Privacy Policy MEDICE Arzneimittel Pütter GmbH & Co. KG
Last updated: 2 October 2025
MEDICE Arzneimittel Pütter GmbH & Co. KG takes the protection of your personal data very seriously. The following information is intended to give you an overview of how MEDICE Arzneimittel Pütter GmbH & Co. KG processes your personal data.
An overview of the individual chapters for better orientation can be found here:
Preamble – Here you will find a brief overview of the relevant data protection topics.
Contact – How can you contact us quickly and easily?
Data processing and storage – Which of your data is stored and processed, how, for what purpose, where, by whom and for how long?
Legal basis – On what legal basis do we process your data?
Data transfer – Under what conditions do we transfer your data to third parties?
Data security – What do we do to protect your data as much as possible?
Your rights – Here you will find an overview of all your rights as a data subject.
1. Preamble
The data protection term "personal data" refers to all information relating to an identified or identifiable person.
As a company, we process personal data that we receive in the course of our business relationships from, among others, our prospective customers (including visitors to our websites), applicants, employees, patients, customers, suppliers or service providers. We also process personal data that we have received from other companies in the MEDICE Health Family or from other third parties (e.g. credit agencies, authorities, cooperation partners, contractors) in a permissible manner (e.g. for the execution of orders, the fulfilment of contracts, due to legal obligations or on the basis of your consent). Furthermore, we process personal data that we have obtained from publicly accessible sources (e.g. public registers, media, internet) in a permissible manner and are permitted to process.
If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.
As the controller, we have implemented numerous technical and organisational measures to ensure the most complete protection of the personal data processed.
2. Contact
You can contact us directly via the service hotline +49 2371 937-0 or the service email address info[at]medice.de. Our service hours are Monday to Friday (except public holidays) from 7:15 a.m. to 5:30 p.m.
Your enquiry will be processed by our staff within two working days to no later than two weeks after receipt of your enquiry.
The controller within the meaning of Art. 4 (7) of the EU General Data Protection Regulation (hereinafter "GDPR"), the Federal Data Protection Act (hereinafter "BDSG") and other data protection regulations is:
MEDICE Arzneimittel Pütter GmbH & Co. KG
Kuhloweg 37
58638 Iserlohn
Telephone: +49 (0)2371 937 0
Email: info[at]medice.de
Authorised representatives:
Dr. med. Katja Pütter-Ammer
Dr. med. Dr. oec. Richard Ammer
Dr. rer. nat. Uwe Baumann
Annick Berreur-Igersheim
Eric Neyret
Internal Data Protection Officer:
If you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact our data protection team as follows:
MEDICE Arzneimittel Pütter GmbH & Co. KG
Data Protection
Kuhloweg 37
58638 Iserlohn
Telephone: +49 (0)2371 937 0
Email: datenschutz[at]medice.de
If you have any confidential concerns regarding data protection, you can contact our data protection officer directly at dsb[at]medice.de.
3. Data processing and storage
The following personal data may be collected and processed when you contact MEDICE Arzneimittel Pütter GmbH & Co. KG:
3.1 Contacting us / contact form
When you contact us (e.g. by telephone, fax, contact form or email), your personal data (such as your first and last name, email address or telephone/fax number) will be collected and processed.
The data collected when using a contact form can be seen on the respective contact form. All data fields marked as mandatory are required to process your enquiry. If you do not provide this information, we will not be able to process your enquiry. The provision of additional data is voluntary.
The data collected will be stored and processed exclusively for the purpose stated in the contact form/for establishing contact, processing your request and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f) GDPR. If your contact request is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b) GDPR.
When data is collected via the contact form, your data is transmitted in encrypted form.
After your enquiry has been processed, all data collected in the course of contacting us will be deleted. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no legal obligations to retain the data.
3.2 Application
When you use our application portal, we collect personal data such as your name, address, telephone number and email address. We need this data to contact you. You also have the option of sending us electronically stored documents such as your CV, references, photos or your cover letter.
We are looking for the best applicants, regardless of age, gender, disability, origin, religion, ideology or sexual identity. Therefore, we do not require any information from you that is not usable under the General Equal Treatment Act. Please do not forward any confidential internal information or trade secrets of your former or current employer to us.
