Interaktion mit Personen aus dem Gesundheitswesen (HCP) und kommerzielle Kontakte

Datenschutzhinweis in anderen Sprachen verfügbar.

Grifols ist eine 1909 in Barcelona gegründete globale Unternehmensgruppe im Gesundheitswesen und setzt sich für die Verbesserung der Gesundheit und des Wohlbefindens von Menschen auf der ganzen Welt ein. Mit ihren drei Hauptgeschäftsbereichen - Biopharma, Diagnostic und Bio Supplies - entwickelt, produziert und vertreibt sie innovative Lösungen und Leistungen in über 100 Ländern.

Grifols respektiert die Rechte auf Privatsphäre aller Personen, die ihr ihre personenbezogenen Daten anvertrauen, und verpflichtet sich, die im jeweiligen Land gültigen Datenschutzvorschriften zu erfüllen.

Dieser Datenschutzhinweis wurde nach der Datenschutzgrundverordnung (die „DSGVO“) der Europäischen Union sowie maßgeblicher Datenschutzgesetze verfasst; siehe Abschnitt 7 für besondere Bestimmungen. Der Datenschutzhinweis beschreibt, wie Grifols Daten erhebt und welche Wahlmöglichkeiten die betroffenen Personen haben, wenn es darum geht, wie Grifols ihre personenbezogenen Daten erhebt, nutzt und weitergibt.

Dieser Datenschutzhinweis gilt für die Verarbeitung personenbezogener Daten von (a) Personal aus dem Gesundheitswesen, kaufmännischen Ansprechpartnern und Personen, die Institutionen angehören, die von Grifols mit Leistungen bzw. Produkten beliefert werden oder potentiell beliefert werden könnten, und von (b) Personal aus dem Gesundheitswesen oder kaufmännischen Ansprechpartnern, die direkt oder indirekt mit Grifols zusammenarbeiten oder potentiell zusammenarbeiten könnten. Für die Zwecke dieses Datenschutzhinweises bezeichnet „betroffene Personen“ beide Arten von Personen.

Der/die für die Verarbeitung personenbezogener Daten Verantwortliche(n)/Inhaber der personenbezogenen Daten ist/sind:

  • das Unternehmen der Unternehmensgruppe Grifols, mit dem die betroffenen Personen (gemäß obiger Definition) eine vertragliche Beziehung pflegen,
  • das Unternehmen der Unternehmensgruppe Grifols, das die Websites, Landingpages, Apps und sonstige ähnliche digitale Plattformen betreibt, über die die personenbezogenen Daten der betroffenen Personen verarbeitet werden,
  • das Unternehmen der Unternehmensgruppe Grifols, das die betroffenen Personen (wie in den zur Herstellung dieses Kontakts verwendeten Mitteln angegeben) für den Rest der in Abschnitt 3 angegebenen Zwecke kontaktiert, oder
  • das Unternehmen der Unternehmensgruppe Grifols, das der Initiator der Forschungsstudie ist, in der die betroffene Person als Hauptforscher fungiert, oder
  • Grifols Viajes, S.A. für Tätigkeiten im Zusammenhang mit der Verwaltung von Reisen und Veranstaltungen.

Wenn die Verarbeitung einen wissenschaftlichen Zweck hat oder der Korruptionsbekämpfung dient, sind die Verantwortlichen für die Verarbeitung/Inhaber personenbezogener Daten gemeinsam das im Abschnitt 1 (a), (b) oder (c) angegebene Unternehmen und gegebenenfalls Grifols, S.A.

Die Identität und die Kontaktdaten der Unternehmen der Unternehmensgruppe Grifols finden Sie hier. Das/die Unternehmen der Unternehmensgruppe Grifols, das/die für die Verarbeitung verantwortlich bzw. mitverantwortlich ist/sind, ist/sind als „Grifols“ bezeichnet.

Der Datenschutzbeauftragte fungiert als Ansprechpartner zwischen Ihnen und Grifols, um die Erfüllung der Datenschutzgesetzgebung zu überwachen und die Ihnen von Gesetz wegen zustehenden Rechte zu gewährleisten. Sie können den Datenschutzbeauftragten unter dpo@grifols.com kontaktieren, sofern es sich bei den Verantwortlichen nicht um die Grifols Deutschland GmbH oder Haema AG handelt. In diesem Fall können Sie die Datenschutzbeauftragten der jeweiligen Unternehmen unter dsb@grifols.com bzw. dsb@haema.de kontaktieren.

