Website Privacy Policy
The Website Privacy Policy can be found in additional languages at the bottom of the page
Privacy Policy for www.tillotts.com
Last updated on: 26 July 2024
- General
With this Privacy Policy we, the Tillotts Group[1] (hereinafter together Tillotts, we or us) explain how we collect and further process your personal data. This Privacy Policy applies only to personal data we collect via this website (“Website”) as described in Section 3 below. It is possible that other Privacy Policies are applicable to specific circumstances (e.g. our privacy policy for Business Contacts).
The term “personal data” in this Privacy Policy means any information that identifies or could reasonably be used to identify any person.
If you provide us with personal data of other persons (such as family members, work colleagues), please make sure the respective persons are aware of this Privacy Policy and only provide us with their data if you are allowed to do so and such personal data is correct.
This Privacy Notice is aligned with the EU General Data Protection Regulation («GDPR»), the Swiss Data Protection Act («DPA»). However, the application of these laws depends on each individual case.
- Controller of Personal Data
The “controller” of data processing as described in this Privacy Policy (i.e. the responsible person) is Tillotts Pharma AG. You can notify us of any data protection related concerns, irrespective of the concerned affiliate company of the Tillotts Group, using the following contact details: Tillotts Pharma AG, Baslerstrasse 15, 4310 Rheinfelden, Switzerland (privacy@tillotts.com). If possible, please specify which affiliated company of the Tillotts Group you refer to.
Our representative in the EEA according to Art. 27 GDPR (if required) is:
Tillotts Pharma GmbH
Kurfürstendamm 170
DE-10707 Berlin
Germany
Phone: +49 30 991 948 300
tpgmbh@tillotts.com
- Processing of Personal Data and Legal Grounds
The personal data we collect about you broadly falls into the following categories:
| Types of personal data | Purpose of Collection |
| Information you voluntarily provide to us:
· Name · Contact details; e-mail address, other information you send us |
When you contact us via e-mail, we collect these data (as well as other information you may send us via e-mail) to process your inquiry. |
| Information we automatically collect when you visit our Website (log file data):
· Browser type and version · Operating system · Referrer URL (website from which you access our site) · Tillotts URLs that you access · Date and time of access · Internet Protocol (IP) address |
The log file data are automatically provided by your web browser. In certain countries, including the countries in the European Economic Area and Switzerland, this information may be considered personal data under applicable data protection laws. This information is necessary for technical reasons. We also use this information to understand how our Website is used, where our Website visitors come from and what content on our Website is of interest to our visitors. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website for our visitors.
Some of this information may be collected using cookies and similar tracking technology, as explained further in our Cookie Policy. |
If we ask you to provide additional personal data not already described above, we will inform you about the intended purpose at the time of collection.
We primarily use the collected data in order to provide our Website, which is in our legitimate business interest.
In addition, in line with applicable law and where appropriate, we may process your personal data and personal data of third parties for the following purposes, which are in our (or, as the case may be, any third parties’) legitimate interest, such as:
- communication with yourself and or third parties and processing of requests (e.g., job applications, media inquiries, adverse effect reporting, medical inquiries);
- developing and improving our websites, review and optimization of procedures regarding needs assessment for the purpose developing our products and business strategies;
- prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud);
- ensuring our operation, including our IT, our websites, apps and other appliances;
- measures for business management and compliance with legal and regulatory obligations as well as internal regulations of Tillotts.
If you have given us your consent to process your personal data for certain purposes (for example when registering to receive newsletters or carrying out a background check), we will process your personal data within the scope of and based on this consent, unless we have another legal basis, provided that we require one. Consent given can be withdrawn at any time, but this does not affect data processed prior to withdrawal.
