In this process, the following data is collected:
(1) Information about the browser type and version used
(2) The operating system of the user
(3) The internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the system of the user comes to our website
(7) Web sites accessed by the user's system through our website
The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes comprise our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.
In the case of storing the data in log files, this is the case after four weeks at the latest. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
5. Objection and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no right to objection to this on for the user.
IV. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break.
The following data is stored and transmitted in the cookies:
(1) Language Setting
(2) Items in a shopping cart
(3) log-in information
In addition, we use cookies on our website that allow an analysis of users' browsing behavior.
In this way, the following data may be transmitted:
(1) Entered search terms
(2) frequency of page views
(3) Use of Website features
(4) Websites from which the user's system reaches our website
The data of the users collected in this way are pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.
When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also an indication of how the storage of cookies in the browser settings can be prevented.
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Article 6 (1) lit. f GDPR.
c) Purpose of the data processing
The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We require cookies for the following applications:
(1) Shopping cart
(2) Check-out procedure
(3) adaptation of language and country settings
(4) Remembering keywords
(5) Session Handling
The user data collected through technically necessary cookies will not be used to create user profiles.
The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer.
For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.
d) Duration of storage, objection and disposal options
Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to their full extent.
The transmission of Flash cookies cannot be prevented by the settings of the browser, but by changing the settings of the Flash Player.
V. Newsletter
1. Description and scope of data processing
On our website you can subscribe to a free newsletter. The data from the input mask are transmitted to us when registering for the newsletter.
(1) E-mail address
(2) Surname and first name
(3) Company
(4) Country
(5) Phone
(6) Post Address
In addition, the following data is collected upon registration:
(1) IP address of the calling computer
(2) Date and time of registration
For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.
In connection with the processing of data for the sending of newsletters, there basically is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.
2. Legal basis for data processing
The legal basis for the processing of the data after the user has registered for the newsletter is the consent of the user Art. 6 para. 1 lit. a GDPR.
3. Purpose of the data processing
The collection of the user's e-mail address serves to deliver the newsletter.
The collection of other personal data in the context of the registration process serves to prevent misuse of the services or the email address used.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.
5. Objection and removal possibility
Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.
This also allows a revocation of the consent to the storage of the personal data collected during the registration process.
VI. Registration
1. Description and scope of data processing
On our website, we offer users the opportunity to register by providing personal information. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is collected during the registration process:
(1) The IP address of the user
(2) Date and time of registration
(3) E-mail address
(4) Surname and first name
(5) Company
(6) Country
(7) telephone number
(8) Postal address
As part of the registration process, the consent of the user to process this data is obtained.
2. Legal basis for data processing
Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.
If the registration serves the fulfillment of a contract of which the user is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
3. Purpose of the data processing
User registration is required for the provision of certain content and services on our website.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection.
This is the case for the data collected during the registration process when the registration on our website is canceled or modified.
5. Objection and removal possibility
As a user, you have the option of canceling the registration at any time. You can change the data stored about you at any time.
VII. Contact form and e-mail contact
1. Description and scope of data processing
On our website is a contact form available, which can be used for electronic contact. If a user realizes this option, the data entered in the input mask will be transmitted to us and saved. These data are:
(1) Title
(2) Date and time of registration
(3) E-mail address
(4) Surname and first name
(5) Company
(6) Country
(7) telephone number
(8) Postal address
(9) Job Title
At the time of sending the message, the following data is also stored:
(1) The IP address of the user
(2) Date and time of registration
For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.
Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
2. Legal basis for data processing
Legal basis for the processing of the data is the consent of the user Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3. Purpose of the data processing
The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
5. Objection and removal possibility
The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail at gdpr@elisabeth.cz, he may at any time object to the storage of his personal data and request the deletion of the user's stored personal data. In such a case, the conversation cannot continue.
All personal data stored in the course of establishing contact will be deleted in this case.
6. Legal basis for the processing of personal data
The legal basis for processing users' personal data is Article 6 (1) lit. f GDPR.
7. Purpose of data processing
The processing of users' personal data enables us to analyze the surfing behavior of our users. By analyzing the obtained data, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. For these purposes, our legitimate interest lies in the processing of the data according to Art. 6 para. 1 lit. f GDPR. The anonymisation of the IP address sufficiently takes into account the interest of users in their protection of personal data.
8. Duration of storage
The data will be deleted as soon as they are no longer needed for our recording purposes.
9. Objection and removal possibility
Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.
VIII. Rights of the data subject
If personal data is processed by you, you are the affected person within the meaning of the GDPR and you are entitled to the rights described below. In principle, please direct your request to the aforementioned responsible person.
1. Information
You have the right to receive free information from us at any time as well as confirmation of personal data stored about you and a copy of this data.
2. Correction
You have the right to rectification and / or completion if the personal data you process is incorrect or incomplete.
3. Restriction of processing
You have the right to request the restriction of processing if one of the following conditions is met:
• The accuracy of your personal information is contested by you for a period of time that allows us to verify the accuracy of your personal information.
• The processing is unlawful, you refuse the deletion of personal data and instead require the restriction of the use of personal data.
• We no longer need your personal information for processing purposes, but you need it to assert, exercise or defend your rights.
• You have objection to the processing acc. Art. 21 para. 1 GDPR and it is not yet clear whether our legitimate reasons prevail over yours.
4. Deletion
You have the right to have your personal data deleted without delay, if any of the following is true and if processing is not required:
• The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
• They revoke their consent on which the processing was based and lack any other legal basis for the processing.
• You object to the processing in accordance with Art. 21 (1) GDPR, and there are no legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
• The personal data were processed unlawfully.
• The deletion of personal data is required to fulfill a legal obligation under EU or national law to which we are subject.
5. Data portability
You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance. In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
6. Objection
You have the right to object at any time to the processing of personal data relating to you which is "only" based on legitimate interests of us or third parties (Article 6 (1) (f) GDPR). In the event of an objection, we will no longer process personal data unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
7. Revocation of consent
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
For the exercise of your rights, please always contact the o.g. responsible person as your rights only may be exercised with the responsible person. You can, however, also contact the data protection officer, especially if your request requires greater confidentiality:
E-mail: gdpr@elisabeth.cz
8. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.