Die betroffenen Personen können auf Wunsch vom Datenschutzbeauftragten weitere Informationen überdie wesentlichen Aspekte der Vereinbarung über die Mitverantwortung für die Verarbeitung aufgrund der Bestimmungen von Abschnitt 1 anfordern.

Purposes
Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.
  • Academic information5.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.
Lawful basis

Legitimate interest

Categories of personal data and recipients

Categories of personal data:

  • Browsing history data4.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
Lawful basis

Legitimate interest

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.
  • Browsing history data4.
  • Academic information5.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
Lawful basis

Legitimate interest

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Browsing history data4.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
Lawful basis

Legitimate interest

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Browsing history data4.
  • Interests and preferences.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
Lawful basis

Consent

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.
Lawful basis

Consent

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
Lawful basis

Consent

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.

Recipients:

  • Distributors of companies of the Grifols' group and other commercial contacts.
Lawful basis

Consent

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
Lawful basis

Legal obligation

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.
Lawful basis

Legal obligation

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.
  • Academic information5.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.
Lawful basis

Legal obligation

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Financial entities.
Lawful basis

Execution of a contract

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Interests and preferences
  • Professional data2.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.
Lawful basis

Execution of a contract:
When the processing is carried out by the Grifols’ group company with whom the data subject has a contractual relationship

Legitimate Interest:
When the processing is carried out by Grifols Viajes, S.A.

Categories of personal data and recipients

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Academic information5.
  • Interests and preferences.


Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
     
Lawful basis

Legitimate Interest

1. For example, name, last name, sex, nationality, image, voice, number of national/foreigner's ID/passport document, social security affiliation number, username.
2. For example, professional contact details, job position, place of work, member of professional associations.
3. For example, financial interests and bank details.
4. For example, IP address, device or user ID, browser type and version, visited sections, country from which the connexion is made.
5 For example, training, degree, curriculum vitae.

Purposes Categories of personal data and recipients Lawful basis
  • To contact data subjects by any means, including electronic ones, to evaluate potential business opportunities and collaborations, and to develop, control and manage current and future relationships. The reasons for contacting data subjects may include but are not limited to:
    • Scheduling appointments (online or in-person),
    • Evaluating their participation as speakers or members in advisory boards, symposiums, conferences, webinars, training sessions, scientific awards, clinical studies or similar events organized by Grifols or by third parties (online or in-person), and in drafting scientific publications,
    • Sending surveys or similar, and
    • Any other activities that may contribute to evaluating potential business opportunities.
  • To assess and, if applicable, to respond to any requests for information or suggestions.
  • To develop and maintain the relationship with personnel of the organizations with whom Grifols has a contractual relationship, including the management of training sessions.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Academic information5.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations

Legitimate interest

  • To send scientific, educational and commercial information about Grifols’ group products, services, and activities, by any means, including electronic ones, when there is a contractual relationship with the data subject (e.g. direct marketing). As set out in Section 6, the data subjects may exercise their right to object to the processing of their data for direct marketing purposes.
  • To send scientific and educational information, which is not related to Grifols’ group products, services and activities, to increase the knowledge in the scientific community. 

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Academic information5.
  • Interests and preferences.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Legitimate interest

  • To carry out anticorruption compliance checks, which include the assessment of the capacity of the organizations or other third parties to collaborate with Grifols and initiate or maintain commercial relationships in accordance with Grifol’s anti-corruption programmes.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.
  • Academic information5.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.

Legitimate interest

  • To carry out maintenance tasks in websites, landing pages and apps to offer a secure environment to its users.

