The protection of your personal data is very important to us. Therefore, we process your data exclusively on the basis of the statutory regulations.
This information describes how Institut AllergoSan Pharmaceuticals Research & Sales GmbH, its affiliates, and those medical companies that are served or assisted by one of the aforementioned companies (“we”) process personal data and personal interests collected from you (“data”).
1. Processing your data
All data that you provide us with when you conclude a contract with us (e.g. purchase one of our products) or make a request to us (e.g. question about a product or of personal interest) will be used by us – unless consent for more extensive data processing has been given – exclusively for those purposes that are necessary for the fulfillment of the contract or to answer your request (Art. 6 (1) (b) DSGVO (General Data Protection Regulation)).
Only if you give your consent in accordance with Art. 6 (1) (a) GDPR, will we use your data, which you make available to us with this consent, also for other purposes, such as the sending of scientific information in newsletters etc. The exact intended purpose results from the respective declaration of consent. Your consent to the processing of your data is voluntary and you can refuse this consent without adverse consequences for you.
It is possible to revoke your consent at any time, although we point out that even after this revocation, all the data processing operations that may be required for the fulfillment of contracts or legal obligations may continue to be performed by us. Until we receive your revocation your data may be lawfully processed by us.
If you revoke your consent to the processing of your data, you will not be disadvantaged and we will no longer provide you with any promotional information.
2. Transmission of your data to recipients
Your data will be transmitted with your consent to the companies named in your declaration of consent that are affiliated with us, as well as to medical companies supervised or supported by us (see www.allergosan.at/datenschutz for an up-to-date list). These companies may only process your data to the extent that you have consented to.
In addition, we outsource some data processing to external service providers. These so-called order processors will only be able to access your data to the extent necessary for their service provision. Order processors are also subject to the strict rules of data protection law and are bound by the processing purposes that we contractually mandate, so they may not use your data for other purposes.
We make your data accessible to the following order processors:
• IT service providers used by us (e.g. storage space)
• Logistics service providers (e.g. parcel services)
• Communication service provider (e.g. fax sending, letter delivery)
• Credit institutions for the purpose of payment
• Tax advisors
• Legal representatives or courts in the event
Many of these recipients are located outside the European Union (EU) or process your data there. We only transfer your data to countries for which the EU Commission has decided that they have an appropriate level of data protection comparable to the EU (“Privacy Shield”).
Your data will not be disclosed to third parties for their commercial use unless you expressly consent to such disclosure in a separate statement.
3. Storage time
Your information will be retained by us only for as long as we reasonably deem necessary to achieve the above purposes and as permitted by applicable law. In any case, we store your data as long as there are statutory retention requirements or limitation periods of potential legal claims have not yet expired.
4. Data processing when using our website
a. Storage of access data in server log files
You can visit our websites (see www.allergosan.at/datenschutz for an up-to-date list) without giving any personal information. We only store access data in so-called server log files, such as the name of the requested file, the date and time of the retrieval, the amount of data transferred and the requesting provider. These data are evaluated solely to ensure trouble-free operation of the site and to improve our offer and do not allow us to draw any conclusions about you. These websites do not process any personal data without your active involvement. If we collect personal data (e.g. name, address, e-mail address), this takes place always on a voluntary basis and requires the active completion and sending of a form. This data is only used for the direct sending of information by us, expressly desired by you (the exact purpose is derived from the respective declaration of consent).
b. Contact with us
If you contact us via the contact form on the website or by e-mail, your data will be used exclusively to process your request and will not be processed without your explicit consent.
d. Web Analysis Tools
Our website uses features of various web analytics services, which we describe below. We have concluded an appropriate data processing contract with the providers. The data processing is conducted on the basis of the legal regulations of the § 96 (3) Telecommunications Law as well as the art 6 (1) a) (consent) and / or f (legitimate interest) of the General Data Protection Regulation. Our concern in the sense of the GDPR (legitimate interest) is the improvement of our offer and our website.
i. Google Analytics
ii. Google AdWords
We use Google AdWords, an analytics service provided by Google, and, as part of that, conversion tracking. Google AdWords places a “conversion cookie” on your device when you click on an ad displayed by Google. These cookies lose their validity after 30 days and are not for personal identification. If you visit certain pages on our site, Google and we may recognize that you have clicked on the ad and have been redirected to this page. The information obtained through conversion cookies is used to generate statistics that tell us the total number of users who have clicked on the ad displayed by Google and viewed a page that has a conversion tracking tag.
In addition to conversion tracking, we also use remarketing, shared-interest audiences, custom-shared audiences, in-market audiences, similar audiences, and demographic and geographic targeting.
Google Remarketing enables us to reach users who have already visited our website and present our advertising according to their interests. Google AdWords also uses user behavior on Google Network (“Display Network”) websites over the last 30 days, and the contextual search engine to determine what common interests and features users of our website have. Based on this information, AdWords will then find new potential customers for marketing purposes whose interests and characteristics are similar to those of users of our website.
Further information about Google AdWords Terms of Service and Privacy, can be found at http://www.google.com/policies/technologies/ads/ .
To improve the user experience on our websites, we use the software Hotjar (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). By using Hotjar we can measure and evaluate user behavior (mouse movements, clicks, scroll height, etc.) on our website. For this purpose, Hotjar places cookies on users’ devices and save users’ data e.g. browser information, operating system, retention time on the page, etc. Further information about data processing by Hotjar can be found atwww.hotjar.com/privacy.
You have the opportunity to subscribe to our newsletter via our website. For this we need your declaration that you agree to receive the newsletter. In addition, we collect and process information voluntarily provided regarding personal data and areas of interest in order to provide you with targeted information. Subscription to the newsletter can be canceled at any time.
5. Your rights in connection with your data
Under current data protection laws, you are, among other things, entitled (under the conditions of applicable law),
• to request information as to whether and what data we have stored about you and to obtain copies of this data,
• to demand the rectification of or addition to your data that is incorrect or incomplete or not processed in accordance with the law,
• to demand the deletion of your data, provided that no legally recognized reason against deletion exists (legal retention periods),
• to demand we restrict the processing of your data under the following conditions:
– you dispute the accuracy of your personal information,
– instead of deleting illegally processed data, you demand the use of it be restricted,
– you need processed data to assert, exercise or defend legal claims,
– when exercising the right of opposition, for the duration of the clarification as to whether legitimate reasons require further data processing,
• in certain circumstances to object to the processing of your data or to revoke the prior consent given for processing (the lawfulness of any data processing we have performed until your withdrawal is not affected),
• to request data transmission,
• to know the identity of third parties to whom your data will be transmitted, and
• to file a complaint with the competent data protection authority.
6. Our contact data
If you have questions about the processing of your data or if you want to exercise your rights, please contact us:
In the case of requests for information, we request you to send a copy of an official photo ID for the purpose of identification.
I have read, understood and accepted the privacy statement.