Your personal application data will be collected, processed and stored exclusively for the purpose of processing your application and the associated pre-contractual measures for initiating an employment relationship within the meaning of Art. 6 (1) (b) GDPR. Access to the data transmitted to us as part of your application is restricted to designated employees of MEDICE Health Family Holding GmbH who are involved in the application process. These employees are trained in accordance with the provisions of the GDPR and are bound to data secrecy.
If your application is successful, the data you provide may be used for administrative purposes in the context of your employment.
If we are unable to offer you employment, we will retain the data you have provided for up to six months after the conclusion of the application process for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage.
If we are unable to offer you a position that is currently vacant, but believe that your application may be of interest for future vacancies based on your profile, we will store your application data for a total of twelve months with your separate consent. You can revoke this consent at any time with future effect without incurring any disadvantages.
3.3 Employment relationship
Within the framework of an employment relationship with MEDICE Arzneimittel Pütter GmbH & Co. KG, we process personal data (such as personal and contact details, billing data or qualification data) of employees, interns, working students, trainees, trainers/speakers, etc. for the purpose of fulfilling the contract, as well as within the framework of pre-contractual measures in accordance with Art. 6 (1) lit. b) GDPR and Art. 88 GDPR in conjunction with Section 26 (1) BDSG, as well as on the basis of legal requirements pursuant to Art. 6 (1) lit. C) GDPR.
In this context, it is necessary for you to provide the personal data that is required for the establishment and performance of an employment relationship and the fulfilment of the contractual obligations associated with it , or which we are legally obliged to collect. Without this data, it is not possible to establish an employment relationship.
All information on the scope and purpose of the personal data collected, used and processed in the context of employment at MEDICE Arzneimittel Pütter GmbH & Co. KG, your rights as a data subject and all other data protection-related topics will be provided by us during the recruitment process.
All information on the scope and purpose of the personal data collected, used and processed in the context of a trainer/speaker activity for MEDICE Arzneimittel Pütter GmbH & Co. KG, your rights as a data subject and all other data protection-related topics can be found here:
3.4 Video surveillance of the factory premises in Iserlohn
Company premises
As part of site security and technical monitoring of delivery processes within the MEDICE factory premises in Iserlohn, MEDICE Arzneimittel Pütter GmbH & Co. KG records videos in the area of the barrier system, main access road and loading gates. These videos document car number plates, persons and times (barrier entry and exit, delivery) to the extent necessary.
All information on the scope and purpose of the personal data collected, used and processed during video surveillance, your rights as a data subject and all other data protection-related topics can be found here:
Data protection information on video surveillance of the factory premises
Narcotics storage facilities
As part of the technical implementation of the dual control principle for the storage and shipment of narcotics, MEDICE Arzneimittel Pütter GmbH & Co. KG records videos in the narcotics storage facilities at its Iserlohn site. These videos document the persons present in the narcotics storage facilities and the times to the extent necessary.
All information on the scope and purpose of the personal data collected, used and processed during video surveillance, your rights as a data subject and all other data protection-related topics can be found here:
>> Data protection notice on video surveillance in narcotics storage facilities - coming soon
3.5 Studies, surveys and vigilance reports
When conducting clinical trials/user surveys on our products, we collect personal data such as your name, address, telephone number and email address, as well as health data. We only collect this data with your express, informed, voluntary consent in accordance with Art. 6 (1) (a) in conjunction with Art. 9 (2) (a) GDPR. The respective processing purposes, the bodies involved in the processing and the processing locations, the storage and deletion periods, as well as a description of the technical and organisational measures taken to secure your data are documented in the corresponding study information for the respective clinical study/user survey.
In the context of vigilance reports on our products, we collect personal data such as contact details (names of the persons reporting and affected by the adverse reaction), time of occurrence of the adverse reaction or off-label use, as well as information on underlying and concomitant diseases.
We are obliged to collect, report and archive these vigilance reports in accordance with Section 63c of the German Medicines Act (AMG) and Regulation (EU) 2017/745 on medical devices (MDR). This serves to protect our patients and to ensure a high standard of quality and safety for our products.
Your data will only be passed on to third parties (competent authorities) in pseudonymised form (without reference to your person) within the framework of the legal reporting obligations for vigilance reports.
3.6 Business relationships
MEDICE Arzneimittel Pütter GmbH & Co. KG maintains various business relationships with, for example, doctors, pharmacies, suppliers, contract processors, cooperation partners, sponsorship partners, training participants, other service providers (personnel leasing, consultants, other freelancers, etc.), wholesalers, health insurance companies and other customers.
