In the following, we will inform you about the processing of personal data within the scope of using our website.
The Controller for this website is Queisser Pharma GmbH & Co. KG(Schleswiger Str. 74, 24941 Flensburg, Germany). You can find more information on our company and its authorised representatives on our Legal notice page.
Which data are processed?
Legal basis of data processing
To be able to make our website and the associated services available to you, we are processing personal data on the following legal basis:
- Consent (point (a) of Art. 6(1) GDPR)
- for the execution of contracts (point (b) of Art. 6(1) GDPR)
- based on a consideration of interests (point (f) of Art. 6(1) GDPR)
- to fulfil a legal obligation (point (c) of Art. 6(1) GDPR)
We will refer to the appropriate terms in the context of the particular type of processing so that you are able to identify the basis on which we are processing the personal data.
If personal data are processed based on your consent, you are entitled to withdraw the consent at any time, effective for the future.
As the data subject, you are entitled to object to the processing of personal data in compliance with the requirements of Art. 21 GDPR if we are processing data based on a consideration of interests.
If you visit our website, your personal data are processed to enable the display of the website content on your device.
To allow the display of the website in your browser, the IP address of the device used by you must be processed. Furthermore, more information about the browser of your device is required.
Under applicable data protection law, we are obligated to also ensure the confidentiality and integrity of the personal data processed by our IT systems.
For this purpose and interest, the following data are recorded based on a consideration of interests:
- IP address of the accessing end device (for a maximum of 7 days)
- Operating system of the accessing end device
- Browser version of the accessing end device
- Name of the accessed file
- Date and time of access
- Transmitted data volume
- Referencing URL
After 7 days the latest, the IP address is erased from all systems used within the context of operating this website. Thus, we are no longer able to identify any persons using the remaining data.
Furthermore, the data are also used to identify and remedy any errors on the website.
We are offering a contact form on our website which you can use to request information on our products or services or make contact in general. We have marked the fields for the data absolutely needed from you to answer your query as mandatory. Any information you provide in the other fields is voluntary.
We need this information to process your query and to provide you with a response. The data are processed for specific queries to execute or initiate a contract. For general queries, they are processed on the basis of a consideration of interests.
Queries we receive through the contact form on our website will be processed by us electronically to respond to your query. In this context, other persons or departments and possibly also third parties may learn of the content in the form you have sent.
The form data are transmitted over the internet using encrypted connections.
On our website, you may also subscribe to an e-mail newsletter. On principle, we only need your e-mail address for this. You may provide us with additional information on how to address you and on your name. It is voluntary.
You may unsubscribe from our newsletter at any time. Alternatively, every newsletter e-mail includes a link to unsubscribe.
To allow us to analyse how popular our newsletter offerings are and to optimise them, we will record when you open the e-mails and click on links. The evaluation is anonymous. That means that we only see e.g. the percentage of the newsletter recipients who have opened an e-mail or clicked on links. This usage analysis is made based on a consideration of interests. You may object to such processing by unsubscribing from the newsletter.
Validation of email addresses
In order to prevent or minimise the risk of an incorrect entry of e-mail addresses by you, in our forms, we use a service that validates e-mail addresses. A corresponding check is carried out with the support of an EU service provider (Bouncer Sp. z.o.o (LTD), Poland – “Unbounce”).
We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR. In particular, the contract also provides for the erasure of the data.
Use of video content
We also integrate video content from third-party services such as bunny.net on our Internet pages. In this respect, data from the HTTP request (such as the IP address) is transmitted to bunny.net.
The associated data processing takes place via a Content Delivery Network of bunny.net. The data centres which are used for this purpose are located in the EU and Great Britain. In this context, an adequacy decision of the EU Commission applies to Great Britain, to ensure that an adequate level of data protection is guaranteed.
Review feature for products
If you have requested a sample of a product from us, we will send you an e-mail sometime later in which we ask you to submit a product review. We are using the Trustpilot service for this purpose. Trustpilot is a Danish service and is subject to the European Union’s data protection law.
Furthermore, we may also offer the option of reviewing our products directly on our website. This requires you to include a name with your review. The review may be published on our websites. You are advised of this fact when submitting the review. In the context of this review feature, data are processed based on a consideration of interests.
Cookies and other information in your end devices
We obtain consent from you for cookies that are not absolutely necessary according to Section 25 (1) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). You can withdraw your consent at any time with future effect by erasing the cookies set by our website or by adjusting your settings in the cookie settings on our website. You can also contact us at any time with regard to such a withdrawal.
You also have the option to prevent cookies from being stored by making appropriate settings in your browser. However, please note that using our website may then be possible to a restricted extent only. Cookies do not install or start any programs or other applications on your computer.
To enable specific functions on the website, we also store information in the “local cache” of the browser of your end device. This includes the “wish list” function on some of our product pages (such as “Doppelherz”). The storage and selection of this information does not require your consent according to Section 25 (2) no. 2, TTDSG.
Essential cookies (“required cookies”) are used on the basis of Section 25 (2) no. 2, TTDSG. Insofar as cookies may contain personal data, the data processing takes place on the basis of a balancing of interests (point (f) of Art. 6(1), GDPR). In such cases, our interest is in offering a functional, user-friendly website. Other cookies are used only after receiving your prior consent.
You have the option to save products on our website in a wish list. Cookies are used to enable this feature.
In several places on the website, we use pop-ups informing you about products or newsletters. We are also using cookies to control these ads, including but not limited to a possible decision to no longer have such pop-ups displayed.
