Privacy Policy

1. Collection, processing and use of personal data on request

The use of our website is generally possible without providing personal data. You are neither obliged to visit this website nor to provide any personal data. If you do not provide us with personal information, you may not be able to use certain functionalities of this website. Otherwise there will be no consequences for you. As far as personal information (such as name, address or e-mail addresses) is collected on our site, this is done on a voluntary basis, except in the cases expressly described below. This data will not be passed on to third parties without your express consent. We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security risks. A complete protection of data against access by third parties is not possible. If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time with the consequence that the processing of your personal data will become inadmissible for the future. However, this does not affect the legality of the processing carried out on the basis of the consent until revocation.

2. Data processing to enable the use of the website

When you visit our website, we collect the necessary information to enable you to use it. This includes your IP address and data about the start, end and subject of your use of the website as well as any identification data (e.g. your login data when you log into a secure area). This data is used to provide and design the service according to requirements. They are always deleted as soon as they are no longer required and there are no storage obligations. For the processing of pseudonymous user profiles for web analysis see section 5.

3. Consent to cookies and web analysis

When you access our website, a so-called "cookie banner" appears, with which we ask you for your consent to set cookies. We use cookies to store your preferences when using our website, to statistically analyze your usage behavior, and to display personalized advertising on third-party websites or social media. This data may be used by us and our partners to enrich usage profiles.

When making your decision, please bear in mind that your personal data stored to the respective cookie may be transferred to countries outside the EU in which no level of data protection comparable to that in the EU is guaranteed. This applies in particular to the USA, where unsolicited access by government agencies is possible. You can find more information on the legal situation in the USA here. By selecting the relevant cookies, you consent to such a third-country data transfer.

If you consent to our use of cookies, we will proceed as described in more detail in the following sections. There you will also find information on how you can revoke your consent at any time and prevent the setting of cookies or web analytics.

Change your consent

4. Cookies

If you visit our website and give your consent (see section 3), it may be that information in the form of a cookie is stored on your computer. Cookies are small text files that are sent from a web server to your browser and stored on your computer's hard drive. This makes it possible to recognize you when you visit the website again. In this way we can guarantee a better functionality of the site and carry out e.g. web analyses (see paragraph 5). Most browsers are set to automatically accept cookies. You can deactivate the storage of cookies in your browser and have the possibility to delete them from your hard disk at any time. We would like to point out to you that a use of our offers on the website without cookies may only be possible to a limited extent. However, you can also use your browser only to prevent certain cookies from being set (e.g. cookies from third parties), for example if you want to prevent web tracking. Please refer to your browser's help function for more information.

This website uses cookies.

If you click on "Allow all cookies", you consent to the storage and accessing of information stored to such cookies on your device, to the processing of your respective personal data, and to the transfer of this data to countries that do not ensure the same level of data protection as the EU, in particular the USA. You can find more information on the subject of your consents in our Privacy Policy and under "Show details".

We use cookies to store your preferences when using our website, to embed videos on third-party servers, to statistically analyze your usage behavior, and to display personalized advertising on third-party websites or social media. This data may be used by us and our partners to enrich usage profiles.

You can revoke your consent at any time, but only with effect for the future. To do so, please click on the link to our Privacy Policy, which you will find in the footer of our website, and use the "Change your consent" function there.

Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

Please state your consent ID and date when you contact us regarding your consent.

5. Web analysis (Google Analytics)

If you visit our website and consent (see paragraph 3), we use Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses cookies (see section 4) to enable an analysis of your use of the website. The information about your use of this website is usually transferred to a Google server in the USA and stored there. However, Google will reduce your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand and thus make it anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports on website activity.

You can revoke your consent to web analysis and the related use of cookies as follows: On the one hand, the storage of cookies can be prevented by a corresponding setting of your browser software (see section 4). Secondly, you can prevent the collection and transmission of data relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link. Alternatively, you can prevent Google Analytics from collecting data by setting an "Opt-Out-Cookie" on your computer; please use the following link:

Opt-Out-Cookie

Further information on data protection at Google Analytics can be found at: https://www.google.de/intl/de/policies/.

6. HubSpot

Our website contains tracking technology from HubSpot Inc, 24 First St, 2nd Floor, Cambridge/MA 02141, United States ("HubSpot"). This may include cookies (see clause 4). HubSpot collects and stores usage data in pseudonymous profiles to enable interest-based advertising. In addition, we use cookies to find out which of our company's services are of interest to you. For this purpose, we store information about your interaction with our website, such as downloaded documents, visited pages, date and time of retrieval ("usage data"). You can deactivate the storage of data by HubSpot in cookies and the associated recording of your user behavior by deactivating cookies (see section 4).

Our contact forms allow you, as a visitor to our website, to learn more about our company, download content, and provide us with your contact information and other demographic information. We use this information to contact you. Before we process your data for the purposes set out in this section, we will obtain your consent to process your data using HubSpot. You can withdraw this consent at any time for the future in accordance with Art. 7 (3) GDPR.
We measure the success of email content that we send to you via HubSpot in order to identify your reading habits based on email opening, opening times, and links clicked, so that we can create and send you interest-based and useful content. Your consent to data processing includes performance measurement. Unfortunately, a separate withdrawal of the success measurement is not possible, in which case you must withdraw the consent in its entirety.

We use HubSpot to optimize advertising and customer targeting. Only if you have given us consent to do so, we can also combine the pseudonymous data with personal data from your CRM profile in order to address you optimally and provide you with interest-based information.

Your data will be passed on to companies affiliated with Körber AG and to HubSpot. HubSpot Inc. is a US company. HubSpot also uses other sub-processors in the USA. The consent you have given also refers to data transfers to the USA. The USA do not offer a level of data protection comparable to the European Union. In certain cases, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. However, HubSpot Inc. is contractually obligated with the EU standard contractual clauses to ensure data protection-compliant processing.

For more information on data processing by HubSpot, please visit HubSpot's website.

7. Youtube-Videos

On our website videos are embedded which are provided by the provider YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have integrated the YouTube videos with YouTube's "enhanced privacy mode". This prevents data about your visit to YouTube from being processed or cookies from being placed on your computer by YouTube when you simply call up a page with an embedded video. When you click on a video, your IP address is transmitted to YouTube and YouTube learns that you have viewed the video. If you are logged in to YouTube, this information is also assigned to your user account (you can prevent this by logging out of YouTube before viewing the video). We have no knowledge and no control over the collection and use of your information by YouTube when you view a video. For more information, please refer to YouTube's privacy policy at www.google.de/intl/de/policies/privacy/.

8. Vimeo-Videos

On our website, videos are embedded that are provided by Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA. If you have consented to the use of the corresponding cookies of this provider on our website, Vimeo collects statistical data about the fact that you have accessed the video in question via our website. If you are logged in to Vimeo, Vimeo can also assign this information to your user account (you can prevent this by logging out of Vimeo before viewing the video). Vimeo also processes your data in third countries outside the European Union and the European Economic Area, in particular in the USA. For more information, please refer to the privacy policy of Vimeo at https://vimeo.com/privacy.

9. Legal basis for processing

The legal basis for processing depends on the purpose for which the data are processed. We collect, as described under item 5, data for pseudonymised user profiles to improve the website on the basis of the applicable data protection law for media.

10. Processing of your data, if you contact us for business purposes

If you contact us as a interested party, supplier, service provider or other business partner, we process your personal data such as contact data or correspondence to the extent that this is necessary to process your enquiry (legitimate interest according to Art. 6 para. 1 letter f GDPR) or to initiate or process the respective transaction (Art. 6 para. 1 letter b GDPR) and, if necessary, store the data within the scope of statutory storage obligations (due to statutory obligations according to Art. 6 para. 1 letter c GDPR).

The same applies if you are an employee of an interested party, supplier, service provider or other business partner and we receive your personal data in this context; the legal basis in this case is our legitimate interest in establishing or carrying out the business relationship with your employer (Art. 6 para. 1 letter f GDPR).

11. Electronic communication

You are welcome to communicate with us by e-mail at any time. Please be advised that we use an E-mail Gateway of an external provider of security technologies to defend against SPAM e-mail, other threatening e-mail, threatening e-mail attachments and URLs. In doing so, this external provider may process your first and last name, e-mail address and IP address. The legal basis is our legitimate interest in preventing unauthorized access to communications networks, the spread of malicious code and damage to computers and electronic communications systems (Art. 6 para. 1 lit. f GDPR in conjunction with Recital 49).

