Privacy Policy

We are delighted by your interest in our company. Data protection is of particular importance to DPhE’s management. It is generally possible to use DPhE’s website without providing any personal data. However, if a data subject wishes to use specific services offered by our company via our website, processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the data subject’s consent.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, always takes place in compliance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to DPhE. Through this Privacy Policy, our company aims to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed about their rights by means of this Privacy Policy.

DPhE has implemented numerous technical and organizational measures for processing to ensure the most complete protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions can fundamentally have security vulnerabilities, meaning absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, for example, by telephone.

DPhE’s Privacy Policy is based on the terms used by the European legislator when enacting the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easily readable and understandable for both the public and our customers and business partners. To ensure this, we would like to explain the terms used in advance.

Among others, we use the following terms in this Privacy Policy:

1. Personal data
   Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. Data subject
   Data subject is any identified or identifiable natural person whose personal data is processed by the controller.
3. Processing
   Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
4. Restriction of processing
   Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.
5. Profiling
   Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
6. Pseudonymization
   Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
7. Controller
   Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
8. Processor
   Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
9. Recipient
   Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
10. Third party
    Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
11. Consent
    Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

The controller in the sense of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions with a data protection character is:

Dohm Pharmaceutical Engineering
Machandelweg 7
14052 Berlin
Germany

Tel.: +49 30 3009640
Email: info@dphe.de
Website: www.dphe.de

Email: datenschutz@dphe.de

We host the content of our website with the following provider: All-Inkl
The provider is ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter All-Inkl).

The use of All-Inkl is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible.

Collection of General Data and Information

Cookies

Our websites use so-called “cookies.” Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or an automatic deletion occurs through your web browser.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are necessary for carrying out the electronic communication process, for providing certain functions you desire (e.g., for the shopping cart function), or for optimizing the website (e.g., cookies for measuring web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically flawless and optimized provision of its services. If consent for the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); consent can be revoked at any time.

You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

You can find out which cookies and services are used on this website in this Privacy Policy.

Consent with Complianz (Cookies)

Our website uses Complianz’s consent technology to obtain your consent for the storage of certain cookies on your device or for the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands (hereinafter “Complianz”).

Complianz is hosted on our servers, so no connection is made to the servers of the Complianz provider. Complianz stores a cookie in your browser to be able to assign the consents you have given or their revocation to you. The data collected in this way will be stored until you request its deletion, delete the Complianz cookie yourself, or the purpose for data storage ceases to apply. Mandatory legal retention obligations remain unaffected.

Complianz is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website – for this purpose, server log files must be recorded.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and for follow-up questions. We will not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage ceases to apply (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Inquiry by Email or Phone

If you contact us by email or phone, your inquiry, including all personal data arising from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you send us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage ceases to apply (e.g., after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Google Fonts (Local Hosting)

This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google’s servers does not take place.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

OpenStreetMap

We use the map service of OpenStreetMap (OSM).

We embed the map material from OpenStreetMap on the server of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The United Kingdom is considered a third country with an adequate level of data protection. This means that the UK has a level of data protection equivalent to that in the European Union. When using OpenStreetMap maps, a connection is established to the servers of the OpenStreetMap Foundation. This may include transmitting your IP address and other information about your behavior on this website to the OSMF. OpenStreetMap may store cookies in your browser or use comparable recognition technologies for this purpose.

The use of OpenStreetMap is in the interest of an appealing presentation of our online offerings and easy discoverability of the locations we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

We offer you the opportunity to apply to us (e.g., by email, post, or via an online application form). In the following, we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data comply with applicable data protection law and all other legal provisions, and that your data will be treated with strict confidentiality.

If you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes from job interviews, etc.) to the extent necessary for deciding on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons involved in processing your application.

If the application is successful, the data you submitted will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.

If we cannot offer you a position, you decline a job offer, or withdraw your application, we reserve the right to retain the data you submitted for up to 6 months from the end of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6 para. 1 lit. f GDPR). Afterwards, the data will be deleted and physical application documents destroyed. This retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period (e.g., due to an impending or ongoing legal dispute), deletion will only take place when the purpose for further retention ceases to apply.

Longer retention may also occur if you have given corresponding consent (Art. 6 para. 1 lit. a GDPR) or if legal retention obligations prevent deletion.