We would like to inform you about the processing of your personal data that is collected about you within the NextPharma Group (“NextPharma”) regarding visiting our website. In addition, we will explain the purpose of the data processing, as well as your rights in this context.
NextPharma GmbH is generally the data controller for the processing associated with our website.
NextPharma GmbH
Hildebrandstr. 12
37081 Göttingen
Deutschland
Tel.: +49 551 382-0
Fax: +49 551 382-470
E-mail: dataprotection(at)nextpharma.com
However, in some cases NextPharma GmbH and its affiliates are joint data controllers, or an affiliate is the only data controllerfor the processing. Here is the list of all companies of the NextPharma Group:
Bowtie Germany BidCo GmbH
Hildebrandstr. 12, 37081 Göttingen, Germany
NextPharma Oy
Niittyhaankatu 20, 33720 Tampere, Finland
NextPharma Technologies Holding Ltd
Suite 612/613, 83 Victoria Street, London SW1H 0HW,
United Kingdom
The NextPharma Group has appointed a Data Protection Officer for the companies based in Germany. He can be reached as follows:
TÜV SÜD Akademie GmbH
Westendstraße 160, 80339 München, Deutschland
E-mail:Datenschutzbeauftragter(at)nextpharma.com
NextPharma Group
Hildebrandstr. 12, 37081 Göttingen, Deutschland
E-mail:dataprotection(at)nextpharma.com
In case if you have Data Privacy associated questions regarding any of our companies, feel free to contact us using the contact details above.
In regard to processing of your personal data, you have the following rights:
Certain data processing is performed on the basis of your consent (e.g., processing of job applications for a longer period than 6 months, getting in contact with you upon receiving a query per our website contact form). In these cases, you have the right towithdraw your consent with effect for the future. This will not affect the lawfulness of the processing prior to the withdrawal of consent.
If you consider that the processing of your personal data infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in the EU Member State of your residence, workplace or the place of the alleged infringement. An overview list of data protection supervisory authorities can be found, for example, here: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html
You can contact us at any time by emailing dataprotection(at)nextpharma.com if you have any questions about your data protection rights or wish to exercise any of aforementioned rights.
When you visit the NextPharma website, general information about your device hardware and interactions with our site is collected automatically (Server-Log-Data):
We store anonymized IP addresses for 60 days in server logfiles in order to ensure the security of data and the stability and safety of our website. The legal basis is Art. 6 (1)(f) GDPR.
We host the content of our website at:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen, Germany
+49 (0)9831 505-0
info@hetzner.com
The purpose and scope of the processing and use of the data by this provider, as well as your rights in this regard and setting options for protecting your privacy, can be found in the respective data protection notices: https://www.hetzner.com/legal/privacy-policy
To protect the security of your data during transmission, we use state-of-the-art encryption procedures via HTTPS.
When using our Contact form, you decide yourself which Data do you want to share with us to enable us to reach you in regard to your question.
Your details from the contact form, including the contact details you provide there, will be processed by us for the purpose of processing the enquiry. We do not pass on this data without your consent.
The processing of this data is based on your consent (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time, for this you can contact us through dataprotection(at)nextpharma.com.
The data you enter in the contact form will be stored in the TYPO3 backend for 30 days and then automatically deleted. The data remains with the responsible internal departments until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected.
If you are under 16 years old, please do not send us any personal data (e.g. your name, address and e-mail address). If you wish to contact NextPharma, please ask your parents or guardians to do so on your behalf.
This site uses third-party website tracking technologies (including cookies) to provide and continually improve our services according to our users’ interests. The use of such tracking technologies, except for where technically necessary for the operation of the website, is subject to your consent. With the help of special consent management tool, you can view detailed information about the processing, agree to such processing of your data, revoke or change prior consent with effect for the future.
You can view detailed information about the tracking technologies in use and processed data directly in the consent management tool.
Usercentrics Consent Management Platform
On this site we use the consent management tool Usercentrics CMP provided by
Usercentrics GmbH
Sendlinger Str. 7
80331 Munich
Germany
This tool enables us to provide our users the possibility to consent to non-necessary processing and revoke or change prior consent.
This processing is necessary to fulfil a legal obligation (Art. 7 para. 1 GDPR) to which we are subject (Art. 6 para. 1 sentence 1 lit. c GDPR).
The consent data (given consent and revocation of consent) are stored for one year.
Usercentrics GmbH acts as a processor for us and is the recipient of your personal data.
The processing takes place in the European Union. Further information on objection
and removal options vis-à-vis Usercentrics can be found at:
https://usercentrics.com/de/datenschutzerklaerung
Matomo
If you consent to this processing, our website uses a statistics tool Matomo
(https://matomo.org). Matomo is used to analyze the activities of visitors to the website, identify technical problems and find opportunities for improvement.