12. Transmission to third parties and in countries outside the EU

Your personal data will only be transmitted to third parties, if this is legally permitted or if you have given your prior consent. For example, we may transfer data to other companies of the Körber group, if this is necessary to respond to a request you have made. We will only disclose your data to government authorities within the framework of legal obligations or as a result of an official order or court decision. A transfer to recipients outside the EU only takes place if it is ensured that the recipient of the data guarantees an adequate level of data protection and that there are no other interests worthy of protection against the data transfer. Should you have any questions in this regard, please contact our data protection officer (see Section 11).

13. Deletion

The data collected by Google Analytics in the form of pseudonymous user profiles (section 5) will be deleted no later than 38 months after the last new entry in the respective user profile. In all other respects we delete your personal data as soon as they are no longer needed for the purposes pursued with the collection and processing and as far as no legal storage obligations stand in the way.

14. Data security

Körber has taken the necessary technical and organisational measures to protect the personal data you provide from loss, destruction, manipulation and unauthorised access. Our employees and all persons involved in data processing are obliged to comply with data protection laws and to treat personal data confidentially. Our employees are trained accordingly. Both internal and external tests ensure compliance with all data protection relevant processes at Körber. To protect the personal data of our users, we use a secure online transmission procedure, the so-called "Secure Socket Layer" (SSL) transmission. You can recognize this by the fact that an "s" ("https://") or a green, closed lock symbol is added to the address component . By clicking on the icon you will receive information about the SSL certificate used. The display of the symbol depends on the browser version you are using. SSL encryption guarantees the encrypted and complete transmission of your data.

15. Your rights regarding personal data

The data protection law grants you a number of rights with regard to data concerning your person (so-called rights of data subjects). In general, these are the right to request information about your personal data stored by us, as well as the right to correct, delete or restrict the processing of these data and to object to the processing. Whether and to what extent these rights exist in individual cases and what conditions apply depends on the law (until 25 May 2018 from the Federal Data Protection Act, from 25 May 2018 also from the EU Basic Data Protection Ordinance). The basic EU data protection regulation also grants you the right to data transferability. If you have given your consent to the processing of your personal data, you can revoke this at any time with effect for the future. They also have a right of appeal to the competent data protection supervisory authority. However, if you have any questions or complaints regarding data protection at Körber, we recommend that you first contact our data protection officer (see Section 12).

16. No automated single decision

As far as this is not exceptionally necessary for the conclusion of a contract or permitted by law (as in the case of age verification) we do not use your personal data for automated individual decisions.

17. How can you contact us?

You will find our contact details as the responsible body in the imprint. If you wish to exercise the rights mentioned under item 10 or if you have any questions about data protection with us or this data protection declaration, you can also contact our data protection officer: dataprotectionofficer.kag@koerber.de.

18. Amendment of the privacy policy

New legal requirements, business decisions or technical developments may require changes to our privacy policy. The privacy policy will then be adapted accordingly. You can always find the latest version on our website.

For Körber Pharma GmbH and its subsidiaries (section 16) the protection of your personal data is of utmost importance. We treat your personal data as confidential and in accordance with the provisions of data protection laws. This privacy policy contains information on how, to what extent and for what purpose we use personal data when you use the Körber Pharma website.

Please do not hesitate to contact our data protection officer should you have any questions

1. Collecting, processing and using personal data by order

You can generally use our website without entering any personal data. You are neither obliged to access this website nor to enter any personal data whilst doing yo. Failure to provide us with personal data may result in you being unable to use individual functions on this website. There are no other consequences to you. Any personal data collected on our website (such as name, address or e-mail addresses) is collected on a voluntary basis, except in explicitly stated circumstances. This data is not transferred to third parties without your explicit consent. We would like to make you aware that data transfer via the Internet (e.g. during e-mail communications) may be subject to security loopholes. It is impossible to provide seamless data protection against third-party access.

If the processing of your data is based on your consent, you have the right to withdraw your consent at any time, resulting in the processing of your personal data becoming impermissible, with the exception of such data processing activities that Körber Pharma must perform by law.

2. Contact form, requesting information materials

If you contact us through the contact form, we store your information (particularly your name and title, contact details, company, country and message) and process it in order to deal with your enquiry. The same applies if you request information materials from us. If you optionally provide us with your telephone number, we may call you to discuss your project and pass you onto the right contact person.

We may transfer your details to other Körber Group companies (e.g. if your enquiry relates to an agreement or customer relationship with another Körber Group company or its products) if this is necessary in order to respond to your enquiry or if your enquiry is targeted at such a company.

Depending on the subject of your enquiry, the legal basis for these data processing activities is the permissibility within the scope of the contractual negotiations, an agreement or our justified interest in the provision of a contact form for general enquiries and/or the provision of information materials (Art. 6 (1) (f) GDPR) or your consent (Art. 6 (1) (b) GDPR).

If you give your consent to receive information about the latest products and services from Körber Pharma and its subsidiaries (section 16) via e-mail, these companies will e-mail this information to you. Your details are stored in a joint mailing list for this purpose. You can withdraw your consent at any time and with future effect. You can unsubscribe by clicking the link in each newsletter or contact us with your request.

3. Data processing to facilitate the use of the website

When you visit our website, we collect data to enable you to use its functions, including your IP address and data on the start, end and reason of your use of the website as well as any data required for identification (e.g. your login details when you log into a secure area). This data is necessary for us to provide and design service according to your needs. It is generally deleted as soon as it is no longer required and there is no obligation to retain it. See section 6 for details on the processing of pseudonymous user profiles.

Change your consent

4. Consenting to cookies and web analysis

When accessing our website, a “cookiebot interface” is displayed in which Körber Pharma asks you to consent to the installation of cookies for the purpose of optimising the website (see section 5) and performing web analyses (see section 6). If you agree, Körber Pharma proceeds as described in more detail in the following sections (sections 6 to 11). These sections also provide you with information on how you can withdraw your consent at any time and block the installation of cookies and/or web analysis services by using the technology of the individual providers.

According to your settings entered through the cookiebot interface, the websites of the Körber Pharma collect data on your website use which is processed by Körber Pharma. Your consent given through the cookie banner consequently applies to the data processing activities of all Körber Pharma companies, and following on from that, the disclosure of the data collected through a respective website within all of the Körber Pharma companies.

With regard to the processing of data collected through the cookies described below, the Körber Pharma companies assume “joint and several liability” within the meaning of Art. 26 GDPR if they jointly decide about the means and purpose of the personal data processing activities. You can assert your rights regarding the processing of the personal data collected by cookies with any of the Körber Pharma companies, and in particular with
our data protection officer.

You can configure cookie installation and tracking through the following interface:

Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

5. Cookies

If you visit our website and give your consent (see section 4), information may be stored on your computer in the form of a cookie. Cookies are small text files that are sent by a web server to your browser and stored on your computer’s hard drive. This makes it possible to recognise you when you repeatedly visit the website and enables us to provide improved page functionalities and perform web analyses (see section 6). Most browsers are set to automatically accept cookies. You can deactivate the storage of cookies and delete them at any time from your hard drive. We would like to make you aware that the use of the contents of our website may be restricted without cookies. However, you can set your browser to block certain cookies only (e.g. third-party cookies), such as if you wish to prevent webtracking. For further information in this regard, please read the help file of your browser.

6. Web analysis (Google Analytics)

When you use our website and give your consent (see section 4), we use Google Analytics, a web analysis service by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses cookies (see section 5) to analyse your use of the website. The information on your use of this website is usually transferred to and stored on a Google server in the USA. However, Google first abbreviates and anonymises your IP address within the member states of the European Union and in other contracting states of the European Economic Area Agreement. The full IP address is only sent to a Google server in the USA and abbreviated there in exceptional circumstances. Google uses this information by order of the operator of this website for analysing your use of the website, compiling website activity reports and providing additional services relating to the use of the website and internet to the website operator. Google does not combine the IP address transferred by your browser within the scope of Google Analytics with other data.

You can withdraw your consent for the web analysis and related use of cookies as follows: You can set your browser to block cookies (see section 5). You can also prevent the data relating to your use of the website (including your IP address) from being transferred to and processed by Google by downloading and installing the browser plugin available at the following link. Alternatively, you can block Google Analytics from collecting data by installing an opt-out cookie on your computer. To do so, please click this link:

Disable Google Analytics

You can find further information relating to data protection with Google Analytics at:
https://policies.google.com/?hl=en&gl=en.

7. Google Ads / Remarketing

Our website uses the Google Ads service. The activation of Google Ads requires your active, prior consent to marketing cookies by clicking the "Cookiebot" button on our website. Google Ads is an online advertising program run by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). We use the remarketing function within the Google Ads service. The remarketing function enables us to show you ads based on your interests on other websites in the Google advertising network. To this end, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. This enables us to show you so-called "Google Ads" after you visit our online search engine Google as well as personalized ads on other websites. For this purpose, Google stores a cookie in your browser when you visit Google services or websites in the Google advertising network. This cookie is used to track your visits. It is used to clearly identify your web browser. It cannot be used to identify a particular person.

You can also configure the activation and deactivation of cookies and tracking by clicking the following button:

Change your consent

You can find out more about Google Remarketing and Google's privacy policy here:
www.google.com/privacy/ads/

8. LinkedIn Ads, LinkedIn Analytics and LinkedIn Marketing Solutions

We use the services of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Within the scope of these services, LinkedIn collects and stores user data in pseudonymous profiles to facilitate statistical analyses on the use of the website and success of ads as well as interest-based advertising on our website and on LinkedIn and partner websites of LinkedIn. If you are a LinkedIn user, LinkedIn may also reconcile the data with your user account. LinkedIn uses cookies for collecting data (see section 5). You can deactivate this as well as the resulting data collection on the following websites:

• www.linkedin.com/psettings/guest-controls
• optout.aboutads.info
• www.youronlinechoices.com/de/praferenzmanagement/

The deactivation is usually stored in a cookie. It therefore has to be renewed if you delete cookies. The deactivation also has to be installed in every browser that you use.

For further information on the LinkedIn data privacy policy, please go to:
www.linkedin.com/legal/privacy-policy.

9. Hubspot

Our website contains tracking technology provided by HubSpot Inc., 24 First St, 2nd Floor, Cambridge/MA 02141, USA (“HubSpot”), which may include cookies (see section 5). HubSpot collects and stores user data in pseudonymous profiles to provide interest-based advertising. You can prevent HubSpot from storing data in cookies and the related records of your user behaviour by deactivating cookies (see section 4).

We use HubSpot for our online marketing activities. It is an integrated software solution which we use for various activities, such as:

• E-mail marketing (newsletter and automated mails, e.g. for the provision of downloads)
• Social media publishing and reporting
• Reporting (e.g. traffic sources, access, etc.)
• Contact management (e.g. user segmentation and customer relationship management)
• Landing pages, blogs and contact forms

Our contact forms enable you, the visitor of our website, to find out more about our company, download contents and provide us with your contact details as well as other demographic information. This information as well as the contents of our website are stored on servers of our software partner, HubSpot. We use these details for getting in touch with you. Cookies also tell us which services provided by our company are of interest to you. To do so, we store information on your interaction with our website, such as downloaded documents, page visits, date and time of access (“user data”) and also if and when Körber Pharma you have opened marketing e-mails.

We use HubSpot for optimising our advertising and customer attraction. We can only combine the pseudonymised data with personal information from your CRM profile so as to provide you with optimised and interest-based support if you have given us your consent to do so.

HubSpot’s subcontractor page, which you can access, contains a list of subcontractors engaged by HubSpot.

HubSpot engages the following subcontractors for operating its product.

• Amazon Web Services, Inc. – product infrastructure hosting
• Google, Inc. – use of the Google Cloud platform to support the processing of local customer data
• Cloudflare, Inc. – Website display performance optimisation
• Message Systems, Inc. – E-mail sending infrastructure
• SendGrid, Inc. – E-mail sending infrastructure

For further information on the processing of data by HubSpot, please go to the
HubSpot website.

10. Youtube-Videos

Our website contains embedded videos that are provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have embedded YouTube videos with YouTube’s “Privacy-Enhanced Mode”. This prevents YouTube from processing data on your visit or installing cookies on your computer if you merely access a page containing an embedded video. If you click a video, your IP address is transferred to YouTube and YouTube is notified that you have watched the video. If you are logged into YouTube, this information is also allocated to your user account (you can prevent this by logging out of YouTube before accessing the video). We do not have any knowledge about nor influence over the possible collection and use of your data by YouTube when you access a video. For further information, you can read YouTube’s data privacy policy at
policies.google.com/privacy.

11. Transfer to third parties and non-EU countries

Your personal data is only transferred to third parties if it is based on a legal authorisation or your prior consent. For example, we may transfer data to other Körber Group companies if this is required for responding to your enquiry. We only transfer your data to government agencies if we are obliged to do so by law or due to an official decree or court ruling.

12. Deletion

The data collected by Google Analytics in the form of pseudonymised user profiles (section 6) is deleted no later than 38 months from the last entry in the respective user profile. In all other cases, we delete your personal data as soon as it is no longer required for the purpose of its collection and processing and we are not obliged by law to retain it for certain periods of time.

13. Data security

Körber Pharma has implemented technical and organisational measures to protect the personal data provided by you against loss, destruction, manipulation and unauthorised access. Our employees and all persons involved in the data processing activities have been obliged to comply with all laws relevant to data protection and confidentiality when handling your personal data.

To protect the personal data of our users, we use a secure online transfer method called "Secure Socket Layer" (SSL). You can recognise it by an “s” being added to the http:// part of the address ("https://") and/or a green, closed lock symbol being displayed. You can find out more about the SSL certificate used by clicking on the symbol. The display of the symbol depends on your browser version. SSL encryption ensures that all of your data is transferred in encrypted form.

14. Your rights regarding personal data

Data protection law gives you a number of rights with regard to your personal data (data subject rights). They include the right to request information on your personal data stored with us as well as the right to correction, deletion, restriction and portability of the processing of this data and objection to its processing. The law stipulates if and insofar as these rights exist in individual cases as well as the applicable terms and conditions. If you have consented to the processing of your personal data, you can withdraw this consent at any time. You further have the right to complain to the competent data protection supervisory authority.

15. How to contact us

You will find our contact details in the
imprint.

Please do not hesitate to contact our data protection officer should you wish to assert your rights stated in section 14 or have questions on data privacy in our company or with regard to this data privacy policy.

16. Companies of Körber Pharma

• Körber Pharma GmbH | Hamburg, Germany
• Körber Pharma, Inc. (HUB North America) | Fargo, United States of America
• Körber Pharma (Shanghai) Co., Ltd. | Shanghai, China
• Körber Medipak Systems América Latina | São Paulo, Brazil
• Körber Pharma Packaging AG | Grabs, Switzerland
• Körber Pharma Packaging GmbH | Schloss Holte-Stukenbrock, Germany
• Körber Pharma Packaging Materials AG | Allschwil, Switzerland
• Körber Pharma Inspection GmbH | Markt Schwaben, Germany
• Körber Pharma Consulting GmbH | Karlsruhe, Germany
• Körber Pharma Software GmbH | Lüneburg, Germany

Last Updated: June, 2025

Körber Supply Chain GmbH and its affiliated companies (“Körber Supply Chain”, “Körber”, “we” or “us”, “Körber Supply Chain Group”) take the protection of your personal information very seriously.

The following companies belong to Körber Supply Chain: Körber Supply Chain GmbH, Körber Supply Chain Consulting GmbH, Körber Supply Chain Automation GmbH, Körber Supply Chain Automation Eisenberg, Körber Supply Chain DK A/S, Körber Supply Chain PT S.A., Körber Supply Chain NL B.V., Körber Supply Chain GB Ltd., Körber Supply Chain NA, LLC., Körber Supply Chain SG Pte. Ltd, Körber Supply Chain Logistics GmbH and Godrej Koerber Supply Chain Limited.

We treat your personal information confidentially and in accordance with applicable data protection law, including but not limited to, the California Consumer Privacy Act of 2018 and its implementing regulations (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), General Data Protection Regulation (GDPR) and UK GDPR and its implementing regulations. This privacy policy informs you about how, to what extent and for what purposes we process data that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly to you (“personal information”) when

• using the Körber websites (Section 2.), or when using our other products and services that include an authorized link to this Privacy Policy (collectively, the “Services”);
• visiting our company page on a social network (Section 5.);
• using the contact form, business communication and mailings (Sections 6. C., H., 7.);
• registering to our newsletter (Sections 6. E., F.).
  

Further, this privacy policy contains information on recipients of your personal data within the EEA and third countries (Section 8), deletion of your personal data and retention periods (Section 9), your rights as a data subject (Section 11) and automated decision making (Section 13).

Privacy Principles

• We abide by the following principles in order to protect your privacy:
• We do not collect any more personal information about you than is necessary or otherwise authorized by you;
• We only use your personal information for the purposes we specify in this Privacy Policy, unless you agree otherwise;
• We do not keep your personal information if it is no longer needed; and
• Other than, as we specify in this Privacy Policy, we do not share your personal information with third parties.

