Responsible within the meaning of the General Data Protection Regulation (GDPR) is:

LehmannPharma International GmbH
Mariendorfer Damm 161 a
12107 Berlin
Germany

Email: info@lehmannpharma.de

Data protection officer:
LehmannPharma International GmbH
Annette Lehmann

We are pleased that you are one of the Visit websites or their subdomains and thank you for your interest in our company, our products and our online offering. Protecting your privacy when using our websites is important to us. We would therefore like to inform you about our handling of your personal data.

1. Responsible body / contact and scope

LehmannPharma International GmbH is responsible for the collection, processing and use of your personal data within the meaning of the Federal Data Protection Act, unless otherwise stated in this data protection declaration. You can reach our data protection officer at info@lehmannpharma.de. If you have any questions about this data protection declaration or inquiries about your personal data, please do not hesitate to contact us with the keyword „data protection“. If you want to object to the collection, processing or use of your data by LehmannPharma International GmbH in accordance with these data protection regulations as a whole or for individual measures, you can send your objection by email or letter to the following contact details:

LehmannPharma International GmbH
Mariendorfer Damm 161 a
12107 Berlin
Germany

Email: info@lehmannpharma.de

2. Personal data

2.1 Use of personal data
If we are provided with personal data, we only use it to answer inquiries, to process contracts and for technical administration. We only pass on personal data to third parties if this is necessary for the purpose of contract execution or for billing purposes or if consent has been given to the transfer. Once consent has been given, it can be withdrawn at any time with future effect. The stored personal data will be deleted when the consent is withdrawn, provided that its knowledge is no longer required to fulfill the purpose for which it was stored or if its storage is not permitted for other legal reasons.

3. Data processing and legal bases for the processing
3.1 Visiting our website

Basically you can use our Visit websites without personal registration. Then only the internet connection data that your browser transmits to our server will be processed. These are your IP address and other usage data (e.g. date and time of access, name of the page accessed, amount of data transferred and the requesting provider). This is necessary to carry out the communication process you have requested with our website. The legal basis for the temporary storage of this information is our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in the processing of the communication. We assume that this is also in your interest, since the website cannot be displayed without this communication. Unfortunately, an objection to this processing is not possible because the technical process of communication is automated. You can only avoid this data processing by not visiting our website. Further information on the collection of personal data when visiting our website can be found in the „Cookies“ section.

In addition, there may be certain offers or services in which we ask you for personal data such as Ask your name or email address and, if necessary, for further personal information. Required information is always marked as mandatory. Without this information, LehmannPharma International GmbH may not be able to provide you with the desired service and will not be able to answer any inquiries you may have. Below we give you an overview of the related processing operations and legal bases.

3.2 Contact via contact form or email

If you contact us (e.g. via the contact form or by e-mail), we will store and process your personal data that you provide to us in the contact form. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for answering your request or for contacting you and the associated technical administration. The processing of this data is carried out to fulfill a contract or pre-contractual measures (Art. 6 Para. 1 lit. we do not process the application (Art. 6 Para. 1 lit. f GDPR). After completion of the processing of the request, we will delete your data or only keep it to the extent that there are statutory, statutory or contractual retention periods or further storage is necessary to assert, exercise or defend legal claims.

3.3 receipt of our newsletter; Direct marketing

If you register for our newsletter service, your personal data (such as name, address and email address) will be saved and processed by us for sending the newsletter and for other advertising purposes. The processing of this data is based on your consent (Art. 6 Para. 1 lit. a GDPR).

Otherwise, we may ask you for your consent for direct marketing purposes by post, email or phone by us or a third party, e.g. as part of free downloads. If the consent relates to third parties, we will provide the relevant third party with the relevant contact details. They are themselves responsible in the data protection sense. If you withdraw your consent, please speak to the person responsible in each case (e.g. via an unsubscribe link in an email or the contact details otherwise provided). We inform other data recipients about deletion, correction or blocking requests.

Interest and legally permitted up to your objection (Art. 6 Para. 1 lit.f GDPR or § 7 Para. 3 UWG).

