Privacy Notices

Information according to Art. 13 und Art. 14 General Data Protection Regulation (GDPR)

These Privacy Notices provide information regarding the personal data which is processed within the NextPharma group of companies and explains what personal data is processed, for which purposes, how long we hold the personal data and your rights in this respect. Please select the privacy notice relevant to you from those below. 

 

Individuals who are not connected with our Business Partners

This privacy notice provides information to individuals who are not connected with our business partners (B2B) and contact us by phone, post, email, fax or website contact form.

Personal data

You decide which information is necessary for answering your queries you provide us:

  • email address
  • other data, which you provide us voluntarily

*Special Note – processing personal data of Children

If you are under 16 years old please do not send us your personal data (for example, your name, address and email address). If you wish to ask NextPharma a question please get your parent or guardian to do so on your behalf.

Purpose of the processing

  • answering your queries

Legal basis

  • Art. 6(1)(a) GDPR - your explicit informed consent

You have the right to withdraw your consent at any time by email addressed to dataprotection@nextpharma.com.  This will not affect the validity of the processing prior to the withdrawal of consent.

Recipients of data

  • relevant internal Departments

Retention period

  • Upon finalization of the processing the data will be erased.

 

Visitors of our Website (www.nextpharma.com)

This privacy notice provides information to visitors of our website.

Personal data

When you visit the NextPharma website, general information about your device hardware and interactions with our site is collected automatically:

  • IP-address
  • Data which your Browser transfers automatically  (operating system of your device, the name, language and version of your internet service provider, the last visited Website)
  • Time of your visit

Cookies

We use a so-called „session-cookie“ which temporarily saves a session-ID. It will be deleted as soon as you close the browser.  We do not use other cookies.

Purpose of the processing

  • improvement of our website functionality
  • evaluation of disturbances

Legal basis

  • Art. 6 (1)(f) GDPR – legitimate interests of the controller

Recipients of data

  • none

Retention period

  • for the time of your visit on our website

 

Individuals who are connected with our Business Partners

This privacy notice provides information to individuals who work for or on behalf of our business partners (B2B), such as contract givers, customers, suppliers, investors.

Personal data

  • private contact information (such as name, title, postal or email address) only if necessary
  • business contact information (such as job title, department, telephone and fax number, name and address of company)

Purpose of the processing

  • business execution (concluding and executing of agreements, customer service, management of products and materials)
  • organisation and management of the business (such as financial management, management reporting)
  • legal and/or regulatory compliance (such as litigation and defense of claims)

Legal basis

  • Art. 6 (1)(b) GDPR – performance of a contract/pre-contractual steps
  • Art. 6 (1)(f) GDPR - legitimate interests of the controller

Sources of Data

  • the individual himself
  • another person or unit within/connected with the individual’s company

Recipients of data

The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will be shared only

  • within the NextPharma group of companies which are located inside the Economic European Area

Consequences if personal data is not provided

  • negative influence on our ability to communicate with our business partners
  • negative influence on our ability to enter into and perform contracts with our counterparts

Retention period

  • during the duration of the business relationship

In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it.

 

Job Applicants

This privacy notice provides information about personal data processed in relation to individuals who apply for work with NextPharma.

Personal data

  • applications for employment, results of interviews
  • personal contact details which job applicants provide us

 

Purpose of processing

  • decision on job application

Legal Basis

  • Art. 6 (1) GDPR
  • a) your consent (e.g. for retention of application documents for more than 6 months;
  • b) contract: the processing is necessary for entering into an employment contract.

Recipients of data

The personal data covered by this Privacy Notice is exclusively processed for the purposes referred to above and will be shared only

  • within the NextPharma group of companies which are located inside the Economic European Area 

Consequences if personal data are not provided

Personal data requested and provided by Applicants are required in order to fulfil legal requirements and/or for entering into a contract with them. Failure to provide us with the information requested which is limited to that required for these purposes may:

  • negatively affect your chances of being selected for employment
  • make the entering into contract with you not be possible

Retention period

  • data of successful candidates: according to the Privacy Notice - Employees below;
  • data of unsuccessful applicants: 6 months after closure of the application process for the position.

 

In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it or c) a longer period where the individual consents to the processing (in which case the individual has the right to withdraw their consent with effect for the future.

 

Current or Former Employees of NextPharma

Every individual within the NextPharma group of companies is responsible for protecting personal data about each other as well as that of our customers, business partners and suppliers.

This privacy notice provides information about personal data processed by NextPharma in relation to individuals who are or were employees.