1. Collection, Processing, and Use of Personal Information.

The use of the Services is generally possible without providing personal information. You are neither obliged to visit this website nor to provide any personal information. If you do not provide us with personal information, you may not be able to use certain functionalities of the Services. Otherwise, there will be no consequences for you. The personal information we collect about you may include, without limitation:

• Contact information, such as name, email address, postal address, and phone number.
• Payment information, such as credit card and billing address;
• Login information, such as username and password.
• Automatically collected information, such as information about the devices you use to access the Services (such as the IP address and type of operating system), dates, times, and duration of use of the Services, and information on actions taken when using the Services. See Section 2 Cookie Notice for more information.

We also collect data for pseudonymized user profiles to improve the Services. Note that under CCPA personal information does not include (i) publicly available information from government records, (ii) de-identified or aggregated consumer information, and (iii) any information excluded pursuant to applicable law.

2. Cookie Notice.

When you use the Services, we may also collect certain information with cookies. A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser.

A. Strictly Necessary Cookies – We collect the necessary information to enable you to use the Services. This includes your IP address and data about the start, end, and subject of your use of the Services as well as any identification data (e.g. your login data when you log into a secure area). This data is used to provide and design the service according to requirements. Legal basis for deploying strictly necessary cookies is our legitimate interest in providing our website under Art. 6.1 (f) GDPR. Strictly necessary cookies always deleted as soon as they are no longer required and there are no storage obligations.

B. Consent to Other Cookies and Web Analytics – When you visit our website, a “cookie banner" appears, with which we ask you for your consent to set cookies. We use cookies to store your preferences when using our website, to statistically analyze your usage behavior, and to show you personalized advertising on third-party websites or social media. This data may be used by us and our partners to enrich usage profiles.

When making your decision, please take into account that your personal data stored for the respective cookie may be transferred to countries outside the EU where no level of data protection comparable to the EU is guaranteed. With respect to the United States, we generally use U.S. provider that are certified under the Data Privacy Framework (see Section 8 for further details). You can find out if a provider is certified in the Tool/Provider list (see below). If a U.S. provider is not certified, we ensure that EU standard contractual clauses have been concluded with the provider. If a provider is not (yet) certified under the Data Privacy Framework, you consent to the third-country data transfer to that provider by selecting the appropriate cookies.

If you agree, we will proceed as described in more detail in the following sections.

Legal basis for deploying other cookies is your consent pursuant to Art. 6.1 (a) GDPR. Additionally, your consent covers storing and retrieving information on and from the user's device in accordance with Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG) and similar local laws. The consent you have given via the cookie button extends to data processing by all companies of the Körber Supply Chain Group and, accordingly, to the disclosure of the data collected via a particular website within all companies of the Körber Supply Chain Group. With regard to the processing of data collected through the cookies described below, the companies of the Körber Supply Chain Group assume “joint and several liability” within the meaning of Art. 26 GDPR as they jointly decide about the means and purpose of the personal data processing activities. You can assert your rights regarding the processing of the personal data collected by cookies with any of the companies of the Körber Supply Chain Group. You may revoke your consent at any time and prevent the setting of cookies or web analytics here:

Change your consent

If you use the Services and give your consent for “other cookies”, it may be that information in the form of a cookie is stored on your computer. You can deactivate the storage of cookies in your browser and have the possibility to delete them from your hard disk at any time. We would like to point out to you that a use of our offers on the website without cookies may only be possible to a limited extent. However, you can also use your browser only to prevent certain cookies from being set (e.g. cookies from third parties), for example if you want to prevent web tracking. Please refer to your browser's help function for more information.

You can find detailed information about the marketing and web tracking services used on our website, and their respective providers, in our Cookie Banner. This banner is displayed when you access our website and remains accessible via the cookie icon or the "Privacy Settings" button in the website's footer. It provides an overview of the cookies, their purpose, and their providers.

You can prevent web tracking. To do this, an "opt-out cookie" is usually stored on your device, which prevents the respective provider from collecting usage data from your device. Please note: If you delete cookies from your device, you may need to set the "opt-out cookie" again.

 C. Cookiebot –On our site, we use "Cookiebot," a consent management tool provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Cookiebot helps us display a cookie banner when you first visit our site. This banner lets you manage your consent for setting cookies or using specific cookie categories. You can also access the cookie banner at any time after your initial visit to change your cookie settings.

Your chosen settings are saved in separate cookies, and some personal data is also transmitted to Cookiebot. This includes the following data categories:

• Anonymized IP address
• Date and time of consent
• Browser information
• The URL of our subpage from which you granted your consent
• A random and encrypted key
• The consent status, which serves as proof of consent

Cookie consents granted through Cookiebot are stored for a period of 12 months.

The legal basis for this data processing is our legitimate interest in managing user consents for setting cookies on our site in a data protection-compliant manner (Art. 6 (1) (f) GDPR).

For more information, please refer to Cookiebot's privacy policy at: https://www.cookiebot.com/de/privacy-policy/.

 D. Web Analytics – If you opt-in to “other cookies” on the Services, we use Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses cookies to enable an analysis of your use of the website. The information about your use of this website is usually transferred to a Google server in the USA and stored there. However, Google will reduce your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand and thus make it anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports on website activity. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data. Google LLC is certified under the Data Privacy Framework.

To prevent processing, please click the "Disable Google Analytics" button in this Privacy Policy.

Revoke Consent – Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. Please note, however, that without cookies you may not be able to take full advantage of all of the features of the Services. You can prevent the collection and transmission of data relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link. Alternatively, you can prevent Google Analytics from collecting data by visiting tools.google.com/dlpage/gaoptout.

Further information on data protection at Google can be found at:

https://www.google.de/intl/de/policies/ (DE) and https://policies.google.com/ (US).

Deletion – The information collected by Google Analytics in the form of pseudonymous user profiles will be deleted no later than 14 months after the last new entry in the respective user profile.

Note Regarding Google as a Consent Recipient– The consent you grant via our cookie banner also applies to Google. This is because the Digital Markets Act (DMA) requires Google to obtain consent for personalized services. We share the consents you've given with Google through what's known as Google Consent Mode. The consent management software we use on our site informs Google that consent has been granted, allowing Google to respect your decision accordingly. Until you grant your consent, we will block Google tags (this is often called "basic implementation").

E. Google Tag Manager – When you use our services, Google Tag Manager may be employed. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager is a tool that helps us manage and control various tracking and marketing tags on our website. It simplifies the implementation and oversight of these services, meaning we don't have to directly adjust our website's source code every time.

Contrary to earlier assumptions that Google Tag Manager itself does not process personal data or set cookies, the Hanover Administrative Court (judgment of March 19, 2025, file no. 10 A 5385/22) has clarified that this can indeed be the case. The court ruled that Google Tag Manager, through its function as a "data forwarder" and its ability to process IP addresses and set cookies, itself constitutes a data processing activity relevant under data protection law.

What this means for you: The use of Google Tag Manager, and the associated processing of your data and setting of cookies (for example, for session IDs or the tool's functionality), will only occur with your explicit consent. We obtain this consent via our cookie banner when you first visit our website. Without your consent, Google Tag Manager will not be active.

The legal basis for the processing of your data by Google Tag Manager and the setting of associated cookies is therefore your consent in accordance with Art. 6 (1) lit. a GDPR.

For more information on data processing by Google, please refer to Google's Privacy Policy: https://policies.google.com/privacy.

F. Google Ads – If you opt-in to “other cookies”, we use Google Ads Conversion and Google Ads Remarketing on our website, services of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (Google). Google Ads helps us to display you advertising on our website that is of interest for you in order to make our website more interesting for you. Google Remarketing enables us to display you advertisement of our Services on websites within the Google advertising network. These advertisings are delivered by Google via so-called "ad servers". For this purpose, we use cookies, through which Google can measure certain parameters for measuring success, such as the display of the ads or the clicks of the users and analyze the interaction of visitors on our website to find out which of our Services is of interest for you. If you access our website via a Google ad or certain services of Google or websites in the Google advertising network, Google will store a cookie on your end device. These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective; in particular, we cannot identify users based on this information. Through the integration of Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it. To prevent processing via Ad Settings, visit https://myadcenter.google.com/home?hl=en. Google LLC, the parent company, is certified under the Data Privacy Framework.

Deletion – Google Ads cookies usually lose their validity after 30 days and are not intended to identify you personally.

Note Regarding Google as a Consent Recipient– The consent you grant via our cookie banner also applies to Google. This is because the Digital Markets Act (DMA) requires Google to obtain consent for personalized services. We share the consents you've given with Google through what's known as Google Consent Mode. The consent management software we use on our site informs Google that consent has been granted, allowing Google to respect your decision accordingly. Until you grant your consent, we will block Google tags (this is often called "basic implementation").

