Privacy Policy

1. Contact details

The controller responsible for processing personal data on this website is:

Formycon AG (hereinafter referred to as “we”)
Fraunhoferstraße 15
82152 Planegg-Martinsried
T: +49 89 864667 100
info@formycon.com

You can contact our data protection officer at:

Formycon AG
Data Protection Officer
Fraunhoferstraße 15
82152 Planegg-Martinsried
datenschutz@formycon.com

2. General processes

When you visit our website, our system automatically collects data and information from the device you are using. This includes, among other things, the browser type, operating system, IP address, date and time of access, pages visited, the website you visited previously (referrer), and similar technical information. This data is processed for the purpose of delivering the website, ensuring system security and stability, and averting danger, for example in the event of a cyberattack. No personal evaluation takes place; the data is analyzed anonymously for statistical purposes. The legal basis for processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in achieving the above-mentioned purposes.

The data is deleted after seven days at the latest; longer storage only takes place in anonymized form. Since the collection of this data is mandatory for the operation of the website, there is no possibility of objection.

3. Contact, reporting of side effects

3.1 Contact requests

On our website, you have the option of contacting us—for example, via a contact form, by email, or by phone. We process the data transmitted in this way exclusively for the purpose of processing your inquiry. The legal basis is our legitimate interest in responding to inquiries in accordance with Art. 6 (1) (f) GDPR. The data will be deleted as soon as it is no longer required for communication purposes, unless statutory retention obligations prevent deletion.

3.2 Reporting side effects of our medicines

We offer you the opportunity to report any side effects you experience with our medicines via our dedicated email address medinfo@formycon.com. We process the information you provide in the report in order to review the report, to ask you any questions we may have, and, if necessary, to forward it to the competent drug regulatory authority in pseudonymized form.

We are legally obliged to document and report side effects. In individual cases, it may be necessary to ask you questions about your side effects. If required by law, we enter the report in pseudonymized form into the designated (EudraVigilance) database of the authorities and into our own pharmacovigilance system (system for monitoring and analyzing side effects). We use the service provider Midas (Midas Pharma GmbH, Rheinstraße 49, 55218 Ingelheim, Germany). The data is stored in our system in order to fulfill our legal obligations in connection with the provision and risk monitoring of medicinal products and to analyze side effects in order to minimize the risks of their occurrence as far as possible.

Our legal basis for processing your data when reporting side effects and making inquiries is Art. 6 (1) (c) GDPR (compliance with a legal obligation) and Art. 9 (2) (i) GDPR (reasons of public interest in the area of public health).

We share information on side effects with recipients who may be involved in the processing, analysis, and consideration of side effects, such as private experts, quality assurance service providers, legal advisors, authorities, liability insurers, etc.

We store the information you provide on side effects in accordance with the legal obligation for as long as the product is available on the market and for 10 years thereafter.

3.3 Contact within the framework of existing customer relationships

Within the framework of ongoing customer relationships, we regularly contact our customers or their contact persons, for example to coordinate content, clarify open questions, make changes to the terms of the contract, or transmit relevant information. The processing of personal data is carried out for the purpose of performing the contractual relationship in accordance with Art. 6 (1) (b) GDPR or, where necessary, on the basis of our legitimate interest in efficient communication in accordance with Art. 6 (1) (f) GDPR.

4. Website functions

When you use our digital offerings, we process certain technical data to ensure the security, stability, and functionality of our systems. This includes, for example, troubleshooting, maintenance, IT security measures, or hosting our applications. This processing is based on our legitimate interest and, where relevant, on the fulfillment of legal obligations.

The technical log data is usually only stored for a short period of time and deleted or anonymized after 7 days at the latest, unless security-related tracking is required.

5. Web services used

We use various web services on our website to optimize the website and to present the information provided to you in the best possible way.

5.1 Matomo

On our website, we use the Matomo service from InnoCraft Ltd (7 Waterloo Quay, PO 625, 6140 Wellington, New Zealand) to analyze the use of our website and continuously improve our online offering.

Matomo works on our website without cookies and without accessing data from the user’s device. The analysis is carried out entirely on the server side. The following information is primarily processed: IP address (filtered/anonymized), device and browser characteristics, pages accessed, length of stay, and interactions.

The processing of personal data is based on Art. 6 (1) lit. f GDPR. Our legitimate interest lies in analyzing usage behavior in order to optimize our online offering. The data is stored for 13 months and then deleted or anonymized.

Processing takes place exclusively on servers in the EU or in secure third countries for which the Commission has issued an adequacy decision. No data is transferred to unsafe third countries. Further information can be found in Matomo’s privacy policy at https://matomo.org/privacy-policy/.

You have the option of preventing your actions on our website from being analyzed. You can object to processing at any time using the following option.

Your visit to this website is currently being tracked by Matomo web analytics. Deselect this checkbox to opt out / Your visit to this website is currently not being tracked by Matomo web analytics. Select this checkbox to opt in.

5.2 Cookies

Our website uses so-called cookies. These are small text files that can be stored and read by the browser used on the user’s device. Cookies can either be stored only for the duration of a session and then automatically deleted (session cookies) or remain permanently on the end device (persistent cookies).

Insofar as cookies are absolutely necessary for the technical operation and provision of our online offering, their use is based on Section 25 (2) No. 2 TDDDG. The associated processing of personal data is carried out in accordance with Art. 6 (1) lit. f GDPR in order to make our website functional, secure, and user-friendly.

Insofar as cookies are also used for analysis, statistical, or marketing purposes, this is done on the basis of your consent in accordance with § 25 (1) TDDDG. In these cases, the processing of personal data is based on Art. 6 para. 1 lit. a GDPR. Consent that has been given can be revoked at any time with effect for the future.

You can use the following button to view your current cookie settings, obtain detailed information about the cookies used, and manage your consent: [Cookie settings]

6. Recipients of the data

In order to fulfill our contractual and legal obligations and to perform our services, it may be necessary to disclose personal data to third parties. This applies in particular to authorities, parties involved in proceedings (e.g., opponents, affected parties, participants), banks, and insurance companies.

We also use external service providers to support our operational processes, to whom personal data may be transferred in the course of their activities. If these service providers process personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Art. 28 GDPR. Processing takes place exclusively within the EU or the EEA or in compliance with appropriate safeguards within the meaning of Art. 44 ff. GDPR.

7. Rights of data subjects

You have the following rights:

• Right to information: You can request information from us about whether and which personal data we process about you (Art. 15 GDPR).
• Right to rectification: If data that we process about you is incorrect, you have the right to request that we correct this data (Art. 16 GDPR).
• Right to erasure / right to be forgotten: If personal data is no longer necessary for our processing purposes or if the legal basis no longer applies due to other circumstances, you have the right to have your personal data erased (Art. 17 GDPR).
• Right to restriction of processing: Under certain conditions, you can request that we restrict the processing of your data (Art. 18 GDPR).
• Right to data portability: You can request a copy of your data from us in a commonly used machine-readable format or request that we provide the data directly to a provider of your choice (Art. 20 GDPR).
• Right to object: You can object to the processing if it is based on our legitimate interests (Art. 21 GDPR).
• Automated decisions: You have the right not to be subject to an automated decision exclusively (Art. 22 GDPR).
• Right to complain to a supervisory authority: You have the right to complain to a data protection supervisory authority about the processing of your personal data if you do not agree with the handling of your data (Art. 77 GDPR).

To exercise your rights against us, you can contact our data protection officer at any time using the contact details provided above.

As of June 2025