As the operator of these pages, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations.

1. Data processing on the website

We process your personal data on this website as follows:

Server log files 
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are mainly:

• Browser type and version
• Operating system used
• Referrer URL (address of origin)
• Host name of the accessing computer
• Date and time of the server request
• IP address

This data is not merged with other data sources. 
The basis for data processing is Article 6(1) GDPR, which permits the processing of data on the basis of legitimate interest. In this case, there is a legitimate interest in the secure and trouble-free operation of the web server. In order to ensure this, the administration must be able to detect and track attacks and malfunctions of the system via the server log files. In order to be able to recognise attack patterns, accesses to the server must be saved. As soon as this data is no longer needed, it is deleted. For technical reasons, the data is disclosed to the hosting service provider, who is, however, bound by instructions and contractually obligated to us.

Cookies

The internet pages use cookies. They serve to make our offer more user-friendly, effective and secure. Cookies are small text files that your browser stores. You will find more details on the cookies used in the respective sections of this declaration. You can revoke or give your consent to the non-mandatory data processing at any time by calling up the “Data protection settings” in the footer of our website.

In addition, the following necessary cookies are used:

• Consent to store non-essential cookies: Whether or not you have consented to the use of further cookies is stored in a cookie with a duration of 100 minutes.
• Session cookie: This allows your requests to be assigned to the same session. It is deleted when the session is ended.

The cookies are technically necessary to be able to display the page. They are processed on the basis of Article 6(1) GDPR. We have a legitimate interest in the technically error-free and optimised provision of our services. 
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of these Internet pages may be limited.

Content delivery network – CloudFlare 

A web service of the company CloudFlare Inc., 101 Townsend St, 94107 San Francisco, USA (hereinafter: CloudFlare) is reloaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to CloudFlare. The legal basis for the data processing is Article 6(1) GDPR. The legitimate interest consists in a faultless function of the website. CloudFlare has self-certified under the EU-US Privacy Shield Agreement (cf. www.privacyshield.gov/list). The data is deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in CloudFlare’s privacy policy: www.cloudflare.com/security-policy/. You can prevent the collection as well as the processing of your data by CloudFlare by deactivating the execution of script code in your browser or installing a script blocker in your browser (this can be found, for example, at www.noscript.net or www.ghostery.com), but this may lead to limited functionality at other points on this website.

Contact form 
If you send us enquiries via the contact form, your details from the form will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions.

Mandatory fields are marked accordingly. Completion of mandatory fields is necessary so that we can answer and process your enquiries. All other information is voluntary.

The processing of the data entered in the contact form is based exclusively on your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time. A revocation is only valid for the future.  We will not pass on your data to third parties without your consent or without another legal basis. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions, in particular retention periods, remain unaffected.

Google Analytics 
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information is collected about your use of the website, including browser type and version, operating system used, referrer URL (previously visited page), IP address and date/time of request.

Google Analytics uses so-called “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookies about your use of these websites is usually transferred to a Google server in the USA and stored there. Because IP anonymisation is activated on these websites, your IP address will be shortened by Google within member states of the European Union or the EEA (European Economic Area) and only transmitted anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. This transmission takes place on the basis of your consent.

On behalf of the operator of these websites, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.  The legal basis for the use of Google Analytics is your consent in accordance with Article 6(1)(a) GDPR. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However please note that if you do this you may not be able to use the full functionality of this website.  
You can also prevent the collection of data generated by the cookies and related to your use of the websites (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. The link is: https://tools.google.com/dlpage/gaoptout 
For more information, please contact Google at https://policies.google.com/?gl=de.

Google Maps
This website uses Google Maps and its API to display interactive maps. Google Maps is a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By using Google Maps, information about the use of this website, including your IP address, is transmitted to Google in the USA.

When you call up a web page on our website that contains Google Maps, your browser establishes a direct connection with Google’s servers. The map content is transmitted by Google directly to your browser, which then integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. According to our knowledge, this is at least the following data:

• Date and time of the visit to the website in question,
• Internet address or URL of the accessed website,
• IP address,
• (Start) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.