This processing is based on your consent (pursuant to GDPR Art. 6(1)(a)) and only takes place if you have consented to it. You have the option of refusing the processing of your data via consent management tool, in which case a cookie will be used to save your choice.
Your IP address will be anonymized after processing and before it is stored.
The aforementioned data is processed and stored on our hosting server and is not passed on to third parties. The data will be deleted after a retention period of 12 months.
Google Maps
On this website we offer you an option to use Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
If you consent to the use of Google Maps, your browser establishes a direct connection to Google’s servers. Google transmits the content of the map directly to your browser and, for technical reasons, communication data is exchanged. We have no influence on the processing of your data by Google and can therefore not provide you with any binding information on the scope and purposes of data processing by Google. For more information, please see the Google privacy policy: https://policies.google.com/privacy
We also operate various social media channels in addition to this website. We currently have presences on Facebook, Instagram, XING and LinkedIn. You can reach our pages there via the corresponding buttons on our website. We expressly point out that you use these pages and their functions on your own responsibility. When visiting our presence on the aforementioned platforms, personal data may be transmitted to and processed by the operator of the respective platform, such as IP address, processor type used and browser version including plug-ins. The data collected about you in this context will be processed by the provider of the social media and may also be transferred to countries outside the European Economic Area (EEA).
If you are logged in with your personal user account while visiting such a website, the operator can assign the visit to your account. If you wish to avoid this, you should log out of the operator of the respective platform before visiting our online presence there or deactivate the “stay logged in” function, delete the cookies present on your device and close and restart your browser.
The purpose and scope of the data collection and the further processing and use of the data by the operator of the respective platform as well as your rights in this regard and setting options for protecting your privacy can be found in the respective data protection notices:
We do not collect or process any further data from your use of our presence on the corresponding social media platforms.
We reserve the right to amend this data protection declaration if necessary, so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new privacy notice will then apply to your next visit. This privacy notice was last updated on February 27, 2024.
NextPharma Germany BidCo GmbH is generally the data controller for the processing associated with our Facebook page.
NextPharma Germany BidCo GmbH
Hildebrandstr. 12, 37081 Göttingen, Deutschland
According to a ruling of the European Court of Justice (ECJ) of 05.06.2018, we as the operator of our Facebook page are jointly responsible for the processing of your data with Meta Platforms Ireland Ltd (formerly Facebook), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, pursuant to DS-GVO Art. 26. You can find more details in section “Page Insights” of this privacy information.
The NextPharma Group has appointed a Data Protection Officer for the companies based in Germany. He can be reached as follows:
TÜV SÜD Akademie GmbH
Westendstraße 160, 80339 München, Deutschland
E-mail:Datenschutzbeauftragter(at)nextpharma.com
NextPharma Group
Hildebrandstr. 12, 37081 Göttingen, Deutschland
E-mail: dataprotection(at)nextpharma.com
We operate our Page on the Facebook social media platform in order to present our company and our products to our interested parties/prospects as well as customers and clients and to communicate with them personally. We do this based on the legal basis of Art. 6 (1) lit f) DS-GVO – our legitimate interest in an attractive presentation of our company and our products in social media as well as in interactive communication with interested parties and customers. We would like to point out that you use our Facebook page and its functions on your own responsibility.
This applies in particular to the interactive functions (e.g. commenting, sharing, rating). Each time you visit our page, Facebook collects personal data and information from your browser and stores it in so-called log files on Facebook servers (see section “Page insights”). This happens regardless of whether you are logged in to Facebook. If you are logged in to Facebook, the information you post is also stored – as is the fact that you have visited and followed our Facebook Page page. We only use Facebook’s tools on our Facebook Page and do not use our own analysis or tracking tools at this point.
We analyse the usage data of our Facebook page, including your interactions and comments, in order to get to know our customers and interested parties as well as their opinions and interests more precisely. This helps us to successfully develop new products and marketing activities.
Facebook collects personal data from you when you are logged in to Facebook and visit third-party websites connected to Facebook (e.g. via so-called plug-ins). Visiting these sites or any activities on the site (e.g. using the Like button) are automatically linked to your account by Facebook. If you wish to prevent this, log out of your Facebook account, deactivate the “stay logged in” function, delete any cookies that may be present on your device, close your browser and then restart it. You can find more information on this at: https://www.facebook.com/full_data_use_policy
We operate this Facebook page according to Art. 26 DS-GVO, jointly with Meta Platforms Ireland Ltd. (formerly: Facebook), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and have entered into a Joint Controllership Agreement with Meta/Facebook. More details on this agreement can be found here: https://www.facebook.com/legal/terms/page_controller_addendum.
