Personal Information Protection Act (the “Act”)
In B. Braun, we are committed to a trust based cooperation with all parties whom we deal with such as our clients, doctors, advisers and employees. Keeping information in particular personal information secure is an aspect of this trust which we take seriously.
B. Braun is subject to privacy principles under the Act and this notice is intended to outline how we intend to keep secure the personal information of individuals (“data subjects”) and to ensure that the rights of data subjects are protected.
Before we collect any personal information, we seek to inform data subjects of (i) our name; (ii) the purpose for which their personal information is collected, used and processed; (iii) the data subject’s right to access or refuse to provide such personal information; (iv) the categories of personal information we will collect, process and use; (v) the period, area, recipients, and manner for use of personal information; and (vi) the consequences if data subjects choose not to provide their personal information (the “Prior Notification”).
Notice and Choice
Please be aware that you have the right to make a choice not to provide your personal information and may revoke your consent to the collection, processing or use of personal information. Please however be aware that certain services we provide and the continuation thereof may require the processing of such data and if you refuse such collection, processing and/or use, we may discontinue our relationship with you.
General Information on Processing of Personal information
This data protection statement applies to data, including personal information which B Braun collects about a data subject. Personal information may be individual data or source or from a combination of individual data by which data subject can be indentified.
The process by which we gather, process and use the personal information of a data subject is in compliance with the Act as well as the data protection regulations of the Federal Republic and Germany and also of the European Union. Under no circumstances will B. Braun pass on the personal information of a data subject to third parties outside of the B. Braun Group of companies (being B. Braun Melsungen AG and its subsidiaries worldwide) without the data subject’s consent.
Within the B. Braun Group, compliance with legal requirements, including the Act, and with this Policy is monitored.
Categories of personal information we collect, process and use
The nature and type of data we collect and the source of such information varies depending on the nature of the relationship we have with the information subject and may include:-
- personal information which we collect from our website, if such information has been voluntarily provided or where such information is required for the purposes of providing the service which a information subject requires.
- personal information which we collect on application forms or other information forms such as name, address, email, telephone, occupation, income.
- personal information from credit bureau reports and credit reporting agencies.
- personal information from governmental agencies
Specifically, the personal information we collect may include name, home telephone number(s), cell phone number(s), address(es) for communication and permanent address, photo(s), email address(es), bank A/C(s) and name(s), ID number, passport number, age, gender, date of birth, place of birth, nationality, height, weight, blood type, character and personality descriptions, marital status, number of children, dependent(s), member(s) and relative(s) of family, parents, co-inhabitant(s), hobby(ies) and habit(s), educational degree, skill(s) or qualification, exam record(s) or other training records, work experiences, place of work, and health check result,
Purpose of collecting personal information
Personal information is used to provide products and services and to inform about products and services offered by B. Braun and may include:-
- for the purposes of technical administration of our website.
- statistical analysis
- developing new products and services
- registration for programs or offers upon your request
- providing services offered to you
- payment processing for purchases
- protection against or identifying possible fraudulent transactions,
- where permitted by law, to supply customized, unsolicited offers and information about B. Braun and services
- developing and providing advertising adapted to our customers
- profiling and determining service preferences
- finance and marketing operations and/or as required by the terms and conditions of business and other business administration purposes including credit monitoring and control purposes.
- to meet regulatory and legal requirements
- for risk management
- for all other purposes incidental and associated with the above
Disclosure of Personal information
Personal information will be kept confidential but may be disclosed to the following categories of parties around the world for the purposes set out below:-
- to any B. Braun Group companies in and outside of Taiwan [Link]
- to our advisers, including consultants, advocates and solicitors for purposes of determining our rights and enforcing any agreement with data subjects
- any agent, contractor or service provider to whom we may have outsourced services to, subject always that such parties acknowledge the confidentiality and rights of the data user and to comply with the provisions of the Act., such as distributors, wholesalers and retailers of B. Braun’s product/services, service providers of statistical analysis, product design/development consulting companies, financial institute, advertising companies, business management consulting companies and computer hardware/software service providers etc.
- to regulatory authorities or notified bodies including bodies providing quality certification of our products upon their request
- to such other parties as may be permitted under law.
Where dissemination of information is cross borders, we will ensure that the standards of protection afforded by the party to whom the information is disclosed is no less than that observed by the Company.
Period, Area and Manner for Use of Personal Information
Subject to the above-mentioned purposes, personal information which we collect from you is processed and used for such period as may be necessary for the specific purpose and may be transmitted between Taiwan and any other area outside of Taiwan as well as being used and processed in any electronic or non-electronic manner(s).
