Data Privacy Policy

The legal regulations for the protection of your data can be found in the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG). 
    
AdhexPharma SAS, 42 - 44 rue de Longvic, 21300 Chenôve, France, Tel : 03 80 54 70 00, is the responsible controller in terms of the GDPR.
Below you will find information about what personal data - that is all data that identifies or makes you identifiable, such as name, address, e-mail address or even user behavior - we collect during your visit to our website and how this data is used. Should you have any further questions, please feel free to contact us at contact@adhexpharma.com.
You also have the right to file a complaint to any supervisory authority in the event of unlawful use of the data. The competent supervisory authority for us is:

CNIL - Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy
TSA 80715
F - 75334 Paris cedex 07
Telefon: + 33 (0)1 53 73 22 22
E-Mail: webmaster@cnil.fr

1. Hosting and Server Data

We host our website with the hosting of HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA. When you visit our website, various server statistics are automatically stored, which your browser transmits to our provider's server: the time of the page views, number of page views, duration of the session, IP address and host name of the user, information about the requesting client (usually browser), search engine used including search query and the operating system used are logged. 
This data is used for the statistical evaluation of visits to our site and cannot be assigned to specific persons. 
The legal basis for the collection of data is Art. 6 para. 1 lit. f) GDPR. A consolidation of this data with other data sources is not carried out. The IP address will be anonymized. Our legitimate interest in the collection of this data is based on the fact that we can use the data to optimize our offer for users, e.g. by preventing access from malicious sites or by optimizing access via certain browsers, and that the log of the IP address is what makes the delivery of the site to the visitor possible in the first place. 
Generally, you have the right to object to this collection of data. This is actually not possible in this case, because otherwise the content of this site can´t be carried out and the use of the site would not be possible. 
The data will be deleted as soon as they are no longer required for the above-mentioned purposes. 

1a. Security of data transmission

For the transmission of your data, we use a secure server with SSL technology (Secure Socket Layer) with 128-bit encryption. In this way, your data is transmitted to us securely and unreadable for unauthorised persons.
It is possible that data may be transferred to third countries via subcontractors or companies associated with them in the course of calling up and using our website and associated offers. Potential risks here may be unenforceable data subject rights and a lower level of data protection. We minimize the risk as far as possible by concluding order processing agreements (if such an order relationship exists) and standard contractual clauses including effective supplements required by the supervisory authorities.

2. Processing and disclosure of personal data

2a. General information

Insofar as you have provided us with personal data, we use this data to answer your enquiries, to advise you and to process contracts concluded with you and for technical administration. Except in the cases explicitly mentioned in this declaration, your personal data will only be passed on or otherwise transferred to third parties if this is necessary for the purpose of processing the contract, if this is necessary for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future, see also section 12 on your data subject rights.

2b. Contract processing

As part of contracts concluded with you in the context of purchases and orders, we collect and store the personal data provided by you, such as name, address for the purpose of contract processing, e.g. also for billing. 
A transfer of the data takes place in the context of billing, for example, to banks. The billing data is transferred to the tax office within the framework of tax law requirements. 
The legal basis for the collection, processing and transfer of the data is Art. 6 para. 1 lit. b) GDPR. The legal basis for the transfer of data to the tax office is Art. 6 para. 1 lit. c) GDPR. 
The deletion of this data takes place after the expiry of the applicable statutory retention obligations. Insofar as we are not subject to any statutory retention obligations, the data will be deleted when the purpose ceases to apply. 
You have a right to information and a right to object to your data stored by us at any time, see below section 12 on your rights as a data subject.

2c. Request by Contact form and by e-mail

When using our contact form, we collect and store your e-mail address and the content of the message for the purpose of answering your enquiry. Further data is optional.
If you send us an enquiry by e-mail, we collect and store the e-mail address and the data contained in the e-mail for the purpose of answering your enquiry.
The legal basis for storing the data you provide in the contact form is Art. 6 para. 1 lit. a GDPR, as you give your consent to this storage. If a contractual relationship develops from the enquiry by way of contract initiation or if the enquiry relates to an existing contractual relationship, the legal basis is Art. 6 para. 1 lit. b) GDPR, as the storage of the data is necessary for the fulfilment of a pre-contractual or contractual obligation. Furthermore, we also have a legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR in processing the data for the purpose of communication and answering your enquiries.
The data will be deleted when the purpose for which it was stored no longer applies, i.e. after your e-mail inquiry has been answered or when the matter associated with the inquiry has been finally clarified. In the case of an existing contractual relationship or a contractual relationship resulting from the inquiry, the data will be deleted after expiry of the statutory retention periods.
For information on the right to deletion and information, see section 12 below on your rights as a data subject.

