Boehringer Ingelheim

Privacy Notice

This Privacy Notice describes how and for which purposes Boehringer Ingelheim RCV GmbH & Co KG (hereafter “Boehringer Ingelheim”, “we”, “our”, “us”) processes the personal data we collect about you through this website.

1. PURPOSES OF DATA PROCESSING

1.1 Registration, communication (website and social media channels)

We process your data in order to provide you with the services on our websites, for example when you register, log in, participate in training courses and events or send us messages.

The legal basis is Art. 6 (1) b) GDPR.

1.2 Log data

When you visit the website, we receive log data sent by your browser (e.g., IP address, previous website visited, time and date, displayed contents, information regarding the browser and operating system). Collecting log data is technically required to enable you to use our website (the legal basis is Art. 6 (1) b) GDPR). The log files will be stored for as long as necessary for the respective purpose, in principle no longer than 14 days.

1.3 Use of cookies and related data processing (website optimization, analysis, advertising)

We use cookies (small text files placed on your browser) and similar Technologies such as pixel tags (hereinafter referred to as “Cookies”).

1.3.1 Essential Cookies

Essential Cookies are necessary for the website to function properly by providing basic features such as page navigation, access to secure areas of the website or language settings. Legal basis is Art. 6 (1) b) GDPR. We store these essential Cookies for up to one year.

1.3.2 Website optimization and analysis

Based on your consent, we set Cookies and analyze how you're using our websites. This way, we collect information about how well certain services are received and we can adjust and improve them as well our websites.

You may withdraw your consent at any time. To do so, please click on the existing button (wheel icon) on the bottom left hand.

With your consent, we use the following services:

Adobe Analytics (Omniture) 

Cookies from Adobe Analytics allow us to analyze all traffic and usage patterns of individual users (without further identification) or groups (e.g., which services are used how often, how frequently do users return, how long do they stay, which websites and which region are users coming from). This cookie is stored for up to three years.

Adobe Analytics is a service of Adobe Systems Software Ireland Limited. Adobe acts as our processor. In exceptional cases, data may be transferred to the U.S. Therefore, we concluded the EU Standard Contractual Clauses with Adobe in the U.S.

To protect your identity, the IP address collected by the Cookies is shortened and replaced with a generic IP address.

1.4 Further purposes

If necessary, we process your personal data for additional purposes:

  • satisfying our legitimate interests (Art. 6 (1) f) GDPR), including the following:
    (i) to complete a corporate transaction (e.g., corporate restructuring, sale or assignment of assets, merger);
    (ii) to protect, enforce and defend our rights, property and interests;

  • ensuring compliance with legal obligations, court orders or other binding decisions of public authorities (Art. 6 (1) c) GDPR).

  • as a contractual/statutory requirement according to Art. 13(2) e) GDPR.

2. TRANSFER OF PERSONAL DATA

We may share and/or disclose personal data with third parties:

2.1 Reporting obligations to regulatory authorities and enforcement of rights 

In order to comply with legal reporting obligations, to protect our rights and/or the rights of third-parties, we may share and disclose personal data to rights holders, consultants, courts and competent authorities in accordance with legal provisions (e.g., mandatory reports in respect of a suspected adverse event).

2.2 Service provider (Processor) 

We engage service providers to process your personal data for the purposes described in this privacy policy. These service providers process the data only on our behalf, according to our instructions, under our control and in accordance with this privacy policy.

2.3 Boehringer Ingelheim companies

As part of a global group of companies, we involve other Boehringer Ingelheim companies that support us with data processing (e.g., as part of our pharmacovigilance obligations to analyze and process a reported adverse event). These group companies process the data exclusively for the purposes stated in this privacy policy as Joint Controller according to Art. 26 GDPR.

2.4 Data transfer to recipients outside the EU

Authorities, service providers, business partners and Boehringer Ingelheim companies may process personal data outside the EU. In these cases, we ensure an adequate level of data protection to comply with European law (usually through EU standard contractual clauses published by the European Commission or, if necessary, other appropriate safeguards). You can request a copy of the contract that implements the appropriate protection of personal data by contacting our Data Privacy Officer using the contact details set out below.

3. RETENTION PERIODS

Boehringer Ingelheim will store your personal data as long as it is necessary for the respective purposes, which is usually to provide the services you have requested. This means for example, that we store your user account data (login, profession, name etc.) until you delete it. In some cases, we are obliged to store your data for longer in order to comply with statutory retention periods.

We have specified retention periods for certain processing purposes.

4. YOUR RIGHTS

You have the right to:

  • request information about your personal data processed by Boehringer Ingelheim;

  • in justified cases, request deletion, rectification or restriction of the processing of your personal data;

  • in certain circumstances, request transfer of your Personal Data to you or another person in a commonly utilizable format;

  • file a complaint with a data protection authority;

  • request the deletion of your Personal Data if they are no longer necessary for the purposes of processing or there is no legal ground for their further processing.

  • object to processing of your Personal Data at any time as far as such processing is only based on Boehringer Ingelheim’s legitimate interest (Art. 6 (1) f) GDPR). In this case, we will not process such personal data any longer, unless the interests of Boehringer Ingelheim prevail. You can object to the use of data for direct marketing purposes at any time without a weighing of interests.

Should you have given your consent to the processing of your personal data, you can withdraw it at any time with effect for the future; such withdrawal will not affect the lawfulness of the processing until such withdrawal.

5. CONTACT AND QUESTIONS

If you have any questions about this Privacy Notice or about how we use your personal data, please contact us at the following address:

Boehringer Ingelheim RCV GmbH & Co KG
– Data Protection Officer –
Dr.-Boehringer-Gasse 5-11
1120 Vienna, Austria
E-Mail: datenschutzbeauftragter.AT@boehringer-ingelheim.com

If you still have questions or concerns regarding data processing, you can also contact any supervisory authority. The responsible authority for Boehringer Ingelheim RCV GmbH & Co KG is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
E-Mail: dsb@dsb.gv.at

6. CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time. Updates of our Privacy Statement will be published on this website. Any amendments become effective upon publication on our Website.

Last updated: July 2023