Privacy Policy
Scope
This data protection declaration informs the user about the nature, scope and purpose of the collection and use of personal data by the responsible provider (us, SocraMetrics GmbH, Mainzerhofplatz 14, 99084 Erfurt, Germany) on this website (hereinafter referred to as "offer").
The legal basis for data protection can be found in the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (abbreviated in German to BDSG) and the Teleservices Data Protection Act (abbreviated in German to TDDSG), as amended.
If you have any questions regarding the handling of your personal data, please feel free to contact us using the following contact options.
Name and address of the responsible party for data processing
The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:
SocraMetrics GmbH
Mainzerhofplatz 14
99084 Erfurt
Germany
Phone: +49-361-60 20 5-60
E-Mail: info@socrametrics.de
Name and address of the data protection officer
The data protection officer of the responsible party for data processing is:
Roland Schäfer
Data Protection Specialist/ Privacy Consultant
Data Protection Officer of SocraMetrics GmbH
Phone: +49-361-60 20 5-744
E-Mail: datenschutzbeauftragter@socrametrics.de
Right to complain to a regulatory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the GDPR.
This complaint option is available at the data protection supervisory authority in Thuringia at the following contact options:
Thuringian State Commissioner for Data Protection and Freedom of Information
(Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit)
PO Box 90 04 55
99107 Erfurt
Germany
Phone: +49-361-57 311 29 00
E-Mail: poststelle@datenschutz.thueringen.de
Web server logs
In principle, you can visit our websites without telling us who you are. However, as is usual with almost all websites, the server on which our websites are located (hereinafter referred to as "web server") automatically collects information from you when you visit us on the Internet.
The web server automatically recognises certain personal data such as your IP address, the date and time you are on our website, the pages you visit on our website, the website you were on before, the browser you use (e.g. Internet Explorer), the operating system you use (e.g. Windows XP) and the domain name and address of your internet provider (e.g. Telekom). If our website uses cookies (as explained below), the web server also stores this information. The legal basis is the protection of legitimate interests according to Art. 6 para. 1 p. 1 lit. f GDPR.
However, we do not analyse these server logs and do not share any information with third parties.
However, in the event of system abuse, we may use this information in cooperation with your internet provider and/or local authorities to identify the perpetrator of this abuse.
Data transfer and use of contact details
When contacting us (for example by e-mail), your details will be stored for the purpose of processing the enquiry and in the event that follow-up questions arise. For the purpose of contacting you to initiate a contract and process your enquiry, the data processing is legitimised by Art. 6 para. 1 p. 1 lit. b GDPR.
Please be aware that there are inherent security risks in transmitting data, such as e-mails, over the Internet, and that it is impossible to safeguard completely against unauthorized access by third parties. This means that there is a risk of third parties accessing and using the transmitted data. You can also contact us at any time by mail or telephone.
Handling of personal data
Personal data is information that can be used to identify a person, i.e. information that can be assigned to a person. This includes the name, email address or telephone number. However, data about preferences, hobbies, memberships or which websites have been viewed by someone also count as personal data.
You can visit our website without providing personal data. We only collect data from you (except in the context of the web server logs) if you provide us with this data yourself in order to use our services (e.g. sending information material, enquiries). This data is then processed and/or used exclusively for the performance of the respective service. Your personal data will not be passed on to third parties unless this is required by law.
If a contractual relationship is to be established between you and us, or if its content is to be developed or changed, or if you submit an enquiry to us, we will collect and use personal data from you to the extent necessary for this contractual purpose (inventory data). We process personal data to the extent necessary to enable you to use the website (usage data). The data processing is legitimised by Art. 6 para. 1 p. 1 lit. b GDPR.
Notes on personal data in the context of reporting, storage, processing and transfer to and by pharmacovigilance
When we provide pharmacovigilance services (= systematic monitoring of the safety of a medicinal product by recording and evaluating Adverse Events after its use) to our clients, we process personal patient data as a data processor on behalf of our clients. Before your personal data was transferred to us by our clients, you as person concerned received a privacy policy from our clients. The transfer of your data to us will always be in accordance with this privacy policy, which has been communicated to you by our clients or by us on behalf of our clients.
This may include information about medical incidents, Adverse Events or product complaints.
As responsible party for data processing, we process the contact details of clients and suppliers, such as name, email, telephone number and job title, in order to be able to offer our services to our clients and to be able to contact suppliers regarding the services they provide to us. The legal basis on which we process your data in this way is the performance of existing contracts according to Art. 6 para. 1 p. 1 lit. b GDPR.
We may share your information with the following third parties:
- our affiliates;
- our customers;
- our professional advisers, such as our lawyers, banks, accountants or insurers;
- law enforcement, government and regulatory authorities or to other third parties as required by applicable law or regulation; and
- our suppliers or sub-contractors who provide our services.
We store your data in Germany.
If we need to transfer your personal data outside the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data as required by data protection law. You can contact us for more details about the respective data transfer mechanism.
The following applies to the aforementioned processing:
All personal data will only be stored as long as this is necessary for the stated purpose (processing your enquiry or handling a contract). The retention periods vary depending on the purposes for which the personal data was collected. Retention periods under tax and commercial law are taken into account.
By order of the competent authorities, we may provide information about this data (inventory data) in individual cases, to the extend necessary for the purposes of criminal prosecution, averting danger, fulfilling statutory duties or enforcing intellectual property rights.
Links on other websites
This website also contains links to other websites. However, the privacy policy described here does not apply to these websites. We ask you to visit these websites directly for information on data protection, security, data collection and data transfer regulations. SocraMetrics GmbH cannot be held liable for any action taken by these websites or for their content.
Revocation, changes, corrections and updates
You have the right, upon request and free of charge, to receive information about the personal data which has been stored about you. In addition, you have the right to correct incorrect data, the right to restrict processing ("blocking") or to object to processing, the right to data portability and the right to have your personal data deleted, provided this does not conflict with a legal obligation to retain data.