In this context, contact details, billing data and information from the respective contractual agreements are processed for the purpose of fulfilling the contract or in the context of pre-contractual measures in accordance with Art. 6 (1) lit. b) GDPR.
Within the framework of this business relationship with MEDICE Arzneimittel Pütter GmbH & Co. KG, it is necessary for you to provide the personal data that is required for the establishment and execution of a business relationship and the fulfilment of the associated contractual obligations, or which we are legally obliged to collect. Without this data, we will usually not be able to accept or will have to terminate a business relationship or other order.
3.7 Professional group registration
When you register on the professional community portal via our website, we collect your contact details (first and last name, email address, postcode), professional community membership and your MEDICE customer number for the purpose of verifying your professional community membership and creating your personal account. It is not possible to view the relevant content of the professional community portal without this registration.
3.8 Participation in competitions
When you participate in a competition, we process your contact details, such as your name and address, for the purpose of administering the competition, contacting you in connection with our newsletter and sending you your prize if you win. Detailed information on data protection and your rights can be found in the respective terms and conditions of the competition.
3.9 Events
MEDICE Arzneimittel Pütter GmbH & Co. KG regularly organises various events such as interactive activities, seminars, anniversary celebrations, expert meetings, symposia and sponsor meetings. During these events, employees of MEDICE Arzneimittel Pütter GmbH & Co. KG and/or external service providers acting on behalf of MEDICE Arzneimittel Pütter GmbH & Co. KG take photos and/or videos of the participants. We collect and process your personal data on the basis of our legitimate interest in documenting the respective event, reporting and public relations work (e.g. through publication on the company's internal intranet, on our website, on social networks or in press releases) in accordance with Art. 6 (1) lit. f) GDPR. You will be informed about these photo and/or video recordings in advance and during the events and can object to the processing of your personal data at any time by sending an informal email to datenschutz [at]medice.de.
Within the scope of the events, MEDICE Arzneimittel Pütter GmbH & Co. KG processes your personal data for the purpose of processing your registration, as well as for the implementation and follow-up of the event. The data that is collected can be seen on the respective registration form for the event.
Online events
We use the tools "Zoom" from Zoom Video Communications Inc. and "Microsoft Teams" from Microsoft Deutschland GmbH for the planning, coordination and implementation of online events. Your personal data will be processed in connection with your participation in one of our events.
All information on data protection for online events via Zoom can be found here
All information on data protection for online events via Microsoft Teams can be found at here
3.10 Profiling
We process your data in a partially automated manner with the aim of evaluating certain aspects of your person (profiling).
We use profiling in the following cases, for example:
We use evaluation tools to provide you with targeted information and advice about products. These enable us to communicate and advertise in line with your needs, including market and opinion research.
We may use scoring to assess your creditworthiness. This takes into account experience from previous business relationships, publicly available data and information from credit agencies.
3.11 Marketing and newsletter distribution
As part of our marketing activities, we send out digital newsletters containing information about products, events, promotions, offers and advertising from the MEDICE Health Family product ranges.
These product ranges cover the following topics:
Women's health (Remifemin, Remifemin Feuchtcreme, Remifemin mono, Remifemin plus, Remisens, Femicur N, femfeel App, Remifemin Companion App, Cystinol, Aualibra, Healthy Woman, Cystinol, Aqualibra; Apps/digitale Gesundheitslösungen: femfeel, Remifemin Companion – Medigital GmbH)
Skin health (Medigel (Gel, Wundreinigungsspray), Soventol (Cremogel, Creme, Spray, Gel, Anti-Juck-Stift, Anti-Juck-Spray, Protect), Skin-Aktionsnewsletter, Brand- und Wundgel, Exoderil (Creme, Gel))
Intestinal health (Medigel (Gel, Wundreinigungsspray), Soventol (Cremogel, Creme, Spray, Gel, Anti-Juck-Stift, Anti-Juck-Spray, Protect), Skin-Aktionsnewsletter, Brand- und Wundgel, Exoderil (Creme, Gel))
Colds (Medigel (Gel, Wundreinigungsspray), Soventol (Cremogel, Creme, Spray, Gel, Anti-Juck-Stift, Anti-Juck-Spray, Protect), Skin-Aktionsnewsletter, Brand- und Wundgel, Exoderil (Creme, Gel))
