Legal basis for the procession of personal data
The main reason we process personal data is to provide the Services to our clients and to fulfill our contractual obligations towards our members and visitors, e.g. the users of our Services.
The processing of data is required for us to be able to offer you a personal account to access our services, and herewithin to offer you personalised information, networking and meeting services.
The legal basis for the processing of personal data is Article 6 (1) b) of the EU General Data Protection Regulation (GDPR).
pharmABC UG (haftungsbeschränkt) is the body responsible for the controlling and the processing of personal data.
We, pharmABC UG, assume the role of controller as per the EU General Data Protection Regulation (GDPR). In other words, we are the legal entity that shall determine the purposes and means of the processing of personal data. Our contact details are as follows: pharmABC UG (haftungsbeschränkt), Eckerkoppel 6, D-22159 Hamburg, Germany.
The collection of data, including personal information, includes:
information from users when they directly provide it to us, for example when registering to our services, or when filling forms to receive information about our products or services
information from users ("Members") when they use our Services
via online forms, electronic messages
We may use information that we collect or that is provided to us, including Personal Information, for any of the following purposes:
Information you provide to us
- Login details (e.g. username and password)
- Personal information, e.g. first name, family name, title, gender, date of birth, postal address and other contact information
- Profile information, e.g. current position, employer information including place of work and postal address of organisation, education & training, contact options, photos and documents
- Networking and meeting information, e.g. topic selections, pitches, event participation
- Messages, meeting invitations, network invitations and other information you exchange with other users
- Administrative information and billing details
There are both mandatory entry fields (which as marked as such) and optional information you can provide.
1. Login, personal and profile information
When you register to our services, its applications and related websites, we have to record and process certain data as your login data and personal data. The legal basis for this processing of personal data is Article 6 (1) b) of the EU General Data Protection Regulation (GDPR).
You have to fill in certain mandatory fields when you register. This information is essential for a functioning professional network, e.g.
- Login details: username or E-mail address and password to login
- Personal information: title, first name, family name
- Profile information: current position and employer information
Your login data is not visible to third parties. We will not ever pass this information on to third parties under any circumstances.
As well as the mandatory information we require, you can also enter additional information to complete your personal infornation, profile infornation, networking and meeting information, and to activate the different service features within EuroBIO. These information are shared with the other users (members, visitors) of EuroBIO, its applications and related website.
You can retract most optional information at any time for the future by deleting the respective data in your profile.
We use the electronic mail address(es) that you have provided to us to send you regular updates about our activities, upcoming events and newsletters and/or status e-mails electronically.
You can unsubscribe to newsletters at any time, either in your notification settings in EuroBIO or by clicking on the link provided at the end of e-mail newsletters.
Information we automatically obtain through your use of our services
Information from third parties
From third party sources, such as public databases, joint marketing partners, and social media platforms. For example, if a Website Visitor elects to connect his social media account to his account for our Websites, certain Personal Information from the social media account will be shared with us, which may include Personal Information that is part of the Visitor’s profile or his friends’ profiles.
How we store your personal data
How we disclose and transfer your personal data
Internal Business Purposes
We may use your Personal Data for internal business purposes, including without limitation, to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business.
Parent Companies, Subsidiaries and Affiliates.
Agents, Consultants and Service Providers.
We may share your Personal Data with our contractors and service providers who process Personal Data on behalf of us to perform wcertain business-related functions. These companies include our marketing agencies, online advertising providers, data enhancement and data services providers, database service providers, backup and disaster recovery service providers, email service providers, payment processing partners, customer support, tech support, hosting companies and others. When we engage another company to perform such functions, we may provide them with information, including Personal Data, in connection with their performance of such functions.
We may disclose your Personal Data if required to do so by law in order to (for example) respond to a subpoena or request from law enforcement, a court or a government agency (including in response to public authorities to meet national security or law enforcement requirements), or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect or defend our rights, interests or property or that of third parties, (c) prevent or investigate possible wrongdoing in connection with the Services, (d) act in urgent circumstances to protect the personal safety of Users of the Services or the public, or (e) protect against legal liability.
