The following information explains how we collect personal data when you use our website. Personal data is any information that can be related to you personally, such as your name, address, e-mail addresses, or user behaviour.
The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:Chemische Fabrik Kreussler & Co. GmbH
Rheingaustraße 87 – 93
65203 Wiesbaden
Phone: +49 611 9271-0
Fax: +49 611 9271-111
E-Mail: info@kreussler.com
We have appointed an external Data Protection Officer. You can reach our Data Protection Officer at:Gesellschaft für Datenschutz Mittelhessen mbH
Auf der Appeling 8
35043 Marburg
Phone: 06421/8041310
E-Mail: datenschutz@gdsm.de
Where we use commissioned service providers for individual functions of our offering, or where we wish to use your data for advertising purposes, we will inform you in detail below about the respective processes, including the defined criteria for the storage period.
You have the following rights with respect to the personal data concerning you:
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
When you use our website purely for informational purposes — i.e. when you do not register or otherwise provide us with information — we only collect the personal data that your browser transmits to our server. When you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis: Art. 6 (1) sentence 1 lit. f GDPR in conjunction with § 25 TDDDG). The storage period is generally 7 days:
In addition to the data mentioned above, cookies are stored on your device when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you use, through which certain information flows to the entity that sets the cookie (in this case us). Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective. The use of these cookies is based on Art. 6 (1) sentence 1 lit. a or lit. c GDPR.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. Session cookies store a so-called session ID, which allows various requests from your browser to be assigned to a shared session. This enables your device to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie. You can delete cookies at any time via the security settings of your browser.
We use cookies that are technically necessary and that make your visit to our website possible in the first place. If we use cookies that are not technically necessary, we will obtain your consent for this.
For technically strictly necessary cookies used for the display and required functions of our website, the legal basis is § 25 (2) TDDDG and Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest). Where we do not use technically strictly necessary cookies for the display and required functions of our website, we will obtain your consent. The legal basis for the use of such cookies is § 25 (1) sentence 1 TDDDG and Art. 6 (1) sentence 1 lit. a GDPR.
Any required consents can be granted in our Consent Manager when you first visit our website and can be managed at any time thereafter.
Where the services and functions we use on our web presences set cookies, the information provided here applies to them. Further details on the legal basis and storage period of individual cookies can be found in the respective services/functions and in our Cookie Consent Manager.
On our website we use a Cookie Consent Manager tool to inform you about the technologies we use on our website and to obtain, manage and document your consent to the processing of your personal data by these technologies.
This is required pursuant to Art. 6 (1) sentence 1 lit. c GDPR in conjunction with Art. 7 (1) GDPR in order to fulfil our legal obligation to be able to demonstrate your consent to the processing of your personal data.
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will generally need to provide further personal data, which we use to provide the respective service and to which the aforementioned principles of data processing apply.
In some cases, we engage external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
We may also disclose your personal data to third parties where promotions, prize draws, contract conclusions or similar services are offered jointly with partners. You will receive further information on this when you provide your personal data or in the description of the offer below.
Where our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
The personal data we collect and store is treated confidentially and protected against loss, alteration and unauthorised access by third parties by means of appropriate technical and organisational measures. Your personal data is transmitted over the internet in encrypted form. We use SSL encryption (Secure Socket Layer) for data transmission.
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is engaged for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of providing our online offering securely, quickly and efficiently through a professional provider (Art. 6 (1) lit. f GDPR). Where the relevant consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.
Our hoster will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.
We use the following hoster:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Deutschland
We do not carry out any automated decision-making (including profiling) using the personal data we collect during your visit to our website.
If you have given your consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the permissibility of the processing of your personal data after you have communicated it to us.
Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case where the processing is not, in particular, necessary for the performance of a contract with you, which we will indicate in the description of the functions below. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either cease or adjust the data processing, or demonstrate to you our compelling legitimate grounds on the basis of which we will continue the processing.
