Information on the processing of personal data pursuant to Art. 13 and Art. 14 GDPR
1. Definitions
“Midas Pharma Group of Companies” means Midas Pharma GmbH and Midas Healthcare GmbH.
“Data Subjects” are (i) employees, associate workers that act in the name and on behalf of a legal entity, that either (a) is a business partner of the Midas Pharma Group of Companies or (b) that negotiates a contract with the Midas Group of Companies or (c) that interacts with the Midas Group of Companies for reasons connected with the negotiation, execution and performance of a contractual or pre-contractual relationship, or (ii) other natural persons that are personally business partners of the Midas Pharma Group of Companies or who in their own name negotiate a contract with the Midas Group of Companies or interact with the Midas Group of Companies for reasons connected with the negotiation, execution and performance of a contractual or pre-contractual relationship.
2. Introduction
In accordance with the provisions of the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), the Midas Pharma Group of Companies would like to inform Data Subjects , how Personal Data of Data Subjects are processed by the Midas Pharma Group of Companies.
3. Data Controller
Personal Data of Data Subjects are processed by
Midas Pharma GmbH, Rheinstraße 49, 55218 Ingelheim, Germany
Midas Pharma GmbH (“Midas Pharma”) is the Data Controller.
4. Collection of Personal Data of Data Subjects
Personal Data are obtained by Midas Pharma through commercial or contractual relations with the company, entity or organization Data Subjects work for and represent, or as a result of being contacted by Data Subjects for other business purposes.
5. Purpose of Processing and Legal Basis of the Processing of Personal Data
Personal Data are only processed where necessary for fulfillment of our legitimate interests of Midas Pharma Group of companies, including for purposes related to the assessment, negotiation, execution and performance of contractual or pre-contractual business relationships, to comply with specific obligations of Midas Pharma Group of Companies under applicable law, court orders or decisions of competent authorities, or to protect, enforce and defend the rights of the Midas Pharma Group of Companies. The legal bases for the abovementioned purposes are Articles 6(1)(b), 6(1)(c) and 6(1)(f) GDPR.
The provision of Personal Data for the purposes indicated above is optional. However, if the Data Subject opts not to provide Personal Data, it will not be possible to establish a contractual or pre-contractual relationship with the Midas Pharma Group of Companies.
Midas Pharma will retain Personal Data of a Data Subject for as long as the business relationship with the company represented by the Data Subject continues, or for as long as Midas Pharma Group is in contact or has contractual relations with the Data Subject itself (if the Data Subject does not represent a company), or for as long as Midas Pharma Group is obliged by authorities or in accordance with applicable law to process the Personal Data accordingly, even if this means that the Personal Data must be retained beyond the termination of the relevant business relationship.
6. Internal Data Transfers
Personal Data of Data Subjects will be exclusively processed by own employees or employees of affiliated companies, branches or representative offices of Midas Pharma.
In the course of transmission of Personal Data to affiliated companies, branches or representation offices of Midas Pharma, Personal Data may also be transmitted to affiliated companies, branches or representation offices of Midas Pharma situated in the USA, the People’s Republic of China or India. If Personal Data are transmitted to said affiliated companies of Midas Pharma outside the European Union, the transmission will be carried out in accordance with one of the methods permitted by applicable law, such as, without limitation, the consent of the Data Subject or the adoption of Standard Contractual Clauses approved by the European Commission.
7. The Rights of Data Subjects
Data Subjects have the right to request from Midas Pharma access to, rectification or erasure of Personal Data, or restriction of processing of Personal Data and to object to the further processing of Personal Data.
If a Data Subject requests the erasure of Personal Data or the Data Subject objects against any further processing of Personal Data at Midas Pharma, Midas Pharma will erase these Personal Data or Midas Pharma will stop processing the same, unless Midas Pharma is entitled to further process these Personal Data pursuant to and in accordance with provisions of the GDPR or Midas Pharma is obligated by applicable law to further process these Personal Data.
A Data Subject having questions concerning the processing of Personal Data at Midas Pharma or seeking to exercise its rights under the GDPR, may contact the Data Protection Officer of Midas Pharma at
Midas Pharma GmbH
- Data Protection Officer –
Rheinstraße 49
55218 Ingelheim
Germany
e-mail: dataprotection@midas-pharma.com
If the Data Subject considers the processing of Personal Data by Midas Pharma being in breach of the GDPR, the Data Subject is entitled to file a complaint at the competent authority for Data Protection, the Commissioner for Data Protection and Freedom of Information for the Federal State of Rhineland Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz).