Data privacy

This data privacy statement is intended to inform you as a user of our website and our products about the nature, extent and purpose of the collection and use of personal data.

We expressly note that data transmission via the internet (e.g. when communicating by e-mail) may involve security vulnerability and cannot be fully protected from access by third parties.

Up-to-datedness and amendment of this privacy statement

This privacy statement is currently valid and has the status as of Oct 2019. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this privacy statement. You may access and print out the current privacy statement at any time from our website at https://www.ursapharm.in/en/datenschutz/.

Identity and contact details of the controller:

The controller is:

URSAPHARM INDIA Pvt. Ltd
A-1, Ground Floor FIEE Complex
Okhla Industrial Area, Phase-II
New Delhi – 110020 India
Phone: +91 (0) 11-41033314
Fax: +91 (0) 11-46032711

E-Mail: info@ursapharm.in
Internet: www.ursapharm.in

Data Protection Officer

URSAPHARM INDIA Pvt. Ltd
A-1, Ground Floor FIEE Complex
Okhla Industrial Area, Phase-II
New Delhi – 110020 India
Phone: +91 (0) 11-41033314
Fax: +91 (0) 11-46032711

E-Mail: info@ursapharm.in
Internet: www.ursapharm.in

Transmission of personal data to recipients/ third parties and third-party- service providers

We comply with the legal requirements. A transfer of data to third parties occurs only within the scope of statutory provisions.

Data processing on our website

General Information:

Integration of third-party services and content
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our website in accordance with Art. 6 para. 1.f GDPR), we use content or service offers from third parties within our website in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). If necessary, the relevant data processing is made by your previously issued declaration of consent in accordance with Art. 6 para 1.a GDPR.

This always presupposes that the third party providers of this content perceive the IP address of the users, since without the IP address they would not be able to send the content to their browser. The IP address is therefore required for displaying this content. We make every effort to use only those contents whose respective providers use the IP address only for the provision of the contents. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. “Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, and be linked to such information from other sources.
You are able to see further details to the respective third-party services in the following texts of this data privacy statement.

Types of processed data

We collect and process on our website inventory data (e.g. names, addresses), contact data (e.g. e-mail addresses, telephone numbers, fax numbers, postal address), usage data (e.g. visited websites, clicked links, interest in content, access times, access locations), content data (e.g. comments, text entries, photos, videos) and meta and communication data (e.g. device information, browser information, IP addresses).

Categories of data subjects

All visitors and users of our website are data subjects whose personal data are being processed.

Processing purpose

We collect and process the personal data of users of our website in order to communicate with and inform them (e.g. contact and other inquiries, newsletters), to carry out statistics, range measurements and analyses (e.g. using marketing and analysis tools), so that we can better design and optimise its content and functions in order to technically administer and optimise the website and close security gaps.

Legal basis for the processing of personal data

We only process personal data if we are legally entitled to do so. In the following we will name these legal bases within the scope of the respective data processing individually. Generally, we are always entitled to process personal data if the data subject has given consent to the processing of his or her personal data (s. Art. 6 para. 1.a, Art. 7 GDPR), processing is necessary for the performance of a contract or prior to entering into a contract (s. Art. 6 para. 1.b GDPR), processing is necessary for compliance with a legal obligation (s. Art. 6 para. 1.c GDPR) or if processing is necessary in order to protect the vital interests (s. Art. 6 para. 1.f GDPR).

Recipient of personal data

We may transmit personal data to data processors or other third parties (e.g. hosting agencies, etc.) with whom we work. We are always entitled to so if the data subject has given consent to the processing of his or her personal data (s. Art. 6 para. 1.a, Art. 7 GDPR), processing is necessary for the performance of a legal obligation (s. Art. 6 para. 1.b GDPR), processing is necessary for compliance with a legal obligation (s. Art. 6 para. 1.c GDPR) or if processing is necessary in order to protect vital interests (s. Art. 6 para. 1.f GDPR). We conclude a so called processing agreement pursuant to Art. 28 GDPR with processors by which they commit to maintain data protection.

Hosting

This website is hosted on the servers of the domainfactory GmbH. The hosting services we use serve the provision of the following services: Infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services that we use to operate this website. Legal basis for the use of the hosting services is the protection of our legitimate interests in the analysis, optimization and an economic and secure operation of our website. (s. Art. 6 para. 1 cl. 1.f GDPR). In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of all users of this website.
The data will be stored for as long as there is a purpose for this. Thereafter, the data will be deleted, unless this is contrary to statutory retention obligations.

Server log files

We collect data about every access on our website (so called server log files) based on our legitimate interest, Art. 6 para.1 lit.f) GDPR.
The processed data include inter alia the IP address, time of retrieval, type of request, protocol, http status, referer, browser type and version, operating system and report on successful access.
The data will be used for statistical analysis for the purpose of operation, safety and optimization of the offer.
The data will be stored up to 7 days for security reasons. The IP address will be stored exclusively anonymously.
If further storage is required because of evidence purposes, the data will be deleted after the final settlement of the matter.