You have legal rights available to you with regard to data access, rectification, erasure, restriction of processing and objection to processing, as well as the right to data portability, amongst others. In addition, you can withdraw any consent you may have given to data processing at any time, and have the right to lodge a complaint with a supervisory authority.
If you are a registered User, you can exercise these rights by logging in and visiting the My Account page. Both registered and unregistered Users may also exercise these right by contacting us directly by email or at the address specified below.
We will consider and respond to all requests in accordance with applicable law.
For any question about your rights, please contact us via the dedicated online form.
Right to object
You have the right to object at any time to the processing of personal data concerning you, pursuant to Article 6 (1) f) of the EU GDPR. This shall also apply to any profiling carried out on the basis of these provisions. Please use our contact form to submit any objection.
Right of access
You have the right to demand confirmation as to whether we process your personal data. If this is the case you are entitled to receive information about this personal data.
You also have a right to access the following information:
- The reasons for the data processing
- The categories of personal data that are processed
- If possible the planned period of time that the personal data will be saved for, or if this isn't possible then the criteria used to determination this time period
- The existence of a right to rectification or erasure of your personal data and/or the right to restriction of processing by the controller, or a right to object to this processing
- The existence of a right to lodge a complaint with a supervisory authority
- All available information about the origin of the personal data if the data was not obtained from the person in question
- The existence of automated decision-making including profiling pursuant to Article 22 (1) and (4) of the EU GDPR and – at least in some cases – insightful information about the logic involved plus the scope and aims of the repercussions of this kind of processing for the person affected
If personal data is passed on to a third country or an international organisation, you have the right as the person affected to be informed about the respective guarantees (pursuant to Article 46 of the EU GDPR) regarding this sharing of data.
Right to rectification
You have the right to demand that we correct any incorrect personal data concerning you with immediate effect. Taking the purposes of processing into account, you have the right to demand the completion of any incomplete personal data – including by means of a supplementary explanation.
Right to erasure
You are entitled to demand that we delete your personal data without delay if one of the following applies: The personal data is no longer required for the purposes for which it was collected or processed in some other way. You withdraw your consent that the processing was based on pursuant to Article 6 (1) a) or Article 9 (2) a) of the EU GDPR , and there are now no valid legal grounds for processing. You submit an objection to the processing of your data pursuant to Article 21 (1) of the EU GDPR and there are no overriding justifiable grounds for the processing, or you submit an objection to the processing of your data pursuant to Article 21 (2) of the EU GDPR. The personal data was processed unlawfully. The deletion of the personal data is required to fulfil a legal obligation in accord-ance with EU law or the law of individual member states. The personal data was recorded in relation to the offer of information society services directly to a child, pursuant to Article 8 (1) of the EU GDPR. Once you have made your request we are obliged to delete the data with immediate effect. The lawfulness of the data processing for the period between the consent and the withdrawal of this consent shall remain unaffected.
Right to restriction of processing
You are entitled to demand a restriction to the processing of your personal data in cases where you dispute the correctness of the personal data, for a period of time that allows the controller to review the correctness of that personal data. If the processing is unlawful and you reject the erasure of the personal data in favour of demanding a restriction to the use of the personal data we will fulfill this request. Processing will also be restricted if we no longer require your personal data for the purposes of processing but do require it for the establishment, exercise or defence of legal claims. Or if you have objected to processing pursuant to Article 21 (1) of the EU GDPR, for as long as is not yet ascertained whether the justifiable grounds of the controller outweigh your grounds. You will be informed in advance by us should the restriction be revoked.
Right to data portability
You have the right to receive personal data concerning you that you have made available to us in a structured, conventional and machine-readable format, and you also have the right to transfer this data to another controller without being impeded by us to whom the personal data has been made available. The condition is that a) processing is based on consent pursuant to Article 6 (1) a) of the EU GDPR or Article 9 (2) a) of the EU GDPR or on a contract pursuant to Article 6 (1) b) of the EU GDPR, and b) the processing is conducted with the help of automated processes. When exercising your right to data portability you have the right to demand that the personal data is transferred directly from us to another controlling body, provided this is technically viable.
Right to withdraw consent
If processing is subject to your consent you have the right to withdraw this consent at any time. This shall not affect the lawfulness of any processing that took place with your consent up until its withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority responsible for our company.