- Data Transfer and Transfer of Data Abroad
In the context of our business activities and in line with the purposes of the data processing set out in Section 3, we may transfer data to third parties, insofar as such a transfer is permitted and we deem it appropriate, in order for them to process data for us or, as the case may be, their own purposes. In particular, the following categories of recipients may be concerned:
- our service providers (within the Tillotts group or externally, such as e.g. consultants), including processors (such as e.g. IT providers);
- subcontractors and other business partners;
- domestic and foreign authorities or courts or other law enforcement authorities;
- competitors, industry organizations, associations, organizations and other bodies;
- other parties in possible or pending legal or administrative proceedings;
- affiliates of the Tillotts Group;
The majority of the Recipients will be within the European Economic Area, the United Kingdom and/or Switzerland but they may be located in any country worldwide. In particular, you must anticipate your data to be transmitted to any country in which the Tillotts Group is represented by affiliates, branches or other offices (see https://www.tillotts.com/) as well as to other countries in Europe and the USA where our service providers are located (such as Microsoft).
If a recipient is located in a country without adequate statutory data protection, we require the recipient to undertake to comply with data protection (for this purpose, we use the revised European Commission’s standard contractual clauses, which can be accessed here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless the recipient is subject to a legally accepted set of rules to ensure data protection and unless we cannot rely on an exception. An exception may apply for example in case of legal proceedings abroad, but also in cases of overriding public interest or if the performance of a contract requires disclosure, if you have consented or if data has been made available generally by you and you have not objected against the processing.
- Cookies and similar tracking technology
We use cookies and similar tracking technology (collectively, “Cookies”) to collect and use personal information about you. For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Policy.
- Data Security
We use appropriate technical and organisational measures to protect the personal data that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.
- Data retention
We process and retain your personal data as long as required for purpose for which your personal data was collected and processed as well as beyond this duration in accordance with legal retention and documentation obligations. Personal data may be retained for the period during which claims can be asserted against our company or insofar as we are otherwise legally obliged to do so or if legitimate business interests require further retention (e.g., for evidence and documentation purposes). As soon as your personal data are no longer required for the above-mentioned purposes, they will be deleted or anonymized, to the extent possible. In general, shorter retention periods of no more than twelve months apply for operational data (e.g., system logs).
- Obligation to Provide Personal Data to Us
As a rule, there is no statutory requirement to provide us with personal data. However, you must provide us certain information to enable the data traffic (e.g. IP address) in order to use our Website.
- Your Rights
In accordance with and as far as provided by applicable law (as is the case where the GDPR is applicable), you have the right to access, rectification and erasure of your personal data, the right to restriction of processing or to object to our data processing, in particular for direct marketing purposes, for profiling carried out for direct marketing purposes and for other legitimate interests in processing in addition to right to receive certain personal data for transfer to another controller (data portability).
Please note, however, that we reserve the right to enforce statutory restrictions on our part, for example if we are obliged to retain or process certain data, have an overriding interest (insofar as we may invoke such interests) or need the data for asserting claims. If exercising certain rights will incur costs on you, we will notify you thereof in advance. We have already informed you of the possibility to withdraw consent in Section 3 above.
In general, exercising these rights requires that you are able to prove your identity (e.g., by a copy of identification documents where your identity is not evident otherwise or can be verified in another way). In order to assert these rights, please contact us at the addresses provided in Section 2 above.
In addition, every data subject has the right to enforce his/her rights in court or to lodge a complaint with the competent data protection authority. The competent data protection authority of Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
- Links to other websites
This Privacy Policy applies only to this Website, and not to websites owned by third parties. We may provide links to other websites which we believe may be of interest to you. Due to the nature of the internet, we cannot guarantee the privacy standards of websites to which we link or be responsible for the contents of sites other than this one, and this Privacy Policy is not intended to be applicable to any linked, non-Zeria Group/Tillotts website.
- Amendments of this Privacy Policy
We may amend this Privacy Policy at any time without prior notice. The current version published on our website shall apply. If the Privacy Policy is part of an agreement with you, we will notify you by e-mail or other appropriate means in case of an amendment.
[1] Affiliates include: Tillotts Pharma AB (Sweden), Tillotts Pharma GmbH (Germany). Tillotts Pharma France S.A.S., Tillotts Pharma Spain S.L.U., Tillotts Pharma UK Ltd., Tillotts Pharma Limited (Ireland), Tillotts Pharma Czech s.r.o.