Categories of personal data:

  • Browsing history data4.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Legitimate interest

  • To manage corporate reorganization activities.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.
  • Browsing history data4.
  • Academic information5.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Legitimate interest

  • To interact (i.e., respond to messages or comments, generate reactions, share content, etc.) with users of Grifols' profiles on social networks, which would involve the communication of certain data (i.e., IP address and browsing history data) to the providers of these social networks.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Browsing history data4.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Legitimate interest

  • To send scientific, educational and commercial information about Grifols' group products, services and activities, by any means, including electronic ones, if a contractual relationship with the data subject does not exist. As set out in Section 6, data subjects may withdraw their consent to have their data processed for direct marketing purposes.
  • To manage and control the registration, participation and attendance of data subjects to symposiums, conferences, webinars, training sessions, scientific awards or similar events, in person or online, organized by Grifols or third parties.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Academic information5.
  • Interests and preferences.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Consent

  • To create profiles of data subjects based on their preferences and personal interests; this information is provided by the data subjects, obtained from the third-party sources detailed in Section 5 and from analysing their behaviour (through cookies or similar technologies) when receiving or interacting with communications from Grifols or when browsing the internet. Grifols will use these profiles to send communications which meet data subjects' preferences, interests and behaviours. Automated decisions will not be taken based on such profile. As set out in Section 6, data subjects may withdraw their consent to the processing of their personal data for the creation of profiles for direct marketing purposes. Occasionally, data subjects’ profiles will be prepared in an aggregated manner so that Grifols does not know in any way their identity and, in such cases, the aggregated information will be used to analyse the behaviour of segments of data subjects.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Browsing history data4.
  • Academic information5.
  • Interests and preferences.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Consent

  • To customize certain features of websites, landing pages and apps based on the data subjects' browsing preferences and analyse their browsing behaviour with the aim to improve the services offered through these platforms. The information about profiling activities and behavioural analysis is available in this Privacy Notice and, if applicable, in the Cookies Policy of the relevant webpage, landing page or app.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Browsing history data4.
  • Interests and preferences.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Consent

  • To publish the transfers of value (compensation) made to data subjects, to comply with the Grifols' group policy, as well as with the guidelines and regulations issued by the different associations of the pharmaceutical industry to ensure greater transparency in the interactions between the different market players.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.

Consent

  • To use the data subjects' personal data (including their image, voice and any other identifying feature) in the terms regulated in the authorization document for the recording and use of images or other identifying features or in any other communication of similar characteristics, as well as for evidencing the consent of the data subjects.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Consent

  • To share the personal data with distributors of companies of the Grifols' group for the latter to use the personal data to evaluate potential business opportunities and collaborations.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.

Recipients:

  • Distributors of companies of the Grifols' group and other commercial contacts.

Consent

  • To respond to medical and technical (non-commercial) requests for information about products manufactured or distributed by Grifols.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.

Legal obligation

  • To publish the transfers of value (compensation) made to the data subjects to ensure greater transparency in the interactions held among the distinct market players, as further detailed in Section 7.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.

Legal obligation

  • To comply with certain regulatory obligations resulting from interactions with data subjects.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.
  • Academic information5.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.

Legal obligation

  • To execute and maintain the existing contractual relationship between Grifols and the data subjects, including the communication of the personal data and the use of the image, voice or other identifying features of the data subjects necessary to accomplish the contractual purposes.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Financial data3.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Financial entities.

Execution of a contract

  • To manage travel and events

Categories of personal data:

  • Identification data and personal characteristics1.
  • Interests and preferences
  • Professional data2.

Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
  • Public or private organizations.

Execution of a contract:
When the processing is carried out by the Grifols’ group company with whom the data subject has a contractual relationship

Legitimate Interest:
When the processing is carried out by Grifols Viajes, S.A.

  • To analyse and understand the type of characteristics of attendees to symposiums, conferences, webinars, training sessions, scientific awards or similar events, in person or online, organized by Grifols or third parties.

Categories of personal data:

  • Identification data and personal characteristics1.
  • Professional data2.
  • Academic information5.
  • Interests and preferences.


Recipients:

  • Grifols' group of companies.
  • Providers of products and services.
     

