Handling of personal data
At Grünenthal, we believe transparency is the foundation of trustful collaboration. Below we will provide you with information on how we handle your personal data when you use our website. We handle your personal data because this is necessary to make certain functionalities of our website available and give you the best possible experience. Unless otherwise indicated, the legal basis for the handling of your personal data results from our legitimate interest to make available the functionalities of the website requested by you and to promote our business interests, according to (Art. 6(1)(f) General Data Protection Regulation).
Using our Website
1.1.1 Accessing our Website
When you call up our website, your browser will transfer certain data to our web server. This is done for technical reasons so that we can make the information you request available. In particular, the following data are collected, briefly stored and used:
- IP address
- Date and time of access
- Time zone difference to Greenwich Mean Time (GMT)
- Content of request (specific site)
- Status of access/HTTP status code
- Transferred volume of data
- Website requesting access
- Browser, language settings, version of browser software operating system and surface
We will also store such data for a limited period of time so that we are able to initiate a tracking of personal data in the event of actual or attempted unauthorised access to our servers (Art. 6(1)(f) General Data Protection Regulation).
What are cookies?
Our website uses so-called “cookies”. Cookies are small text files stored in your terminal's memory via your browser. They store certain information (for example your preferred language or site settings). Your browser may retransmit these to us when you revisit our website, depending on the lifespan of the cookie.
What cookies do we use?
We differentiate between two categories of cookies: (1) functional cookies which are necessary for the functionality of our website and (2) optional cookies. These are used for website analysis and marketing purposes. You can find a detailed list of the cookies that we use in the cookie banner that pops up when you access our website or by clicking on the “privacy settings” symbol.
Subject to your consent
We only use optional cookies if we have obtained your prior consent (Art. 6(1) a) GDPR). When you visit our website for the first time, a banner will appear asking you to give us your consent to the setting of optional cookies. If you consent, we will place a cookie on your computer and the banner will not appear again as long as the cookie is active. After expiration of the cookie’s lifespan, or if you actively delete the cookie, the banner will reappear the next time you visit our website and will again ask you for your consent.
How to prevent the placing of cookies
This may, however, lead to a restriction of the functions or have adverse effects on our website's user-friendliness. You may object to the setting of optional cookies at any time by using the respective objection option as indicated above.
List of Cookies
How to prevent the setting of cookies in general
1.1.3 Website Analysis
We use the open source software tool Matomo (formerly PIWIK) from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand on our website to analyze the surfing behavior of our users. Matomo is an open source tool for web analysis.
We understand this analysis as part of our Internet services. We would like to use it to further improve the website and adapt it even more to the needs of the users.
These processing operations are only carried out if explicit consent is given in accordance with Art. 6 (1) a) GDPR.
If individual pages of our website are called up, the following data is stored:
- Bytes of the IP address of the calling system of the user are anonymized.
- The website from which the user accessed the called website (referrer).
- The subpages accessed from the accessed website
- The time spent on the website
- The frequency of accessing the web page
In this regard, the software runs exclusively on the servers within our control and within the Matomo Cloud. We have concluded a data processing agreement with InnoCraft Ltd. about data processing on our behalf. Storage of the users' personal data only takes place there. The data is not passed on to third parties.
We store this data for a period of at least two years, unless you revoke your consent beforehand.
You can view the data protection provisions of Matomo at: https://matomo.org/privacy/
Matomo Tag Manager
On our website we use Matomo Tag Manager. Matomo Tag Manager is an extension of the open source Matomo web analytics solution. The Tag Manager is used to integrate tracking events (marketing cookies) and control the integration of third-party code. The legal basis for the data processing is Art. 6 (1) f) GDPR. The legitimate interest is the error-free functioning of the website. The deletion of the data takes place as soon as the purpose of the collection has been fulfilled.
1.1.4 Use of contact forms
You can contact us directly by using the contact forms available on our website. In particular, you may provide us with the following information:
- Name, surname and title
- Address (street, postal code, city)
- Contact data (e.g. e-mail address, phone number)
We collect, process and use the information you provide via the contact forms exclusively for the processing of your specific request. We will store the information you provide to us in contact forms for as long as we are legally obliged to or we can claim a legitimate interest. The same applies to data you send to us when using one of the designated email addresses indicated on our website.
1.1.5 External services or content on our website
We include third-party services and/or content on our website. When you use such third-party services or when third-party content is displayed, communication data are exchanged between you and the respective provider for technical reasons. The respective provider of the services or content may also process your data for own additional purposes. To the best of our knowledge, we have configured the services and content of providers known to process data for own purposes in such a way that either any communication for other purposes than to present their services or content on our website is blocked, or communication only takes place once you have actively opted to use the respective service. However, since we have no control over data collected and processed by third parties, we are not in a position to provide binding information regarding the scope and purpose of such processing of your data.
For further information regarding the scope and purpose of such collection and processing of your data, please consult the privacy statements of the providers whose services and/or content we include and who are responsible for the protection of your data in this context:
For the purpose of an interactive design of our website third-party content from Youtube and Vimeo is integrated into this website. This serves to safeguard our predominant legitimate interests in a multimedia presentation of our services and our activities in accordance with Art. 6(1)(f) GDPR.
This website uses plug-ins from the American company Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") which Youtube is operated by.
As a consequence, log information may be transmitted from our website to Google. Google’s server in the United States thus automatically stores information (“log data”), such as the information that your browser sends to a website when you visit, or the information that your mobile app sends when you use it. This log data may contain your IP address, the address of the website you visited that uses Google features, the browser type and settings, the date and time of your request, information about your use of Google, and cookies.
This website uses plug-ins from the American company Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.
As a consequence, log information may be transmitted from our website to Vimeo. Vimeo’s server in the United States thus automatically stores information (“log data”), such as the information that your browser sends to a website when you visit, or the information that your mobile app sends when you use it. This log data may contain your IP address, the address of the website you visited that uses Vimeo features, the browser type and settings, the date and time of your request, information about your use of Vimeo, and cookies.
1.2 Transfer of data for commissioned processing
1.3 Processing of data outside the EU/the EEA
2. Information regarding your rights
You have the following rights according to applicable data privacy laws:
- right of information about your personal data stored by us;
- right to request the correction, deletion (provided that we are not legally obliged to keep the data) or restricted processing of your personal data;
- right to object to a processing for reasons of our own legitimate interest, public interest or profiling, unless we are able to prove that compelling, warranted reasons overruling your interests, rights and freedom exist, or that such processing is done for purposes of the assertion, exercise or defense of legal claims;
- right to data portability;
- right to file a complaint with a data protection authority.
- right to revoke your consent to the collection, processing and use of your personal data at any time with future effect. For further information please refer to the chapters above describing the processing of data based on your consent.
If you, as a data subject, do not agree with the way in which the Grünenthal Foundation or persons working at the Grünenthal Foundation process your data and you wish to contact the data protection officer directly, please contact him at: email@example.com. You can only reach our data protection officer at this address. The data protection officer is obliged to treat your identity confidentially. Should he come to the conclusion that your identity could be inferred in the course of processing a complaint, the Data Protection Officer will draw your attention to this fact in advance and, if necessary, ask you to release him from his duty of confidentiality.
Data protection supervisory authority
You can also submit your questions and complaints to the competent data protection supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
4. Amendment of Privacy Statement
We may update our Data Privacy Statement from time to time and we will publish these updates on our website. They become effective upon publication. So we recommend you regularly visit the site to keep yourself informed on possible amendments.
This Data Privacy Statement was last updated on 1st August 2019.