G. Bing Ads– On our website, we use the "Bing Ads" remarketing feature from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft Advertising"). A cookie is stored on your computer if you arrived at our website via a Microsoft Advertising ad. This allows Microsoft Advertising and us to recognize that someone clicked on an ad, was redirected to our website, and reached a predefined landing page (conversion page). We only learn the total number of users who clicked on a Microsoft Advertising ad and were then redirected to the conversion page. No personal information identifying the user is shared. The cookie is only set after we obtain your consent, which we do when you first visit our website or, if necessary, again via the displayed cookie banner.

If you don't want Microsoft to use information about your behavior as described above, you can decline the necessary setting of a cookie—for example, by adjusting your browser settings to generally deactivate the automatic setting of cookies. You can also prevent Microsoft from collecting and processing the data generated by the cookie and related to your use of the website by objecting at the following link: https://account.microsoft.com/privacy/ad-settings/.

For more information about data protection and the cookies used by Microsoft Advertising, please visit Microsoft's website at https://privacy.microsoft.com/en-us/privacystatement.

H. Your Choices – Although we do not control third parties’ collection or use of your information to serve interest-based advertising or other targeted content, a number of these third parties may provide you with ways to choose not to have your information collected or used in this way. For example, you can opt out of receiving targeted advertisements from members of the Network Advertising Initiative by visiting http://www.networkadvertising.org/choices. In addition, some web analytics providers are members of industry associations whose websites allow to centrally preventing the use of web tracking. Please find below reference to the websites of these associations for expressing your choices in regard to web tracking and processing data in pseudonymous profiles.

• “European Interactive Digital Advertising Alliance“ (EDAA): http://www.youronlinechoices.com/de/praferenzmanagement/
• “Digital Advertising Alliance“ (DAA): www.aboutads.info/choices/
• “Network Advertising Initiative“ (NAI): http://optout.networkadvertising.org/?c=1

Some of your browsing sessions may be translated into information that helps website designers make websites easier to use and simpler to navigate.

3. How We Respond to “Do Not Track” Signals.

A do not track signal (“DNT”) prevents web applications from tracking you, you can learn more about DNT athttps://allaboutdnt.com. Your web browser may let you choose your preference as to whether you want to allow the collection of information about your online activities over time and across different websites or online services. At this time, the Services do not respond to the preferences you may have set in your web browser regarding such collection of your information, and the Services may continue to collect information in the manner described in this Privacy Policy.

4. Third Party Content.

A. Vimeo – Videos embedded on the Services are provided by Vimeo.com, Inc., 330 West 34th Street, 10th Floor New York, NY 10001 („Vimeo“). For the video hosting platform Vimeo we use the so-called “Privacy Mode” that only collects fully anonymized viewing data by disabling session tracking and anonymizing IP addresses of our viewers. Only after you have given us your consent will the tracking options be activated. This may include Cookies. Vimeo is certified under the Data Privacy Framework between the EU and the USA. If you are logged into your Vimeo account, you enable Vimeo to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.

B. HubSpot – Our website contains tracking technology from HubSpot Inc, 24 First St, 2nd Floor, Cambridge/MA 02141, United States ("HubSpot"). This may include cookies. HubSpot collects and stores usage data in pseudonymous profiles to enable interest-based advertising. In addition, we use cookies to find out which of our company's services are of interest to you. For this purpose, we store information about your interaction with our website, such as downloaded documents, visited pages, date and time of retrieval ("usage data"). You can deactivate the storage of data by HubSpot in cookies and the associated recording of your user behavior by deactivating cookies.

For online marketing activities, Körber Supply Chain also uses an integrated software solution from HubSpot. With this, Körber Supply Chain cover various aspects, including:

• E-mail marketing (newsletter and automated mails, e.g. for the provision of downloads)
• Social media publishing and reporting
• Reporting (e.g. traffic sources, access, etc.)
• Contact management (e.g. user segmentation and customer relationship management)
• Landing pages, blogs and contact forms

The contact forms allow you, as a visitor to our website, to learn more about Körber Supply Chain, download content, and provide Körber Supply Chain with your contact information and other demographic information. Körber Supply Chain uses this information to contact you. Before Körber Supply Chain processes your data for the purposes set out in this section, Körber Supply Chain will obtain your consent to process your data using HubSpot. You can withdraw this consent at any time for the future in accordance with Art. 7 (3) GDPR.

Körber Supply Chain measures the success of email content that Körber Supply Chain send to you via HubSpot in order to identify your reading habits based on email opening, opening times, and links clicked, so that Körber Supply Chain can create and send you interest-based and useful content. Your consent to data processing includes performance measurement. Unfortunately, a separate withdrawal of the performance measurement is not possible, in which case you must withdraw the consent in its entirety.

Körber Supply Chain uses HubSpot to optimize advertising and customer targeting. Only if you have given Körber Supply Chain consent to do so, Körber Supply Chain can also combine the pseudonymous data with personal data from your CRM profile in order to address you optimally and provide you with interest-based information.

Your data will be passed on to HubSpot Inc., a US company. HubSpot also uses other sub-processors in the USA. HubSpot is certified under the Data Privacy Framework between the EU and the USA.

For more information on data processing by HubSpot, please visit HubSpot's website (https://www.hubspot.de/data-privacy/gdpr).

C. Make – We use Make, a service provided by Celonis SE, Theresienstr. 6, 80333 Munich ("Make"), for the process automation of our inside sales. Make utilizes data from HubSpot for this purpose. This means your personal data from HubSpot is also processed by Make when automating workflows. Specifically, business contact data is processed within HubSpot. We use Make for process automation to optimize workflows and minimize errors, for instance, in communication with (potential) customers.

The legal basis for using Make is our legitimate interest in structuring, automating, and optimizing our inside sales process, in accordance with Art. 6 (1) (f) GDPR.

D. Google Maps – On our "Contact" page, under "Map," there's a plugin that displays a map from Google Maps. Google Maps is a web service that shows interactive (land) maps to visually present geographical information. By using this service, you can see our locations and get directions more easily.

To do this, a connection is established between your browser and Google's servers—just as if you were visiting the Google search engine's website. Google Maps also sets a cookie on our website. This only happens if you have previously consented via our cookie banner. If you are logged into Google, your data will be directly associated with your account. If you don't want your data associated with your Google profile, you must log out before activating the button. Google itself is responsible for the data processing performed by Google.

If you don't agree to your data being transmitted to Google in the future when using Google Maps, you can completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. If you do this, Google Maps and the map display on this website will not be usable.

For more information on the use of Google Maps, please refer to the Google Maps Terms of Service. For information on data privacy at Google, please consult Google's Privacy Policy.

E. Social Media and YouTube Channel – Our website contains links to social media and to our YouTube channel. Third party providers operate these services exclusively. If you follow the links, information may be transferred to these providers. No personal data will be passed on when you visit our website. Only if you click a social share button, information will be transferred to the provider. You can find information on the purpose and scope of the data processing by the provider as well as your rights and setting options for the protection of your privacy in the privacy policy of the provider:

• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA http://www.linkedin.com/legal/privacy-policy/
• YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA www.google.de/intl/de/policies/privacy/

5. Company Pages in Social Networks

Joint Controllership - We maintain company pages on the social networks of Facebook, Instagram, LinkedIn, X (formerly Twitter), YouTube and Xing. As the operator of these pages, we are responsible for the collection (but not for the further processing) of the data of visitors to our company pages jointly with the respective operator of the social network within the meaning of the GDPR.

• Facebook: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland
• Instagram: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland
• LinkedIn: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, Kalifornien 94043, USA
• YouTube: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA
• X: X Corp. (formerly Twitter Inc.), X International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
• Xing: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Categories of personal data collected - The data collected includes Information about the types of content visitors view or interact with, or the actions they take and Information about the devices visitors use (e.g., IP addresses, operating system, browser type, language settings, cookie data). Social networks also collect and use information to provide analytics services, known as "page insights," to page operators to provide them with insights into how people interact with their pages and with content associated with them.

Further Information on the Joint Controllership - We have concluded a special agreement with the respective operator of the social network:

Meta: Facebook and Instagram: "Joint Controller Addendum," https://www.facebook.com/legal/terms/page_controller_addendum

LinkedIn: "Page Insights Joint Controller Addendum" legal.linkedin.com/pages-joint-controller-addendum.

YouTube: Google's privacy policy and terms of use

X (formerly Twitter): The general terms and conditions of Twitter and the guidelines referred to therein.

Xing: Xing's terms and conditions and the policies referenced therein.

