Privacy Policy

Thank you for visiting our website and for your interest in our company and our products. In doing so, we respect your privacy and ensure the protection of your personal data by processing your personal data in accordance with the content of this Privacy Policy and the applicable data protection laws.

You can visit our website without telling us who you are. In order to display our website, you are only required to provide the data transmitted by your browser to our server (see ‘Log files’). Further personal data from you will only be stored if you voluntarily enter it on the website or use the corresponding functions, e.g. when entering data via our contact form. 
 

Contact form

You can enter your personal data on our website in order to contact us. Only your name and e-mail address are mandatory. It is essential to always provide  your telephone number, as we reserve the right to answer your enquiry either by post or electronically/by telephone. The provision of further data may be helpful for processing your enquiry, but is not mandatory (voluntary information). This data will be used and stored with your consent exclusively for the purpose of processing your message (Art. 6 para. 1 sentence 1 lit. a GDPR). It will not be used for other purposes or passed on to third parties unless you expressly agree to this (consent).


Online application

If you apply online via our career portal on our website, the relevant privacy policy on our career portal at https://w-spitzner-arzneimittelfabrik-gmbh.jobs.personio.de/privacy-policy?language=de applies with regard to the processing of your personal data in the application process.

 

Cookies

Cookies are very small text files used by websites, which your browser stores on your end device and can send certain information to us or, if applicable, to a third party. 
Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your device to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. In contrast to transient cookies, deletion does not occur automatically when the browser is closed. However, you can also delete the cookies at any time in the security settings of your browser.
We process cookies that are absolutely necessary to provide a service expressly requested by the user (‘necessary cookies’) within the scope of our legitimate interest in providing and operating the website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and §25 para. 2 TDDDG. 
In addition, other information is stored or accessed on your end device that is not absolutely necessary to provide a service expressly requested by the user. The storage or access only takes place if you give your consent (Art. 6 para. 1 sentence 1 lit. a GDPR and §25 para. 1 TDDDG). Details on the type of information, purpose of processing, storage period of the information and possible recipients of the data can be found later in this privacy policy. 
You can set your browser so that it generally does not accept cookies or only certain cookies are stored or not stored. You can revoke any consent you may have given to the processing of data using cookies at any time by deleting the relevant cookies directly via your browser settings. You can find out more about this in your browser's help system. If your browser rejects all cookies, it is possible that not all functions of this website can be used.

 

Social media presence

In order to provide customers, partners or other interested parties with up-to-date information and to get in touch with them, we operate so-called ‘social media presences’ on the following social media platforms in addition to our own website: Facebook, Instagram, LinkedIn.
Data processing is carried out by the provider of the social media platform. Data processing outside the European Union cannot be ruled out. The provider of the platform may provide us with aggregated usage data, but we do not have access to personal data if you only visit our social media presence.
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. In the case of consent in the form of an opt-in (‘tick the box’, ‘activate button’) or any other form of obtaining consent, the legal basis is Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time without giving reasons to the person to whom it was given, with effect for the future.
 
As the data processing is carried out by the provider of the platform, we recommend that you contact the respective provider of the platform to exercise your rights of access, rectification, erasure, data portability and objection when visiting our social media presence. If necessary, we will of course support you in exercising your rights. 
In addition, cookies may be placed on your end device. The purposes and legal basis for the use of cookies can be found under ‘Cookies’ in this privacy policy or in the privacy policies of the platform provider.
Further information can be found under the following links:

  • Facebook: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you visit our social media presence on Facebook, Facebook processes personal data as follows: https://www.facebook.com/legal/terms/information_about_page_insights_data . Further information can be found at: https://www.facebook.com/legal/terms/page_controller_addendum 
    If data is transferred to Meta Platforms, Inc. (USA), this is done on the basis of the EU Commission's adequacy decision on the EU-U.S. Data Privacy Framework.
  • Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; https://help.instagram.com/519522125107875
    If data is transferred to Meta Platforms, Inc. (USA), this is done on the basis of the EU Commission's adequacy decision on the EU-U.S. Data Privacy Framework.
  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland; http://www.linkedin.com/legal/privacy-policy. 
    If data is transferred to LinkedIn Corporation (USA), this is done on the basis of the EU Commission's adequacy decision on the EU-U.S. Data Privacy Framework.

 

Logfiles

Each time you access our website, we collect the following information about your end device: the IP address of your end device, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded, as well as product and version information about the browser used and the operating system of your device. We also record the website from which our site was accessed. The IP address of your end device is only stored for the duration of your use of the website and is then immediately deleted or anonymised by shortening it. The other data is stored for a limited period of time. We use this data for the operation of our website, in particular to detect and eliminate errors on the website, to determine the utilisation of the website and to make adjustments or improvements (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR). This data processing and the hosting of our website is carried out by Mittwald CM Service & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany.


Revocation of consent  

If you have given us your consent, e.g. in the context of an enquiry via our contact form or in another context, you can revoke this at any time with effect for the future.

 

Objection to data processing

Insofar as we base the processing of your personal data on a balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
You can object to the processing of your personal data for advertising and data analysis purposes at any time. 
You can send us your cancellation or objection using the contact details under ‘Controller’.

 

Your rights

You have the following rights vis-à-vis us with regard to your personal data:

  • Right to information as to whether we process data about you. If we process data about you, you have the right to obtain information about the nature and circumstances of the data processing (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR) or right to erasure of your data, provided that the requirements of Art. 17 para. 1 GDPR are met
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object to processing under the above-mentioned conditions (Art. 21 GDPR)
  • Right to data portability under the conditions of Art. 20 GDPR.
    You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

 

Controller
W. Spitzner Arzneimittelfabrik GmbH
Bunsenstraße 6 – 10
76275 Ettlingen
Telefon: +49 7243 7266-1210
Mail: kundenservice@spitzner.de

Data protection officer: datenschutzanfragen@xdsb.de or at our postal address with the addition ‘the data protection officer’