Nephrology (Vafseo, Abseamed, Anti-Kalium Na, Calcitriol Nefro, Calciumacetat-Nefro, CC-Nefro, FerMed, Nefrocarnit, Nephrotrans, Phosphonorm, Sevemed; Apps/digitale Gesundheitslösungen: beCintia, MediOrganizer – Medigital GmbH)
Pain (Melabon K)
Health Family Platform (Shop and bonus programme)
Health Academy (Medibee/Health Academy, HCP-Trainings)
PTA Family (PTA Family Service Communication, Medibee/Health Academy, HCP Training)
Mental Health
ADHD (Medikinet, Agakalin, Attentin, Kinecteen, Medikinet retard, Mellozan, ADHD network/portal; apps/digital health solutions: hiToco, hiFoon – Medigital GmbH; brainjo – brainjo GmbH; Attexis – GAIA AG)
Sleep disorders (apps/digital health solutions: hiPanya – Medigital GmbH)
Nervous restlessness (Sedacur forte)
Depression (apps/digital health solutions: online therapy ‘Depression’ – Selfapy GmbH)
Nutrition (apps/digital health solutions: online therapy ‘Bulimia’, ‘Binge Eating’ – Selfapy GmbH)
Panic/anxiety disorders (apps/digital health solutions: online therapy for panic disorder and generalised anxiety disorder – Selfapy GmbH)
Chronic pain (apps/digital health solutions: online therapy for chronic pain – Selfapy GmbH)
Our marketing activities are primarily aimed at customer loyalty and retention, information sharing, market and opinion research, improving our offerings, and automating communication.
Your contact details (name, email address) are used to send the newsletter. Tools and software solutions from various mailing service providers are used for this purpose.
These are:
Brevo
We use the mailing service provider Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. You can view Brevo's privacy policy at: https://www.brevo.com/de/datenschutz-uebersicht/.
Mailgun
We use the Mailgun email service from MessengerPeople GmbH, St.-Martin-Straße 63, 81669 Munich, as a self-hosted on-premise software solution. For more information on Mailgun's privacy policy, please visit: Our current privacy policy | Mailgun
Salesforce
We use CRM solutions from salesforce.com Inc. ("salesforce"), One Market Street, Suite 300, San Francisco, CA 94105, USA. We use these CRM (customer relationship management) solutions to manage customer and consent data, for sales management, and for the automated dispatch of newsletters. Salesforce.com Inc. is a US company certified under the EU-US Data Privacy Framework, which means that the adequacy decision of the EU Commission pursuant to Art. 45 GDPR applies and thus confirms an adequate level of data protection.
Further information on Salesforce can be found at: https://www.salesforce.com/de/company/privacy/
MEDICE Arzneimittel Pütter GmbH & Co. KG only uses service providers with whom it has a corresponding contract in accordance with Art. 28 GDPR.
For personalised newsletters, MEDICE Arzneimittel Pütter GmbH uses contact lists from HCP database service providers such as IQVIA, as well as data collected from publicly accessible website content of medical practices and pharmacies through web scraping.
Further information on IQVIA's data protection requirements can be found at: IQVIA's privacy policy (the "Policy"): - IQVIA
The legal basis for the processing of your data in the context of sending newsletters is either a contractual agreement concluded with you (e.g. when participating in a competition) in accordance with Art. 6 (1) (b) or your voluntary consent in accordance with Art. 6 (1) (a) GDPR.
This consent can be obtained directly by MEDICE Arzneimittel Pütter GmbH & Co. KG or external HCP database service providers such as IQVIA.
You can revoke your consent at any time without giving reasons and unsubscribe from the newsletter. For this purpose, there is a corresponding link/contact in every newsletter.
The legal basis for sending newsletters as a result of the sale of goods or services is Section 7(3) UWG. You can also unsubscribe from the newsletter at any time. For this purpose, there is a corresponding link in every newsletter.
3.12 Our activities on social networks
We have our own pages on social networks so that we can communicate with you there and inform you about our services.
We are not the original provider of these pages, but merely use them within the scope of the options offered to us by the respective providers.
As a precaution, we would therefore like to point out that your data may also be processed outside the European Union or the European Economic Area. Use may therefore involve data protection risks for you, as it may be more difficult to safeguard your rights, e.g. to information, deletion, objection, etc., and processing on social networks is often carried out directly for advertising purposes or to analyse user behaviour by the providers, without us being able to influence this. If usage profiles are created by the provider, cookies are often used or your usage behaviour is assigned to your own member profile on social networks.