Legitimate Interest

3.1. Additional information about the lawful basis to process personal data

The table above shows the applicable lawful basis to process the personal data by purpose. In this section, you can find additional details of the legitimacy of the processing:

  • Consent: Data subjects may provide their consent through the data collection forms, by clicking acceptance buttons or ticking boxes, replying to e-mails or making any other affirmative clear action. Data subjects may withdraw their consent at any time, as set out in Section 6.
  • Execution of a contract: Failure to provide the personal data requested by Grifols could result in the impossibility of executing or maintaining such contract.
  • Legitimate interest (of Grifols and/or third parties): Grifols is interested in contributing to the advancement of scientific knowledge and research in a secure environment with the aim of guaranteeing people's health. Therefore, Grifols pursues the following legitimate interests which override the fundamental rights and freedoms of the data subjects, given that the processing is within the data subjects' reasonable expectations based on their relationship with Grifols:
    • Prevention of fraud,
    • Direct marketing
    • Daily management of a multinational group of companies and internal administration, which means sharing information with the companies of the Grifols group, and
    • Creation of a secure information system infrastructure for preventing unlawful or malicious activities that may compromise the personal data.Ç

In any event, data subjects may request further information on the legitimate interest or exercise their right to object to the processing of their personal data based on legitimate interest by addressing their request to privacy@grifols.com.

  • Legal obligation (article 6.1(c) of GDPR): applies when the processing of personal data is necessary for Grifols to comply with legal obligations. Section 7 includes details of the specific regulations applicable to Grifols that require the processing of personal data. Failure to provide the personal data requested could result in the impossibility for Grifols to comply with such legal obligations.

The processing of special categories of personal data is only permitted in compliance with the data protection regulations applicable in each country. See Section 7 for more information.

 

3.2. Recipients of personal data

The table above shows categories of recipients with whom Grifols may share personal data by purpose. This section includes additional information regarding these recipients when applicable: 

  • Grifols' group of companies: The list is available here.
  • Distributors of companies of the Grifols' group and other commercial contacts: for example, agents and any other commercial contact who can help Grifols evaluate business opportunities.
  • Providers of Grifols’ products and services: for example, travel agencies, transport companies, IT service providers, credit risk service providers, clinical studies service providers, insurance providers, courier agencies, marketing agencies, event organizers, providers operating in the anticorruption sector, lawyers, auditors, photographers, cameramen and media agencies/owners.

Grifols' website may include cookies or similar technologies of third parties other than Grifols. This usually occurs when Grifols’ website incorporates elements from other websites (such as images or social network plugins, for example,  in order to access Grifols' profile on these platforms), or when Grifols contracts third parties to provide website measurement, analysis or marketing services. By accepting the installation of these cookies, clicking on these plugins or performing similar actions, users' personal data (including IP address and browsing data) may be transferred to the providers of these technologies, including providers of social networks, and Grifols is not responsible for the subsequent processing that these providers may carry out with this personal data. The purpose and scope of the collection of data and its subsequent processing and use by the providers of these technologies, as well as the related rights and the possibilities of configuring privacy settings, can be consulted in the data protection information of each of these companies.

  • Public or private organizations: for example, health authorities, pharmaceutical industry associations or governmental organizations.
  • Potential investors or purchasers
  • Financial entities

Grifols will endeavour that the personal data is only transferred to countries that offer an adequate level of data protection. If the personal data is processed in countries that do not offer said level of protection, Grifols and/or the providers (as the case may be) will adopt, if necessary, the appropriate safeguards (e.g. the standard contractual clauses included in the Commission Implementing Decision (EU) 2021/914 of 4 June 2021, if GDPR is applicable) to carry out such international data transfers in accordance with the applicable data protection legislation. Specific information on the appropriate safeguards applicable to each international data transfer can be obtained from Grifols at privacy@grifols.com.

Grifols does not share personal data with any other third party unless it is authorized by the data subject or required by the applicable law.

Grifols wird die personenbezogenen Daten nur so lange speichern, wie es für die Erfüllung der Zwecke, für sie erhoben wurden, erforderlich ist, bzw. gegebenenfalls bis zum Ablauf der Verjährungsfristen für sich daraus ergebende Ansprüche und des Zeitraums, der erforderlich ist, um den geltenden rechtlichen Verpflichtungen nachzukommen.

  • Wenn die betroffenen Personen Grifols ihre personenbezogenen Daten nicht direkt zur Verfügung stellen, kann Grifols personenbezogene Daten aus Datenbanken von Veranstaltern und öffentlichen Quellen beziehen, wie z. B. aus Websites und Publikationen der Gesundheitsbranche, professionellen sozialen Netzwerken oder Social Listening Tools (d.h. Tools zur Identifizierung und Bewertung der Marktwahrnehmung in Bezug auf eine bestimmte Marke, ein Produkt, ein Unternehmen, ein Thema oder ein Problem).