3. Cookies

The Internet pages use so-called cookies in several places. They serve to make our offer more user-friendly, effective and secure. A cookie is a piece of text information that our website places on the end device you are using via the web browser. The cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. 
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest results from the fact that with the aforementioned cookies we merely facilitate the retrievability of the page for you, do not collect any tracking data in the process and thus there is no interference with your personal rights and fundamental freedoms. 
You can exclude the acceptance of cookies in your web browser. However, this may impair the functionality of the site. For more information on your rights as a data subject, see section 12 below.
These cookies are only valid for the duration of your browser session and are deleted when you end your visit to our site. 

3a. Cookie Consent by "CookieBot"

To obtain your consent, we use cookiebot (https://www.cookiebot.com/de/), a product of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. If you give your consent, cookiebot will automatically log the following data with Cybot (https://www.cookiebot.com/de/privacy-policy/) :

- The IP number of the end user in anonymized form (the last three digits are set to '0').

- Date and time of consent.

- User agent of the end user's browser.

- The URL from which the consent was sent.

- An anonymous, random and encrypted key.

- The consent status of the end user, which serves as proof of consent.

The stored data is used to ensure that web analytics services only collect data with your consent and to document that consent, and to create and display cookie statements to end users.

The key and consent status are also stored in the end user's browser in the cookie "CookieConsent" so that the website can automatically read and follow the end user's consent in all subsequent page requests and future end user sessions for up to 12 months.

The legal basis for processing your data is Art. 6 para. 1 lit. a), f) GDPR, because we are required by law to be able to prove consent and our legitimate interest arises from the fact that this is the only way we can obtain necessary consent.

4. Google ReCaptcha

We integrate the function for the recognition of bots, e.g. for entries in online forms, "Google-ReCaptcha" of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may involve a data transfer of your IP address to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Likewise, two cookies are set, one ("2NID") with a duration of 6 months and one ("Consent") with a duration of 20 years. For more information on whether and what data is collected in this process, please refer to Google's privacy policy.
The legal basis for our use of the Google ReCaptcha function is Art. 6 para. lit. f) GDPR. Our legitimate interest is the protection against misuse of our forms by bots. 
You have a right to information and a right to object to your data stored by us at any time, see section 12 on your data subject rights.

5. Google Maps

This site uses the map service Google Maps of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") by means of a so-called API (application programming interface). If you view our location via Google Maps, this service collects data from you, namely the IP address and coordinates. Details can be found in the Terms of Use of Maps, the agreement (Controller-Controller Data Protection Terms), which we as the responsible party have concluded with Google LLC. as well as the privacy policy of "Google".
The legal basis for the use of Google Maps is Art. 6 para. 1 lit. a) GDPR in the presence of a corresponding consent. 
Revocation and deletion:
You can also revoke your consent at any time by deleting all set (consent) cookies in your browser. 
You can prevent the collection of information by generally deactivating the automatic setting of cookies in the browser setting. We cannot exclude that this may result in restrictions in the usability of our site. 
You have a right to information and a right to object to your data stored by us at any time, see section 12 on your data subject rights.

6. Newsletter

With our newsletter we inform you regularly about news and new offers. If you would like to receive our newsletter you need to enter a valid email address. To verify your registration, we store the IP address when you register. In addition, we store the date and time of registration and the specified email address for a legally secure proof of your registration. 
You can object to receiving further newsletters at any time by clicking on the unsubscribe link at the end of each newsletter, without incurring any transmission costs other than those according to the basic rates of your telecommunication provider. You can also send an e-mail with the corresponding request to unsubscribe from the mailing list to us at contact@adhexpharma.com. 
The legal basis for the collection and processing of your data for newsletter marketing is, as a result of your express consent, Art. 6 para. 1 lit. a) GDPR. The conditions for consent and its withdrawal have their legal basis in Art. 7 GDPR. 
In order to organize and analyze the newsletter dispatch, we use the HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on Hubspot’s servers (as in section 1).

