Data protection

We, Walter Ritter GmbH & Co. KG (hereinafter “Walter Ritter” or “We” take the protection of your personal data very seriously. Personal data is defined as all information that relates to an identified or identifiable natural person, for example name, email address, IP address or postal address. We process your personal data (if necessary also health-related data) in accordance with statutory data protection regulations and this Data Protection notice. 

The subject of this Data Protection notice is the information concerning which data we collect during your visit to our website at https://www.walterritter.com and in your other interactions with us and how we process and use your data.

I. Data Controller responsible for data processing

Walter Ritter GmbH & Co. KG
Spaldingstrasse 110B
20097 Hamburg
Telephone: +49 (0) 40 / 236996-0
Fax: +49 (0) 40 / 236996-33
Email: info@walterritter.com


II. Data Protection Officer

 

You can contact our Data Protection Officers as follows: 

Walter Ritter GmbH & Co. KG
Alina Wiesner
Spaldingstr. 110 B
20097 Hamburg
Telephone: +49 (0) 40 / 236996-0
Email: datenschutz@walterritter.com 

III. Data collected by us, purpose and legal bases of the processing and duration of storage

We collect and process personal data for the purposes outlined as follows on the basis of the specified legal bases and for the specified duration.

1. Visits to our websites

In the event that you are visiting our web pages purely for informational purposes, the IP address of your computer will be saved for technical reasons. The IP address will be deleted no later than 3 months after the collection of the data; this short term storage is required in order to guarantee the general functionality of our offering.  

Furthermore the following data is stored: access data with no personal connection, such as the name of your internet provider, websites previously visited by you, date and time of your request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/http status code, the transmitted data volume in each case, browser, operating system and its interface, language and browser software version (log files). This anonymous data does not permit identification of you as a person. None of this data will be merged with other data sources. 

We process the abovementioned data for the following purposes: To guarantee a trouble-free connection to the website, to guarantee convenient use of the website, evaluation of system security and stability, to improve our offer and for other administrative purposes.

The legal basis for the abovementioned data processing is Art. 6 para. 1 f) GDPR. The purposes mentioned above constitute our legitimate interest.

2. Cookies

We use cookies on our websites. Cookies are small data packages, which contain specific information (e.g. the time of your server request, the operating system used, the browser type, the previous websites visited and the IP address) and will be stored during a visit to an internet page on the end device of the user. If the server is retrieved by you again, your browser will send the cookie that was previously set aside back to the server. 

We use “session cookies” on our website. They save a “session ID” which enable different requests made on your browser to be assigned during a browser session. This enables your computer to be recognised again when you return to our website. The session cookies are automatically deleted when you close the browser. 

The processing of the data collected by the cookies is required to protect our legitimate interests in accordance with Art. 6 para 1 f) GDPR for the abovementioned purposes. 

Most browsers are set up so that they automatically accept cookies. You can set your browser to always inform you about the placement of cookies, decide to accept these on a case-by-case basis, determine the acceptance of cookies in specific cases or generally refuse them and activate the automatic deletion of cookies when closing your browser. For more information on how to do this please refer to the following links for common browsers and the instructions in your browser guide. 

Instructions on cookie settings in common browsers:

 

 

 

3. Web Analysis Tools

Web analysis is the detection, collection and evaluation of data concerning the behaviour of visitors to internet pages. A web analysis service collects all of the data about all of the internet pages the data subject links to on a different website, which subpages of the website are accessed or how often and for what length of time a subpage is viewed. 

The analysis tool listed below is used on our website on the legal basis of Art. 6 para. 1 f) GDPR. The use of analysis tools makes it possible to conduct a statistical evaluation of usage behaviour of the users of our pages, which we require for needs-based design and ongoing optimisation of our website and for cost-benefit analysis of banners and other marketing and is therefore necessary to protect our legitimate interests. 

Google Analytics

Use of Google Analytics

On our website we use the web analysis service, Google Analytics, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

 

The purpose of the data processing is to analyse this website and the visitors to it. In addition, Google will use the information gained on behalf of the operators of this website in order to evaluate your use of the website, to create reports regarding website activities and to render additional services associated with the website use and internet use with respect to the website operator. The IP address transmitted from your browser in the context of Google Analytics is not amalgamated with other data held by Google.

Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookies concerning your use of this website is generally transmitted to a Google server in the USA and is stored there. IP anonymisation is activated on this website. As a result your IP address will be truncated in advance by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Google has been certified in accordance with the EU-US data protection agreement “Privacy Shield” and is therefore obligated to comply with the European data protection guidelines.