In each case, these regulate in particular which security measures the operator must observe and in which the operator has agreed to fulfill the rights of data subject (i.e. users can, for example, address their right of access and their right to erasure directly to the operator of the social network).

The rights of users (in particular the right of access, erasure, restriction and right to lodge a complaint to the supervisory authority), are not restricted by the agreements with the respective operator. You can assert your rights (right to access, correction, erasure, restriction of processing, data portability, objection and right to lodge a complaint to the supervisory authority) both against us and against the respective operator of the social network.

Purpose of processing, legal basis, data subjects - Purposes of processing are contact requests and communication, tracking (e.g. interest/behavioral profiling, use of cookies), remarketing, reach measurement (e.g. access statistics, recognition of returning visitors).

The legal basis for data processing is our legitimate interest in ensuring that our offer and our company are present on the internet as comprehensively as possible, as well as the possibility of communicating with you via social networks (Art. 6 (1) lit(f) GDPR).

Data subjects include website visitors and visitors from our company pages on social networks.

Data Transfers outside EEA - In the case of Facebook, Instagram, YouTube, X (formerly Twitter) and LinkedIn, it is possible that some of the information collected may also be processed outside the European Union in the USA. For data transfers between the EU and the USA, see Section 8.

For more information on the processing of personal data, please refer to the privacy notices of Meta (Facebook, Instagram), YouTube, LinkedIn, X (formerly Twitter), and Xing.

6. Processing of Business Contact Information.

A. Legal Basis – Our legal basis for collecting and using the personal business contact information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you (for example, when providing the Services), or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to process personal information about you or may need to process personal information in order to exercise, establish, or defend legal claims. Specifically, we process your personal information, such as contact data or correspondence, to the extent that this is necessary to:

• process your enquiry (legitimate interest under Article 6.1(f) of the GDPR);
• to initiate or process the respective transaction (Article 6.1(b) GDPR); and
• if necessary, store the data within the scope of statutory storage obligations (statutory obligations under Article 6.1(c) of the GDPR).

The same applies if you are an employee of an interested party, supplier, service provider or other business partner and we receive your personal data in this context; the legal basis in this case is our legitimate interest in establishing or carrying out the business relationship with your employer (Article 6.1(f) GDPR).

B. Standard Business Contact (e.g., at Trade Fairs)– In the course of normal business operations, situations may arise where providing a notice in accordance with Art. 13 and Art. 14 GDPR is typically not feasible. This primarily includes cases like the spontaneous exchange of business contact information at trade fairs, events, business lunches, or other official activities, such as exchanging business cards or initial contact initiated by us or by you with business content.

In such situations, we regularly collect the following data from you: contact details (like your name, address, email, or phone number), data about your company (like its address, email, business field, job description, title), and data related to your input/inquiry (like content, time of inquiry, means of communication).

This data is processed and stored in our CRM systems (see section D below) as part of our business activities to re-establish contact and/or process your request and for further handling.

The processing of your data for these purposes is based on Art. 6 (1) (f) GDPR and is done in our legitimate interest. Our legitimate interest is to initiate potential business relationships with you, re-establish contact, and/or process your request and for further handling. If you have questions about this balancing of interests, you can contact any of the individuals listed in section 14 at any time.

C. Contact Form– If you contact us via the contact form, we will save your details (in particular name and title, your contact details, your company, the country and your message) and process them in order to process your enquiry. For this purpose, we use the provider HubSpot as a processor. Depending on your region and your requirements, we will forward your enquiry to the appropriate company of the Körber Supply Chain Group. The legal basis for this data processing is - depending on the subject of your enquiry - the processing for the performance of a contract or for the implementation of pre-contractual measures (Article 6(1) (b) GDPR) or our legitimate interest in providing a contact form for general enquiries or in providing information material (Article 6 (1) (f) GDPR) or your consent (Article 6(1) (a) GDPR).

D. CRM System – Your details are also stored in a Customer Relation Management System ("CRM System"). The same applies if you request information or material from us. Our legal basis is the performance of a contract, the initiation of a business relationship, our legitimate interest, or your consent (Art. 6 (1) (b), (f), and where applicable, (a) GDPR). If we also store your form of address in our CRM, this is based on our legitimate interest in personalizing business communication with gender-specific salutations and avoiding confusion (Art. 6 (1) (f) GDPR). If you give us your telephone number, we may contact you by phone to discuss your project and put you in touch with the appropriate contact person. In connection with enquiries and the data collected in CRM, the companies of the Körber Supply Chain Group act as "joint controllers" within the meaning of Art. 26 GDPR, as they jointly decide on the means and purposes of processing personal data. Entry and access to your personal data depends on your region and your enquiry and is regulated by contract between the companies of the Körber Supply Chain Group. For further information on these contractual terms, please contact our data protection officer, as noted below. You can assert your rights with regard to the processing of the personal data collected at any company of the Körber Supply Chain Group.

E. Newsletter –. If you register for our newsletter, we will process your e-mail address and send you a confirmation e-mail with a confirmation link that you must click on to subscribe to our newsletter. We will also add you to our mailing list in order to send you e-mail advertising for our own similar goods or services if you purchase a good or service from us and you have not previously objected to this processing of your e-mail address. You can cancel the newsletter at any time and object to the e-mail advertising at any time. You will find a possibility to unsubscribe in every newsletter and every other advertising e-mail that we send you. Körber Supply Chain Group also uses HubSpot as a processor for newsletter sending in accordance with Art. 28 GDPR. Your personal data is stored in Europe. However, we cannot fully exclude data transfers to HubSpot Inc. based in the USA, as further noted below. Because HubSpot Inc. is certified under the Data Privacy Framework, transfers to HubSpot Inc. in the USA are currently lawful(see Section 8).

F. Newsletter Performance Measurement – The newsletters contain a so-called. "web-beacon", which means a pixel-sized file that is retrieved when the newsletter is opened, either from the server of the Körber Supply Chain Group Company or from the server of the service provider HubSpot. In the course of this retrieval, technical information such as information on the browser and your system, as well as your IP address and the time of retrieval may be collected. We receive a statistical report from HubSpot about whether recipients open the newsletters, when they open it and which links they click. This processing serves us to recognize the reading habits of the newsletter recipients and to adapt the content to them or to send different content according to their interests. Your consent to receive the newsletter also covers the consent to performance measurement. The legal basis for data processing is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. For this purpose you can e.g. use the unsubscribe link in each newsletter or contact us. A separate revocation of the performance measurement is unfortunately not possible; in this case, you must revoke the consent to the newsletter in its entirety.

G. Declare Objection – You can declare your objection directly to these companies. You will find a possibility to declare your objection or revocation e.g. in every e-mail. You can also declare your revocation to Körber. We will then forward it to the responsible company.

H. Email – If you agree to be informed by e-mail about the latest products and services of the Körber Supply Chain Group, the companies will send you this information by e-mail. Your details will be stored in a shared distribution list for this purpose. You can revoke your consent at any time with effect for the future. To do so, you can use the unsubscribe link in each newsletter or contact us. Additionally, we'll add you to our mailing list to send you email advertisements for our own similar goods or services, provided you've purchased a good or service from us and haven't previously objected to your email address being used for this purpose. You can object to the use of your email address at any time, at no cost beyond the basic transmission rates. We'll remind you of this in every email, and you can, for example, use the unsubscribe link provided in each email.

7. Electronic Communication.

You are welcome to communicate with us by e-mail at any time. Please be advised that we use an E-mail Gateway of an external provider of security technologies to defend against SPAM e-mail, other threatening e-mail, threatening e-mail attachments and URLs. In doing so, this external provider may process your first and last name, e-mail address and IP address. The legal basis is our legitimate interest in preventing unauthorized access to communications networks, the spread of malicious code and damage to computers and electronic communications systems (Article 6(1)(f) GDPR in conjunction with Recital 49).