7. LinkedIn

For the purpose of exchanging information with our customers and interested parties as well as for general information about our company and its employees, we operate a page on www.linkedin.com by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). If you access the page via our website using the LinkedIn icon and are logged into your account at the same time, LinkedIn can directly assign the visit to our website to your LinkedIn account. If you do not want LinkedIn to assign your data to your account, you must log out of LinkedIn before visiting our website.
If you access interactive functions of the site (liking, commenting, sharing, news, etc.), a LinkedIn - login screen will appear. After any login, you will again be recognizable to LinkedIn as a specific user.
For more information, see LinkedIn's privacy policy at https://de.linkedin.com/legal/privacy-policy. You can check the privacy settings in your LinkedIn account. You can activate the "Block third-party cookies" function in your browser settings. However, blocking cookies may result in limited functionality of the site.
We, as the operator of our LinkedIn fan page, do not collect or process any data beyond this. For more information on LinkedIn and other social networks and how you can protect your data within the framework of the private settings, see, for example, youngdata.de.
The legal basis for the use of the LinkedIn fan page is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest is based on the fact that we enable customers to have a direct exchange with our company via this social media service, also for complaints, and thus constantly optimize our service.
For your data subject rights, see section 12 below.

8. Twitter (Account and widget)

For the purpose of exchanging information with our customers and for the purpose of advertising new products or services as well as for general information about our company and its employees, we operate a fan page on the platform "Twitter" offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
If you call up the page via our website using the Twitter symbol and are logged into your account at the same time, Twitter can directly assign the visit to our website to your Twitter account. If you do not want Twitter to assign your data to your account, you must log out of Twitter before visiting our website.
When you access interactive functions of the site (liking, commenting, sharing, news, etc.), a Twitter login screen will appear. After logging in, you will again be recognizable to Twitter as a specific user.

In addition, we have integrated a marketing widget from Twitter on our website to give you a direct insight into our Twitter feed. If you are logged in with your Twitter account at the same time, you can like or comment on our posts directly from our website. The widget sets cookies, as a permanent connection to the Twitter servers is required to update the feed.

For more information, see Twitter's privacy policy at https://twitter.com/de/privacy. You can check the privacy settings in your Twitter account. You can activate the "Block third-party cookies" function in your browser settings. However, blocking cookies may result in limited functionality of the site.
We, as the operator of our Twitter fan page, do not collect or process any data beyond this. Further information on Twitter and other social networks and how you can protect your data within the framework of the private settings can be found, for example, on youngdata.de. 

The legal basis for the use of the Twitter fan page is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest is based on the fact that we enable customers to have a direct exchange with our company via this social media service, also for complaints, and thus constantly optimize our service. The legal basis for the use of the Twitter widget is Art. 6 para. 1 p. 1 lit. a) GDPR, as you give us explicit consent for this via Consent Tool.
For your data subject rights, see section 12 below.

9. Jobs announcements by TalentPlug

For the presentation of our job offers as well as for the submission of the application documents, we use the plugin "Talentplug", of TALENTPLUG - IMMEUBLE SPACE X, 40 RUE DENIS PAPIN, 59650 VILLENEUVE D'ASCQ. It allows us to include and manage job offers on our website. In this process, personal data of the applicants are collected and processed. This includes, in particular, name, address, e-mail address, telephone number, application documents and other information relevant in connection with the application.

Further information on how Talentplug stores and processes their data can be found here https://talentplug.com/politique-cookies/.

This data is stored for the duration of the recruitment process. Your data will be used by the management of the company for processing within the framework of the recruitment process.

If the specific position for which you are applying has already been filled elsewhere, but your profile makes you a suitable candidate for a later position or for working in a partner or subsidiary company, we will request your explicit consent before storing or forwarding your application any further, unless you have already consented to such storage or forwarding in your application.