Cookies

In addition, cookies will be stored on your computer when you use our website. Cookies are small text files that make it possible to store specific information relating to the device on the user’s access device (PC, smartphone, etc.). They serve the user-friendliness of websites (e.g. storage of login data), the collection of statistical data on website use and the analysis in order to improve the website. Cookies cannot run programs or transmit viruses to your computer.
You may prevent the storage of all or only certain cookies by configuring your browser accordingly in the security settings. Cookies that have already been stored can be deleted in the browser. In these cases, however, the use of the website may be restricted.
This website uses the following types of cookies:

  • Transient (temporary) cookies
  • Persistent (permanent) cookies

Transient cookies are automatically deleted when you close your browser. This includes in particular session cookies. These store a so-called session ID, by which different requests of your browser can be assigned to the common session. Thus, your computer will be recognized when you return to our website.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You may delete cookies at any time in the security settings of your browser.
Both types of cookies may be used by us (in this case “First Party Cookies”) or by third party providers (“third party cookies”).

Such cookies, which only enable the secure functioning of the website and those cookies that only statistically record the general usage behavior (eg the access to the website as well as the time of access), merge without user data across websites, without using external servers or services and without establishing traceability, we use according to our legitimate interest in a secure and functional provision of the website and for statistical purposes to optimize our website in accordance with Art. 6 para. 1 lit. f GDPR.

The use of other cookies is exclusively based on your previously given consent in accordance with Art. 6 para. 1 lit. a GDPR. Such cookies usually serve to optimize our offer as well as to develop and economically optimize individual marketing measures. You may voluntarily grant the consent to the cookies and tools concerned when you visit our website for the first time. You can change your decision at any time on our website.

Disabling/objecting to cookies:

You may generally object to the use of cookies for range measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and also the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
The storage of cookies may also be prevented by configuring your browser accordingly in the security settings. However, not all functions of this website may then be available.
These options apply to all cookies mentioned below, which we use for this website.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (“Google”). In this context, in particular we capture the age and the gender of the respective user. The data processing is made for the purpose of analyzing the response to our products in order to make these and our promotional offer more effective and to develop our marketing measures appropriately. The data processing takes place on the basis of your consent given at the time of the first call of this website according to Art. 6 para. 1 lit. a GDPR for the purpose of the analysis of the user behavior and the optimization of our online offer. In particular, no buying behavior is analyzed or profiles of individuals created. We use the analysis service exclusively for the aforementioned purposes.

We use Google Analytics with activated IP anonymization only and therefore the IP addresses are processed only shortened, in order to prevent them being directly linked to a particular individual. This means that your IP address will be abbreviated by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area. In exceptional cases only, the full IP address will be sent to a Google server in the US and abbreviated there.
Google Analytics uses so-called “cookies”, text files which are saved on your computer and enable an analysis of your usage of the website. Information on your usage of this website generated by the cookie is generally transferred to a Google server in the US and stored there.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law.
On behalf of the operator of this website, Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible.
In addition, you may object to the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google at any time by using and install the browser plug-in available under the following link Download: http://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively (or when using the website via a mobile browser), you can prevent the collection and processing of your data by Google Analytics by using the following link (https://tools.google.com/dlpage/gaoptout?hl=en). By clicking on the link, an opt-out cookie will be stored on your computer. Please note that the link must be pressed again on deletion of cookies on your device.
The storage period of user’s personal data is limited to 14 months.

Matomo (formerly PIWIK)

This website uses Matomo, an open source software for statistical evaluation of visitor access. Matomo generally uses cookies, meaning text files that are stored on your access device and enable us to analyze the use of the website. We use Matomo WITHOUT cookies. For this purpose, the information collected by Matomo (including your shortened IP address) will be transmitted to the server hosting our website and stored for usage of analysis purposes. The server is located in Germany. Your IP address will be anonymized immediately after processing and prior to its storage. 2 bytes of your IP address are masked, which corresponds to the last six digits. The information collected by Matomo about your use of our website will not be passed on to third parties. The legal basis for the use is the preservation of our legitimate interests in the analysis, optimization and economic operation of our website (see Art. 6 para. 1 lit. f GDPR). We only save the data collected on our server.

You may object to data processing by Matomo for the future.

