Handling of personal data
At Grünenthal, we believe transparency is the foundation of trustful collaboration. Below we will provide you with information on how we handle your personal data when you use our website. We handle your personal data because this is necessary to make certain functionalities of our website available and give you the best possible experience. Unless otherwise indicated, the legal basis for the handling of your personal data results from our legitimate interest to make available the functionalities of the website requested by you and to promote our business interests, according to (Art. 6(1)(f) General Data Protection Regulation).
Using our Website
1.1.1 Accessing our Website
When you call up our website, your browser will transfer certain data to our web server. This is done for technical reasons so that we can make the information you request available. In particular, the following data are collected, briefly stored and used:
- IP address
- Date and time of access
- Time zone difference to Greenwich Mean Time (GMT)
- Content of request (specific site)
- Status of access/HTTP status code
- Transferred volume of data
- Website requesting access
- Browser, language settings, version of browser software operating system and surface
We will also store such data for a limited period of time so that we are able to initiate a tracking of personal data in the event of actual or attempted unauthorised access to our servers (Art. 6(1)(f) General Data Protection Regulation).
1.1.2 Setting of cookies
What are cookies?
Our website uses so-called “cookies”. Cookies are small text files that are stored in the memory of your terminal via your browser. They store certain information (for example your preferred language or site settings). Your browser may retransmit these to us when you revisit our website, depending on the lifespan of the cookie.
What cookies do we use?
We differentiate between two categories of cookies: (1) functional cookies which are necessary for the functionality of our website and (2) optional cookies. These are used for website analysis and marketing purposes. The following overview contains a detailed description of the optional cookies we use:
1.1.3 List of Cookies
How to prevent the setting of cookies in general
1.1.3 Website Analysis
This Website uses the web analytics service “Sitecore Experience Analytics” in order to help us continually improve the customer friendliness of our Website. Sitecore uses "cookies" that are stored on your computer and allow your use of the Website to be analyzed. The information generated by the cookie on your use of this Website is transmitted to and stored by state of the art secured EU based cloud servers (Azure Cloud, Dublin). You can use a corresponding setting in your browser software to prevent cookies from being saved; we would, however, like to draw your attention to the fact that, if you do so, you may not be able to use all of the functions offered by the website in full.
This website uses the web analysis software of Matomo (www.matomo.org).
This software enables us to collect and store data on the basis of our legitimate interest in statistical analysis of user behaviour for purposes of optimisation and marketing. For example, we can see in which sequence certain media content is selected, which webpage a user accesses after using the internal search function and how often a specific device is used to visit our website. Pseudonymous user profiles can be created and evaluated from these data for the same purpose.
We have configured the tool in a way that your IP address is anonymised. We do not create a User ID which would allow us to recognise a user across several devices. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the website visitor and is not combined with personal data about the bearer of the pseudonym. If you do not agree to the storage and evaluation of these data on your visit, you can object to their storage and use at any time.
The data collected with Matomo technology (including your pseudonymised IP address) are processed entirely on our servers. The data is not shared with third parties and neither do we receive information on our visitors from third parties.
We process the data only with your consent. The legal basis for the processing of your personal data for this purpose is Art. 6(1)(a) GDPR. The data will be stored on your device until you choose to delete the cookie or until the cookie expires.
You can prevent the use of this software at any time. To make that choice, please configure the toggle switch above accordingly. In this case, a so-called opt-out cookie will be stored in your browser, which means that Matomo will not collect any session data. Please note that a complete deletion of your cookies will result in the opt-out cookie also being deleted and possibly having to be activated again by you.
1.1.4 Use of contact forms
You can contact us directly by using the contact forms available on our website. In particular, you may provide us with the following information:
- Name, surname and title
- Address (street, postal code, city)
- Contact data (e.g. e-mail address, phone number)
We collect, process and use the information you provide via the contact forms exclusively for the processing of your specific request. We will store the information you provide to us in contact forms for as long as we are legally obliged to or we can claim a legitimate interest. The same applies to data you send to us when using one of the designated email addresses indicated on our website.
1.1.5 External services or content on our website
We include third-party services and/or content on our website. When you use such third-party services or when third-party content is displayed, communication data are exchanged between you and the respective provider for technical reasons. The respective provider of the services or content may also process your data for own additional purposes. To the best of our knowledge, we have configured the services and content of providers known to process data for own purposes in such a way that either any communication for other purposes than to present their services or content on our website is blocked, or communication only takes place once you have actively opted to use the respective service. However, since we have no control over data collected and processed by third parties, we are not in a position to provide binding information regarding the scope and purpose of such processing of your data.
For further information regarding the scope and purpose of such collection and processing of your data, please consult the privacy statements of the providers whose services and/or content we include and who are responsible for the protection of your data in this context:
For the purpose of an interactive design of our website third-party content from Youtube and Vimeo is integrated into this website. This serves to safeguard our predominant legitimate interests in a multimedia presentation of our services and our activities in accordance with Art. 6(1)(f) GDPR.
This website uses plug-ins from the American company Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") which Youtube is operated by.
As a consequence, log information may be transmitted from our website to Google. Google’s server in the United States thus automatically stores information (“log data”), such as the information that your browser sends to a website when you visit, or the information that your mobile app sends when you use it. This log data may contain your IP address, the address of the website you visited that uses Google features, the browser type and settings, the date and time of your request, information about your use of Google, and cookies.
This website uses plug-ins from the American company Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.
As a consequence, log information may be transmitted from our website to Vimeo. Vimeo’s server in the United States thus automatically stores information (“log data”), such as the information that your browser sends to a website when you visit, or the information that your mobile app sends when you use it. This log data may contain your IP address, the address of the website you visited that uses Vimeo features, the browser type and settings, the date and time of your request, information about your use of Vimeo, and cookies.
Do you have any questions regarding our data privacy or do you wish to exercise your rights? Then please let us know! You can either use our contact form or get in touch with our company data protection team at the following address: firstname.lastname@example.org
In addition, if you are a healthcare professional, you might want to check our privacy for healthcare professionals available in this link https://www.grunenthal.com/en/footer-links/privacy-statement-hcp
Requests and complaints
If, as the data subject, you have any questions regarding our data privacy or if you do not agree with the way in which Grünenthal or persons at Grünenthal process your data you can get in touch with Grünenthal’s Global Data Protection officer by using the following email address: email@example.com
Data Protection Supervisory Authority
You may address questions and complaints also to the Data Protection Supervisory Authority in charge:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
4. Amendment of Privacy Statement
We may update our Data Privacy Statement from time to time and we will publish these updates on our website. They become effective upon publication. So we recommend you regularly visit the site to keep yourself informed on possible amendments.
This Data Privacy Statement was last updated on 1st August 2019.