Privacy statement
This website (hereinafter the Website) is provided by Grünenthal GmbH (hereinafter Grünenthal, "we", "our" or "us"). We respect your privacy and are committed to protecting your information. The privacy policy below discloses our information gathering and use practices for this website only. If you are looking for more information about the provider of this website, please see our imprint.
1. Handling of personal data
At Grünenthal, we believe that transparency is the basis for a trusting working relationship. Therefore, we openly communicate that we collect personal data in certain cases to ensure the functionality of our websites and to provide you with the best possible user experience.
1.1 Using our Website
Access to our website
When you access/visit our website, your browser transmits certain data to our web server. This is done for technical reasons so that we can provide the information you have requested. In particular, the following data is collected, stored briefly and used:
- IP address (anonymized): We receive your IP address from the provider only in anonymized form, whereby the last two digits of the IP address are not visible to us. This prevents us from being able to assign the IP address to a natural person.
- Date and time of access
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (exact page)
- Access status/HTTP status code
- Amount of data transferred
- Website requesting the access
- Browser, language settings, version of the browser software, operating system and interface
We store this data for a period of 90 days so that we can initiate a follow-up via the competent law enforcement authorities in the event of actual or attempted unauthorized access to our servers (Art. 6 (1) a) GDPR).
1.1.2 Use of cookies
What are cookies?
Our website uses so-called "cookies". Cookies are small text files that are stored in the memory of your end device via your browser. They store certain information (e.g. your preferred language or website settings). Depending on the lifetime of the cookie, your browser may send this information back to us when you visit our website again.
What cookies do we use?
We differentiate between two categories of cookies: (1) functional cookies which are necessary for the functionality of our website and (2) optional cookies. These are used for website analysis and marketing purposes. You can find a detailed list of the cookies that we use in the cookie banner that pops up when you access our website or by clicking on the "privacy settings" symbol.
Subject to your consent
We only use optional cookies if we have obtained your prior consent (Art. 6(1) a) GDPR). When you visit our website for the first time, a banner will appear asking you to give us your consent to the setting of optional cookies. If you consent, we will place a cookie on your computer and the banner will not appear again as long as the cookie is active. After expiration of the cookie's lifespan, or if you actively delete the cookie, the banner will reappear the next time you visit our website and will again ask you for your consent.
1.1.3 Website Analysis
Matomo
We use the open source software tool Matomo (formerly PIWIK) from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand on our website to analyze the surfing behavior of our users. Matomo is an open source tool for web analysis.
Matomo uses cookies. These text files are stored on your computer and make it possible for us to analyze the use of the website. For this purpose, the usage information obtained by the cookie is transmitted to us and stored so that the usage behavior can be evaluated. Your IP address is immediately anonymized; thus you remain anonymous as a user. The information generated by the cookie about your use of this website will not be disclosed to third parties.
We understand this analysis as part of our Internet services. We would like to use it to further improve the website and adapt it even more to the needs of the users.
These processing operations are only carried out if explicit consent is given in accordance with Art. 6 (1) a) GDPR.
If individual pages of our website are called up, the following data is stored:
- Bytes of the IP address of the calling system of the user are anonymized.
- The website from which the user accessed the called website (referrer).
- The subpages accessed from the accessed website
- The time spent on the website
- The frequency of accessing the web page
In this regard, the software runs exclusively on the servers within our control and within the Matomo Cloud. We have concluded a data processing agreement with InnoCraft Ltd. about data processing on our behalf. Storage of the users' personal data only takes place there. The data is not passed on to third parties.
We store this data for a period of at least two years, unless you revoke your consent beforehand.
You can view the data protection provisions of Matomo at: https://matomo.org/privacy/
Matomo Tag Manager
On our website we use Matomo Tag Manager. Matomo Tag Manager is an extension of the open source Matomo web analytics solution. The Tag Manager is used to integrate tracking events (marketing cookies) and control the integration of third-party code. The legal basis for the data processing is Art. 6 (1) a) GDPR. The legitimate interest is the error-free functioning of the website. The deletion of the data takes place as soon as the purpose of the collection has been fulfilled.