  • Stellen betroffene Personen personenbezogene Daten Dritter zum Zweck der Umsetzung und Aufrechterhaltung eines Vertragsverhältnisses zur Verfügung, informieren die betroffenen Personen im Vorfeld besagte Dritte über die Verarbeitung ihrer personenbezogenen Daten durch Aushändigung dieses Datenschutzhinweises.

Folgende Datenschutzrechte kommen nach der DSGVO zur Anwendung. Grifols verpflichtet sich, andere Datenschutzrechte zu respektieren, die gemäß den Datenschutzbestimmungen des jeweiligen Landes gelten.

Rights
Content

You may request confirmation as to whether or not your personal data is being processed and, if so, you can obtain access to your personal data included in Grifols' files.

Content

You may request the rectification of your personal data if inaccurate.

Content

You may request the erasure of your personal data.

Content

You may request that your personal data is not processed under specific circumstances.

Content

You may request receiving, in an electronic file, the personal data that you provided Grifols with, as well as the right to transmit it to other parties.

Content

You may request a restriction on how your personal data is processed when:

  • the accuracy of the personal data is being verified after you have contested its accuracy.
  • processing of your personal data is unlawful and you object to its erasure.
  • Grifols does no longer need the personal data for the purposes of processing it, but you need it in order to prepare, exercise or defend a legal claim.
  • you have objected to the processing of the personal data for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, while verifying if Grifols' legitimate grounds override yours.
Content

You may withdraw your consent without affecting the lawfulness of the processing based on consent before its withdrawal.

Rights Content

Access

You may request confirmation as to whether or not your personal data is being processed and, if so, you can obtain access to your personal data included in Grifols' files.

Rectification

You may request the rectification of your personal data if inaccurate.

Erasure

You may request the erasure of your personal data.

Objection

You may request that your personal data is not processed under specific circumstances.

Portability

You may request receiving, in an electronic file, the personal data that you provided Grifols with, as well as the right to transmit it to other parties.

Restriction of processing

You may request a restriction on how your personal data is processed when:

  • the accuracy of the personal data is being verified after you have contested its accuracy.
  • processing of your personal data is unlawful and you object to its erasure.
  • Grifols does no longer need the personal data for the purposes of processing it, but you need it in order to prepare, exercise or defend a legal claim.
  • you have objected to the processing of the personal data for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, while verifying if Grifols' legitimate grounds override yours.

Withdrawal of consent

You may withdraw your consent without affecting the lawfulness of the processing based on consent before its withdrawal.

You may exercise, when appropriate, your data protection rights by, for example, sending a written communication to Grifols at privacy@grifols.com with the subject line "Interactions with HCP’S and Commercial Contacts". To that end, Grifols may request further information or documents if necessary or appropriate to identify you. 

For residents in the United States, please contact the Privacy Office at US-PrivacyRights@Grifols.com.

In addition, you may lodge a complaint with a data protection authority, including the one at your residence, place of work or place of the alleged infringement.

  • Europäische Union

Die Rechtsgrundlagen für die Verarbeitung der in Abschnitt 3 aufgeführten personenbezogenen Daten sind in den folgenden Bestimmungen der DSGVO geregelt:

  • Einwilligung: Artikel 6.1(a) DSGVO
  • Erfüllung eines Vertrags: Artikel 6.1(b) DSGVO
  • Berechtigtes Interesse (von Grifols und/oder eines Dritten): Artikel 6.1(f) DSGVO
  • Rechtliche Verpflichtung: Artikel 6.1(c) DSGVO

Die in Abschnitt 3 genannte rechtliche Verpflichtung zur Beantwortung von (nicht kaufmännischen) Anfragen zu medizinischen und technischen Informationen zu den von Grifols hergestellten oder vertriebenen Produkten ist in der Richtlinie 2001/83/EG des Europäischen Parlaments und des Rates vom 6. November 2001 zur Schaffung eines Gemeinschaftskodexes für Humanarzneimittel sowie in allen anderen anwendbaren Verordnungen zur Umsetzung, Weiterentwicklung, Ergänzung und Ersetzung der genannten Richtlinie geregelt.