You can prevent Google from collecting and processing the data created by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plug-in at the following link [https://tools.google.com/dlpage/gaoptout?hl=gb].

In order to prevent Google Analytics from collecting and storing data across multiple devices, you can set up the opt out cookie. Opt out cookies prevent future collection of your data when you visit this website. You must select the opt out option on all of the systems and devices that you use so that it works comprehensively. If you delete the opt out cookie, all requests will be transferred to Google again. If you click here, the opt out cookie will be set up: Deactivate Google Analytics.

You can find more detailed information on terms of use and data protection at https://www.google.com/analytics/terms/gb.html or at https://www.google.com/intl/gb/policies/.

4. Contacting us

When you contact us by email, the data that you have disclosed to us will be stored by us in order to respond to your request. 

The processing of the information that you disclose to us is carried out with your consent, which you have expressed by making contact with us in accordance with Art. 6 para. 1 a) GDPR. 

The personal data collected will be deleted immediately after the successful execution of your request , insofar as it is not subsequently required for the initiation or performance of a contract or for other purposes. 

We would like to advise you that communication with us via email is unencrypted and in this case we cannot guarantee complete data security.

5. Initiation and execution of business relationships with customers, suppliers and other business partners

To initiate, execute and terminate business relationships/contracts with customers, suppliers and other business partners, we process the contact data provided concerning the contact person at the place of work of our business partners (first and last name, position, business contact data, such as email address, telephone number and where necessary fax number and information about the business relationship/contractual relationship). The preparation of the abovementioned data is not legally required, however the performance of the business relationship is not possible or is difficult to achieve without this data. 

We process this data on the basis of Art. 6 para. 1 b) and f) GDPR. As far as the legitimate interests within the meaning of Art. 6 para. 1 f) GDPR are taken into consideration in this regard, our legitimate interests rest in the general care and maintenance of the business relationship and the analysis and evaluation of our business operations. 

Insofar as you have handed over your business card to us at events or on other occasions, we will maintain your contact data in our Exchange System for the purpose of making contact with you at a later date. This data processing is carried out on the basis of your consent expressed by handing over the business card in accordance with Art. 6 para. 1 a) GDPR. You can withdraw your consent with future effect at any time. Please address your withdrawal to Walter GmbH & Co. KG, Spaldingstr. 110B, 20097 Hamburg or via email to info@walterritter.com.

6. Applications

If you submit an application to us by post or via email, you should at least send us your full name, your postal and electronic contact address, a covering letter and your curriculum vitae. There is no legal or contractual obligation to provide this data. However, without specifying this data we will not be able to process your application.

Please also communicate to us whether you agree to us storing your application for up to 12 months in order to be able to possibly contact you about future vacancies. This specification is of course voluntary.

The data which you communicate to us in your application will be exclusively processed for the purpose of processing your application. The legal basis for this is your consent in accordance with Art. 6 para. 1 a) GDPR and insofar as particular categories of personal data are affected (e.g. information on your health, your religion, your ethnic origin, your political orientation or other “sensitive” data) your consent in accordance with Art. 9 para. 2a) GDPR. If you would like to prevent us from processing said particular categories of data from the outset, we recommend that you do not send such information to us and you should delete or edit out such information from your documents. 

You can withdraw your consent in full or in part with future effect at any time. Please address your withdrawal to Walter GmbH & Co. KG, Spaldingstr. 110B, 20097 Hamburg or via email to info@walterritter.com. The data will then be deleted immediately. Please note that we can then no longer consider your application or no longer consider it in the form in which it was submitted. However, in this event we also reserve the right to continue to store specific data for a period of up to six months in order to comply with statutory provisions, in particular the burden of proof arising from the German General Equal Treatment Act (AGG).

If your application is successful, the data provided may also be used for personnel matters within the scope of employment. The legal basis for this is Art. 88 GDPR within the meaning of section 26 Federal Data Protection Act (BDSG). 

Furthermore, the processing is carried out in accordance with Art. 6 para. 1 f) GDPR to protect our legitimate interest for the following purposes: Legal claims may arise in connection with the application process (e.g. claims in accordance with the German General Equal Treatment Act (AGG), pre-contractual claims for compensation). The processing of personal data is therefore potentially necessary for the assertion or defence of such claims.