As the technical operator of the platform, Facebook collects and processes personal data from your visit. Facebook continuously provides us with so-called “page insights” for our page. These are anonymized statistical data on users and on the use of our Facebook page, including demographic and geographical evaluations. With the help of these page insights, we can see how visitors use our Facebook page. For this purpose, Facebook stores the following data on your end device(s). Facebook provides more information on this under the following link: http://de-de.facebook.com/help/pages/insights. We receive thesepage insights from Meta/Facebook exclusively in anonymised form. The original data collected directly from you is not available to us.
In the case of registered Facebook users, Facebook is thus able to link your usage data with the data stored on Facebook and to continuously expand your profile for Facebook. Furthermore, other companies listed with Facebook or external third parties may also use cookies with Facebook. You can restrict or completely prevent the collection and processing of cookies in the settings of your respective browser. Further information on the use of cookies on Facebook can be found here: https://www.facebook.com/policies/cookies/.
In addition, Facebook also processes data for its own purposes with the aim of continuously optimising the efficiency and effectiveness of its advertising platform. We do not know how long Facebook stores this data and to what extent data from a visit to our Facebook page is passed on to third parties. You can find information on how to adjust your Facebook settings here: https://www.facebook.com/ads/preferences. Facebook has provided an objection form here: https://www.facebook.com/help/contact/1994830130782319
As the technical operator of the platform, Facebook assumes basic responsibility for the processing of Insights data. Furthermore, Facebook also assumes all obligations that arise in accordance with the GDPR in relation to the processing of insights data. This means, on the one hand, the information obligations according to DS-GVO Art. 12 and 23 and, on the other hand, the enforcement of your data subject rights (DS-GVO Art. 15 to 22). Decisions regarding the processing of Insights data are made solely by Facebook. With regard to your data subject rights, you can of course also contact us at any time. You can find more details on this in section “Your rights”.
The data collected and processed by Facebook may also be transferred to countries outside the European Union (EU)/European Economic Area (EEA). We do not transfer the personal data that we collect ourselves to third countries.
Facebook describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings for advertisements. The data protection guidelines are available at the following link: http://facebook.com/about/privacy.
You have the possibility to post messages or comments directly to us on our Facebook
page at any time. In such a case, we will only process the personal data that you have
provided to us through your post or that we need to respond to your enquiry. If we are
not obliged to retain your data for a longer period of time due to other legal provisions,
we will delete your data immediately after processing your request.
In regard to processing of your personal data, you have the following rights:
If you consider that the processing of your personal data infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in the EU Member State of your residence, workplace or the place of the alleged infringement. An overview list of data protection supervisory authorities can be found, for example, here:
https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html
You can contact us at any time by emailing dataprotection(at)nextpharma.com if you have any questions about your data protection rights or wish to exercise any of aforementioned rights.
We reserve the right to amend this data protection declaration if necessary, so thatWe reserve the right to amend this data protection declaration if necessary, so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new privacy notice will then apply to your next visit. This privacy notice was last updated on December 8, 2022. it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new privacy notice will then apply to your next visit. This privacy notice was last updated on February 27, 2024.
We would like to inform you about the processing of your personal data that is collected about you within the NextPharma Group (“NextPharma”). In addition, we will explain the purpose of the data processing, as well as your rights in this context. Please choose a privacy notice that corresponds to your case.
Depending on the processing, the relevant company (e.g. company where you applied or worked or which is or was a business partner of yours or of the company where you work) of our group is the data controller for the purposes of Art. 4 (7) GDPR. In some cases, several companies in the group are joint data controllers for the processing.
In any case, you can contact us regarding the processing at the following address
NextPharma Germany BidCo GmbH
Hildebrandstr. 12, 37081 Göttingen, Deutschland
Or at the address of the relevant company. However, in some cases NextPharma GmbH and its affiliates are joint data controllers, or an affiliate is the only data controller for the processing.