8. Transmission to Third Parties and to Countries Outside the EEA.

The data we collect from you may be transferred to and stored at a destination outside of the European Economic Area (“EEA”). It may also be processed by staff operating outside of the EEA who works for us, one of our group companies or our suppliers for the purposes set out in this Privacy Policy. In order to ensure that any third party processes your personal data in a way which is consistent with the EU's laws on data protection, to the extent that we share data outside of the EEA, we will seek to put in place agreements with those third parties, including with our group companies, which contain provisions approved by the EU for protecting personal data. Your personal information will only be transmitted to third parties if this is legally permitted or if you have given your prior consent. For example, we may transfer data to other companies of the Körber group, if this is necessary to respond to a request you have made. We will only disclose your personal information to government authorities within the framework of legal obligations or as a result of an official order or court decision. Processing described under Sections 2., 4. and 5. may lead to data transfers to third countries outside the EEA, especially to the USA. Please note that in the event of a data transfer to third countries outside the EEA, Chapter V of the GDPR requires that the recipients have an adequate level of data protection. Most of the US providers we use are certified under the EU-US Data Privacy Framework, which enables secure data transfers to these US providers. A complete list of companies certified under the Data Privacy Framework can be accessed via the following link: https://www.dataprivacyframework.gov/s/participant-search. If a provider is not certified under the Data Privacy Framework this provider is contractually bound by the EU standard contractual clauses to process data in conformity with data protection regulations. Please note that transfers from the EU to non-certified U.S. providers are also subject to stricter U.S. rules on government surveillance programs under Executive Order 14086, which was adopted as a condition of the European Commission's adequacy decision for U.S. providers certified under the Data Privacy Framework. Should you have any questions in this regard, please contact our data protection officer (see Section 14).

9. Retention.

We delete your personal information as soon as it is no longer needed for the purposes for which the personal information was collected, as far as no legal storage obligations stand in the way.

10. Data Security.

Körber has taken the necessary technical and organizational measures to protect the personal data you provide from loss, destruction, manipulation and unauthorized access. Our employees and all persons involved in data processing are obliged to comply with data protection laws and to treat personal data confidentially. Our employees are trained accordingly. Both internal and external tests ensure compliance with all data protection relevant processes at Körber. To protect the personal data of our users, we use a secure online transmission procedure, the so-called "Secure Socket Layer" (SSL) transmission. You can recognize this by the fact that an "s" ("https://") or a green, closed lock symbol is added to the address component. By clicking on the icon, you will receive information about the SSL certificate used. The display of the symbol depends on the browser version you are using. SSL encryption guarantees the encrypted and complete transmission of your data. We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security risks. A complete protection of data against access by third parties is not possible.

11. Your Rights Regarding Personal Data.

The data protection laws grant EEA and UK residents a number of rights with regard to data concerning your person (rights of data subjects). These include the:

• Right to Access – You have the right to request a copy of any information that we hold about you. If you would like a copy of this information, please contact us. We may request proof of your identity before sharing such information with you.
• Right to Rectify – If you discover that the personal information we hold about you is incorrect or out of date, you may ask us to correct that information.
• Right to erasure (Right to be Forgotten)/Restriction of Processing – You may ask us to delete or restrict processing the personal information we hold about you in certain circumstances. It may not be possible for us to delete or restrict processing all the personal information we hold about you where we have an ongoing relationship, however please contact us and we will do our best to assist with your request.
• Right to Withdraw Consent – Where we process your data on the basis that you have consented to such processing, you have the right to withdraw your consent at any time by unsubscribing or contacting us, as applicable. Please note that in the event of a revocation, we will continue to retain your consent. This is because even after revocation and deletion of your personal data, we must be able to prove consent. The legal basis for the (also continued) storage of consent is Art. 6 (1) (c) in conjunction with. Art. 5 (1) (a), (2), Art. 7 (1) GDPR and Art. 6 (1) (f) GDPR.
• Right to Portability – You may ask us to transfer your personal information to a third party in certain circumstances. If you would like any other information regarding this right, please contact us.
• Right to Object – In the case of processing based on Art. 6(1)(e) or (f) GDPR or direct marketing, you may object to the processing, in which case, except in the case of direct marketing, you must provide a specific reason.
• Promotional Communications – If you do not want us to use your email address/contact information to promote our products or services, you can opt out by sending us an email. If you have received a promotional email from us, you can also opt out of receiving future promotional emails from us by following the unsubscribe instructions contained in such email.

The EU General Data Protection Regulation also grants you the right of appeal to a data protection supervisory authority. However, if you have any questions or complaints regarding data protection at Körber, we recommend that you first contact our data protection officer (see Section 14).

12. Notice for California Residents.

Our California Consumer Privacy Act (“CCPA”) Notice applies to California residents from whom we collect personal information. Please visit Privacy Notice for California Residents to learn more about how we adhere to the CCPA (as amended by CPRA) and how to exercise the rights afforded to you under the CCPA (as amended by CPRA).

California Civil Code Section § 1798.83 may permit users of our Services who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us.

13. No Automated Single Decision.

Automated decision making and profiling includes any decision-making processes that occur solely through automated means. As far as this is not exceptionally necessary for the conclusion of a contract or permitted by law (as in the case of age verification), we do not use your personal data for automated individual decisions.

14. How Can You Contact Us?

You will find our contact details as the responsible body in the imprint. You may also email us at info.sc@koerber-supplychain.com. If you wish to exercise the rights mentioned under Section 11 or if you have any questions about data protection with us or this data protection declaration, you can also contact our data protection officer: datenschutz.sc@koerber-supplychain.com.

15. Changes to this Privacy Policy.

New legal requirements, business decisions or technical developments may require changes to our privacy policy. The privacy policy will then be adapted accordingly. You can always find the latest version on our website. In the event we make a material change to how we use your personal information, we will provide you with notice by posting on our website. The date this Privacy Policy was last revised is at the top of this page. We encourage you to review this Privacy Policy periodically to check for any updates or changes.

For Körber Technologies GmbH (Körber), the protection of its personal data is of utmost importance. We treat your personal data as confidential and in accordance with the provisions of data protection laws. This privacy policy contains information on how, to what extent and for what purpose we use personal data when you use the Körber website.

Please do not hesitate to contact our data protection officer should you have any questions

1. Collecting, processing and using personal data by order

You can generally use our website without entering any personal data. You are neither obliged to access this website nor to enter any personal data whilst doing so. Failure to provide us with personal data may result in you being unable to use individual functions on this website. There are no other consequences to you. Any personal data collected on our website (such as name, address or e-mail addresses) is collected on a voluntary basis, except in explicitly stated circumstances. This data is not transferred to third parties without your explicit consent. We would like to make you aware that data transfer via the Internet (e.g. during e-mail communications) may be subject to security loopholes. It is impossible to provide seamless data protection against third-party access.

If the processing of your data is based on your consent, you have the right to withdraw your consent at any time, resulting in the processing of your personal data becoming impermissible, with the exception of such data processing activities that Körber Technologies GmbH must perform by law.

2. Contact form, requesting information materials

If you contact us through the contact form, we store your information (particularly your name and title, contact details, company, country and message) and process it in order to deal with your enquiry. The same applies if you request information materials from us. If you optionally provide us with your telephone number, we may call you to discuss your project and pass you onto the right contact person.

We may transfer your details to other Körber Group companies (e.g. if your enquiry relates to an agreement or customer relationship with another Körber Group company or its products) if this is necessary in order to respond to your enquiry or if your enquiry is targeted at such a company.

Depending on the subject of your enquiry, the legal basis for these data processing activities is the permissibility within the scope of the contractual negotiations, an agreement or our justified interest in the provision of a contact form for general enquiries and/or the provision of information materials (Art. 6 (1) (f) GDPR) or your consent (Art. 6 (1) (b) GDPR).

If you give your consent to receive information about the latest products and services from Körber Technologies GmbH and its subsidiaries via e-mail, these companies will e-mail this information to you. Your details are stored in a joint mailing list for this purpose. You can withdraw your consent at any time and with future effect. You can unsubscribe by clicking the link in each newsletter or contact us with your request.

3. Data processing to facilitate the use of the website

When you visit our website, we collect data to enable you to use its functions, including your IP address and data on the start, end and reason of your use of the website as well as any data required for identification (e.g. your login details when you log into a secure area). This data is necessary for us to provide and design service according to your needs. It is generally deleted as soon as it is no longer required and there is no obligation to retain it. See section 6 for details on the processing of pseudonymous user profiles.

4. Consenting to cookies and web analysis

When accessing our website, a “cookiebot interface” is displayed in Körber Technologies GmbH asks you to consent to the installation of cookies for the purpose of optimising the website (see section 5) and performing web analyses (see section 6). If you agree, Körber Technologies GmbH proceeds as described in more detail in the following sections (sections 6 to 12). These sections also provide you with information on how you can withdraw your consent at any time and block the installation of cookies and/or web analysis services by using the technology of the individual providers.

According to your settings entered through the cookiebot interface, the websites of the Körber Technologies GmbH collect data on your website use which is processed by Körber Technologies GmbH. Your consent given through the cookie banner consequently applies to the data processing activities of all Körber Technologies GmbH companies, and following on from that, the disclosure of the data collected through a respective website within all of the Körber Technologies GmbH companies.

With regard to the processing of data collected through the cookies described below, the Körber Technologies GmbH companies assume “joint and several liability” within the meaning of Art. 26 GDPR if they jointly decide about the means and purpose of the personal data processing activities. You can assert your rights regarding the processing of the personal data collected by cookies with any of the Körber Technologies GmbH companies, and in particular, the contact persons listed in section 4.