You may, of course, object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: Chemische Fabrik Kreussler & Co. GmbH, Rheingaustraße 87 – 93, 65203 Wiesbaden, Phone: +49 611 9271-0, E-Mail: info@kreussler.com
When you contact us by e-mail or via a contact form, the data you provide and the personal data arising from it (e.g. name, enquiry, e-mail address, telephone number) are stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass this data on to third parties without your consent.
The data you send us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.
The processing of this data is based on Art. 6 (1) lit. b GDPR, where your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) where this has been requested.
Where we offer a newsletter on our web presences, you may, with your consent, subscribe to our newsletter, with which we inform you about our current interesting offers. The goods and services advertised are named in the declaration of consent.
For registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR.
You may withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal by clicking on the link provided in every newsletter e-mail, or by sending a message to the contact details stated in the imprint.
Please note that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data mentioned under c) and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.
You may object to this tracking at any time by clicking on the separate link provided in every e-mail or by informing us via another contact channel. The information is stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data in purely statistical and anonymous form. Such tracking is also not possible if you have disabled the display of images by default in your e-mail programme. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you manually display the images, the above-mentioned tracking will take place.
If you participate in one of our prize draws that may be offered on our web presences, we will process your data only for the purpose of conducting the prize draw and for sending prize notifications and prizes. We do not use your data for advertising purposes. Should we intend to do so in individual cases, we will explicitly obtain your consent for this. The further information in the section "Newsletter" will then apply.
For the prize draw we require your personal information such as first and last name and postal address (street, house number, postcode, city) or alternatively your e-mail address. Legal basis for data processing: prize draw contract, Art. 6 (1) lit. b GDPR.
Storage period: We will delete the data collected in connection with the prize draw within one month of the conclusion of the prize draw and the determination of the winner, in the event that you were not identified as a winner. Should you be identified as a winner, we are legally obliged to retain the data for up to 10 years due to statutory retention periods under tax and commercial law (§ 147 (1) AO, § 257 (1) HGB).
Data recipients: Your data will only be passed on to third parties insofar as this is necessary for the conduct of the prize draw (e.g. postal service providers). No transfer to other third parties or to third countries takes place. Publication of the winner is not envisaged.
To apply to us, we offer our careers portal at https://www.kreussler.com/. All required data protection information can be found at: https://chemische-fabrik-kreussler-co-gmbh.onlyfy.jobs/policy.
We point out that when you apply to us, we process the information we receive from you in the course of the application process, e.g. through cover letters, CVs, certificates, correspondence, and telephone or oral statements. In addition to your contact details, information relevant to us includes, in particular, details of your education, qualifications, work experience and skills. We will assess you solely on the basis of your suitability for the respective position, so you do not need to send us a photograph.
Your data will initially be processed exclusively for the purpose of conducting the application process. If your application is successful, it will become part of your personnel file and will be used for the implementation and termination of the employment relationship, and will be deleted in accordance with the rules applicable to personnel files. If we are currently unable to offer you employment, we will process your data for up to six months after sending the rejection letter in order to defend ourselves against any legal claims, in particular regarding alleged discrimination in the application process. With explicit consent, you will be included in the applicant pool. Where cost reimbursements are received or other tax-relevant processes exist, the corresponding booking documents will be retained to fulfil budgetary and tax-law retention obligations in accordance with the applicable retention obligations. Your data will initially be accessible to our HR department and the Recruiting department, as well as the specialist department of the position you applied for and, if necessary, the accounting department. Our administrators and processors have technically necessary access to data processed via IT. They are strictly bound by our instructions and may not process the data for their own purposes. In certain cases, we must disclose your personal data to third parties, such as our bank if you receive cost reimbursement, or to the postal service if we communicate with you by letter.
The legal basis for data processing in the application procedure and as part of the personnel file is § 26 (1) sentence 1 BDSG and Art. 6 (1) lit. b GDPR and, where you have given consent, e.g. by submitting information not necessary for the application process, Art. 6 (1) lit. a GDPR. The legal basis for data processing following a rejection is Art. 6 (1) lit. f GDPR. The legal basis for budgetary and tax-law retention is Art. 6 (1) lit. c GDPR in conjunction with § 147 AO. Legitimate interest in processing on the basis of Art. 6 (1) lit. f GDPR is the defence against legal claims.
