Purpose: You can contact us by phone or e-mail, or book a support call.
Data collected: Phone number or e-mail address.
Legal basis: Art. 6 (1) sentence 1 (a) GDPR (implied consent).
Retention/deletion: Depends on the type of request.
Service provider: Calenso, Sonnmatthof 3, 6023 Rothenburg, Switzerland (when booking a support call).

Purpose: To provide information about the therapies we offer, we send information material to healthcare professionals.
Data collected: Address (from publicly available sources).
Legal basis: Art. 6 (1) sentence 1 (f) GDPR; the legitimate interest lies in providing information about the therapies we offer.
Retention/deletion: Should you object to receiving these mailings, you can assert this either via support or in writing, in which case we will remove you from our distribution list.
Service provider: none.

Purpose: As a healthcare professional, you can order a trial access and information material to hand out to your patients. We store the data in our CRM for processing and follow-up.
Data collected: Address for sending the flyers, or your e-mail address for sending the trial access.
Legal basis: Art. 6 (1) sentence 1 (a) GDPR, Art. 6 (1) sentence 1 (f) GDPR; the legitimate interest lies in tracking shipments and obtaining feedback, as well as in advising and providing information about similar products.
Retention/deletion: Data is deleted without delay upon a deletion request.
Service provider: Pipedrive OÜ, Paldiski mnt 80, Tallinn 10617, Estonia; MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89, Ireland.

Purpose: You can find information about, and register for, upcoming CME (Continuing Medical Education) training courses on relevant topics on our website. These courses are usually run together with partners, who are identified during registration. To award CME points, the data is forwarded to the respective State Medical Association (Landesärztekammer).
Data collected: Name, e-mail address, professional group, uniform continuing education number (EFN).
Legal basis: Art. 6 (1) sentence 1 (a) GDPR.
Retention/deletion: Data is retained until the event has been completed.
Service provider: Pipedrive OÜ, Paldiski mnt 80, Tallinn 10617, Estonia; MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89, Ireland.

Purpose: You can subscribe to our newsletters.
Data collected: Name, e-mail address, and your professional group.
Legal basis: Art. 6 (1) sentence 1 (a) GDPR.
Retention/deletion: Data is stored until you revoke your consent.
Service provider: Pipedrive OÜ, Paldiski mnt 80, Tallinn 10617, Estonia; MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89, Ireland.

This processing operation is covered in the privacy policy of the digital health application.

Purpose: As part of surveys, we may offer participation in a raffle as an incentive.
Data collected: E-mail address.
Legal basis: Art. 6 (1) sentence 1 (a) GDPR.
Retention/deletion: Once the raffle has been carried out, the e-mail address is deleted without delay.
Service provider: none.

Purpose: Where a cooperation with a private health insurer exists, we may offer you a way to redeem prescriptions.
Data collected: Name, e-mail address, postal address, health insurer, image of the health insurance prescription or printed e-prescription, phone number.
Legal basis: Art. 6 (1) sentence 1 (a) GDPR and Art. 9 (2) sentence 1 (a) GDPR.
Retention/deletion: Data is forwarded directly and not stored.
Service provider: none.

Purpose: You can watch webinars on our homepage. Afterwards, a certificate of participation is created and sent to you. Data is stored in the CRM for evaluation and follow-up.
Data collected: E-mail address, name, address of the institution.
Legal basis: Art. 6 (1) sentence 1 (a) GDPR and Art. 6 (1) sentence 1 (f) GDPR.
Retention/deletion: Data is forwarded directly and not stored.
Service provider: Webinargeek, Einsteinlaan 28, 2719 EP Zoetermeer, Netherlands; Pipedrive OÜ, Paldiski mnt 80, Tallinn 10617, Estonia.

We use CAPTCHA Fox from Scoria Labs GmbH, Fokkerstr. 2, 85399 Hallbergmoos, to help protect our forms against bots. CAPTCHA Fox is integrated directly into the forms. No data is stored.

If you have given your consent, Google Analytics 4, a web analysis service of Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Nature and purpose of processing

We use Google Analytics 4 without the User ID and Google Signals functions.