Sensitive Personal Information
Unless we specifically request or invite it, we ask that you not send us, and you not disclose, any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, medical treatment and health, criminal background, genetic information, sexual life, or trade union membership) on or through the websites or otherwise to us. In those cases where we may request or invite you to provide sensitive information, we will do so with your express written consent.
When dealing with Sensitive Personal Information, for a purpose not directly linked to the primary purposes of collection as stated in the preceding section, we will generally seek your written consent before use of such information. Disclosure or use of such information without consent is limited to circumstances permitted by law.
Data Subject’s Rights
Under the Act, a data subject has the right to access personal information which an organization holds about the data subject. At a data user’s request, we will inform you in writing and in accordance with applicable law, whether we have stored any personal information and if so, the information stored. Under the Act, a data subject is also entitled to request for review, duplication, supplement, correction, deletion and/or discontinuance of collection, processing or use of any of his/her personal information unless such request will contradict the obligations which we should perform under applicable laws.
Under the Act, a data subject is also entitled to be informed if we are in receipt of personal information by any means other than direct providing of such information by the data subject and in such event, a data subject is further entitled to be informed of the sources from which we receive his/her personal information and we will also provide a data subject with the Prior Notification before we process and use such personal information. If in the course of using our products or our services, any personal information of a data subject becomes known to us, we will endeavour to inform the data subject as soon as possible.
Data users have a right to correct and block such personal information. Data users may also withdraw consent to the processing and storage of personal information, if not needed for legal reasons or for processing any existing contractual relationship. Information may also be deleted if such information is no longer subject to retention policies.
In order to assist us in validating the identity of any person requiring access, we will ask for verification documents to substantiate identity.
Where personal information has been used for purposes of marketing communications, you may opt out of such communications by notifying us and we will seek to comply with your request(s) as soon as reasonably practicable.
Protection of minors
As a general rule, children and persons under the age of 20 years (hereinafter collectively referred to as Minors) should not disclose personal information to us without the consent of their parents or guardians. We do not solicit personal information from Minors and we do not knowingly collect personal information from Minors, use said information in any way or disclose said information to third parties without authorization.
Transmission of information over the Internet
The Internet is a global platform. By using our websites, or communicating with us electronically via contact forms, you agree to the unencrypted transfer of all information that you want to send us. Due to the nature of operations on the Internet, and the inherent systemic risks, all information transfers initiated by you occur at your own risk. The only exception to this is if we offer you an encrypted transmission path.
We have taken reasonable precautions to ensure the security of your information. Your personal information, as stored by us, which you for example have entered on HTML pages (contact forms), are transferred in an encrypted format (SSL – Secure Socket Layer) over the public data network to our Internet service provider, from there to the respective data processing systems of the B. Braun companies responsible for the triggered transactions, or to the appropriate contractual partners of B. Braun and are placed into storage.
Data Collection and Processing from Internet Access
Access via our website, social media pages and plugins as well as queries on various platforms may result in the collection and processing of data. Following are details of specific policy measures which relate to such collection and processing:
Data collection and processing in case of access from the Internet
When you visit our website, our web servers save each access temporarily to a log file. The following data are entered and saved until automated deletion:
- Anonymized IP address of the requesting computer
- Date and time of the access
- Name and URL of the called data
- Report whether the call was successful
- Identification data of the used browser and operating system
- Website, from which the access is carried out
- Name of your Internet access provide
These personal data are not processed beyond the cases indicated above, unless you explicitly consent to further processing.
Processing of your communication inquiries - Salesforce Marketing Cloud
the inquiry and for the event of follow-up questions. We will not forward these data without your consent.
Use of the Salesforce Marketing Cloud
We use the remarketing functions of the Salesforce Marketing Cloud of the service provider salesforce.com, Inc. The Landmark @ One Market Street, Suite 300, San Francisco, CA 94105, USA (“Salesforce”). If you have consented to the receipt of our newsletter and visit our Website via a newsletter, web beacons are used. This way it is possible for us to track the effectiveness of our newsletter, e.g. whether you have opened an e-mail or which part of the newsletter was particularly interesting.
For this purpose we use e.g. the tracking methods “Email Open Tracking” and “Email-Link Tracking”.
Email Open Tracking: Here we track whether you have opened the newsletter via the 1x1 pixel in the HTML template described below.
Email-Link Tracking: It is tracked here whether a link was clicked within the e-mail (Click-Trough). For this purpose the links are converted by the Marketing Cloud into trackable links.
Salesforce uses so-called “web beacons” in the majority of the used e-mails. Web beacons (also called “ClearGIFs” or “tracking pixels”) are small graphics (GIF files with a size of approx. 1×1) that are used among others on websites or in HTML e-mails. Web beacons fulfill similar functions as cookies, can however not be noticed by the user. Via web beacons information can, in particular, be obtained whether the e-mail was opened and whether the system of the user is capable of receiving HTML e-mails. No personal data are collected via the web beacon.