You can object to the sending of newsletters or direct advertising at any time without giving reasons for the future or revoke your consent by unsubscribing via the unsubscribe link at the end of each email or by contacting us at info@lehmannpharma.de. We will then delete your data immediately, or only keep it to the extent that there are statutory, statutory or contractual retention periods or further storage is required to assert, exercise or defend legal claims. In addition, we may still store your email address in our so-called opt-out database to ensure that this email address is no longer used. This storage is earmarked and in our legitimate interest (Art. 6 Para. 1 lit.f GDPR). You can object to this processing for reasons that arise from your particular situation.

4. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device. Cookies contain information that can later be read by a web server in the domain in which the cookie was assigned to the computer (i.e. by us or the third party). Cookies cannot run programs or place viruses on the computer. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our service providers to recognize your browser the next time you visit (so-called persistent cookies). We differentiate between the following categories of cookies:

Mandatory cookies: These are cookies that technically enable the service requested by the user. This processing is based on our legitimate interest (Art. 6 Para. 1 lit.f GDPR). An objection is fundamentally not possible, because there are compelling reasons against it. However, you can partially prevent such cookies by setting your browser settings accordingly or deleting the browser history. However, parts of our service may then no longer be available.
Functional cookies: Functional cookies help to save a user’s preferences so that we can align the websites and services with them. This processing is based on our legitimate interest (Art. 6 Para. 1 lit.f GDPR) to offer the best possible service on our website. We assume that this is also in your interest. You can object to this processing at any time with no effect for the future by setting your browser settings accordingly or deleting the browser history, but parts of our service may then no longer be available.

Performance cookies: These are cookies that collect information about how visitors use our pages, including the pages that we have previously visited or visited the most, as well as the previously visited URLs (URL clickstream). We need these cookies in order to analyze our website and make it more user-friendly and to deliver target group-specific advertising. The use of such cookies is in our legitimate interest (Art. 6 Para. 1 lit. GDPR), we assume that the interests of the users in the exclusion of such processing do not prevail, especially since we use our cookie Educate banners transparently about this use. You can object to this type of cookies at any time using the opt-out options listed below or otherwise using your browser settings. These are cookies that collect information about how visitors use our pages, including the pages that we have previously visited or visited the most, as well as the previously visited URLs (URL clickstream). We need these cookies in order to analyze our website and make it more user-friendly and to deliver target group-specific advertising. The use of such cookies is in our legitimate interest (Art. 6 Para. 1 lit. GDPR), we assume that the interests of the users in the exclusion of such processing do not prevail, especially since we use our cookie Educate banners transparently about this use. You can object to this type of cookies at any time using the opt-out options listed below or otherwise using your browser settings.

5. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA („Google“), in order to be able to analyze the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

Google Analytics uses so-called „cookies“, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymization has been activated on this website so that your IP address is shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. For the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

Below we describe how you can withdraw your consent to Google Analytics:

You can revoke your consent to the use of web analysis at any time by downloading and installing the Google browser plug-in, setting an opt-out cookie, or by selecting the appropriate setting in your browser software. Both options prevent the use of web analytics only if you use the browser on which you installed the plug-in and if you do not delete the opt-out cookie. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.

For more information, please visit www.google.com/analytics/terms/de.html or https://support.google.com/analytics/answer/6004245?hl=de. Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. For more information on terms of use and data protection, please visit www.google.com/analytics/ terms / de.html or at www.google.de/intl/de/policies/.

7. Social plug-ins

We use a number of so-called social plug-ins on some of our websites. These are small extension modules from various social networks that allow you to tell other participants within the social network that you are on our website. We would like to point out that we have only limited influence on the data transmitted by these social plug-ins. Please note the following information on how these social plug-ins work:

By using the plug-in providers receive the information that you have visited our site with your IP address. We use the so-called two-click solution. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above his

Initial letter or the logo. We give you the opportunity to communicate directly with the provider of the plug-in using the button. The plug-in provider only receives the information that you have called up the corresponding website of our online offer if you click on the marked field and thereby activate it.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected from us will be assigned directly to your account with the plug-in provider. If you press the activated button and e.g. For example, if the page links, the plug-in provider also stores this information in your user account.

