General data protection declaration

Purpose of the company
With its innovative products, PARI enables comprehensive treatment and care of the airways. The purpose and intent of our work is to improve the lives of those affected by respiratory diseases and those who provide care for them. This is reflected in our comprehensive portfo-lio of innovative products and services.
If you wish to learn more about the purpose of the individual companies, you can view them on the PARI Group website (www.pari.com).

Who is responsible for data processing?
The data processing controller is the natural or legal person which, alone or jointly with oth-ers, determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses, etc.). This regulation applies to the following companies of the PARI Group:

PARI Medical Holding GmbH
Moosstraße 3
82319 Starnberg
Germany

PARI GmbH
Spezialisten für effektive Inhalation
Moosstraße 3
82319 Starnberg
Germany

PARI Pharma GmbH
Moosstraße 3
82319 Starnberg
Germany

PARItec GmbH
Moosstraße 3
82319 Starnberg
Germany

You can contact our data protection officer at the following address

PARI Medical Holding GmbH
Data Protection Officer
Moosstraße 3
82319 Starnberg, Germany
Telephone: 08151 279-279
or E-Mail: datenschutzpari.com

What data do we process?
As a corporate group, PARI processes a wide range of data (including personal data) in order to fulfil its functions and duties to customers, service providers, public authorities and other third parties.

This data protection declaration applies to the personal data of our company's prospective and existing customers who are natural persons and to all other natural persons with whom we have contact, e.g., representatives or employees of legal persons, and also visitors to our website.

Personal data is information about your identity. This includes, e.g., information such as your name, ad-dress, telephone number or e-mail address.

Why is data processed?
Data processing is carried out for the purpose of executing contracts and in order to fulfil our statutory obligations. We process data from prospective customers to protect our legitimate interests (e.g., data processing within the PARI corporate group for internal administrative purposes, direct marketing campaigns) and in preparation for the signing of a contract.

In certain cases, we need additional personal data from you to enable us to handle your en-quiry or provide the services required of us. This supplementary personal data is only cap-tured and stored if you provide it voluntarily, for example as part of an enquiry, registration, or an application for employment or as a possible supplier.

Who processes the data?
In all cases, the data is only processed within the PARI Group company concerned. In order to fulfil our statutory and contractual obligations, we work together with other companies. These include for example IT service providers, cloud service providers, web hosting service providers, software providers, telephone service providers and document shredders.

For what purpose is personal data stored and shared?
Your personal data is only stored or shared with third parties if this is necessary for the pur-poses of carrying out the activities described above or if you have given your prior consent for it to be stored and/or shared. These third parties are not permitted to use this data for any other purposes.

We do not divulge data about customers unless we are obliged to do so by law and/or pursu-ant to a legal ruling or it is essential to do so in order to exercise or protect our claims. This applies in the same manner to storage of your data. The data is not divulged for commercial purposes.

Our employees and the companies commissioned by us are bound by a duty to confidentiali-ty.

When is the data deleted again?
In all cases, stored personal data is deleted when the retention times required by law have elapsed.

Stored personal data will also be deleted if you withdraw your consent for it to be stored and there is no other legal basis for storing it, if your knowledge is no longer required in order to fulfil the purpose pursued by storing your data, or if storing your data is impermissible for oth-er legal reasons, unless statutory retention regulations forbid such deletion, in which case a restriction of processing (blocking) will enter into effect instead of deletion.

Stored personal data will also be deleted if your personal data has been processed wrongfully or it must be deleted in order to comply with the requirements of the law.

In the event that deletion is not possible, or only possible with unreasonable effort, restriction of processing is implemented instead of deletion.

What rights do I have?
You have the right to request information about your personal data which is processed by us. Upon written request, we will be glad to inform you about the data we have stored relating to your person.

If your data is not (or no longer) accurate, you can require that it be rectified. If your data is incomplete, you can require that it be completed. If we have shared your data with third par-ties, we will inform said third parties of your rectification if such is required by law.

You have the right to require a restriction of processing (blocking) of your personal data for any of the following reasons:

• If the accuracy of your personal data is contested by you and we had the opportunity to check its accuracy.
• If the processing is unlawful and you request the restriction of its use instead of erasure.
• If we no longer need your data for the purposes of the processing, but you need it for the establishment or exercise of or defence against legal claims.
• If you have objected to the processing of your data pending verification as to the prece-dence of your interests.

You have the right to receive the personal data you have given to us in a transmittable format.

You can withdraw your consent to the collection and storage of your personal data by us at any time.

If data processing is carried out within the scope of our legitimate interests, you have the right to object to processing of your personal data on grounds relating to your particular situation at any time; this also applies for any profiling based on these provisions. The legal basis sup-porting the processing of data in any given situation is indicated in this data protection declara-tion. If you lodge an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or which serve for the establishment or exercise of or defence against legal claims (Right to object pursuant to Art. 21 para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also ap-plies for any profiling conducted in connection with such direct marketing. If you lodge an ob-jection, your personal data will not be processed for this purpose afterwards.

Who can I contact?
If you have questions about our data protection policy or if you wish to exercise your rights as described above, you are welcome to contact us by e-mail at Data protection datenschutzpari.com, by mail to PARI Medical Holding GmbH, Data Protection Officer, Moosstr. 3, 82319 Starnberg, Germany, or by telephone at +49 (0)8151-279279.

We recommend that when sending highly sensitive data via e-mail you use a content encryp-tion program (e.g., encrypted pdf document or similar).

You also have the right to lodge a complaint with the competent data protection supervisory authority.

Change to our data protection declaration
We reserve the right to change our security and data protection measures if this becomes necessary as a result of technological development. In such cases, we will also adjust our notes on data protection accordingly. Therefore, please ensure that you have obtained the latest version of our data protection declaration in each case.