This website is operated by Gebro Pharma GmbH, based in Bahnhofbichl 13, 6391 Fieberbrunn, Austria, registered with the Innsbruck Regional Court under FN 377056w, Tel: +43 (0)5354 5300-0, Fax: +43 (0)5354 5300 2710, E-Mail: pharma@gebro.com ("we" or "us") as the controller under data protection law.

This privacy policy describes how we, as the controller under data protection law, process your personal data in connection with this website.

1. Which data we process about you

During your visit to this website, we will collect the following information:

1.1 Data that you enter

This is the data that we ask you to enter or submit, i.e. all data that you enter yourself on the website, e.g. in the contact form, in the order form, when registering on our specialist logins or when you send us an e-mail to an e-mail address listed on the website.

We use this information for the purpose for which it was collected, e.g. to answer a contact request, to send ordered items or to transmit requested information.

1.2 Automatically collected information

In order to make this website available to you, to improve and further develop it, as well as for security purposes (detection, prevention or investigation of attacks on our website), user-friendliness and to be able to compile user statistics, we automatically collect certain information relating to your use of the website:

• The Internet Protocol ("IP") address;
• Computer, device and connection information, such as browser type and version, operating system, mobile platform and Unique Device Identifier ("UDID") and other technical IDs;
• Uniform Resource Locator ("URL") clickstream data, including the date and time and the content you viewed or searched for on the Website and the URL that referred you to our Website.

There is no obligation to provide the data that we ask you to provide on our website. However, if you do not do so, you will not be able to use all the functions of the website.

2. Cookies

Cookies are used on this website.

Details can be found here.

3. Purposes of data processing

We will process your personal data for the following purposes:

a) to make this website available to you and to further improve and develop this website;
b) to detect, prevent and investigate attacks on our website
c) to respond to your inquiries
d) to process your orders for samples and promotional materials
e) to analyze your use of our website and to compile usage statistics; 

4. Legal bases of the processing

The legal basis for the processing of your personal data is

- for the processing listed under 3 a-d, our overriding legitimate interest, which consists in achieving the purposes mentioned above under points 3 a-d; in the case of requests (3c) on the safety of medicinal products or medical devices, however, Art. 9 para. 2 lit. i GDPR;
- for the processing listed under 3 e, your consent;

You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. transmission of your personal data (recipients)

At our company, only those employees have access to the data who need it to process the relevant purposes. We will transfer your personal data to the following recipients for the above-mentioned purposes:

The data listed under 1.2 to our IT service provider, namely holzweg GmbH, Adamgasse 11, 6020 Innsbruck.

Order data to the transport service provider we use, namely Schachinger logistik service GmbH, Logistikpark 1, 4063 Hörsching.

Haleon - Gebro Consumer Health GmbH:

In the case of inquiries or orders relating to Haleon - Gebro Consumer Healthcare GmbH or its products, the data transmitted with the enquiry/order will be passed on to this company, which is then itself responsible for the further processing of this data.

6. registration for closed user groups (specialist logins)

a) Restricted access for special user groups (specialist login for doctors)

We may only make certain information about prescription-only medicines on this website accessible to certain persons who belong to medical specialist groups. In order to verify your access authorization, we are therefore obliged to request proof of your professional affiliation. Subject to your consent, we offer you the opportunity to verify yourself via the external service of DocCheck Medical Services GmbH (hereinafter referred to as "login provider"). If you wish to use this login service, you will be asked to log in to the login provider with your corresponding login data. Your profile will be linked to our services, i.e. the login provider will receive the information that you are using our services and the following information will be automatically transmitted to us:

- The information that your identity has been authenticated by the login provider.

We will only use this information for the purpose of registration and to identify you when you log in.

For more information about the login provider's service and how it processes your personal data, please refer to the DocCheck privacy policy.

b) Closed access for special user groups (specialist pharmacy login)

In addition, there is certain information that we only make accessible to certain groups of people. We store the following personal data for this purpose:

• First name and surname
• User name and password
• e-mail address

We process this personal data to enable you to access our closed area.

7. duration of storage

The storage of the data listed under 1.1. depends on the type of request and the necessary processing purpose.

• General inquiries, orders for samples and advertising material: We will store the data for a period of twelve months.
• Inquiries about drug safety: Pharmacovigilance data and documents for the individual authorized medicinal products will be stored for as long as the product is authorized and for at least 10 years after expiry of the authorization.
• We store the data processed for point 3e with Matomo in accordance with point 9 for 13 months.

We will store the data listed under 1.2. for seven days. Data will only be stored for longer if and for as long as this is necessary to investigate attacks on our website, but for no longer than eight weeks.

8. your rights in connection with the processing of personal data

You have the right to access, rectification, erasure, restriction of processing, objection and data portability in accordance with the applicable data protection law.

You have the right to lodge a complaint with a supervisory authority in the EU or with the Austrian data protection authority in Vienna if you believe that there has been a breach of European or Austrian data protection law.