Privacy Notice – GMP Hygiene Training for External Company Employees

Which personal data is processed as part of the training?

The following personal data is processed as part of participation in the GMP Hygiene Training:

• First name
• Last name
• Company name
• Certificate / training date

This data is required for the execution, documentation, and verification of the training in accordance with GMP requirements.

Legal basis for data processing

The processing of personal data is carried out on the basis of Art. 6(1)(c) GDPR (fulfilment of legal and regulatory obligations according to the EU GMP Guidelines) as well as for ensuring the required hygiene and quality standards (Art. 6(1)(f) GDPR – legitimate interest).

Data retention period

Certificates are stored for 15 years in the electronic archive system (B.DoCS) in accordance with GMP requirements.

Statutory or contractual requirement

Access to the B. Braun plant premises can only be granted if the requirements of the applicable GxP regulations – particularly the EU GMP Guidelines and the hygiene and quality standards defined therein – have been met. Participation in the training is therefore mandatory.

Data controller

B. Braun Melsungen AG
Carl-Braun-Straße 1
34212 Melsungen
Your data is not processed outside the European Union.

No automated decision-making

No automated decision-making within the meaning of Art. 22(1) GDPR takes place.

Rights of data subjects

As a participant of the GMP Hygiene Training, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
  You may request information about the data stored about you and its processing.
• Right to rectification (Art. 16 GDPR)
  You have the right to have inaccurate or incomplete personal data corrected.
• Right to erasure (Art. 17 GDPR)
  Under the legal requirements, you may request the deletion of your personal data.
  Deletion is excluded if statutory retention periods or GMP regulatory requirements prevent it.
• Right to restriction of processing (Art. 18 GDPR)
  You may request the restriction of the processing of your data, provided that the legal conditions are met.
• Right to object (Art. 21 GDPR)
  You may object to the processing of personal data for reasons arising from your particular situation if the processing is based on Art. 6(1)(f) GDPR.
  Please note: An objection is excluded when processing is required to fulfil legal obligations under GMP regulations (Art. 6(1)(c) GDPR).
• Right to data portability (Art. 20 GDPR)
  You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller.
• Right to withdraw consent (Art. 7(3) GDPR)
  Where processing is based on consent, you may withdraw it at any time with effect for the future.
  (Note: If consent is not used as a legal basis, this right formally exists but does not apply in practice.)

Questions related to data processing may be directed to: trainingsteam_medical@bbraun.com

Supervisory authority

Hessian Commissioner for Data Protection and Freedom of Information, Wiesbaden

Data Protection Officer of B. Braun Melsungen AG

Email: datenschutz@bbraun.com