Data Protection Notice – Registration

Thank you for visiting the website of Biotest AG (hereinafter “Biotest”), thus showing your interest in our organization, products and Web pages.
We attach great importance to the protection of your privacy when using our Web pages; the purpose of this statement is to inform you how your data is processed by Biotest. This Data Protection Notice explains how and for what purposes Biotest uses your personal data and which rights and options you have in this respect. It applies for all personal data that you provide to Biotest or that is derived from your contractual relationship or other interaction with Biotest. Our Cookie note describes how we use cookies or other web-tracking or analysis technologies to collect data and how we use it.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA.
Biotest AG, Landsteinerstraße 5, 63303 Dreieich, Germany, is the entity responsible for all personal data that you provide to us in the context of our existing business relationship or for the purpose of starting a business relationship.

CATEGORIES OF PERSONAL DATA COLLECTED BY US
We may collect and process the following categories of personal data in particular:

• Contact details such as full name, business address, email address (business and privat), private address, department and title
• To enable you to visit the website, we will collect the following data
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Operating system and its access status / HTTP status code
  • Amount of data transferred
  • Website from which the request comes
  • Browser, language and version of the browser software
• Further business information necessarily processed in a business or other contractual relationship with Biotest or voluntarily provided by you, such as orders placed, purchases, services
• Information that we obtain from public sources, databases, and from credit reporting agencies.
• Attendance of the audience for an individual certificate following the event.
• Information that we are entitled to collect in order to fulfill our legal and/or regulatory, in particular pharmacovigilance, obligations, which may include information about legal disputes or legal proceedings that you or people you are in a business relationship with are involved in, or information about interactions with you that could be relevant from an antitrust perspective.

FOR WHICH PURPOSES WE USE YOUR PERSONAL DATA.
We will only process your personal data for the following purposes (“Permitted Purposes”):

• For congress registrations and travel organisation.
• Initiation, implementation and administration of your contractual relationship (or the contractual relationship of your organization) with the Biotest Group
• Informing and advising within an existing business relationship through similar or associated products or services of Biotest, provided this is permitted under the applicable law.
• To enable you to visit the website technically.
• Settling disputes, fulfilling our contractual agreements and justifying, exercising, or defending legal claims.
• Maintaining and protecting the safety of our products, services and websites or other systems, preventing and identifying security risks, fraudulent or other criminal or illegal activities.
• To comply with our legal or regulatory obligations. For example, this can include storing sales documents for tax purposes or sending legally required communications and other notifications, compliance screenings or recording obligations (e.g. based on competition law, export law, trade sanctions and embargo regulations or to prevent white-collar crime or money laundering). In this regard, we may be obliged to check your contact or identity data against relevant sanction lists and confirm your identity in case of a possible match, record information about the collaboration with you if this could be relevant under anti-trust law, and notify the competent supervisory authorities, law enforcement agencies or other competent authorities, or support their investigations.
• If you have expressly given us your consent or there is another legal basis, we can use your personal data for the following purposes as well:
  • Communicating with you through the communication channels in which you have agreed to be kept up to date about the latest announcements, offers and other information about products, technologies and services of Biotest (including marketing newsletters), and events and projects of Biotest;
  • To implement the transparency regime of the AKG e.V. (Arzneimittel und Kooperation im Gesundheitswesen [medicinal products and cooperation in the health care sector]) by publishing the asset benefits in EUR/net paid to you as a doctor or health professional on our website http://www.biotest.com every year.
  • Administering and carrying out marketing campaigns, market analyses, competitions or other promotional measures or events.

The legal bases for processing of your personal data are set forth in Article 6 of the European General Data Protection Regulation. Depending on the above permitted purposes for which we use your personal data, the processing is either necessary for the performance of a contract or other business agreement with Biotest or for compliance with our legal obligations or for purposes of legitimate interests pursued by Biotest or third parties, always provided that such interests are not overridden by your interests or fundamental rights and freedoms. In addition, the processing may be based on your consent where you have expressly given that to us.

LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

• Visiting the website: the legal basis for a handling of your personal data follows from the necessity of a handling for the provision of the functionalities requested by you on this website (Art. 6(1)(f) DS-GVO).
• Participation in the congress: the legal basis for handling your personal data follows from Art. 6(1)(b) of the GDPR, as a contract is created between you and Biotest AG when you register for a congress.

HOW WE COLLECT AND USE YOUR PERSONAL DATA.
We will typically collect your personal data directly from you when you interact with us, e.g. when you visit our website, communicate with us in relation to our products and services, submit an order, register to receive our newsletter or participate in our customer surveys.

WHERE WE PROCESS YOUR PERSONAL DATA
Biotest is a globally operating enterprise. In the course of our business activities, we may transfer your personal data also to recipients in countries outside the European Economic Area (“third countries”), in which applicable laws do not offer the same level of data protection as the laws of your home country. When doing so we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data, in particular by entering into the EU Standard Contractual Clauses which are available under Standard Contractual Clauses. You may contact us any time using the contact details below if you would like further information on such safeguards.

HOW WE PROTECT YOUR PERSONAL DATA
We maintain physical, electronic and procedural safeguards in accordance with the technical state of the art and legal data protection requirements to protect your personal data. These safeguards include implementing specific technologies and procedures designed to protect your privacy, such as secure servers, firewalls and SSL encryption. We will at all times comply with applicable laws and regulations regarding the confidentiality and security of personal data.

WHO WE SHARE YOUR PERSONAL DATA WITH
We may share your personal data as follows:

• With our affiliates within Biotest Group worldwide if and to the extent required for the Permitted Purposes and legally permitted. In such cases, these entities will then use the Personal Data for the same purposes and under the same conditions as described above. Please refer to our website (https://www.biotest.com/de/en/company/biotest_at_a_glance_/global_locations.cfm) for a list of Biotest Group affiliates with contact details.
• We may also instruct service providers (so called data processors) within or outside of Biotest Group, domestically or abroad (e.g. shared service centres or cloud providers), to process personal data for the Permitted Purposes on our behalf and in accordance with our instructions only. Biotest will retain control over and will remain fully responsible for your personal data and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal data when engaging such service providers.
• Please note that third-party tools might be used during the event. Therefore, please find the following links for further information regarding the privacy policies: Zoom, Jitsi, Streamyard.
• With congress organizations, travel agencies, hotels to ensure your participation. it cannot be excluded that your data is forwarded in this context to third countries that do not have an adequate level of data protection (e.g. USA). Please inform yourself about the data processing at the respective hotel group.
• With courts, law enforcement authorities, regulators or attorneys if legally permitted and necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
• With credit reference agencies and other companies for use in credit decisions, for fraud prevention and to collect debts.
• We share information about the specialisation of healthcare professionals (especially doctors and pharmacists) with IQIVIA Commercial GmbH & Co. OHG for information and advice purposes.
• We may also share your personal data with third parties if we sell or buy any business or assets, in which case we may disclose personal data to the prospective seller or buyer of such business or assets, along with its professional advisers. If Biotest or substantially all of its assets are acquired by a third party, personal data held by us about customers and other contacts will be one of the transferred assets.
• Otherwise, we will disclose your personal data only when you direct or give us permission, when we are required by applicable law or regulations or judicial or official request to do so, or when we suspect fraudulent or criminal activities.

HOW LONG WE STORE YOUR PERSONAL DATA
We will hold your personal data as long as required to provide the services, products or information you have requested and to carry out and administer our business relationship with you. If you have asked us not to communicate with you, we will hold this information as long as required to comply with your request. We are also legally required to keep certain types of personal data for certain periods under applicable law (e.g. due to retention obligations under commercial or tax laws). Your personal data will be promptly deleted when it is no longer required for these purposes, at latest after the full event series.