If you send us an unsolicited application using our general contact e-mail address, the content of your application e-mail may be viewed by unauthorized personnel. There is a requirement that the application documents are forwarded unopened immediately to the personnel department and that the incoming and forwarded e-mails are deleted. If you would like to exclude this, please contact us by telephone before submitting your unsolicited application so that we can provide you with the contact details of the correct contact person.

The legal basis is Art. 6 para. 1 lit. a) GDPR, as you consent to the above processing of your data when sending the application documents.

The legal basis for processing for the purpose of establishing and implementing an employment relationship is Art. 6 para. 1 lit. b), c) GDPR, § 26 BDSG.

Deletion takes place if you revoke your consent to the use of this data without affecting the lawfulness of the processing carried out on the basis of the consent, unless statutory retention periods intervene. In these cases, blocking takes the place of deletion. Otherwise, application documents will be deleted after a period of 3 months following the end of the selection process, unless you have expressly consented to the retention of your application data for future advertisements.

You have a right of access to your data stored by us at any time, see below (section 12), also regarding your other data subject rights.

10. Download of free e-books, videos and other documents

If you wish to download an e-book, video, whitepaper or other documents provided by us free of charge from our website, we ask you to enter certain personal data in the download form provided for this purpose. After you have completed the form and returned it to us, you will receive an e-mail with a link that will redirect you to the corresponding download page. Mandatory information is your e-mail address. All other information is optional. The data will only be used to provide the content and to contact you in connection with the e-book.

We will only use your personal data for the purpose for which you provided it. We will not share or sell your information to third parties unless we are required to do so by law.

We take all reasonable steps to ensure that your personal information is protected from loss, misuse or unauthorized access. We use secure servers and encryption technologies to protect your data.

Legal basis: The collection and storage of your data is based on Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 TTDSG, as you give us your explicit and voluntary consent by clicking the check box. Furthermore, we also have a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in processing the data for the purpose of communication and sending you the link that will redirect you to the download page.

Regarding the right to deletion and information, see below point 12 on your data subject rights.

11. Content Delivery Network by Hubspot

We use a Content Delivery Network (CDN) by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA (Hubspot) to integrate scripts and libraries on our website. With a content delivery network, the content of our website is stored on the server of the service and the service distributes this content to you or your browser via a network of regional servers when the web page is accessed. The purpose of this is to be able to better fend off attacks, such as DDos attacks, on our website and, in the case of large script and data volumes, to provide you with the content of our pages quickly and in an optimized manner.
Since the traffic of our website runs through servers of Hubspot, your IP address is also transmitted to them. We have also concluded an order processing agreement (data processing agreement) with Hubspot, with which this company documents to us the compliance with appropriate technical and organizational measures.
The legal basis for our use of the Hubspot CDN is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest arises from the fact that this service is technically necessary to be able to take security measures against attacks on our website and to deliver large amounts of data in an optimized manner. The encroachment on your fundamental freedoms is minor here, as Hubspot guarantees the level of data protection according to the GDPR https://knowledge.hubspot.com/privacy-and-consent/how-do-i-turn-on-gdpr-functionality-in-my-hubspot-account. 
For your data subject rights, see below section 12.

12. Rights of the data subjects

a. Right to object

If we process your data to protect legitimate interests (Art. 6 Par. 1 lit. f) GDPR), you may object to this processing for reasons arising from your particular situation. We will then no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. 
In the event of an objection to data processing for the purpose of direct marketing, processing for this purpose will no longer be carried out.

b. Right of access by the data subject

You have the right to request confirmation from us as to whether we are processing personal data concerning you and, if so, a right to access the personal data and related information in accordance with Article 15 of the GDPR.

c. Right of rectification

You have the right to ask us to correct or complete any incorrect or incomplete personal data concerning you without delay in accordance with Art. 16 GDPR.

d. Right to erasure (‘right to be forgotten’)

You have the right to demand the immediate deletion of personal data concerning you and we are obliged to delete them immediately if one of the reasons mentioned in article 17 GDPR applies.

e. Right to restriction of processing

You have the right to ask us to restrict the personal data concerning you if one of the conditions mentioned in art. 18 GDPR is fulfilled.

f. Right to data transferability

You have the right to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format and you have the right to request that we transfer the data to another controller, as far as this is technically feasible.