The legal basis for data processing by Google Maps is Article 6(1)(f) GDPR. Our legitimate interest lies in optimising the functionality of our website.

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.
The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google’s data protection information: https://policies.google.com/privacy?hl=de

Sharing functions for social networks 
On our website, you can share individual pages via the “Share” links on the social networks Facebook, Twitter and WhatsApp. Only when you click on one of these links will a connection be established to the selected network and data about you will be transmitted there. The networks then use your personal information to perform the sharing function. The data processing by us is based on your consent (Article 6(1)(a) GDPR).  You can find more information here:

• Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, operated within the EU by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): Data protection information can be found at https://www.facebook.com/policy.php.
• Twitter (Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA): Data protection information can be found at https://twitter.com/privacy.
• WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland): Data protection information can be found at https://www.whatsapp.com/legal/#privacy-policy. 
• Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA): Data protection information can be found at https://help.instagram.com/519522125107875.
   

Business partners and contact persons

We process data about business partners (customers, suppliers, service providers, etc.) or about their contact persons. This includes names, contact details and professional data (such as employer details and professional position).

The personal data originate either directly from the data subjects themselves or from their employer.

We need this data to protect our legitimate interests (Article 6(1)(f) GDPR), to be able to communicate with our business partners and to be able to fulfil, prepare and terminate contracts with the business partners. In addition, this data is also used to provide information on our products and services and to carry out marketing activities. You may object to the use of personal data for direct marketing purposes at any time.

A transfer of the data to third parties is not planned. This data will be stored for as long as it is required for the above-mentioned purposes and, if applicable, for as long as legal retention periods require. Insofar as it is necessary to fulfil these purposes, we may forward your data to external service providers. These are contractually and legally bound to confidentiality.
 

Application

You can voluntarily submit your application online via our websites. We process your applicant data only for the purpose of and within the scope of the application procedure and in accordance with the legal requirements. Applicant data is processed to fulfil our (pre-) contractual obligations within the scope of the application procedure (Article 6(1)(b) GDPR and Section 26 BDSG (Federal Data Protection Act)).

If you voluntarily provide us with special categories of personal data in the context of the application process (within the meaning of Article 9(1) GDPR, e.g. health data, severely disabled status or ethnic origin), we process this on the legal basis of Article 9(2)(a) GDPR. If we ask you for special categories of personal data as part of the application process, these are processed in accordance with Article 9(2)(b) GDPR.

The application procedure requires that you, as the applicant, provide us with your applicant data. Mandatory information is marked in our online form and results from the job description.

You can submit your application to us using the online form on our website. The data will be transmitted to us in encrypted form in accordance with the state of the art. You can also send us your application by email. As emails are not encrypted by default, you are responsible for ensuring secure transmission in this case. You can also send us your application by post.

Subject to a justified revocation by the applicant, the deletion of applicant data takes place after the expiry of a period of six months so that we can answer any follow-up questions about the application and satisfy our obligations to provide evidence under the Equal Treatment Act. The Aristo company to which you apply is responsible for data processing in the context of the application. If this is not Aristo Pharma GmbH, it will act as a service provider and may view the applicant data if necessary.
 

2. Your rights

As a data subject, you are entitled to the following rights insofar as the legal requirements for this are met:

• Right of access, Article 15 GDPR
• Right to rectification, Article 16 GDPR
• Right to erasure, Article 17 GDPR
• Right to restriction of processing, Article 18 GDPR
• Right to data portability, Article 20 GDPR
• Right of objection, Article 21 GDPR

You have the right to revoke your consent to the processing of data at any time with effect for the future. 
You also have the right to complain to the data protection supervisory authority about the data processing. 
 

3. Data controller and data protection officer

The data controller for this website is:

Aristo Pharma GmbH 
Wallenroder Straße 8-10 
13435 Berlin 
Tel.: +49 (0) 30 - 710 94 - 4200 
Fax: +49 (0) 30 - 710 94 - 4250 
Email: info@aristo-pharma.de

You can reach the external data protection officer via fox-on Datenschutz GmbH, Pollerhofstr. 33a, 51789 Lindlar, dsb@fox-on.com.