The processing of personal data described above is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in communicating with you in a modern way and informing you about our services. If you as a user have to give your consent to data processing by the respective providers, the legal basis is Art. 6 (1) (a) GDPR.
As we do not have access to the providers' databases, we would like to point out that it is best to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data in social networks is listed below for each of the social network providers we use:
Facebook
When you visit our Facebook page, where we present our company or individual products from our range, certain information about you is processed. The data controller in Germany is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.All information on how Facebook handles your personal data can be found here: www.facebook.com/privacy/explanation
Instagram
When you visit our Instagram page, where we present our company or individual products from our range, certain information about you is processed. The controller responsible for data processing in Germany is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
All information about how Instagram handles your personal data can be found here: https://instagram.com/legal/privacy/
LinkedIn
When you visit our LinkedIn pages, where we present our company or individual products from our range, certain information about you is processed. The controller responsible for data processing in Germany is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.All information on how LinkedIn handles your personal data can be found here: LinkedIn Privacy Policy
Vigilance reports via social networks
Occasionally, users, their relatives or healthcare professionals may comment on our products in comments or messages. These comments/messages also count as vigilance reports from section 3.6, in which we process your personal data.
3.13 Cooperation between the parent company and other subsidiaries
In order to protect the legitimate interests of MEDICE Health Family Holding GmbH pursuant to Art. 6(1)(f) GDPR in optimising the advertising and sales market presence of our parent company and subsidiaries, it may be necessary for us to share certain personal data within MEDICE Health Family Holding GmbH. This applies in particular to possible contact details, information about your interests and customer profile, and your use of our products and services.
The joint processing of this data takes place within the framework of joint responsibility in accordance with Art. 26 GDPR. The companies involved within MEDICE Health Family Holding GmbH have set out in an agreement how the respective tasks and responsibilities relating to the processing of personal data are distributed and who fulfils which obligations in accordance with the GDPR.
The shared data may be used to:
Optimise our marketing and sales strategies.
To conduct market research and analyses in order to further improve our products and services.
The companies involved within MEDICE Health Family Holding GmbH ensure that appropriate technical and organisational measures are taken to protect your personal data. The transfer and processing of your data is always carried out in accordance with the applicable data protection regulations.
If you have any questions about the joint processing of your data within MEDICE Health Family Holding GmbH or would like to exercise your data protection rights, you can contact our data protection team at any time at datenschutz[at]medice.de. For confidential matters relating to data protection, you can contact our data protection officer directly at dsb[at]medice.de.
3.14 Purposes of processing
Personal data is processed for the following purposes:
to fulfil contractual obligations or in the context of pre-contractual measures
to protect the rights and interests of MEDICE Arzneimittel Pütter GmbH & Co. KG and third parties (e.g. employees)
to fulfil legal obligations
in rare cases, to defend against legal claims or to combat fraud
to carry out product testing, application surveys and clinical studies
for market research and marketing purposes
for documentation, reporting and public relations
to process and verify vigilance reports
for communication and establishing contact
3.15 Storage and deletion periods
Unless otherwise specified in this privacy policy, we only store your personal data for as long as is necessary to fulfil the aforementioned processing purposes, to fulfil our contractual or legal obligations, or to pursue and defend legal claims.
The statutory retention obligations arise in particular from commercial or tax law, as well as from regulations governing medicinal products and medical devices.
4. Legal basis
The legal basis for the processing of your personal data may be your informed, voluntary consent in accordance with Art. 6 (1) (a) in conjunction with Art. 7 GDPR/§ 25(1) TDDDG, the performance of a contract to which you are a party, or the performance of pre-contractual measures pursuant to Art. 6(1)(b) GDPR, the fulfilment of a legal obligation pursuant to Art. 6(1)(c) (in the case of drug safety reports in conjunction with Art. 9 (2) (i) GDPR, §22 (1) No. 1 (c) BDSG-neu and §63c AMG), or the protection of our legitimate interests or those of a third party pursuant to Art. 6 (1) (f) GDPR.
5. Data transfer
We only pass on your personal data to third parties if:
you have given us your express consent to do so in accordance with Art. 6 (1) (a) GDPR,
the transfer is permissible under Art. 6 para. 1 lit. f) GDPR to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
there is a legal obligation to disclose the data in accordance with Art. 6 (1) (c) GDPR, and
this is legally permissible and necessary for the performance of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR.