The program Matomo is an open source project. For information about Matomo’s privacy, please visit: https://matomo.org/privacy-policy/

Google Maps

On this website, we are using Google Maps. This allows us to show you interactive maps directly on the website and allow you to conveniently use the map feature. Data processing takes place on the basis of your prior consent according to Art. 6 para. 1 lit. a GDPR.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, at least your IP address will be transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right of objection to the formation of these user profiles. Therefor you have to contact Google, Google also processes your personal information in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
Further information on the purpose and extent of the data collection and its processing by YouTube as well as contradictory possibilities can be found here:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland ,
Privacy Policy: https://www.google.com/policies/privacy/,
Opt-Out: https://www.google.com/settings/ads/.

Google +

Our websites incorporate Google LLC.’s Google+ plug-ins, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”). The Google + plugins can be recognized by the white G + logo on a red background.

When you visit a page of our website, you will not be connected to Google’s servers. If you click on the corresponding button, you will be redirected to a website of Google. There you can share our content by clicking again. We have no influence on the processing of personal data on third-party websites.
By calling the Google + website, Google receives the information that you have visited its page with your IP address and other log data. This log information includes browser type, operating system, information about the previously visited web page and the pages you visited, location, your wireless service provider, device information (including device ID and application ID), search terms, and cookie information.
This information is transmitted from your browser directly to a Google server in the US and stored there. Google complies with the Privacy Policy of the US Privacy Shield and is registered with the U.S. Department of Commerce’s US Privacy Shield Program.
Google uses the personal information collected to display personalized advertising to you and measure its success. Google uses the so-called cross-device tracking method. This allows Google to personalize content across devices.

If you click the Google + button while logged in to your Google + account, you can link the contents of our pages to your Google + profile. This allows Google to associate the content of our pages with your user account.

For more information, see the Google Privacy Policy at https://policies.google.com/privacy?hl=en.

Data processing takes place on the basis of your prior consent according to Art. 6 para. 1 lit. a GDPR.

Contact

When contacting us (for example via contact form, e-mail or our Facebook account), your data will be processed in order to process the inquiry as well as for follow-up questions. The data processing is based on Art. 6 lit. b GDPR. Your data will be deleted as soon as we have fully processed your request.

Furthermore, we expressly point out the following:
As a pharmaceutical company, we are required by law to collect, document and, where appropriate, report to the relevant authorities inquiries describing events that are relevant for the medical product and drug safety. This message may also include personal information, such as your name, place of residence, health-related information or similar, provided that you have explicitly and voluntarily disclosed it to us. Obtaining additional information may require URSAPHARM to contact you. The legal basis for this data processing is Art. 6 para. 1 lit. c) GDPR i. V. m. § 3 MPSV and § 63 c AMG. Furthermore, we are obliged for reasons of pharmacovigilance to store your data according to legal requirements for at least 5 years for testing purposes. After expiry of the statutory deadlines, your data will be deleted or anonymized.

Career/Jobs

Vacancies/jobs are published on our website and you can apply for them by e-mail. Candidates are responsible for the secure transmission of applications comprising personal data via these communication channels.
In order to be able to process the applications, we require minimum data resulting from the job advertisement. This includes, for example, data such as name, address and documents belonging to the application, a cover letter, curriculum vitae and certificates. Further data can be transmitted voluntarily.
We process the data provided by the candidates only for the purposes of the application procedure. The legal basis for the processing of this data is the fulfilment of our pre-contractual obligations in the context of the application procedure in accordance with Art. 6 para. 1.b GDPR in connection with Art. 26 BDSG-new. An additional legal basis may be derived from Art.6 para. 1.f GDPR if data processing becomes necessary for us, e.g. within the framework of legal procedures.
We process all data that the applicants send us, e.g. name, address, e-mail address, telephone number, specific application data. By submitting the data, the applicants agree to the data processing in accordance with this privacy statement.
If candidates provide voluntarily special categories of personal data pursuant to Art. 9 para. 1 GDPR we will process them in accordance with Art. 9 para. 2. b GDPR. If we request these special categories of data, the data will be processed in accordance with Art. 9 para. 2.a GDPR.
In the event of a successful application, the applicant data will be further processed by us to establish an employment relationship in accordance with Art. 6 para. 1.b GDPR in connection with Art. 26 BDSG-new.
Otherwise, we will only store the applicants’ data for the duration of the application procedure and at the latest after the generally recognised and statutory retention periods. Afterwards or in case of withdrawal of an application, the data will be erased. Erasure will take place no later than four months after the vacancy has been filled in order to be able to respond to claims of the candidates under the Allgemeines Gleichbehandlungsgesetz [General Equal Treatment Act], if necessary. Further data may be stored for a longer period of time in order to fulfil other legal obligations.
If a candidate consents, we will add his or her applicant data to our candidates pool in order to be able to contact him or her for future job advertisements. Legal basis for such data processing is the applicant’s voluntary informed consent in accordance with Art. 6 para. 1.a, Art. 7 GDPR.
Candidates will be informed that their consent to inclusion in the candidates pool is voluntary and has no influence on current application procedures. You may withdraw your consent at any time for the future and object to data processing in the candidates pool for the future in accordance with Art. 21 GDPR. These declarations can be sent to the above address for data protection inquiries/to our Data Protection Officer.

