top of page

Privacy notice for business partners

For our prospective customers, customers and suppliers, we provide the following detailed information on the processing of their personal data in accordance with Art. 13 GDPR.

 

Controller

Perleberg Pharma Partner Health Research International GmbH

Wartenau 12a

22089 Hamburg
Phone:+49 (40) 253 16 515

e-mail: office@ppp-health-research.com

 

Data Protection Officer

Stefan Köster eConsulting
Stefan Köster
Op de Elg 13a22393
Hamburg
stefan@koester-eConsulting.com
www.koester-eConsulting.com

 

Data categories

We usually process the following data (if we have it):

Salutation, first and last name, e-mail address, address, telephone/mobile phone number of the contact persons and parties involved as well as other information necessary for the order.

 

Purposes and legal bases

As a rule, we process your data so that we can identify you as a business partner and communicate with you. Your processed data is used for the fulfillment of a contract or the implementation of pre-contractual measures (Art 6 para 1 lit. b) GDPR) with the company for which you work. Likewise, the fulfillment of a legal obligation may make the processing of your data necessary (Art 6 Abs 1 lit. c) GDPR).

 

In individual cases (e.g. after you have subscribed to our newsletter), we process your data on the basis of your consent (Art 6 para 1 lit. a) GDPR) or e.g. for more efficient cooperation (legitimate interest (Art 6 para 1 lit. f) GDPR)).

 

Processors

Within our company, access to your data is granted to those departments that require it in order to fulfill contractual and legal obligations. Also from

processors used by us (Art 28 GDPR) receive your personal data.

We use various IT systems to process your personal data, some of which we operate ourselves or have operated by a processor. We have carefully selected these processors and commissioned them in writing. They are bound by our instructions and are regularly monitored by us. With whom we have, if necessary, concluded order processing contracts in accordance with Art. 28 GDPR. The processors will not use your data for their own purposes.

 

Processing duration

We will only process your data for as long as is necessary to fulfill the above purposes or applicable law and to maintain our relationship with you.

Usually, the duration of processing is based on the statutory retention periods. Any deviating periods are defined in the following sections.

The collected personal data will be stored until the expiry of the statutory retention obligation of 6 years (the period begins with the expiry of the calendar year, after the expiry of the contract) and then deleted, unless we are required under Art. 6 para. 1 lit. c) GDPR due to, for example tax and commercial law retention and documentation obligations (from HGB, StGB or AO) to a longer storage or you have consented to a storage beyond that according to Art. 6 para. 1 lit. a) GDPR or a longer storage serves our legitimate interests (Art. 6 para. 1 lit. f) GDPR). If your data is stored on the basis of our legitimate interests, we will inform you of this at the time of collection.

 

Provision of your data

We need your data to conclude a contract or to fulfill a concluded contract. If you do not provide us with your contact details, we will not be able to process the contract.

Office communication, administration, contact management: Microsoft (Microsoft 365, Microsoft Teams).
We use Microsoft 365 and Microsoft Teams, to conduct our usual office communications as well as for conference calls, online meetings, video conferences and/or webinars. If we record online meetings, we will tell you before we start and, if necessary, ask for verbal consent. If you do not wish to be recorded, you can leave the online meeting.

If necessary for the purposes of logging the results of an online meeting, we will log the chat content.  

 

Microsoft 365 and Microsoft Teams are a service provided by Microsoft Ireland Operations, Ltd. For this purpose, we have concluded an processing agreement with the provider.

 

When using "Microsoft Teams", various types of data are processed. The scope of the data also depends on the data you provide before or during participation in an "online meeting".

 

The following personal data are subject to processing:

  • User details: display name, email address, profile picture (optional), preferred language

  • Meeting metadata: e.g. date, time, meeting ID, phone number, location

  • Text, audio and video data: You may have the option of using the chat function in an online meeting. In this case, the text entries you make will be processed in order to display them in the online meeting.

To enable the display of video and the playback of audio, the data from the microphone of your end device as well as from a video camera of the end device is processed during the meeting. You can turn off or mute the camera or microphone yourself at any time via the "Microsoft Teams" apps.

 

If there is no contractual relationship with you, the legal basis for processing your personal data is Art. 6 (1) lit. f) GDPR. Here, our interest is in the effective implementation of online meetings.

 

When using Microsoft Teams, personal data may be transferred to third countries outside the EU/EEA (usually the USA).

In these third countries, there is no adequate level of data protection and no suitable guarantees can be given for the protection of your data (lack of enforceability of data subject rights and possible, disproportionate access to your data by state authorities).

If you do not wish your data to be transferred to these third countries, you will not be able to use the Service.

 

Financial accounting / Controlling: Tax consultant
We use a tax consultant to implement our commercial accounting obligations.

 

There is no transfer of your data to third countries, the tax advisor is obliged to keep your data confidential according to §203 StGB.

 

Project execution / contract fulfillment: audio + video

For project execution in the context of contract fulfillment with our clients, we sometimes use external service providers who provide us with video and interview platforms, for example. These are, for example, the following service providers:

 

Norstat Germany GmbH
Kaflerstraße
881241 Munich

 

Snapview GmbH

represented by the managing directors Erik Boos, Mark Zondler
Dingolfinger Str. 15

81673 Munich
Tel.: 089 / 3564 7592 – 0

E-mail: info@snapview.de

 

 

We have concluded an order processing agreement with the providers in accordance with Art 28 GDPR; your personal data is not processed outside the European Union (EU).

 

The following personal data are subject to processing:

  • User details: display name, e-mail address

  • Meeting metadata: e.g. date, time, meeting ID, phone number, location

  • Text, audio and video data

 

 

Transfer to third countries

As a rule, your personal data is not processed outside the European Union (EU), as we have limited our storage location to data centers in the European Union.

In individual cases, personal data may be processed outside the European Union (EU). In this case, we explicitly indicate this in the Recipients section and ensure that only providers are used for which there is an adequacy decision by the Commission or adequate safeguards according to the GDPR.

 

Your rights

Under the GDPR, you have the right to:

  • Information about the processing of your data

  • Correction or deletion of your data

  • Restriction of processing (only storage possible)

  • Objection to the processing

  • Data portability

  • Revocation of your given consent with effect for the future

  • Complaint to a data protection supervisory authority.

 

You can claim these rights at any time informally and without giving reasons by sending an e-mail to office@ppp-health-research.com.

 

We do not use any systems for automated decision making or profiling.

 

Further information can also be found in our privacy policy regarding the operation of our website: PRIVACY STATEMENT | PERLEBERGPharmaPartner (ppp-health-research.com)

 

We revise this data protection notice in the event of changes to data processing or other occasions that make this necessary. You will always find the current version on this website.

 

Last updated: March 2, 2021

bottom of page