If you would not like to receive any e-mail notifications with web beacons, you can alternatively also receive your e-mails in a text form (not in the HTML format) by changing the corresponding settings to this extent within your e-mail client and by blocking the receipt of HTML formated e-mails.
Consent to the transmission of data within the scope of the services
Within the use of Salesforce, the scope of the use of this portal data from a user can be transmitted to the USA to a contractually bound and carefully selected service provider. The data protection existing in the USA is however not comparable with European standards and may also differ from Taiwan standards. Appropriate data protection cannot be guaranteed continuously but in order to provide security of your data as far as possible, our company takes necessary protective measures and transmits data to the USA according to the principle of purpose limitation and data economy so that only the absolutely essential information that is provided by you is retained.
By signing up to receive a newsletter that is offered, you are consenting to the processing of your name and e-mail address and information that permit us to verify that you are the owner of the stated e-mail address. You are also confirming that you agree to receive the newsletter.
In the case of mailing, your address is needed as well. Your data are processed exclusively for the desired newsletter; your data are not used for other purposes beyond that. We also do not share your data with third parties. Our registration system ensures that you do in fact wish to receive the chosen newsletter by sending a registration e-mail with a confirmation link (known as the “double opt-in” procedure).
You can withdraw the consent you have granted to the processing of the data, the e-mail address and the use thereof to transmit the newsletter at any time, for example by clicking the “Remove” link in the newsletter.
If you order the newsletter via our contact form, we will process your inquiry in our Salesforce Marketing Cloud.
The contract concluded with Adobe for the contract data processing concluded by the B. Braun Group for use of Adobe Analytics allow for the implementation of the strict stipulations of the German data protection.
In order to protect input forms on our website we use the “reCAPTCHA” service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google“. By using this service a distinction can be made whether the corresponding input is of human origin or is carried out improperly by automatic mechanical processing.
According to our knowledge the referrer-URL, the IP address, the conduct of the website visitors, information about operating system, browser and dwell time, cookies, presentation instructions and scripts, the input conduct of the user as well as mouse movements in the area of the “reCAPTCHA” checkbox are transmitted to “Google”.
Google uses the thus obtained information among others to digitalize books and other printed products as well as to optimize services such as Google Street View and Google Maps (for example house number and street name recognition).
The IP address transmitted within the framework of “reCAPTCHA” is not combined with other data of Google, unless you are logged into your Google account at the time when using the “reCAPTCHA” plugin. If you want to prevent this transmission and saving of data about you and your conduct on our website by “Google” you must logout of “Google” before you visit our website or use the reCAPTCHA plugin.
Customer Journey Tracking
On this website through technologies of Pixelpark GmbH (https://www.publicispixelpark.de) data is collected in an anonymized form (Marketing Cookies) and sent to Pixelpark GmbH. These cookies are set for the design in line with the needs, as well as to optimize this website and for the determination of statistical analyses and for cross-medial use. Pixelpark GmbH uses so-called “cookies” for this purpose. Text files that are saved on the computer and which enable an analysis of the use of the website (cf. “8. Cookies”).
The data is not used to personally identify the visitor of this website.
These anonymized usage data can be used both by website operators as well as by other advertisers and partners of Pixelpark GmbH in order to identify usage interests without it being possible to draw a conclusion about your identity as a visitor of a website.
Cookies, which collect and store data exclusively in pseudonymous form, may be utilized for this website. Based on this data, usage profiles are creased under a pseudonym. The data are not used to personally identify any visitor to this website and are not merged with the data relating to the holder of the pseudonym. You can object to this data being collected and stored at any time; this objection will then continue to apply in the future.
Social Media Plug-ins
As part of B. Braun's internet presence, third-party content may sometimes be used (plug-ins). This can take the form of YouTube videos, RSS feeds or graphics of other pages, or social media buttons, such as the Facebook Share button. Some data may be transmitted to and collected by the social networks, such as IP address, browser information and operating systems.
B. Braun has no influence on the amount of data collected by the social networks. The nature, scope and purpose of the data collection, information on the further processing of the data, your rights in relation to these and setting options for protecting your privacy are explained in the data protection policies of the respective social network.
Accessing the data protection policy
Contact person in personal information protection matters
If you have any questions, requests for verification or correction personal information or complaints regarding the processing of your personal information, please contact us via the following:
E-mail us at: firstname.lastname@example.org
or write to us:
B. Braun Taiwan Co., Ltd.
9F, No. 152, Jiankang Road,
Songshan District, Taipei 105, Taiwan
Attn: Compliance Office