1.1.4 External services or content on our Website
We include third-party services and/or content on our website. When you use such third-party services or when third-party content is displayed, communication data are exchanged between you and the respective provider for technical reasons. The respective provider of the services or content may also process your data for own additional purposes. To the best of our knowledge, we have configured the services and content of providers known to process data for own purposes in such a way that either any communication for other purposes than to present their services or content on our website is blocked, or communication only takes place once you have actively opted to use the respective service. However, since we have no control over data collected and processed by third parties, we are not in a position to provide binding information regarding the scope and purpose of such processing of your data.
For further information regarding the scope and purpose of such collection and processing of your data, please consult the privacy statements of the providers whose services and/or content we include and who are responsible for the protection of your data in this context.
Vimeo (videos)
This website uses plug-ins from the American company Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Therefore, log information may be transmitted from our website to Vimeo. Vimeo's server in the United States thus automatically stores information ("log data"), such as the information that your browser sends to a website when you visit, or the information that your mobile app sends when you use it. This log data may contain your IP address, the address of the website you visited that uses Vimeo features, the browser type and settings, the date and time of your request, information about your use of Vimeo, and cookies.
If you are logged into Vimeo, Vimeo can link your visit to our website directly to your Vimeo account. If you interact with the plugins (e.g. by clicking the start button on a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to associate any data collected via our website with your Vimeo account, you should log out of Vimeo before you visit our website.
These processing operations only take place if unambiguous consent is granted in accordance with Art. 6 (1) a) GDPR.
You can find out more information about data collection, how your data is evaluated and processed by Vimeo, and your rights relating to this in Vimeo's Privacy Policy: http://vimeo.com/privacy
1.2 Transfer of data for commissioned processing
To a certain extent, we will use specialized service providers for the processing of your data. These service providers are carefully selected and regularly monitored by us. They process personal data only on our instructions and strictly in accordance with our instructions on the basis of corresponding commissioned data processing contracts.
1.3 Processing of data outside the EU/the EEA
Your data will partly be processed in countries outside the European Union ("EU") or the European Economic Area ("EEA"). The respective countries may have a lower data protection level than European countries. In such cases, we will ensure that a sufficient level of protection is provided for your data, e.g. by concluding specific agreements with our contractual partners, or we will ask for your explicit consent to such processing.2. Information about your rights
Under applicable data protection law, you have the following rights:
- Right to information about your personal data stored by us;
- Right to rectification, deletion (unless we are required by law to retain the data) or restriction of the processing of your personal data;
- Right to object to processing on grounds of our own legitimate interest, public interest or profiling, unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims;
- the right to data portability;
- the right to lodge a complaint with a data protection authority.
- You can revoke your consent to the collection, processing and use of your personal data at any time with effect for the future. For more information, please refer to the chapters above on processing data based on your consent.
If you wish to exercise your rights, please direct your request to the contact form or to our company data protection officer, whose contact details can be found below.
3. Contact
Do you have any questions about our data protection? Then please let us know! You can either use our contact form or contact our company data protection officer at the following address dataprivacy.de@grunenthal.com
If you, as a data subject, have questions about our privacy practices or disagree with the way Grünenthal or Grünenthal representatives process your data, please contact our external Grünenthal's Global Protection Officer at the following email address: datenschutz.grunenthal@two-towers.eu
You can only reach our data protection officer via this e-mail address. The data protection officer is obliged to treat your identity confidentially. If, in the course of clarifying a complaint, it should be possible to draw conclusions about your identity, the data protection officer will inform you of this in advance and, if necessary, ask you to release us from our duty of confidentiality.
Supervisory authority for data protection
You can also contact the data protection supervisory authority with questions and complaints:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de
4. Modification of the privacy policy
We may update our Privacy Policy from time to time and will post those updates on our website. They will become effective upon publication, so we recommend that you visit the site regularly to check for any changes.
This privacy policy was last updated on 30.07.2025.
If you are a healthcare professional and would like to learn more about how Grünenthal processes your personal information, please click on this link https://www.grunenthal.com/en/footer-links/privacy-statement-hcp.