Personal Data

  • title
  • name, name abbreviation
  • marital status
  • personal contact information
  • birth day
  • social security data
  • tax data
  • pay roll data and bank account
  • wage and benefits information including beneficiary
  • education information
  • working time, absence, absence reason
  • employment agreement
  • job application data
  • photo (in case you provided voluntarily photo with your job application or otherwise)

We also process sensitive personal data such as data relating to individual’s health only where it is necessary for complying with employment and social security law.

Purpose of processing

  • to fulfill our obligations to comply with relevant laws and regulations
  • to enter into/execute/terminate  employment agreements

Legal basis

  • Art. 6 (1) GDPR:

(a) your explicit consent

(b) contract: the processing is necessary for conclusion and performance of the employment contract

(c) legal obligation: the processing is necessary for you to comply with the law

(d) vital interests:  the processing is necessary to protect someone’s life

(f) legitimate interests: the processing is necessary to protect NextPharma’s or an third party’s legitimate interest, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests

  • Relevant national laws

Recepients of data

  • Health Insurance/Pension insurance/Tax Authorities/Employment Agency (only legally required transfer of data)
  • authorized payroll service provider

Retention period

  • Information contained in your personal file is held for no longer than 10 years once your employment has terminated

In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it.

Consequences if personal data are not provided

The processing of personal data is necessary for the performance of the employment relationship. Processing of certain data (tax data, social security data, work permits) is legally required.

Failure to provide us with the information requested which is limited to that required for these purposes may

  • lead to violation of law
  • make the entering into contract with you not be possible 

 

Your Rights

Each individual whose data NextPharma processes has the right to:

  • Access their personal data processed by NextPharma (Art. 15 GDPR)
  • Request correction of inaccurate personal data (Art. 16 GDPR)
  • Request erasure of personal data, if this is legally permitted (Art. 17 GDPR)
  • Request restriction of processing (Art. 18 GDPR)
  • Receive personal data in a structured, commonly used and machine readable format (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a claim with the supervising data protection authority (Art. 77 GDPR)

Certain data processing is performed on the basis of your consent (e.g. processing of job applications for a longer period than 6 months, getting in contact with you upon receiving a query per our website contact form). In these cases, you have the right to withdraw your consent with effect for the future. This will not affect the validity of the processing prior to the withdrawal of consent.

 

Who can You contact for more Information?

If you have any issues, queries or complaints regarding the processing of your personal data please contact us

Controller

NextPharma GmbH
Hildebrandstr. 12
37081 Göttingen, Germany
Tel.: +49 551 382-0
Fax: +49 551 382-470
info(at)nextpharma.com

Data Protection Officer

NextPharma Group of companies
Hildebrandstr. 12
37081 Göttingen, Germany

Datenschutz(at)nextpharma.de / Dataprotection(at)nextpharma.com

Who is my data controller

NextPharma GmbH is usually the data controller for the processing of your personal data. However, in some cases NextPharma GmbH and its affiliates are joint data controllers or an affiliate is the only data controller of your personal data.

Each company is listed below, and if you wish to identify the controller for any specific reason, please use the contact details as set forth below:

 

NextPharma Germany BidCo GmbH
Hildebrandstr. 12, 37081 Göttingen, Germany
dataprotection@nextpharma.com

NextPharma GmbH
Hildebrandstr. 12, 37081 Göttingen, Germany
dataprotection@nextpharma.com

allphamed Pharbil Arzneimittel GmbH
Hildebrandstr. 12, 37081 Göttingen, Germany
dataprotection@nextpharma.com

PenCef Pharma GmbH
Hildebrandstr. 12, 37081 Göttingen, Germany
dataprotection@nextpharma.com

Pharbil Waltrop GmbH,
Im Wirrigen 25, 45731 Waltrop, Germany
dataprotection@nextpharma.com

NextPharma Logistics GmbH,
Stieghorster Straße 60, 33605 Bielefeld, Germany
dataprotection@nextpharma.com

PHARBIL Pharma GmbH
Reichenberger Straße 43, 33605 Bielefeld, Germany
dataprotection@nextpharma.com

NextPharma Oy
Niittyhaankatu 20, 33720 Tampere, Finland
dataprotection@nextpharma.com

NextPharma SAS
17 route de Meulan, B.P. 45
F-78520 Limay, France
dataprotection@nextpharma.com

NextPharma Technologies Holding Ltd
Suite 612/613, 83 Victoria Street 
London SW1H 0HW, United Kingdom
dataprotection@nextpharma.com 

 

Changes to these Privacy Notices

These Privacy Notices may be changed over time. These Privacy Notices were last updated on 26 October 2020.