phi Pharma International GmbH & Co. KG - privacy policy
Website privacy statement and at the same time information of data subjects according to Article 13 and Article 14 of the EU General Data Protection Regulation
General information
Details of the responsible body
Company: phi Pharma International GmbH & Co. KG
Legal representative: Frank Messer
Address: Carl-Zeiss-Straße 31, 55129 Mainz, Germany
Contact data protection officer: Dr. Sebastian Kraska
Lawyer, Dipl.-Kfm.
External data protection officer
E-mail:
General data processing information
Data concerned:
Personal data is only collected if you provide it to us of your own accord. No other personal data is collected. Any processing of your personal data that goes beyond the scope of the legal permissions will only be carried out on the basis of your express consent.
Purpose of processing: Execution of contract.
Categories of recipients: Public authorities in the case of overriding legal provisions.
External service providers or other contractors.
Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.
Third country transfers: In the context of the execution of the contract, processors outside the European Union may also be used.
Duration of data storage: The duration of data storage depends on the statutory retention obligations and is usually 10 years. Data within the meaning of the TFG is stored in accordance with the statutory retention obligation of at least 30 years after the last entry.
Specific information about the website
The following formulations require individual adaptation to your company situation. In general, the following applies: website analysis on your own systems with shortened IP addresses or with third-party providers with exclusive processing of usage data on behalf of your company is permissible without the consent of the website visitors. However, an opt-out option must be provided for this anonymised tracking. Tracking measures for the traceability of website visitors ("re-targeting", cross-device tracking, etc. require the documented consent of the website visitors in advance). Furthermore, when integrating third-party code (e.g. integration of YouTube videos, Google fonts, map material, etc.), care must be taken to ensure that your website visitors' data is not automatically forwarded to third-party providers.
Use of a newsletter
When registering for our newsletter, you provide us with your e-mail address and optionally other data. We use this information exclusively to send you the newsletter. The data you enter when registering for the newsletter will be stored by us until you unsubscribe from our newsletter. You can unsubscribe at any time by using the link provided in the newsletter or by sending us a message to this effect. By unsubscribing, you object to the use of your e-mail address.
Usage data
When you call up our web pages, you transmit data (out of technical necessity) to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- complete IP address of the requesting computer
- amount of data transferred.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. The data is also processed in anonymised form for statistical purposes; it is not compared with other data or passed on to third parties, not even in extracts.
Use of session cookies
The setting of cookies to the extent necessary for the website display (e.g. storage of language selection, shopping basket functions etc.) is also permissible without the explicit consent of the website visitor. Cookies that go beyond this - especially those aimed at tracking website visitors - require the prior documented consent of the website visitor.
Session cookies are stored exclusively for the duration of your use of our website. The purpose of these cookies is to identify your computer during a visit to our website, to enable multilingualism of the website content and to be able to determine the end of your visit. In order to use the full functionality of our website, it is necessary to allow session cookies for technical reasons. Session cookies are deleted as soon as you leave our website or end the browser session.
Information on further data processing procedures
Specific information on the application procedure
Data concerned: Application details
Purpose of processing: Carrying out the application procedure.
Categories of recipients: Public bodies in case of overriding legal provisions.
External service providers or other contractors, including for data processing and hosting.
Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interests, including customers and interested parties in the context of order acquisition.
Third-country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers.
Duration of data storage: Application data is usually deleted within four months after notification of the decision, unless consent has been given for longer data storage in the context of inclusion in the applicant pool.
Specific information on the processing of customer/interested party data
Data concerned: Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.
Purpose of processing: Contract performance, including offers, orders, sales and invoicing, quality assurance.
Categories of recipients: Public authorities in the event of overriding legal provisions.
External service providers or other contractors, including for data processing and hosting, shipping, transport and logistics, service providers for printing and shipping information.
Other external bodies insofar as the data subject has given his/her consent or a transfer is permissible for overriding interests, e.g. for creditworthiness information in the case of purchase on account, for electronic dispatch of information, for quality assurance purposes.
Third country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers.
Duration of data storage: The duration of data storage depends on the statutory retention obligations and is usually 10 years. Data within the meaning of the TFG is stored in accordance with the statutory retention obligation of at least 30 years after the last entry.
Specific information on the processing of employee data
Data concerned: Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.
Purpose of processing: Performance of the contract within the framework of the employment relationship.
Categories of recipients: Public authorities in the event of overriding legal provisions, including the tax office, social insurance institutions, employers' liability insurance association, customs, BfArM, police, Mainzer Netze and the operator of the security system NTA Systemhaus GmbH & Co. KG.
External service providers or other contractors, including for data processing and hosting, payroll accounting, travel expense accounting, insurance services, vehicle use.
Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for reasons of overriding interest, e.g. for order acquisition, insurance services.
Third country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers.
Duration of data storage: The duration of data storage depends on the statutory retention obligations and is usually 10 years.
Specific information on the processing of supplier data
Data concerned: Data provided for the performance of the contract; if necessary, additional data for processing on the basis of your express consent.
Purpose of processing: Contract performance, including enquiries, purchasing, quality assurance.
Categories of recipients: Public authorities in the event of overriding legal provisions, including the State Office for Social Affairs, Youth and Supply, BfArM, tax office and customs.
External service providers or other contractors, e.g. for data processing and hosting, shipping, transport and logistics, accounting and payment processing.
Other external bodies insofar as the data subject has given his/her consent or a transfer is permissible for reasons of overriding interest.
Third country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers.
Duration of data storage: The duration of data storage depends on the statutory retention obligations and is usually 10 years. Data within the meaning of the TFG is stored in accordance with the statutory retention obligation of at least 30 years after the last entry.
Specific information on the use of video conferencing/webinar software.
Data concerned: Data provided for the use of the video conferencing software or webinar software (esp. first name, last name, e-mail address; optional: sound transmission; optional: image transmission; optional: questions when using chat functions); to the extent technically necessary, processing of data from your system to establish the connection with the provider of the conferencing software.
Purpose of processing: conducting video conferences or webinars.
Categories of recipients: Public bodies in case of overriding legal provisions. External service providers or other contractors, including for data processing and hosting. Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.
Third country transfers: Processors outside the European Union are used (in this case: United States of America); corresponding legal agreements have been concluded with the service provider.
Duration of data storage: Video conferences are only recorded with the previously documented consent of the participants. The technical data is deleted if it is no longer required. The duration of data storage otherwise depends on the statutory retention obligations and is usually 10 years.
Further information and contacts
In addition, you can assert your rights to information, correction or deletion or to restriction of processing or the exercise of your right to object to processing as well as the right to data portability at any time. Here you will find the possibility to contact us by e-mail (