YOUR RIGHTS.
Subject to certain legal conditions, you may request access to, rectification, erasure or restriction of processing of your personal data. You may also object to processing or request data portability. In particular you have the right to request a copy of the personal data that we hold about you. If you make this request repeatedly, we may make a charge for this. Please refer to Articles 15-22 of the EU General Data Protection Regulation for details on your data protection rights.
If you have given us your consent for the processing of your personal data, you can withdraw your consent at any time with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. In case consent is withdrawn, we may only further process the personal data where there is another legal ground for the processing or we are legally obliged to do so.
For any of the above requests, please send a brief description of your personal data concerned stating your name, customer number or other identification number (if applicable) as proof of identity to the contact address below or by email to datenschutz@biotest.com. We may require additional proof of identity to protect your personal data against unauthorised access. We will carefully consider your request and may discuss with you how it can best be fulfilled.
If you have any concerns about how your personal data is handled by us or wish to raise a complaint on how we have handled your personal data, you can contact us at the contact address below to have the matter investigated. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the competent data protection supervisory authority in your country.

OBLIGATION TO PROVIDE PERSONAL DATA.
As a general principle, you will provide us with your personal data entirely voluntary; there are generally no detrimental effects on you if you choose not to consent or to provide personal data. However, there are circumstances in which Biotest cannot take action without certain of your personal data, for example because this personal data is required to process your orders, provide you with access to a web offering or newsletter or to carry out a legally required compliance screening. In these cases, it will unfortunately not be possible for Biotest to provide you with what you request without the relevant personal data.

WEB SERVER LOGS.
You can, in principle, visit our Web pages without disclosing your identity. As is usual with virtually all Web pages, however, when you visit our Web pages, the server on which our Web pages are located (hereinafter the “Web Server”) automatically collects information about you in Web Server logs. The Web Server automatically recognizes certain data such as your IP address, the date and time of your visits, the pages on our website visited by you, the website visited by you before, the browser (e.g., Internet Explorer) and operating system (e.g., Windows 7) used by you, as well as the domain name and address of your Internet provider (e.g., Telekom). If our website uses cookies (as explained below), the Web Server will also store the relevant information. Furthermore we use an anonyme data tracking tool, with no personalised foot print
We evaluate those Web Server logs for statistical purposes on a regular and anonymous basis in order to ascertain which pages of our website are visited. Thereby, we can get a more precise idea as to the use of our website. This is generally referred to as “Web statistics” and it enables us to optimise our services. In addition, we may use that information in cooperation with your Internet provider and/or public authorities in the event of a misuse of the system to locate the originator of such misuse.

IP ADDRESSES.
This website uses Internet Protocol (IP) addresses. An IP address is a number assigned to your computer by your Internet provider to provide you with access to the Internet. IP addresses are used as a part of the Web Server log data referred to above. To this end, IP addresses will, however, be shortened, or anonymised, by us so that we are unable to derive the names of persons from the IP address.

COOKIES.
A “cookie” is a piece of information that is sent by our Web Server to your computer (or, more exactly, that is filed in your browser directory), once you visit the page. This Website uses only functional cookies. The Functional cookies that are inserted to make sure that the website functions properly. These cookies are not used to identify users of the website.

ETracker
No cookies are set in the chosen mode of etracker Analytics. Only website data from web servers is used, as well as certain information that the web browser transmits to the web server for the retrieval of web pages. This information makes it possible to link individual page views and interactions into coherent sessions. Encryption together with a time stamp prevents the creation or linking of user profiles.

LINKS TO OTHER WEBSITES.
This website also contains links to other websites. The guidelines and procedures described here do not apply for these linked websites. May we ask you to visit those websites directly to obtain information regarding data protection, safety, the collection of data and the provisions relating to data transmission. Biotest may not be held liable for any actions taken from, or the contents of, those websites.

HOW TO GET IN TOUCH WITH US.
If you have any further questions on “data protection at Biotest” or if you want to assert your rights, you can contact our Data Protection Officer at the following postal address:

CONTACT ADDRESS
Biotest AG
Data Protection Officer
Landsteinerstr. 3-5
63303 Dreieich, Germany
or by email at: datenschutz@biotest.com

CHANGES TO THIS DATA PROTECTION NOTICE
This Data Privacy Notice was last updated in September 2021. We may make changes to or amend this Data Protection Notice as required to reflect any changes to the way in which we use your personal data or changing legal requirements. So you may wish to check for changes from time to time or when you provide us with personal information. Changes will apply from the date they are posted on our website.

Status of September 2021