Within the scope of the processing operations described in this privacy policy, personal data may be transferred to the United States. Companies in the United States only have an adequate level of data protection if they have certified themselves under the EU-US Data Privacy Framework and thus the adequacy decision of the EU Commission pursuant to Art. 45 GDPR applies.
We have explicitly mentioned this in the privacy policy for the service providers concerned. In order to protect your data in all other cases, we have concluded agreements on order processing based on the standard contractual clauses of the European Commission. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent pursuant to Art. 49(1)(a) GDPR may serve as the legal basis for the transfer to third countries. This does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR.
Under these conditions, recipients of personal data may include, for example:
Companies affiliated with MEDICE Arzneimittel Pütter GmbH & Co. KG, insofar as this is necessary for the purpose of data processing.
Public authorities and institutions (e.g. European Central Bank, tax authorities, Federal Central Tax Office, public prosecutors) in the event of a legal or official obligation.
Processors to whom we transfer personal data in order to conduct our business relationship with you, e.g. for services related to archiving, document processing, call centre services, controlling, compliance, data destruction, purchasing, debt collection, customer management, lettershops, marketing, media technology, reporting, support/maintenance of IT applications, risk controlling, telephony, goods dispatch, website management, payment transactions.
Persons bound to professional secrecy (including solicitors, tax consultants, auditors) for support in fulfilling legal or official obligations, as well as for pursuing and defending legal claims and in criminal prosecution.
Other data recipients may be those entities to which you have given your consent for data transfer.
MEDICE Arzneimittel Pütter GmbH & Co. KG guarantees that your data will only be passed on to entities that can demonstrate an appropriate data protection concept in accordance with the applicable regulations and laws and with which, if necessary, appropriate contractual agreements have been concluded in accordance with Art. 26 and Art. 28 GDPR.
6. Data security
The security of your personal information is very important to us.
Every time data is collected, stored, used and transferred, there are confidentiality risks (e.g. the possibility of identifying the person concerned). These risks cannot be completely ruled out and increase the more data can be linked together. MEDICE Arzneimittel Pütter GmbH & Co. KG assures you that it will do everything possible in line with the state of the art to protect the transmission of your data.
To this end, we take the following technical and organisational measures, among others:
SSL/TLS encryption: Personal data is only transmitted via connections that are encrypted using state-of-the-art technology. We implement the applicable guidelines of the Federal Office for Information Security and use this technology to protect the transmission of your data.
Different passwords for all internally used software tools
Virus protection for all IT hardware used
Firewall for our internal company network
Regular training on data security and protection for all employees
Regular updates of all software components
Regular data backups to ensure availability
Regular risk analyses of the relevant IT systems
7. Your rights
When processing your personal data, our goal is to guarantee your data protection rights at all times. Our service hours and all contact details can be found under point 2, "Contact".
You can exercise the following rights in relation to your personal data:
You can request information about the processing of your data.
You can request the correction of your personal data if it is incorrect or incomplete.
You can request the restriction of the processing of your personal data. (1) For the duration of the verification of the accuracy of the data. (2) If the processing is unlawful and you refuse to have it deleted. (3) If the data is no longer required by the controller for the purposes of processing, but you need it to assert, exercise or defend legal claims. (4) In the event of an objection to data processing, as long as the corresponding balancing of interests has not been clarified.
You may request that the data collected about you be transferred to you or to a body designated by you.
If there are grounds for complaint, you may lodge a complaint with the competent data protection authority.
The contact details of the data protection supervisory authorities of all federal states can be found at the following internet address:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
You may request the deletion of the data collected about you.
You may object to the processing of your personal data at any time without giving reasons. If the processing is based on Art. 6 (1) (e) or (f) GDPR.
You may revoke your consent to data processing at any time without giving reasons.
Right to object/revoke consent vis-à-vis MEDICE Health Family
You will not suffer any disadvantages as a result of an objection/revocation. The objection shall take effect for the future; previous data transfers shall remain lawful. From then on, your data will only be processed by MEDICE Arzneimittel Pütter GmbH & Co. KG to a limited extent if this is required by the relevant legal provisions under Art. 6 (1) (c) and our legitimate interest under Art. 6 (1) (f) GDPR.
If you have any further questions about how we handle your personal data or would like to exercise your other rights, please contact our data protection team at datenschutz[at]medice.de.
For confidential matters relating to data protection, you can contact our data protection officer directly at dsb[at]medice.de.