The processing of your personal data fundamentally takes place for the duration of the application process. If we are unable to offer you a job, we will store the data that you have submitted to us for up to six months after the end of the application process (after sending the letter of refusal) in order to respond to questions in connection with your refusal and in order to comply with the burden of proof arising from the German General Equal Treatment (AGG). 

If you have given us your consent in this regard and your application is of fundamental interest, we will store your data for up to 12 months in order to be able to contact you about new job offers.

If your application is successful, the data provided may also continue to be used for personnel matters within the scope of employment. In this case the data will be stored for the duration of the employment relationship and will be deleted after the termination of this relationship, but no later than upon expiry of the statutory limitation or peremptory time periods in terms of the employment contract.

7. Advertising

Furthermore, we use your data where required in order to send advertising for our company’s services (e.g. newsletters, information on products, invitations to events, etc.). You can object to the use of your data for advertising purposes in full or for individual measures at any time. 

If you have given us your consent in this regard we will also send you advertising via email e.g. our newsletter. You can withdraw your consent with future effect at any time by clicking on the unsubscribe link in the advertising email or by sending us an email. Please address your objection or withdrawal to Walter GmbH & Co. KG, Spaldingstr. 110B, 20097 Hamburg or via email to info@walterritter.com.

We use your data for advertising purposes on the basis of our legitimate interests in the sending of direct advertising in accordance with Art. 6 para 1 f) GDPR and insofar as it concerns an email advertisement on the basis of your consent in accordance with Art. 6 para. 1a) GDPR. 

8. Reporting of pharmacovigilance/adverse effects of medicinal products 

Pharmacovigilance refers to the ongoing and systematic monitoring of the safety of a finished medicinal product for humans (or animals) with the aim of discovering, evaluating and understanding undesirable side effects in order to be able to take appropriate measures to minimise risks. As a pharmaceutical company we are obligated to report all side effects relating to our medicinal products to the health authorities within the specified time limits.

(A) Reporting by a member of an allied health profession:

If you are a doctor or other member of an allied health profession and would like to report an undesirable side effect relating to one of our products, we will collect the following personal data (the information marked with an asterisk is compulsory data, without which we are unable to process the report). 

Data from those reporting: 

  • Name*
  • Professional title*
  • postal address or other contact data such as email address or telephone number*.

(B) Reporting by an affected person or their relatives:

If as a person affected or a relative of a person affected by the undesirable side effect you would like to report this side effect relating to one of our products, we will collect the following personal data (the information marked with an asterisk is compulsory data, without which we are unable to process the report).

Data from those reporting: 

  • Name*
  • postal address or other contact data such as email address or telephone number*.

(C) Patient data

We require the following information from the person affected by the undesirable medicinal side effect (the information marked with an asterisk is compulsory data, without which we are unable to process the report): 

  • Initials*, ages* (or age group) or gender* of the patients
  • Information on medicinal products consumed*
  • Information about the proven side effect*

Other voluntary information, which helps us to better evaluate the case includes:

  • more detailed information on possible pre-existing conditions
  • other medicinal products consumed
  • Details on patients (e.g. pregnancy or weight)
  • Trial participants yes/no.

 

You are not legally or contractually obligated to report side effects to Walter Ritter. The abovementioned data will be processed insofar as the data concerns the person reporting on the basis of your consent in accordance with Art. 6 para. 1 a), Art. 9 para. 2 a) GDPR, which is expressed by submitting the report to us. 

Furthermore, the data of the data subject is processed on the basis of Art. 9 para. 2 i) GDPR within the meaning of section 22 para. 1 No. 1c) Federal Data Protection Act (BDSG) and section 63c German Medicinal Products Act (AMG) and the relevant legislation for medicinal products and medical product safety of EU and member states and other non-member countries in which our products are sold.

The data will be processed exclusively for the purposes of pharmacovigilance, specifically to safeguard and improve the safety of application of our products and to comply with our statutory documentation and reporting obligations. We are obligated on the basis of legal provisions to pass on information on undesirable side effects to the responsible supervisory authorities and also, where necessary, to those authorities in countries outside of the EU which do not have a level of data protection comparable to that of the EU. See sections below “Recipients of your data” and “Third country transfer”. Insofar as we pass on to third parties data relating to those affected by the side effect, this shall, however, only take place in anonymised form. We will never pass on the full name or the contact data of those affected by the side effect.

For reasons of public health, we must store reports of side effects for at least 10 years after the product is no longer available on the market in any country.