In Google Analytics 4, the anonymisation of IP addresses is activated by default. Due to IP anonymisation, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. During your website visit, your user behaviour is recorded in the form of “events”. Events can be:

• Page views

• First visit to the website

• Start of the session

• Websites visited

• Your “click path”, interaction with the website

• Scrolls (whenever a user scrolls to the end of the page (90%))

• Clicks on external links

• Internal search queries

• Interaction with videos

• File downloads

• Viewed / clicked ads

• Language setting

Also recorded:

• Your approximate location (region)

• Date and time of your visit

• Your IP address (in abbreviated form)

• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)

• Your internet provider

• The referrer URL (via which website/advertising medium you came to this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website.

Recipients
Recipients of the data are/may be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)

• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

• Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Third country transfer
For the USA, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Storage period
The data sent by us and linked to cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.

Legal basis
The legal basis for this data processing is your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and Section 25 (1) sentence 1 TTDSG.

Revocation
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address), and from processing this data, by:

a. not giving your consent to the setting of cookies, or
b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/en/ and at Privacy & Terms – Google .

We use Microsoft Advertising from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, and Google Ads from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, to place ads on other websites and for remarketing. With remarketing, you are shown advertisements about our products on other sites after visiting our site. For this purpose, a cookie is set in your browser, which enables the respective provider to recognise you when you visit a website. The data collected can be used to create user profiles. These are used to place advertisements inside and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the usage profiles independently of the devices you use. This is regularly the case if you are a member of the respective platforms and are logged in to them. Cookies can only be set on the basis of consent in accordance with the first sentence of Art. 6 (1)(a) GDPR.

We use Microsoft Clarity from Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to compile statistics and analyse user behaviour. In order to improve the website, we examine the behaviour of users on the website, which areas are visited for long periods of time and what the click behaviour is like. The following data is processed:

• IP address

• Visited website/subpages

• Date/time of access to the website

• Clicks, scrolls, mouse movements

This data is only made available to us by Microsoft in anonymised form. A transfer outside the EU, especially to the USA, cannot be ruled out. Collected data is stored for a maximum of 3 months; the cookie set is automatically deleted after 1 year.

You consent to the use of Microsoft Clarity and the setting of a cookie as part of the cookie banner. The legal basis for the processing is Art. 6 (1)(a) GDPR; you can withdraw your consent at any time.

Further information on data protection at Microsoft can be found at https://www.microsoft.com/en-us/concern/privacy.

We use Typeform from the company TYPEFORM SL, Carrer de Pallars 108 (Aticco), 08018 Barcelona, Spain, to design our contact form and feedback forms.

When you use the contact form, your e-mail address, the content of your message and your name are transmitted to Typeform. The processing and transmission of data via the contact form only takes place if you accept the data protection provisions. The legal basis in this case is Art. 6 (1)(a) GDPR.

When using the feedback form, connection data in the form of IP address, time stamp and browser information is transmitted. The legal basis for this is Art. 6 (1)(f) GDPR; the legitimate interest lies in the secure and functioning operation of the website.

In any case, your data will only be stored for as long as is absolutely necessary for processing.

This website uses The Trade Desk technology from The Trade Desk Ltd, 1 Bartholomew Close, London EC1A 7BL, United Kingdom, to collect and store data for marketing and optimisation purposes. Among other things, pseudonymised user profiles can be created from this data. Browser cookies can be used for this purpose. The data collected using The Trade Desk technology is not used by The Trade Desk to personally identify visitors to this website. The collection and storage of data can be revoked here at any time with effect for the future. Further information on data protection at The Trade Desk can be found here.

The legal basis for the processing is Art. 6 (1)(a) GDPR; you give your consent via the cookie banner.

We use the Microsoft Teams service, provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, in order to prepare and conduct meetings online. The following data is processed:

• Registration data

  • name,

  • e-mail address,

  • telephone (if connected via phone),

  • password,

• Meeting data

  • subject,

  • participant IP address,

  • device information,

  • video and audio data (if camera or microphone are used),

  • text data (if you use the chat function).

Microsoft necessarily has to obtain knowledge of this data in order to conduct the seminars, as far as provided for in the data processing agreement. As a rule, we do not record the seminars. Should a seminar be recorded, the organiser will inform you in advance and ask for your permission.

A transfer of the data to Microsoft’s servers in the USA is possible.

The legal basis for use is Art. 6 (1)(f) GDPR; our legitimate interest lies in the effective organisation and conduct of online events.

Further information on data protection at Microsoft can be found at https://www.microsoft.com/en-us/privacy/privacystatement.