We generally do not require special categories of personal data within the meaning of Art. 9 GDPR for the application process. We ask you not to send us such information from the outset. If such information is exceptionally relevant to the application process, we will process it together with your other applicant data. This may, for example, concern information about a severe disability, which you may voluntarily provide to us and which we must then process to fulfil our special obligations with regard to severely disabled persons. In these cases, processing serves the exercise of rights or the fulfilment of legal obligations under employment law, social security law and social protection. The legal basis for data processing is then Art. 9 (2) lit. b GDPR, §§ 26 (3) BDSG, 164 SGB IX. Exceptionally, it may be necessary to obtain information about your health or a disability, or a certificate of good conduct from the Federal Central Criminal Register, i.e. regarding prior convictions, in order to assess your suitability for the intended role. The legal basis for this is § 26 BDSG. Your data will not be used by us for automated decision-making or profiling. Your data will be processed exclusively in Germany by us or on our behalf.
All our web presences use Google Analytics, a web analytics service provided by Google LLC (for Europe: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland – "Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. We have activated IP anonymisation on this website; therefore, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website use and internet use to the website operator. Google is thus a processor within the meaning of Art. 4 No. 8 GDPR; a corresponding data processing agreement pursuant to Art. 28 (3) GDPR has been concluded. The setting of Google Analytics cookies is based on your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 sentence 1 TDDDG.
The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data from Google.
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.
Our websites use Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in truncated form, thus excluding any personal reference. Where a personal reference is attributable to the data collected about you, this is immediately excluded and the personal data is promptly deleted.
We use Google Analytics to analyse and continuously improve the use of our website. The statistics obtained allow us to improve our offering and make it more interesting for you as a user.
For cases in which personal data is transferred to the USA, Google has submitted to the EU–U.S. Data Privacy Framework: https://www.dataprivacyframework.gov/s/.
Our websites also use Google Analytics for a cross-device analysis of visitor flows, which is carried out via a User ID. You can deactivate the cross-device analysis of your usage in your customer account under "My Data", "Personal Data".
Overview of cookies set by Google Analytics
On our web presences https://www.kreussler.com/ and https://www.kreussler-pharma.de/ we use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager is used to manage website tags via an interface, enabling other services to be integrated into our online offering. The Tag Manager itself (which implements the tags) does not, for example, create user profiles or store cookies. Google only receives the user's IP address, which is necessary to run Google Tag Manager. The legal basis for data processing is your consent within the meaning of Art. 6 (1) lit. a GDPR. For cases in which personal data is transferred to the USA, Google has submitted to the EU–U.S. Data Privacy Framework: www.dataprivacyframework.gov/s/. Further information on Google Tag Manager is available at: marketingplatform.google.com; Privacy policy: policies.google.com/privacy; Types of processing and data processed: privacy.google.com/businesses/adsservices; Data processing terms for Google advertising products and standard contractual clauses for third-country data transfers: https://business.safety.google/adsprocessorterms.
Overview of cookies set by Google Tag Manager
On all our web presences we use so-called Web Fonts provided by Google for the uniform display of typefaces, on the basis of Art. 6 (1) sentence 1 lit. f GDPR. When a page is accessed, your browser loads the required fonts into your browser cache in order to display texts and typefaces correctly. The Google Fonts are installed locally. No connection to Google's servers takes place. If your browser does not support fonts, a standard font from your computer will be used.
We maintain publicly accessible profiles on social networks, which are intended to improve our company's reach, facilitate access to our customers and make interaction with you easier. The individual social networks we use can be found below. On our web presences we only link to our social media channels.
Social networks such as Facebook etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account.
Using the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be indicated by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).
When you visit one of our social media presences (e.g. Facebook), we are in many cases jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can generally assert your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Please note that, despite joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions — in particular retention periods — remain unaffected.