IV. Recipients of your data  

Personal data that you disclose to us will primarily only be processed by us. It may, however, be necessary owing to circumstances for us to disclose your personal data to third parties. In particular this may be the case with the following categories of recipients: 

  • Other companies affiliated to our company group, 
  • IT service providers (e.g. hosting service providers for the delivery of this website),
  • other service providers, which support us with our business operations (e.g. shipping providers, lettershops, printing shops, company/legal/tax consultants),
  • in the case of reporting of adverse effects of medicinal products: In order to comply with our legal obligations in medicinal product and medical product safety, we make the data available to a closed group of users within our central pharmacovigilance database, which consists of Walter Ritter employees who are directly responsible for working with medicinal products and medical product safety. Other Walter Ritter employees shall only receive anonymised evaluations if necessary concerning this data, e.g. concerning the frequency of specific events in certain patient groups. Furthermore, we transmit the data in anonymised form in accordance with our legal reporting obligations to supervisory authorities within and outside of the EU and to contractual partners within and outside of the EU, insofar as this is required to comply with the legal documentation and reporting obligations. Insofar as data must be transmitted to a contractual partner, the data will exclusively be passed on in anonymised form. 

Furthermore, we will only disclose your personal data to third parties if and insofar as this is necessary (e.g. in order to respond to a request from you) and is legally permissible or we are legally obliged to do so.

V. Rights of the data subject

You have the right in accordance with Art. 15 GDPR to receive information about your personal data processed by us. In particular, you may request information concerning the purpose of the processing, the types of data, the categories of recipients, the planned duration of storage, the existence of a right to rectification, deletion, restriction or objection to the processing, the existence of a right of appeal, the origin of your data, provided that they are not collected by us, and concerning the existence of an automated decision-making process including profiling and, where necessary, significant information on the details of such.

Furthermore, you have a right to rectification of incorrect data and, where necessary, completion of incomplete data in accordance with Art. 16 GDPR. 

You also have the right to deletion of the personal data stored by us in accordance with Art. 17 GDPR if grounds for deletion exist in accordance with Art. 17 GDPR (if the data is no longer required for the purpose for which it was processed, if you have withdrawn your consent and there is no other legal basis for the processing, if you have permissibly filed an objection to the processing in accordance with Art. 21 GDPR, if the data was illegally processed or if the deletion is required by us to fulfil a legal obligation), unless the processing is required for exercising our right to freedom of expression and freedom of information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

Furthermore, you have the right to restrict the processing of your data in accordance with Art. 18 GDPR insofar as you are disputing the correctness of your data, the processing is illegal, but you refuse for such data to be deleted and we no longer require the data, however you require this data to assert, exercise or defend legal claims or you have filed an objection in accordance with Art. 21 GDPR.

Furthermore, you have the right to receive your personal data, which you have prepared for us in a structured, common and machine-readable format or to request submission to another responsible person in accordance with Art. 20 GDPR.

Furthermore, you can object to the processing – insofar as our legitimate interests are protected on this basis in accordance with Art. 6 para. 1 f) GDPR – in accordance with Art. 21 GDPR, insofar as there are grounds for this, which arise from your particular situation or are directed against the objection to direct advertising/direct mail. In the latter case, you have a general right to object that is permissible without specifying a particular situation.

Furthermore, you may withdraw your consent to us at any time in accordance with Art. 7 para. 3 GDPR. This means that we are no longer allowed to continue with the data processing, which is based upon this consent.

Furthermore, you have the right to complain to a data protection authority if you are of the opinion that the processing of your personal data violates statutory data protection regulations. This may, for example, take place at the responsible supervisory authority of the Data Controller. 

Please address your information and other requests relating to data protection and your objection or withdrawal to Walter GmbH & Co. KG, Spaldingstr. 110B, 20097 Hamburg or via email to datenschutz@walterritter.com.

 

Our competent supervisory authority is: 

The state official for data protection and freedom of information Hamburg
Ludwig-Erhardt-Str. 22, 7th floor
20459 Hamburg
Telephone: +49 40 42854 - 4040
Fax: +49 40 42854 - 4000
Email: mailbox@datenschutz-hamburg.de

VI. SSL or TLS encryption

Our website uses SSL or TLS encryption for security reasons and to safeguard the transmission of confidential information, such as requests you make via our contact form. If you have an encrypted connection, the address bar of the browser will change from “http://” to “https://” and a lock symbol will display in your browser address bar.

When SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.