Privacy Policy

Data privacy policy of Advilex Regulatory Compliance LLC

1. General information & Contact details

Data protection is taken seriously by Advilex Regulatory Compliance LLC and any subsidiaries (hereinafter Advilex, “we” or “us”). Advilex is the operator of the Advilex Global Compliance Management Service, including ARCAIS and other solutions that may be provided via https://www.advilex-reg.com (or any successor site or domain owned by Advilex) (the “Website”), and is therefore the responsible body (controller) with respect to the processing of users’ personal data submitted through the Website.

By way of this “Privacy Policy” we want to inform you about personal data, the purpose of our processing of your personal data, how we intend to use it and how you are able to correct or amend your information.

Advilex Regulatory Compliance LLC and its wholly owned subsidiary Advilex Information Solutions, LLC

248 N Market St., New Wilmington, PA 16142, USA
E-Mail: advilex-admin@advilex.com

Data Protection Officer (“DPO”):

Dr. Robert Janssen, CEO
Our data protection officer (“DPO”) can be contacted by email at: robert.janssen@advilex.com

2. Scope of application

We expressly state that the Privacy Policy shall apply to all users of the Website.

3. What is personal data?

Personal data means “any information relating to an identified or identifiable natural person”. The term therefore includes information concerning known or already identified persons, as well as any information allowing us to directly or indirectly identify you. It therefore also includes information only allowing an indirect identification by assignment to an identifier, an identification number, location data, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (i.e. your address, your telephone number, your email address, or your IP-address).

Information due to which your identity cannot be determined does not qualify as personal data. As an example, such information is all information without any connection to your name.

4. Data identification & purpose for processing

a. We collect and process the following types of personal data in order to operate the Website and provide information to our users:

• Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
• Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the Website (including date and time); page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.

b. We do not use this usage data in order to identify your identity and do not combine it with other personal data from third parties.

c. Besides the above, you may give us information about you by filling out forms on the Website or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you use the Website, participate in discussion boards or other social media functions on the website, sign-up to a newsletter and when you report a problem with the Website. The information you give us may include your name, address, e-mail address, phone number, and personal description.

5. Data retention

We will retain the data you provide to us by using the Website for as long as necessary for the purpose of processing, yet no longer than five years.

After that, we may store your information in an aggregated and anonymized format.

6. Transfer & disclosure of personal data

We only use your personal information for internal business purposes and only transfer or disclose it to third parties whenever necessary to fulfil the legitimate purpose or to process a contractual relationship with you and only to such third parties which are supposed to help with the fulfilment of the legitimate purpose or our contract with you.

Apart from this, your personal data will not be transferred or disclosed to a third party, unless you have expressly agreed to any transfer or unless we are obliged to disclose personal data, e.g. by statutory law, court order, or official directive.

7. Cookies

Cookies are small text files, which can be stored on the hard drives of website users. They enable personalized adjustments to be made to the Website. Furthermore, cookies are used by Advilex to analyze the use of the Website in pseudonymized form, as well as the online advertisement and to store general preferences of the user. Furthermore, we may use such statistics of users of the Website for our market research and product improvement purposes. Most browsers are activated in a form that they accept cookies automatically. You may deactivate cookies or change the settings of your browser so that it informs you as soon as cookies are sent. However, in this event, a smooth functioning of our website is no longer possible.

8. Technical infrastructure

The technical infrastructure used for Advilex SCM project is hosted primarily on Amazon Web Services (AWS), leveraging its scalable, secure, and globally available cloud platform. All infrastructure components are provisioned within AWS “eu-west-1 Europe (Ireland) “ that align with data residency and compliance requirements—primarily within the GDPR Policy. All access to our cloud resources is secured using encrypted channels (TLS/SSL) and strictly governed by Identity and Access Management (IAM) policies, Multi-Factor Authentication (MFA), and role-based access controls (RBAC). Administrative access is limited to authorized personnel, and all actions are logged and monitored using Amazon CloudWatch for continuous compliance and auditing.

Network security is enforced using security groups, Network Access Control Lists (NACLs), Load balancer and AWS Web Application Firewall (WAF), ensuring that only required ports and services are exposed to the internet or internal services. Non-authorized traffic is explicitly denied at all layers.

Data is processed and stored exclusively within AWS data centres located in the specified geographies— eu-west-1 Europe (Ireland)—based on project and compliance requirements. AWS services such as Amazon RDS, S3, and EC2 are used with encryption at rest and in transit, using AWS Key Management Service (KMS) for secure key handling.