5. Cookies

If you visit our website and give your consent (see section 4), information may be stored on your computer in the form of a cookie. Cookies are small text files that are sent by a web server to your browser and stored on your computer’s hard drive. This makes it possible to recognise you when you repeatedly visit the website and enables us to provide improved page functionalities and perform web analyses (see section 6). Most browsers are set to automatically accept cookies. You can deactivate the storage of cookies and delete them at any time from your hard drive. We would like to make you aware that the use of the contents of our website may be restricted without cookies. However, you can set your browser to block certain cookies only (e.g. third-party cookies), such as if you wish to prevent webtracking. For further information in this regard, please read the help file of your browser.

6. Web analysis (Google Analytics)

When you use our website and give your consent (see section 4), we use Google Analytics, a web analysis service by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses cookies (see section 5) to analyse your use of the website. The information on your use of this website is usually transferred to and stored on a Google server in the USA. However, Google first abbreviates and anonymises your IP address within the member states of the European Union and in other contracting states of the European Economic Area Agreement. The full IP address is only sent to a Google server in the USA and abbreviated there in exceptional circumstances. Google uses this information by order of the operator of this website for analysing your use of the website, compiling website activity reports and providing additional services relating to the use of the website and internet to the website operator. Google does not combine the IP address transferred by your browser within the scope of Google Analytics with other data.

You can withdraw your consent for the web analysis and related use of cookies as follows: You can set your browser to block cookies (see section 5). You can also prevent the data relating to your use of the website (including your IP address) from being transferred to and processed by Google by downloading and installing the browser plugin available at the following link. Alternatively, you can block Google Analytics from collecting data by installing an opt-out cookie on your computer. To do so, please click this link:

Disable Google Analytics

You can find further information relating to data protection with Google Analytics at:
https://policies.google.com/?hl=en&gl=en.

7. Google Ads / Remarketing

Our website uses the Google Ads service. The activation of Google Ads requires your active, prior consent to marketing cookies by clicking the "Cookiebot" button on our website. Google Ads is an online advertising program run by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). We use the remarketing function within the Google Ads service. The remarketing function enables us to show you ads based on your interests on other websites in the Google advertising network. To this end, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. This enables us to show you so-called "Google Ads" after you visit our online search engine Google as well as personalized ads on other websites. For this purpose, Google stores a cookie in your browser when you visit Google services or websites in the Google advertising network. This cookie is used to track your visits. It is used to clearly identify your web browser. It cannot be used to identify a particular person.

You can also configure the activation and deactivation of cookies and tracking by clicking the following button:

Change your consent

You can find out more about Google Remarketing and Google's privacy policy here:
www.google.com/privacy/ads/

8. LinkedIn Ads, LinkedIn Analytics and LinkedIn Marketing Solutions

We use the services of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Within the scope of these services, LinkedIn collects and stores user data in pseudonymous profiles to facilitate statistical analyses on the use of the website and success of ads as well as interest-based advertising on our website and on LinkedIn and partner websites of LinkedIn. If you are a LinkedIn user, LinkedIn may also reconcile the data with your user account. LinkedIn uses cookies for collecting data (see section 5). You can deactivate this as well as the resulting data collection on the following websites:

• www.linkedin.com/psettings/guest-controls
• optout.aboutads.info
• www.youronlinechoices.com/de/praferenzmanagement/

The deactivation is usually stored in a cookie. It therefore has to be renewed if you delete cookies. The deactivation also has to be installed in every browser that you use.

For further information on the LinkedIn data privacy policy, please go to:
www.linkedin.com/legal/privacy-policy.

9. Hubspot

Our website contains tracking technology provided by HubSpot Inc., 24 First St, 2nd Floor, Cambridge/MA 02141, USA (“HubSpot”), which may include cookies (see section 5). HubSpot collects and stores user data in pseudonymous profiles to provide interest-based advertising. You can prevent HubSpot from storing data in cookies and the related records of your user behaviour by deactivating cookies (see section 4).

We use HubSpot for our online marketing activities. It is an integrated software solution which we use for various activities, such as:

• E-mail marketing (newsletter and automated mails, e.g. for the provision of downloads)
• Social media publishing and reporting
• Reporting (e.g. traffic sources, access, etc.)
• Contact management (e.g. user segmentation and customer relationship management)
• Landing pages, blogs and contact forms

Our contact forms enable you, the visitor of our website, to find out more about our company, download contents and provide us with your contact details as well as other demographic information. This information as well as the contents of our website are stored on servers of our software partner, HubSpot. We use these details for getting in touch with you. Cookies also tell us which services provided by our company are of interest to you. To do so, we store information on your interaction with our website, such as downloaded documents, page visits, date and time of access (“user data”) and also if and when Körber you have opened marketing e-mails.

We use HubSpot for optimising our advertising and customer attraction. We can only combine the pseudonymised data with personal information from your CRM profile so as to provide you with optimised and interest-based support if you have given us your consent to do so.

HubSpot’s subcontractor page, which you can access, contains a list of subcontractors engaged by HubSpot.

HubSpot engages the following subcontractors for operating its product.

• Amazon Web Services, Inc. – product infrastructure hosting
• Google, Inc. – use of the Google Cloud platform to support the processing of local customer data
• Cloudflare, Inc. – Website display performance optimisation
• Message Systems, Inc. – E-mail sending infrastructure
• SendGrid, Inc. – E-mail sending infrastructure

For further information on the processing of data by HubSpot, please go to the
HubSpot website.

10. Youtube videos

Our website contains embedded videos that are provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have embedded YouTube videos with YouTube’s “Privacy-Enhanced Mode”. This prevents YouTube from processing data on your visit or installing cookies on your computer if you merely access a page containing an embedded video. If you click a video, your IP address is transferred to YouTube and YouTube is notified that you have watched the video. If you are logged into YouTube, this information is also allocated to your user account (you can prevent this by logging out of YouTube before accessing the video). We do not have any knowledge about nor influence over the possible collection and use of your data by YouTube when you access a video. For further information, you can read YouTube’s data privacy policy at policies.google.com/privacy

11. Vimeo videos

On our website, videos are embedded that are provided by Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA. If you have consented to the use of the corresponding cookies of this provider on our website, Vimeo collects statistical data about the fact that you have accessed the video in question via our website. If you are logged in to Vimeo, Vimeo can also assign this information to your user account (you can prevent this by logging out of Vimeo before viewing the video). Vimeo also processes your data in third countries outside the European Union and the European Economic Area, in particular in the USA. For more information, please refer to the privacy policy of Vimeo at
https://vimeo.com/privacy.

12. Transfer to third parties and non-EU countries

Your personal data is only transferred to third parties if it is based on a legal authorisation or your prior consent. For example, we may transfer data to other Körber Group companies if this is required for responding to your enquiry. We only transfer your data to government agencies if we are obliged to do so by law or due to an official decree or court ruling.

13. Deletion

The data collected by Google Analytics in the form of pseudonymised user profiles (section 6) is deleted no later than 38 months from the last entry in the respective user profile. In all other cases, we delete your personal data as soon as it is no longer required for the purpose of its collection and processing and we are not obliged by law to retain it for certain periods of time.

14. Data security

Körber has implemented technical and organisational measures to protect the personal data provided by you against loss, destruction, manipulation and unauthorised access. Our employees and all persons involved in the data processing activities have been obliged to comply with all laws relevant to data protection and confidentiality when handling your personal data.

To protect the personal data of our users, we use a secure online transfer method called "Secure Socket Layer" (SSL). You can recognise it by an “s” being added to the http:// part of the address ("https://") and/or a green, closed lock symbol being displayed. You can find out more about the SSL certificate used by clicking on the symbol. The display of the symbol depends on your browser version. SSL encryption ensures that all of your data is transferred in encrypted form.

15. Your rights regarding personal data

Data protection law gives you a number of rights with regard to your personal data (data subject rights). They include the right to request information on your personal data stored with us as well as the right to correction, deletion, restriction and portability of the processing of this data and objection to its processing. The law stipulates if and insofar as these rights exist in individual cases as well as the applicable terms and conditions. If you have consented to the processing of your personal data, you can withdraw this consent at any time. You further have the right to complain to the competent data protection supervisory authority.

16. How to contact us

You will find our contact details (responsible – Art. 4, No. 7 GDPR) in the imprint.

Please do not hesitate to contact our
data protection officer should you wish to assert your rights stated in section 14 or have questions on data privacy in our company or with regard to this data privacy policy.