This privacy policy describes how and for which purposes Boehringer Ingelheim International GmbH (hereafter “Boehringer Ingelheim”, “we”, “our”, “us”) processes the personal data we collect about you through this website.

1. PURPOSES OF THE DATA PROCESSING

1.1 REGISTRATION, COMMUNICATION (WEBSITE AND SOCIAL MEDIA CHANNELS)

We process your data in order to provide you with the services on our websites, for example when you create a profile, upload a project when searching for project support, amend your project, when you volunteer to engage in a social project and when you communicate with a social entrepreneur or Boehringer employee. You can find more information in our FAQs for social entrepreneurs and Boehringer employees.
We also process your data when you participate in campaigns on our social media channels (Facebook, LinkedIn, Twitter) or send us inquiries or comments.
The legal basis is Art. 6 (1) b) GDPR.

1.2 LOG DATA

When you visit the website, we receive log data sent by your browser (e.g. IP address, previous website visited, time and date, displayed contents, information regarding the browser and operating system). Collecting log data is technically required to enable you to use our website (the legal basis is Art. 6 (1) b) GDPR). The log files will be stored for as long as necessary for the respective purpose, in principle no longer than 14 days.

1.3 PHARMACOVIGILANCE

As a pharmaceutical company Boehringer Ingelheim is required to carry out certain activities related to the detection, assessment, understanding and prevention of adverse effects or any other medicine related problem, also known as pharmacovigilance obligations. The pharmacovigilance obligations require us to process certain information, which may allow us to directly or indirectly identify a person, i.e. the patient and/or the reporter of the adverse event (personal data). We may need to process following personal data:
About the reporter:

• Full name, initials and contact details (which may include your address, e-mail address and phone number), profession (e.g., physician, pharmacist).

About the patient (subject of the report):

• Initials (as provided) never the patient’s name; gender; age / date of birth / age group;

• Details related to the Boehringer Ingelheim product suspected to cause the reaction, such as administration information, batch number;

• Further details related to the adverse event: What did exactly happen?; course and outcome of the adverse event, start and end date, first-time user?, information on concomitant medications and/or diseases; seriousness of the event; view of patient and/or reporter on possible causal relationship between Boehringer Ingelheim product and adverse event;

The contact information is requested to enable us to follow-up with the reporter to gain high quality and complete information on adverse events. If the reporter does not wish to provide his contact details to Boehringer Ingelheim or authorities, the reporter can enter “Privacy” in reporter's names field. We may process your personal data to: (i) analyze the reported adverse event; (ii) contact the reporter for further information; (iii) collate and analyze the information about the adverse event with information about other adverse events received by Boehringer Ingelheim worldwide through our global pharmacovigilance database which is operated by Boehringer Ingelheim International GmbH; and (iv) report pharmacovigilance relevant information to health authorities worldwide.
Reported personal data will be used solely for these purposes. Legal basis for processing pharmacovigilance relevant personal data, including special categories of personal data, is Art. 6 (1) c), and for transfers outside the EU Art. 6 (1) f) and Art. 49 (1) e) GDPR.

1.4 FURTHER PURPOSES WHICH WE PROCESS YOUR PERSONAL DATA FOR

If necessary, we process your personal data for additional purposes:

• satisfying our legitimate interests (Art. 6 (1) f) GDPR), including the following:

  • (i) to create statistics how users (social entrepreneurs and employees) use this website and communicate to analyze which services work, which ones do not and how we may improve them;

  • (ii) to protect, enforce and defend our rights, property and interests;

• ensuring compliance with legal obligations, court orders or other binding decisions of public authorities (Art. 6 (1) c) GDPR);

1.5 COOKIES AND SIMILAR TECHNOLOGIES

We use cookies (small text files placed on your browser) and similar technologies such as pixel tags (hereinafter referred to as “Cookies”).

Essential Cookies
Essential Cookies are necessary for the website to function properly by providing basic features such as page navigation, access to secure areas of the website or language settings. We store these essential Cookies for up to one year.

Website optimization and analysis
Based on your consent, we set Cookies and analyze how you're using our websites. This way, we collect information about how well certain services are received and we can adjust and improve them as well our websites.
You may withdraw your consent at any time here.

With your consent, we use the following service:

Adobe Analytics (Omniture)
Cookies from Adobe Analytics allow us to analyze all traffic and usage patterns of individual users (without further identification) or groups (e.g. which services are used how often, how frequently do users return, how long do they stay, which websites and which region are users coming from). This cookie is stored for up to three years.
Adobe Analytics is a service of Adobe Systems Software Ireland Limited. Adobe acts as our processor. In exceptional cases, data may be transferred to the U.S. Therefore, we concluded the EU Standard Contractual Clauses with Adobe in the U.S.
To protect your identity, the IP address collected by the Cookies is shortened and replaced with a generic IP address.