We have no influence over the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
We maintain a profile on Facebook. The provider is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We have concluded a joint processing agreement (Controller Addendum) with Facebook. This agreement sets out which data processing operations we and Facebook are each responsible for when you visit our Facebook page. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. Facebook also processes data from you in the USA, among other places. Meta has submitted to the EU–US Data Privacy Framework. You can adjust your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads. For details, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.
We maintain a profile on Instagram. The provider is Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. Instagram is a subsidiary of Meta Platforms. We have agreed so-called standard contractual clauses with Instagram that comply with European data protection standards. Instagram also processes data from you in the USA, and Meta has submitted to the EU–US Data Privacy Framework. Further information on data protection at Instagram can be found here: https://privacycenter.instagram.com/policy/.
We maintain a profile on Indeed (job portal). The provider is Indeed, Inc., Austin Indeed Tower (HQ), 200 West 6th Street, Floor 36, Austin, TX 78701, USA. We have agreed so-called standard contractual clauses with Indeed that comply with European data protection standards. Indeed also processes data from you in the USA, and Indeed has submitted to the EU–US Data Privacy Framework. Further information on data protection at Indeed can be found here: https://hrtechprivacy.com/de/brands/about-indeed#privacypolicy.
We maintain a profile on Xing (professional social media network). The provider is Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany. Further information on data protection at Xing: https://privacy.xing.com/de/datenschutzerklaerung.
We maintain a profile on LinkedIn. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. We have agreed so-called standard contractual clauses with LinkedIn that comply with European data protection standards. LinkedIn also processes data from you in the USA, and LinkedIn has submitted to the EU–US Data Privacy Framework. Further information on data protection at LinkedIn: https://www.linkedin.com/legal/privacy-policy.
We maintain a profile on the video portal YouTube and have also embedded YouTube videos on our website. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. For data processing in the European area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible. We have agreed so-called standard contractual clauses with YouTube (and Google) that comply with European data protection standards. YouTube (and Google) also processes data from you in the USA, and YouTube (and Google) has submitted to the EU–US Data Privacy Framework.
The YouTube videos embedded in our online offering and stored on www.YouTube.com can be played directly from our website https://www.kreussler-pharma.de/. These are all embedded in "enhanced data protection mode", meaning that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned under b) be transmitted. We have no influence over this data transfer.
To ensure data protection on this website, YouTube is deactivated when you first visit the website. A direct connection to YouTube's servers is only established when you independently activate YouTube (consent pursuant to Art. 6 (1) lit. a GDPR and § 25 (1) sentence 1 TDDDG). This prevents your data from being transmitted to YouTube when you first visit the page. After activation, YouTube receives the information that you have accessed the relevant subpage of our website. In addition, the data mentioned in section V of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be assigned directly to your account. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the demand-oriented design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right you must contact YouTube. Further information on data protection at YouTube (and Google) can be found at: https://business.safety.google/intl/de/adsprocessorterms/ and https://policies.google.com/privacy.
Overview of cookies set by YouTube
This privacy policy is continuously updated.
Date of creation: 07 July 2025.
GDPR
EU General Data Protection Regulation (EU Regulation 2016/679). The primary data protection law at European level with direct legal effect in all EU member states.
BDSG
Federal Data Protection Act (Bundesdatenschutzgesetz) — the national data protection law of Germany.
TDDDG / TTDSG
Act on Data Protection and Privacy in Telecommunications and Telemedia (Telekommunikation-Telemedien-Datenschutz-Gesetz). It aligns the existing data protection provisions for telemedia and telecommunications services with Regulation (EU) 2016/679 (GDPR) and transposes the provisions of Directive 2002/58/EC (ePrivacy Directive) into national law.
Personal Data
Any information relating to an identified or identifiable natural person. (Art. 4 No. 1 GDPR)
Controller
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. (Art. 4 No. 7 GDPR)
Consent (of the data subject)
Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. (Art. 4 No. 11 GDPR)