Via the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for using the plug-ins is Art. 6 Para. 1 lit. f. GDPR. We assume that this processing is also in your interest, since it will make it easier for you to communicate. For information on how the respective social media providers process your personal data, please refer to their own data protection declaration. In this respect, we are not responsible within the meaning of the GDPR for operating the social media offers. We currently integrate the following social plug-ins:

Facebook „Like“ button
Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA http://de-de.facebook.com/about/privacy/

Twitter „Retweet“ button
Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA http://twitter.com/privacy

Instagram
Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our website with your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or of how it is used by Instagram. For more information, see Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

8. Payment details

Payment data (e.g. credit card data) are collected by LehmannPharma International GmbH only for the purpose of payment processing and billing according to the chosen means of payment. If necessary, the customer’s payment data will be used to process transactions with service providers such as Credit card institutions transmitted, or collected directly by them, and processed there.

9. Disclosure of personal data to third parties

We only pass on your personal data to third parties if this is necessary for the fulfillment of the products or services you have ordered, you have given us your consent or the disclosure is otherwise necessary due to legal obligation or for the purposes of our legal defense.

However, recipients of your personal data can be supporting service providers who, on our behalf and on our instructions, process personal data in accordance with the specified purposes, for example as part of the maintenance of our IT systems. These third parties are contractually obliged to use personal data only for the agreed purpose, so-called order data processing, not to pass on your personal data to other third parties without permission and your personal data only with our legally permissible permission or if required by law to notify other third parties under the law. The service providers only have access to the personal data that is necessary for the performance of the respective activity.

If further categories of recipients of personal data arise in the course of future data collection, we will inform you of this at the time this information is collected for this purpose.

10. Storage of your data

We strive to limit the processing of your data to a minimum. If there are no specific retention periods in this declaration, we only store your data until the purpose for which the data was collected is fulfilled. Furthermore, we only keep your data to the extent that there are statutory, statutory or contractual retention periods or further storage is necessary to assert, exercise or defend legal claims.

11. Security and Confidentiality

In order to ensure the security and confidentiality of the personal data recorded online by Ebner Verlag, we use, among other things, data networks that are equipped with standardized protection mechanisms and password protection. We also take appropriate measures to protect your personal data from loss, misuse, unauthorized access, disclosure, modification or destruction.

If you want to send us personal data electronically by entering it on our website, your data will be transmitted, stored and secured in encrypted form over the Internet to our web server using a state-of-the-art secure connection (SSL). Please note that the sending of data by email is generally not encrypted.

According to the current state of the art, data security for the transmission of data within the Internet cannot be fully guaranteed. Other users may be technically able to intervene in network security without authorization and to control message traffic. Please note this when you contact us.

112. Your rights

Depending on the circumstances of the specific case, you have the following data protection rights:

– Request access to your personal data and / or copies of this data. This includes information about the purpose of the use, the category of the data used, their recipients and authorized users and, if possible, the planned duration of the data storage or, if this is not possible, the criteria for determining this duration;

– to request the correction, deletion or restriction of the processing of your personal data insofar as their use is not permitted under data protection law, in particular because (i) the data is incomplete or incorrect, (ii) it is no longer for the purposes for which it was collected (iii) the consent on which the processing was based or (iv) you have successfully exercised your right to object to data processing; in cases where the data is processed by third parties, we will forward your requests for correction, deletion or restriction of processing to these third parties, unless this proves to be impossible or involves a disproportionate effort;

– to refuse consent or – without affecting the lawfulness of the data processing carried out before the revocation – to withdraw your consent to the processing of your personal data at any time;

– not to be subjected to a decision based solely on automated processing that has legal effect on you or similarly significantly affects it;

– to request the personal data relating to you, which you have provided to us, in a structured, common and machine-readable format and to transmit this data to another person in charge without hindrance from us; You may also have the right to request that we transfer the personal data directly to another person responsible, insofar as this is technically feasible;

– Submit a complaint to the supervisory authority responsible for the controller or the supervisory authority in the member state in which you live or work if you believe that the processing of your personal data violates the General Data Protection Regulation.

Contradiction

If the processing of your personal data is based on Art. 6 Para. 1 lit. f DS-GVO (processing to safeguard the legitimate interests of the person responsible), you have the right to object at any time for reasons that arise from your particular situation. If your data is processed for direct marketing purposes, you have the right to object at any time.

You can (i) exercise the rights mentioned above or (ii) ask questions or (iii) lodge a complaint against the processing of your personal data by us by contacting our contact address info@lehmannpharma.de or at the following address to contact:

LehmannPharma International GmbH
Mariendorfer Damm 161 a
12107 Berlin
Germany

Email: info@lehmannpharma.de

As of May 23, 2020