Here is the list of all companies of the NextPharma Group:
Bowtie Germany BidCo GmbH
Hildebrandstr. 12, 37081 Göttingen, Germany
PenCef Pharma GmbH
Hildebrandstr. 12, 37081 Göttingen, Germany
Pharbil Waltrop GmbH,
Im Wirrigen 25, 45731 Waltrop, Germany
NextPharma Logistics GmbH,
Stieghorster Straße 60, 33605 Bielefeld, Germany
PHARBIL Pharma GmbH
Reichenberger Straße 43, 33605 Bielefeld, Germany
NextPharma Oy
Niittyhaankatu 20, 33720 Tampere, Finland
NextPharma SAS
17 route de Meulan, B.P. 45, F-78520 Limay, France
NextPharma Ploërmel
ZI de Camagnon B.P. 320, 56800 Ploërmel CEDEX, France
NextPharma Technologies Holding Ltd
Suite 612/613, 83 Victoria Street, London SW1H 0HW, United Kingdom
Data Protection Officer
The NextPharma Group has appointed a Data Protection Officer for the companies based in Germany. He can be reached as follows:
TÜV SÜD Akademie GmbH
Westendstraße 160, 80339 München, Deutschland
E-mail: Datenschutzbeauftragter(at)nextpharma.com
In case if you have Data Privacy associated questions regarding any of our companies,
feel free to contact us using the following contact details:
NextPharma Group
Hildebrandstr. 12, 37081 Göttingen, Deutschland
E-mail: dataprotection(at)nextpharma.com
In regard to processing of your personal data, you have the following rights:
Certain data processing is performed on the basis of your consent (e.g., processing of job applications for a longer period than 6 months, getting in contact with you upon receiving a query per our website contact form). In these cases, you have the right to withdraw your consent with effect for the future. This will not affect the lawfulness of
the processing prior to the withdrawal of consent.
If you consider that the processing of your personal data infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in the EU Member State of your residence, workplace or the place of the alleged infringement. An overview list of data protection
supervisory authorities can be found, for example, here: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html
You can contact us at any time by emailing dataprotection(at)nextpharma.com if you have any questions about your data protection rights or wish to exercise any of aforementioned rights.
We reserve the right to amend this data protection declaration if necessary, so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new privacy notice will then apply to your next visit. These privacy notices were last updated on December 8, 2022.
This privacy notice provides information to individuals who are not connected with our business partners (B2B) and contact us by phone, post, email or fax.
You decide yourself which information you wish to provide us to enable us to answer your inquiry:
If you are under 16 years old please do not send us your personal data (for example, your name, address and email address). If you wish to ask NextPharma a question please get your parent or guardian to do so on your behalf.
answering your queries
You have the right to withdraw your consent at any time by email addressed to dataprotection@nextpharma.com. This will not affect the validity of the processing prior to the withdrawal of consent.
Internal Departments engaged in processing your inquiry
The data remains with the responsible internal departments until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected.
This privacy notice provides information to individuals who work for or on behalf of our business partners (B2B), such as contract givers, customers, suppliers, investors.
The personal data covered by this Privacy Notice is exclusively processed for the
purposes referred to above and will be shared only within the NextPharma Group
companies which are located inside the Economic European Area
during the duration of the business relationship
In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to
retain it.
Necessity for compliance with a legal obligation to which the controller is subject as per art. 6 (1) (c) GDPR.
The records about the Data Subject Request and its handling shall be retained for 3 years. Afterwards the records shall be anonymized and stored in anonymized state for 7 more years.
In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it.
This privacy notice provides information about personal data processed in relation to individuals who apply for work with NextPharma.
Art. 6 (1) GDPR
a) your consent (e.g. for retention of application documents for more than 6 months;
b) contract: the processing is necessary for entering into an employment contract.
The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will be shared only within the NextPharma group of companies which are located inside the Economic European Area
Personal data requested and provided by Applicants are required in order to fulfil legal requirements and/or for entering into a contract with them. Failure to provide us with the information requested which is limited to that required for these purposes may:
In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects
to the processing of their personal data and there is no longer a legitimate purpose to retain it or c) a longer period where the individual consents to the processing (in which case the individual has the right to withdraw their consent with effect for the future.
This privacy notice provides information about personal data processed in relation to individuals who apply for work with NextPharma.
We also process sensitive personal data such as data relating to individual’s health only where it is necessary for complying with employment and social security law.
Art. 6 (1) GDPR:
(a) your explicit consent
(b) contract: the processing is necessary for conclusion and performance of the employment contract
(c) legal obligation: the processing is necessary for you to comply with the law
(d) vital interests: the processing is necessary to protect someone’s life
(f) legitimate interests: the processing is necessary to protect NextPharma’s or an third
party’s legitimate interest, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interestsb) contract: the processing is necessary for entering into an employment contract.
Relevant national laws
Information contained in your personal file is held for no longer than 10 years once your employment has terminated
In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects
to the processing of their personal data and there is no longer a legitimate purpose to retain it.
The processing of personal data is necessary for the performance of the employment relationship. Processing of certain data (tax data, social security data, work permits) is legally required.
Failure to provide us with the information requested which is limited to that required for these purposes may
Whether it's development, manufacturing or supply. Tell us about your project and our experts will get back to you.