Marketing Cookies
If you consent, we use Cookies that allow us and our partners to follow users to other websites in order to show ads that are more relevant to the individual user.
You may withdraw your consent at any time here.

We use the following service of third-party provider:

Twitter (conversion tag)
If you consent, we activate a Twitter tag when you visit our website (Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland).
The tag reports to Twitter what actions you have taken on our website as well as data by which you may be identified.
This data allows Twitter to see that you have visited our website, what you have clicked on and if you clicked on a link on Twitter that connects you to our website. This allows Twitter to show you interest-based content. Twitter can link this data to your user account and use it for its own purposes. For information how Twitter processes your data please check https://twitter.com/de/privacy.
We do not receive any data about you or other Twitter users, but only statistics that show us, aggregated for all users for a certain time period, how they interacted with our offers and ads on other platforms of Twitter. This helps us to determine which of our ads were successful and which ones were not.

2. DATA TRANSFER

We may share personal information with third-parties.

2.1 REPORTING OBLIGATIONS TO REGULATORY AUTHORITIES AND ENFORCEMENT OF RIGHTS

In order to protect our rights or the rights of third-parties, we may disclose data to rights holders, consultants, courts and authorities in accordance with legal provisions.

2.2 SERVICE PROVIDER (PROCESSOR)

We engage service providers to process your personal data for the purposes described in this privacy policy. These service providers process the data only on our behalf, according to our instructions, under our control and in accordance with this privacy policy.

2.3 BOEHRINGER INGELHEIM COMPANIES

As part of a global group of companies, we involve other Boehringer Ingelheim companies that support us with data processing. These group companies process the data exclusively for the purposes stated in this privacy policy as Joint Controller according to Art. 26 GDPR.

2.4 TRANSFER TO THIRD PARTIES

We transfer data to contractual partners who process data under their own responsibility and for their own purposes (e.g., if you have given your consent). The data is transferred for the purposes described in this privacy policy.

2.5 SOCIAL PLUGINS AND THIRD-PARTY CONTENT

We have not implemented any tools, by which information is automatically transferred to the provider of social media services when you visit our website (Social Plugins). Any forwarding to social media providers such as YouTube, Facebook, etc. takes place exclusively via link, so that data about your visit to our services (e.g. IP address, time, URL) or data available on your end device (e.g. Cookie information) is only transmitted to the respective providers when the link is consciously used.

2.6 DATA TRANSFER TO RECIPIENTS OUTSIDE THE EU

Authorities, Service providers and Boehringer Ingelheim companies may process personal data outside the EU. In these cases, we ensure an adequate level of data protection to comply with European law (usually through EU standard contractual clauses published by the European Commission or, if necessary, other appropriate safeguards). If your personal data is transferred to a country outside the EU that does not provide an adequate level of data protection, you can request a copy of the contract that ensures the adequate level of protection.

3. RETENTION PERIODS

Boehringer Ingelheim will store your personal data as long as it is necessary for the respective purposes, which is usually to provide the services you have requested. This means, that we store your user account data (login, profession, name etc.) until you delete it. If you have not used your account for one year, it will be deleted and with it all your personal data. In some cases, we are obliged to store your data for longer in order to comply with statutory retention periods.

4. YOUR RIGHTS

4.1 YOUR RIGHTS

You can request information about your stored personal data. If you have provided personal data based on a contract or consent, you have the right to receive this data in a commonly used and machine-readable format.

In addition, you can also request the deletion, rectification or restriction of the processing of your data in certain cases.

If processing is based on your consent, you can withdraw your consent at any time.

RIGHT TO OBJECT:

To the extent we base the processing of your personal data on our legitimate interests (Art. 6 (1) f) GDPR), you may object to such processing at any time. In this case, we will not process such personal data any longer, unless our interests prevail. You can object to the use of data for direct marketing purposes at any time without a weighing of interests.

4.2 CONTACT (BOEHRINGER INGELHEIM, SUPERVISORY AUTHORITY)

Please address your questions or concerns in regard to the processing of your personal data to:

Please address your questions or concerns in regard to the processing of your personal data to:
Boehringer Ingelheim International GmbH
- Data Protection Officer –
Binger Strasse 173, D-55216 Ingelheim am Rhein, Germany
E-Mail: datenschutz@boehringer-ingelheim.com
If you still have questions or complaints regarding data processing, you can also contact any supervisory authority. The authority responsible for Boehringer Ingelheim is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz,
Hintere Bleiche 34, 55116 Mainz, Germany
E-mail: poststelle@datenschutz.rlp.de