Newsletter

On our website we offer a newsletter with which we inform you about current topics (exclusive competitions, product offers, general information, news etc.).You can register to receive the newsletter by entering your salutation, e-mail address and name in our registration form on the website or in our raffle registration form so that we can verify the accuracy of your information. Your e-mail address will be activated by means of a so-called Opt-in-procedure for sending our newsletter. After registration, you will receive a confirmation e-mail from us, in which you will have to click on a link there register the address effectively. The newsletter will be sent approximately six times a year to the e-mail address provided by you. We process your data on the basis of your consent (article 6 para. 1 lit. a GDPR) exclusively for sending the newsletter and delete it immediately after unsubscribing from our newsletter. When confirming the link in the Double-Opt-In E-Mail, the date and time of registration will also be stored on the basis of our legitimate interest (i.e. proof of registration, Art. 6 para. 1 lit. f GDPR).We send our newsletter via the provider CleverReach (CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede). For this purpose, the data you provide is encrypted to CleverReach.
More information on data security at CleverReach can be found here: https://www.cleverreach.com/en/data-security/
If you wish no longer to receive our newsletter, you can unsubscribe via the unsubscribe function contained in each newsletter or via the unsubscribe form contained on our website or by means of the link contained in the newsletter or by other means.

Sweepstakes

On our website as well as our social media presences we organize sweepstakes in co-operation with the agencies FBO GmbH agency for marketing and new media, Heinrich Barth str. 27, 66115 Saarbruecken as well as portvier GmbH, Buhler road 20, 66130 Saarbruecken.
Participation in a sweepstake usually requires registration of participants with personal information, typically gender, first name, surname and e-mail address. The data processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR based on your approval. The respective conditions of participation apply. The winners will be anonymised (i.e., first name, shortened last name, abbreviated place of residence) published on our website. The data will be used solely for the purpose of handling the sweepstakes and will be deleted after the winners have been determined except for the winners. The winners will also be processed for winnings and then deleted. We only use your data beyond these purposes with your express approval, eg. for newsletter dispatch.

Rights of the data subject

At any time you have the right to request from the controller access to your personal data. The information has to be provided free of charge. Furthermore and under certain circumstances, you have the right to data portability, erasure of your data as well as rectification. Furthermore, you may be entitled to restrict the processing of your data and to have the right to publish or transfer the data you provide in a structured, common and machine-readable format.
If the processing of your personal data is based on your consent, you have the right to withdraw the consent at any time. The lawfulness of the processing based on your consent before the withdrawal is not affected by the withdrawal.

Right to object

At any time, you have the right to object to the processing of your personal data, which is based on Art. 6 para. 1 lit. f) GDPR. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data concerning such marketing, which includes profiling to the extent that it is related to direct marketing.

Privacy policy for business customers

Marketing Campaigns

As part of marketing campaigns (for example at trade fairs), we offer the opportunity to get further information about our company as well as about our products (for example, by personal contact via e-mail or telephone or by ordering or sending information materials by mail or E-mail).In order to provide you with further information or to contact you for advertising purposes, we need the corresponding data from you. These can be provided to us, for example, by completing an appropriate form or by your business card. The data processing for marketing purposes takes place – as far as the data are not based on our legitimate interest according to article 6 para. 1 lit. f GDPR (for example, for the purpose of direct mail) or any other legal basis may be processed or further processed (for example, for contractual or pre-contractual purposes under Art. 6 para 1 lit. b GDPR) – based on your consent Art. 6 para. 1 lit. a GDPR. For the purpose of carrying out the marketing activities, we may commission external service providers, such as advertising agencies. In addition, it may happen that we send our advertising e-mails via the provider CleverReach (CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede). For this purpose, the data you provide is encrypted to CleverReach. More information on data security at CleverReach can be found here: https://www.cleverreach.com/en/data-security/.
Your data will be deleted – provided that the data can not be further processed on the basis of our legitimate interest or any other legal basis – after the information material has been sent or after the consent has been revoked. If you wish no longer to receive advertising e-mails from us, you can either notify us or unsubscribe via the unsubscribe form to which our advertising e-mails link.

Conclusion or Execution of Contracts

It is also possible that we process personal data for the purpose of concluding or executing contracts. The legal basis for these processing of personal data for pre-contractual and contractual purposes is Article 6 para. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required for the purposes mentioned or for the fulfillment of statutory, commercial or tax-related retention records (as the legal basis for the processing in this case, the respective statutory provisions in conjunction with Art. 6 para. 1 lit. c GDPR). It may happen that personal data is kept for the period in which claims can be asserted against our company (legal limitation period of three or up to thirty years).