9. Creation of personal profiles

We permit third parties to record information on the use of our offers without relation to personal information. Due to pseudonymization and anonymization of the gained information as well as our practices, your privacy stays protected all the time. In particular, it is possible that the use of analytical tools (webtracking) results in the creation of specific user profiles. We use – like almost every website operator – analytical tools in the form of tracking software, in order to determine the use frequency, and the number of users on the Website. For example, we use Google Analytics, a web analysis service of Google Inc. as well as other Advilex internal tools to analyze use of our Website and services.

Google Analytics tracking software uses cookies which are stored on a computer of the user and technically enable analyses of the use of the website (see also section “Cookies”). The cookie-generated information about the usage of the Website is used to create reports about the activities on the Website and to provide further services in connection to the Website use. In the case of the Google Analytics process your IP-address will be made unrecognizable, thus it will be anonymous. With Google Analytics neither we, nor the operator of the analyzing tools are able to record personal data that may reveal the identity of the user. Google Analytics can be deactivated by installing a Browser-Add-On (available under http://tools.google.com/dlpage/gaoptout?hl=de).

You can object to the use of cookies for Google webtracking by deactivating interest-based-advertising by Google via this link: https://www.google.com/settings/ads/onweb/. Also you can object to the collection of data regarding your use of this website by Google by downloading and installing the respective Browser-Plug-In via this link: http://tools.google.com/dlpage/gaoptout?hl=de.

10. Newsletter

We occasionally use newsletter services to send out emails with our newsletter on our behalf. If you would like to receive our newsletter you have to provide your email address as well as additional information allowing the verification of the specified email address and consent to receiving the newsletter (“double opt-in”).

Your consent regarding the collection, storage and use of your email address can be revoked at any time, i.e. via the “unsubscribe”-link in the newsletter or via advilex-admin@advilex.com.

11. Data Subject rights

You have certain rights in relation to the personal data we hold about you, which we detail below. Some of these only apply in certain circumstances as set out in more detail below. We also set out how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights by sending us a scanned copy of your ID-card. We will respond to a request by you to exercise those rights without undue delay and at least within one month (although this may be extended by a further two months in certain circumstances). To exercise any of your rights, please contact us by email at advilex-admin@advilex.com.

• a. Access: You have the right to know whether we process personal data about you, and if we do, to access data we hold about you and certain information about how we use it and whom we share it with.
• b. Portability: You have the right to receive a subset of the personal data we collect from you in PDF-format and a right to request that we transfer such personal data to another party. If you wish for us to transfer the personal data to another party, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal data or its processing once received by the third party. We also may not provide you with certain data if providing it would interfere with another’s rights.
• c. Correction: You have the right to correct any personal data held about you that is inaccurate. Where you request correction, please explain in detail why you believe the personal data we hold about you to be inaccurate or incomplete so that we can assess whether a correction is required.
• d. Erasure: You may request that we erase the personal data we hold about you in the following circumstances:
  • you believe that it is no longer necessary for us to hold the personal data we hold about you;
  • we are processing the personal data we hold about you on the basis of your consent, and you wish to withdraw your consent and there is no other ground under which we can process the personal data;
  • we are processing the personal data we hold about you on the basis of our legitimate interest and you object to such processing. Please provide us with detail as to your reasoning so that we can assess whether there is an overriding interest for us to retain such personal data;
  • you no longer wish us to use the personal data we hold about you in order to send you marketing material;
  • you believe the personal data we hold about you is being unlawfully processed by us.
• e. Restriction of processing: You have a right to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances. Please note, however, that if we stop processing the personal data, we may use it again if there are valid grounds under data protection law for us to do so (e.g. for the defence of legal claims or for another’s protection).
• f. Objection: At any time you have the right to object to our processing of data about you in order to send you marketing material, including where we build profiles for such purposes and we will stop processing the data for that purpose. Besides that, you may also object
  • If we are processing the data we hold about you (including where the processing is profiling) on the basis of our legitimate interest and you object to such processing. Please provide us with detail as to your reasoning so we can assess whether there is a compelling overriding interest in us continuing to process such data or we need to process it in relation to legal claims. Also note that you may exercise your right to request that we stop processing the data whilst we make the assessment on an overriding;
  • If we are processing the data on the basis of historical/scientific research or statistics and you also have a particular reason to object. Your right would not apply where we have been tasked with and it is necessary for us to undertake such processing in the public interest.
• g. Complaints: In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance and we will endeavour to deal with your request. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the EU country in which you live or work where you think we have infringed data protection laws.

12. Right of modification

If we make any material changes to this privacy policy, we will post the updated privacy policy here and notify our users. Please check this page frequently to see any updates or changes to this privacy policy.