If you activate the Pinterest button and the “Pin to Pinterest” feature, this preference is stored in a cookie.
To gain more information about the number, length of stay and popularity of the content on our web pages, we use the web analysis system “Matomo”.
In this respect, we use Matomo in a configuration in which no cookies or “pixels” are used and in which IP addresses are anonymised.
Matomo also allows us to detect and rectify errors on our website.
The legal basis for the data processing on the basis of Matomo is part (f) of Art. 6(1) GDPR (“balancing of interests”). Our interest is in the error-free and needs-based operation and optimisation of the website.
The data processing takes place in a data centre in the EU.
You can object to such a form of data processing at any time by clicking on the following link to deactivate Matomo:
Google Ads, Doubleclick and other “tracking”
On our website, we use other services of Google. This includes the Google Marketing Platform – a service of Google Ireland Limited (Ireland). With the Google Marketing Platform, we can better analyse how the “Google Ads” advertisements that are placed by us are received by internet users. Cookies are also used for this purpose.
We use the service on the basis of your consent. In this context, Google Ireland Limited may also transfer data to the data centres of Google LLC in the USA. In this respect, an adequate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework. The US parent company Google LLC. is certified according to the Data Privacy Framework.
The data in the Google Marketing Platform will be processed for up to 24 months.
We also use Google Ads on the basis of your consent in order to be able to display advertisements on our website and measure the success of our own advertising expenditure. This is also a service of Google Ireland Limited. Cookies are also used in this context. With regard to the possible processing of data in the USA, the same conditions apply to those that we have described above for the Google Marketing Platform.
You can find further information on data processing at Google and the option to object (opt out) here.
To analyse the use of our website with regard to advertising methods also, we use a tracking method by Epro (eprofessional) based on your consent. Epro is a German service provider with whom we have concluded an order processing contract.
Only pseudonymised data is processed, from which we are not able to derive any references to individual persons. You may deactivate the tracking at any time here.
Use of ”Meta” services
On our website, provided that you have given us your consent to do so, we also use the Facebook CAPI or the “Facebook Pixel” for advertising purposes. Through this integration of Facebook CAPI and Facebook Pixel, as the provider of Facebook, Meta Platforms Ireland Limited (“Meta”) receives the information that you have accessed the corresponding page on our website with your end device at the time. If you are logged in to Meta services (for example, Facebook, Instagram), Facebook may be able to assign the visit to your Meta profile.
The data processing also takes place in the USA. An appropriate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework. The US parent company Meta Platforms, Inc. is certified according to the Data Privacy Framework.
Further information on the data processing by “Meta” is available here: https://de-de.facebook.com/privacy/policy/.
Universal Event Tracking by “Bing”
We use Universal Event Tracking by Bing based on your consent. This is a service of the Microsoft Corporation (USA), with which pseudonymised usage profiles are created. The data processing takes place in the USA. This service enables us to track the activities of visitors to our website if they have come to our website through advertising on “Bing” (Bing Ads). The data is stored for up to 180 days. You can find more information on data processing by Bing for the event tracking here. You can object to the use of this method here and thereby withdraw your consent at the same time. An appropriate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework. The Microsoft Corporation is certified according to the Data Privacy Framework.
Error detection (“bug tracking”)
We use the Sentry tool on our website. Sentry logs errors that occur during the use of the website which can then be corrected by us.
We use Sentry in a “local” version, which processes the data on a server of our service provider in a German data centre. No IP addresses are stored in the Sentry logs. We are not generally able to derive references to any individual persons from the data.
Purpose of personal data processing
We process the above data for the operation of our website and the fulfilment of contractual obligations towards our customers or to protect our legitimate interests.
If you submit any queries outside of active customer relations, we process the data for sales and advertising purposes. You may object to the use of your data for advertising purposes at any time.
If you provide data to us voluntarily, e.g. in forms, and they are not required for our fulfilling of our contractual obligations, we will process these data under the legitimate assumption that processing and using these data is in your interest.
Recipient / forwarding of data
Data you provide to us are not forwarded to third parties on principle. This includes but is not limited to your data not being forwarded to third parties for their advertising purposes.
However, we may use service providers for the operation of these websites or for other products or services provided by us. Therefore, it can happen that a service provider gains access to personal data. We are selecting our service providers carefully – including but not limited to considerations of data protection and data security – and take all measures for legal data processing required by data protection law.
Data processing outside the European Union
If personal data are processed outside the European Union, you can find more information about this in the previous statements.
Data protection officer
We have appointed a data protection officer.
You can contact them using the following address:
Queisser Pharma GmbH & Co. KG
- Datenschutzbeauftragter –
Schleswiger Str. 74
Your rights as a data subject
You have the right of access to your personal data. You may contact us at any time to request access to them.
In the event of a request for access not made in writing, please understand that we may request proof from you that you are the person you are saying you are.
Furthermore, you have a right of rectification or erasure or of restricting the processing if granted to you by law.
Right to object
Finally, you have the right to object (Art. 21, GDPR) to the processing within the scope of legal provisions.
Erasure of data
On principle, we are erasing personal data if there is no longer any need for further storage. Such a need includes but is not limited to the data still being needed to fulfil contractual obligations, review and grant or refuse warranty and other claims under guarantee. In the event of legal retention obligations, erasure is an option only after the respective retention obligation has expired.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint about our processing of personal data with a supervisory authority for data protection.
Valid as of 08.09.2023.