Name and address of the controller: Berlin-Chemie AG, Glienicker Weg 125, 12489 Berlin

- Hereinafter “Company”

The Data Protection Officer responsible for the Company ("DPO") is based at the headquarters in Berlin (Berlin-Chemie AG, Datenschutzbeauftragter, Glienicker Weg 125, 12489 Berlin) and can be reached at: dpo.germany@berlin-chemie.de.

With the following information we would like to give you an overview of the processing of your personal data by us and your resulting rights. Which data is processed in detail and how it is used depends to a large extent on the services requested or agreed in each case. Therefore, not all of the statements contained herein may apply to you. We are affiliated with A. Menarini Industrie Farmaceutiche Riunite S.r.l (head office), Via Sette Santi 1/3, 50131 Florence, Italy, which may also be involved in the collection and processing of personal data.

Categories of personal data

We process the following personal data, which we receive from you in the context of our business relations:

Company name with legal form and address, title and name, telephone numbers, fax numbers, e-mail addresses, field of activity or position. In the event that employees of your company visit us at our business premises (whether once or continuously), legitimation of the person at the reception desk of our company location is required.

Purposes of data processing and legal basis

We always process your personal data in accordance with the applicable data protection laws.

• Completion of an agreement with you (GDPR Art. 6 para. 1 b)) The processing of data takes place for the implementation of: our contract and contract-related services
• Fulfilment of a statutory obligation (GDPR Art. 6 para. 1 c)) The Company has a number of legal obligations that entail data processing. These include, for example: Tax laws as well as legal bookkeeping, the fulfilment of inquiries and requirements of supervisory or criminal prosecution authorities, the fulfilment of fiscal control and reporting obligations.
• Legitimate Interests of the Company or a third party (GDPR Art. 6 Para. 1 f)) The Company processes your data to the extent necessary beyond the actual fulfilment of the contract to safeguard the legitimate interests of us or third parties. Examples are, assertion of legal claims and defense in legal disputes, processing in the CRM system

Recipients of personal data, transfer of data to third countries

Authorized employees within the Company receive your data for the purpose of contact with you and the contractual cooperation (including the fulfillment of pre-contractual measures). In order to protect our rights or the rights of third parties, we may disclose data to rights owners, consultants and authorities. We cooperate with service providers who support us in the provision of our services. These service providers process your data on our behalf, in accordance with our instructions and under our supervision, solely for the purposes described in this Privacy Policy. These service providers may also be located outside the EU. We will take all necessary steps to ensure that the information you provide is adequately protected in accordance with the requirements of European Union data protection legislation. Where necessary, we ensure a legally adequate level of data protection through EU standard contractual clauses.

Duration of data storage

As a matter of principle, we only store your data for as long as is necessary to fulfil our contractual and legal obligations. If the data are no longer required for the fulfilment of contractual or legal obligations, they will be deleted. There are exceptions, e.g. insofar as legal storage obligations are to be fulfilled or for the preservation of evidence within the framework of the statutory statute of limitations. If the data processing takes place in the legitimate interest of us or a third party, the personal data will be deleted as soon as this interest no longer exists. The above exceptions shall apply.

Data security

We use technical and organizational security measures to protect your personal data against misuse, loss, destruction or against access by unauthorized persons. Our security measures correspond to the current state of the art.

Privacy Rights

You are entitled to request information about your data stored by us at any time. Furthermore, you have the right to request the correction of incorrect data or, under the legal requirements, deletion, blocking, restriction of processing and transfer of your data. You also have the right to object to the processing of your data at any time. If you have given us your consent, you can revoke this at any time with effect for the future. Please contact our data protection officer (dpo.germany@berlin-chemie.de). In addition, you have the right to file a complaint with the responsible supervisory authority.