Die Verarbeitung besonderer Kategorien personenbezogener Daten erfolgt unter der Rechtsgrundlage der ausdrücklichen Einwilligung der betroffenen Person (Artikel 9.2(a) DSGVO).

 

  • Frankreich

Wenn Grifols France S.A.R.L. der für die Datenverarbeitung Verantwortliche ist, haben die betroffenen Personen das Recht, Anweisungen zur Verwaltung ihrer Daten nach ihrem Tod zu geben.

Die in Abschnitt 3 genannte gesetzliche Verpflichtung, die an die betroffenen Personen vorgenommenen Wertübertragungen zu veröffentlichen und diese personenbezogenen Daten den Gesundheitsbehörden oder den Verbänden der pharmazeutischen Industrie mitzuteilen, ist im französischen Gesetzbuch über das öffentliche Gesundheitswesen und in jedem anderen Gesetz, das dieses weiterentwickelt, ergänzt und/oder ersetzt, geregelt.

 

  • Italien

Die in Abschnitt 3 genannte gesetzliche Verpflichtung, die an die betroffenen Personen vorgenommenen Wertübertragungen zu veröffentlichen und diese personenbezogenen Daten den Gesundheitsbehörden oder den Verbänden der pharmazeutischen Industrie mitzuteilen, ist im italienischen Sunshine Act (Gesetz 62/2022) und in jedem anderen Gesetz, das dieses weiterentwickelt, ergänzt und/oder ersetzt, geregelt.

 

  • Volksrepublik China
  1. Festlandchina: Wenn Ihre personenbezogenen Daten von irgendeinem Unternehmen der Unternehmensgruppe Grifols auf dem Festland der Volksrepublik China verarbeitet werden, gilt der hier verfügbare Zusatz für Sie. Der Zusatz ist eine Ergänzung zu diesem Datenschutzhinweis und bildet einen integralen Bestandteil desselben.

 

  • Portugal

Wenn Grifols Portugal – Produtos Farmacêuticos e Hospitalares, Lda. der für die Datenverarbeitung Verantwortliche ist, haben die betroffenen Personen das Recht, Anweisungen zur Verwaltung ihrer Daten nach ihrem Tod zu geben. Falls die verstorbenen Betroffenen keine Anleitungen zur Verwaltung ihrer Daten erteilt haben, können ihre Erben die in Abschnitt 6 definierten Datenschutzrechte ausüben. Die betroffenen Personen können auch bestimmen, dass sie diese Rechte nach ihrem Tod nicht mehr ausüben können.

Sofern eine gesetzliche Verpflichtung zur Geheimhaltung besteht, können die Rechte der betroffenen Personen nicht ausgeübt werden.

Die in Abschnitt 3 genannte gesetzliche Verpflichtung, die an die betroffenen Personen vorgenommenen Wertübertragungen zu veröffentlichen und diese personenbezogenen Daten den Gesundheitsbehörden oder den Verbänden der pharmazeutischen Industrie mitzuteilen, um eine größere Transparenz in den bestehenden Interaktionen zwischen den verschiedenen Marktvertretern zu gewährleisten, ist im Arzneimittelgesetz (Gesetzesdekret 176/2006), im Medizinprodukterecht (Gesetzesdekret 145/2009) und in allen anderen Gesetzen, die diese weiterentwickeln, ergänzen und/oder ersetzen, geregelt.

 

  • Thailand

Wenn Grifols (Thailand) Ltd. der für die Datenverarbeitung Verantwortliche ist, können Sie die den vollständigen Datenschutzhinweis hier einsehen.

 

  • Vereinigtes Königreich

Alle in diesem Dokument enthaltenen Verweise auf die Datenschutz-Grundverordnung beziehen sich auch auf die Datenschutz-Grundverordnung, wie sie in England und Wales, Schottland und Nordirland gesetzlich verankert ist.

 

  • Vereinigte Staaten

Den Datenschutzhinweis finden Sie hier.

Datum der letzten Aktualisierung: April 2024

Datenschutzhinweis in anderen Sprachen verfügbar