This data protection declaration informs you as a user of our website and our offers about the type, scope and purpose of the collection and use of personal data.

We expressly point out that data transmission on the Internet (e.g. communication by e-mail) is subject to security vulnerabilities and cannot be completely protected against access by third parties.

This data protection declaration is currently valid and has the status February 2021. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on our website at https://www.ursapharm.de/datenschutz/.

General information

2.1 Integration of third-party services and content

We may use third-party services within our website, e.g. to integrate external media, to perform analyses, etc.. This is always done on the basis of a legal basis, such as on the basis of our legitimate interests (such as our interest in the analysis, optimisation and economic operation of our website) within the meaning of Art. 6 para. 1 lit. f DSGVO or - insofar as this is necessary in individual cases - on the basis of your previously given consent pursuant to Art. 6 para. 1 lit. a DSGVO.

Such services generally require that the third-party providers are aware of the IP address of the user, as they would not be able to send the corresponding content to the user's browser without the IP address. The IP address is therefore necessary for the display of such content. We endeavour to only use services whose respective providers only use the IP address to deliver the content. Some third-party providers also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to analyse information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.

For more information on which services are actually used on this site and how data is processed within their scope, as well as the relevant legal basis, please refer to the explanations on the respective services in the further course of this data protection declaration.

2.2 Types of data processed

On our website, we collect and process inventory data (e.g. names, addresses), contact data (e.g. e-mail addresses, telephone numbers, fax numbers, postal address), usage data (e.g. websites visited, links clicked on, interest in content, access times, access locations), content data (e.g. comments, text entries, photos, videos) and meta and communication data (e.g. device information, browser information, IP addresses).

2.3 Categories of data subjects

The data subjects of the processing of personal data are all visitors and users of our website.  

2.4 Purpose of the processing

We collect and process the personal data of users of our website in order to communicate with and inform them (e.g. contact and other enquiries), to carry out statistics, reach measurement and analysis (e.g. with marketing and analysis tools) so that we can better design and optimise content and functions, to technically manage and optimise the website and to close security gaps.

We maintain online presences within various so-called social media platforms. You can reach our presences either via search engines, via the platforms themselves or by following the links on our website. We would like to point out that on these platforms your data will be processed partly by us and partly by the platform operators, which may sometimes also take place outside the area of the European Union. For details of the processing, the risks and legal bases etc., please compare the data protection declarations linked below for the respective presences.

3.1 Instagram profile

Our data protection declaration as well as the details of the responsible person (imprint) related to our Instagram profile can be found here: Privacy Policy | Imprint

3.2 Facebook FanPage

You can find our data protection declaration and the details of the responsible person (imprint) in relation to our Facebook FanPage here: Data protection | Imprint

When contacting us (for example, via contact form, email or our Facebook account), your details will be processed for the purpose of processing the enquiry and in the event that follow-up questions arise, in accordance with Art. 6 lit. b DSGVO. Your data will be deleted as soon as we have fully processed your request.

We would also like to point out the following:

As a pharmaceutical company, we are legally obliged to collect and document enquiries that describe events relevant to the safety of medicinal products and medical devices and, if necessary, to report them to the competent authorities. This report may also include personal data, such as your name, place of residence, health-related information or similar, if you have disclosed this to us explicitly and voluntarily. In order to obtain further information, it may be necessary for URSAPHARM to contact you. The legal basis for this data processing is Art. 6 (1) c) DSGVO in conjunction with § 3 MPSV or § 63 c AMG. Furthermore, for reasons of pharmacovigilance, we are obliged in this case to store your data for at least 5 years for testing purposes in accordance with the legal requirements. After the end of the legal periods, your data will be deleted or anonymised.

We offer you a newsletter on our website (either permanently or, where applicable, only as part of trade fair, promotion or prize draw promotions) with which we inform you about current topics (exclusive prize draws, product offers, general information, news, promotion and trade fair promotions, etc.).

You can register to receive the newsletter by entering your title, e-mail address and surname in our registration form on the website or in our registration form for the competition so that we can check the accuracy of your data. Your e-mail address will be activated for the dispatch of our newsletter by means of a so-called opt-in procedure. After registering, you will receive a confirmation e-mail from us in which you must click on a link contained therein in order to finally effectively register your address. 

The newsletter is sent approximately six times a year to the e-mail address you have provided. We process your data on the basis of your consent (Art. 6 para. 1 lit. a DSGVO) exclusively for the purpose of sending the newsletter and delete it immediately after you unsubscribe from our newsletter. When you confirm the link in the double opt-in email, the date and time of registration are also stored on the basis of our legitimate interest (i.e. as proof of registration; Art. 6 para. 1 lit. f DSGVO). 

We send our newsletter via the provider CleverReach (CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede). For this purpose, the data you provide is transmitted to CleverReach in encrypted form and stored. You can find more information on data security at CleverReach here.

If you no longer wish to receive our newsletter, you can unsubscribe via the unsubscribe function contained in every newsletter or via the unsubscribe form contained on our website or by means of the link contained in the newsletter or by means of any other communication to us.

From time to time, we organise competitions which we advertise on our website and/or on our social media presences and for which you can register via a corresponding sub-page on our website. 

In this respect, we work together with external agencies for the event. The details of the associated data processing can be found in the competition conditions. This also includes the name of the agency that cooperates with us in the respective case and processes the participants' data accordingly to handle the competition. Your data will therefore be passed on to these agencies. Otherwise, no data will be passed on.

Participation in a competition usually requires registration of the participants with personal data, typically title, first name, surname and e-mail address. The data processing is carried out on the basis of Art. 6 para. 1 lit. a DSGVO due to your consent given for this purpose. The respective conditions of participation apply.

The winners will be published anonymously (i.e. first name, shortened surname, shortened place of residence) on our website. The data will be used solely for the purpose of conducting the competition and, with the exception of the winner data, will be deleted after the winners have been determined. The winners' data will also be processed for the purpose of notifying the winners and sending the prizes, after which it will be deleted. Data will only be used beyond this purpose, e.g. for sending newsletters, with your express consent. 

We have obligated the respective agencies, which are active according to our instructions, to comply with the data protection laws, also and in particular in the sense of the above, and have concluded corresponding order processing contracts with them.

You can request information about the data stored about you free of charge at any time at the above address. Furthermore, under certain conditions, you can request the correction or deletion of your stored personal data. Furthermore, you may have a right to restrict the processing of your data as well as a right to the return or transfer of the data provided by you in a structured, common and machine-readable format.

If the processing of your personal data is based on your consent, you also have the right to revoke your consent at any time. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this.

Right of objection

You have the right to object at any time to the processing of your personal data based on Art. 6 (1) (f) DSGVO. In particular, you may object to processing for direct marketing purposes.

Furthermore, you have the option of contacting the above-mentioned data protection officer or a data protection supervisory authority with a complaint.

The supervisory authority responsible for us is:

Independent Data Protection Centre Saarland

The State Commissioner for Data Protection and Freedom of Information

Fritz-Dobisch-Strasse 12

66111 Saarbrücken

Telephone: (0681) 94781-0

Fax: (0681) 94781-29

E-mail: poststelle@datenschutz.saarland.de

If we transfer personal data to service providers outside the EU, we will only do so in accordance with Art. 44 et seq. of the GDPR. DSGVO, i.e. in principle only insofar as the third country has been confirmed by the EU Commission as having an adequate level of data protection or other adequate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual clauses) are in place. Should we exceptionally deviate from this, we will always inform you accordingly in good time before the start of the processing and only start the processing after your prior, explicit, informed consent (Art. 49 para.1 lit.a DSGVO).