Data Protection Notice
This data protection notice (“this Notice”) describes how your personal data are processed when you visit this website.
1. Who is controller for the processing of your personal data?
The controller (“we”, “our” or “us”) for the processing of your personal data is:
Interpharma Praha, a.s. in liquidation
Komořanská 955/61, 143 10
Praha 4 – Modřany
Czech Republic
Email: interpharma-ZAVINOVADLO:ipp-otsuka.cz
2. How are your personal data processed and how long are they stored?
The categories of personal data we process, the legal bases, the purposes of processing and the retention periods are outlined below.
2.1. Web browsing and log data
Data categories: date and time of access, IP address, hostname of accessing computer, referring website, websites visited through our website, pages visited on our website, page load success status, volume of transferred data, browser type/version, operating system.
Purpose of processing: provision of website and IT security
Legal basis for processing: our legitimate interest of making the website available to users, ensuring its technical stability and security, detecting and preventing misuse, troubleshooting errors, and protecting IT systems against unauthorised access or other security incidents, Article 6(1)(f) GDPR
Retention period: 6 months
2.2. Cookies
Cookies are small files that are stored by the website on a visitor’s computer or mobile device.
Data categories: strictly necessary session cookies
Purpose of processing: provision of website
Legal basis for processing: our legitimate interest of providing the basic technical functions of the website, enabling secure and reliable navigation during the visit, remembering session-related settings where necessary, and ensuring that the website operates as intended, Article 6(1)(f) GDPR
Retention period: until the end of the browsing session
2.3. Contact requests
Data categories: first and last name, company, email address, phone number, your request
Purpose of processing: responding to requests
Legal basis: our legitimate interest to receive, manage and respond to your request, communicate with you in relation to your enquiry, maintain an appropriate record of our correspondence, and, where necessary, establish, exercise or defend legal claims, Article 6(1)(f) GDPR
Retention period: We will store your personal data for as long as necessary to receive, manage and respond to your request. After your request has been answered and no further follow-up is required, we will delete your personal data within 6 months, unless we are legally required or otherwise permitted to retain them for a longer period. Where necessary in a particular case, we may retain your personal data for the establishment, exercise or defence of legal claims.
2.4. Automated decision making
Your personal data will not be subject to so called “automated decision-making”, which means that no decision is made by us, using your personal data processed solely by automatic means.
3. What is the source of your personal data?
We collect personal data from you when you visit our website or send us a request.
4. Who are your personal data shared with?
We disclose your personal data to the following categories of recipients:
a) to our group companies, third party services providers and partners who provide data processing services to us, or who otherwise process personal information for purposes that are described in this Notice or notified to you when we collect your personal data;
b) to any competent law enforcement body, regulatory authority, trade association, government agency, court or other third parties where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights (on the basis of our interest in the defence of our rights), or (iii) to protect your vital interests or those of any other person;
c) to any other person with your consent to the disclosure.
These recipients of your personal data may be acting on our behalf or as data controllers in their own right.
5. How do we transfer your personal data across borders?
When sharing your personal data as described in section 4, we may transfer your personal data across borders.
The transfers to the United Kingdom, Switzerland and Japan are based on adequacy decisions of the EU Commission.
The transfers to other countries, such as the United States of America, are based on appropriate safeguards such as standard contractual clauses of the EU Commission. You can receive a copy of these safeguards upon request.
We may also transfer your personal data if the transfer falls under a derogation specified in the data protection legislation, for example, with your explicit consent.
6. Are you obligated to provide your personal data to us?
You are not obliged to provide your personal data to us. There is no statutory or contractual requirement. However, if you do not provide your personal data, we will not be able to ensure the proper functioning of our website or respond to your request.
7. What rights do you have according to the data protection law?
You have the following rights according to the applicable data protection law. These rights might be subject to certain limitations.
7.1. Right of access
You have the right according to Article 15 GDPR to obtain from us confirmation as to whether or not your personal data are being processed, and, where that is the case, access to your personal data and the information required by law.
7.2. Right to rectification
You have the right according to Article 16 GDPR to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
7.3. Right to erasure
You have the right according to Article 17 GDPR to obtain from us the erasure of your personal data without undue delay where the legal conditions apply, for example, if the personal data are no longer required for the purposes pursued.
7.4. Right to restrict processing
You have the right according to Article 18 GDPR to obtain from us the restriction of processing of your personal data where one of the legal conditions apply, for example, if you have objected to processing, for the duration of the verification by us.
7.5. Right to object
You have the right according to Article 21 GDPR to object, on grounds relating to your particular situation, at any time to processing of your personal data. We will then no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
7.6. Right to data portability
You have the right according to Article 20 GDPR to receive your personal data that you provided to us in a structured, commonly used machine-readable format and to transmit your personal data to another controller if the processing is based on your consent or our contract with you.
7.7. Right to withdraw consent
Where your personal data is processed on the basis of your consent, you have the right according to Article 7(3) GDPR to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
7.8. Right to lodge a complaint
If you consider that the processing of your personal data infringes the data protection law, you have the right according to Article 77 GDPR to lodge a complaint with a supervisory authority. This right is without prejudice to any other administrative or judicial remedy.
8. How can you contact us to exercise your data protection rights?
If you have any questions with regards to the protection of your personal data or if you wish to exercise your data protection rights, you can contact us via the contact details indicated in section 1.