Visitors Privacy Notice
Last Updated Date: 01.07.2026
Introduction
Ascend GmbH (“Ascend”, “Company”, “we”, “our”, or “us”), a subsidiary of Alkem Laboratories Limited, India, and based in Germany, is committed to protecting the privacy and security of personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) (“GDPR”) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
This Visitor Privacy Notice (“Notice”) applies to individuals who visit Ascend offices, facilities, warehouses, laboratories, or other business premises, including visitors, guests, vendors, contractors, auditors, consultants, service personnel, and other individuals (collectively, “Visitors” or “you”) who enter Ascend premises for business, professional, operational, or official purposes.
Ascend acts as the controller for the processing of Visitor Personal Data and determines the purposes and means of such processing in the context of its business operations.
This Notice describes how Ascend collects, receives, stores, uses, discloses, shares, transfers, and otherwise processes personal data of Visitors (“Visitor Personal Data”) in connection with its business operations and in accordance with applicable data protection laws.
Contents
I. Who is responsible for the processing of your personal data?
II. Which of your personal data do we collect and use?
III. On which legal basis do we process your personal data?
IV. Using and disclosing your personal information
V. How can you access your personal data or ask for a correction?
VI. Which data protection rights do you have with regards to your personal data?
VII. Storage and security of personal information
VIII. Do we disclose your information outside the EEA?
IX. Contact us
I. Who is responsible for the processing of your personal data?
Ascend GmbH and its subsidiary or affiliated companies are responsible for the processing of your personal data. For the purposes of applicable privacy and data protection laws, the primary controller of your personal data is Ascend GmbH. Other Ascend group companies may also receive and process your personal data, either in the capacity of a controller or a processor, and this Notice applies equally to them.
II. Which of your personal data do we collect and use?
We collect and use personal data that we receive from you in connection with your visit to Ascend premises. In addition, and to the extent necessary for the purposes described in this Notice, we may process personal data obtained from publicly available sources or lawfully received from third parties.
The types of personal data we may collect include, but are not limited to:
1. Identity and Contact Information
- Full Name
- Email Address
- Telephone Number
- Employer/Organization Name
- Job Title or Position
- Business Contact Details
2. Visitor Information
- Date and time of visit
- Host or contact person at Ascend
- Purpose of visit
- Visitor badge number
- Vehicle registration details (where applicable)
3. Identification Information
- Government-issued identification details (where required for security, access control, legal, or regulatory purposes)
4. Security and Access Information
- Entry and exit records
- Access control logs
- CCTV recordings where surveillance systems are in operation
We recommend that you do not provide special categories of personal data unless specifically requested. We will only collect such data where permitted by law and, where required, with your explicit consent.
Where possible, we will collect personal data directly from you, for example, when you:
- Register your visit;
- Sign in at reception;
- Attend meetings or events at our premises;
- Communicate with us regarding your visit;
- Use visitor Wi-Fi or other visitor services.
We may also obtain personal data from:
- Your employer or organization;
- Security or facility management providers;
- Government or law enforcement authorities where legally permitted or required.
All personal data collected from you is securely stored in the Company’s internal systems and infrastructure to ensure confidentiality, integrity, and appropriate access control.
III. On which legal basis do we process your personal data?
Ascend processes your personal data for the purposes described in this Notice in accordance with the GDPR and BDSG based on one or more of the following legal grounds:
- Legitimate Interests (Article 6(1)(f) GDPR): To manage visitor access, maintain business relationships, ensure facility security, protect personnel and assets, and administer business operations.
- Compliance with Legal Obligations (Article 6(1)(c) GDPR): To comply with applicable legal, regulatory, health and safety, and security requirements.
- Consent (Article 6(1)(a) GDPR): Where consent is required under applicable law.
- Performance of a Contract or Pre-contractual Measures (Article 6(1)(b) GDPR): Where your visit relates to contractual arrangements or business engagements with Ascend.
Where CCTV footage is used for security purposes, processing is generally based on Ascend’s legitimate interests in ensuring the safety and security of its premises, personnel, visitors, and assets.
IV. Using and disclosing your personal information
The personal data you provide to us may be used for:
- Visitor registration and access management;
- Identity verification and security screening;
- Issuing visitor badges and access credentials;
- Managing meetings, audits, inspections, and business activities;
- Maintaining facility security and monitoring access to premises;
- Providing visitor services, including guest Wi-Fi access;
- Health, safety, emergency response, and incident management;
- Compliance with legal, regulatory, and corporate governance requirements;
- Establishing, exercising, or defending legal claims.
Your personal information may also be used to comply with legal obligations, including disclosures to authorized entities such as law enforcement agencies, government bodies, courts, and regulatory authorities.
The personal data you provide may be disclosed to:
- Our employees and authorized personnel;
- Our parent company and affiliated group companies where necessary;
- Security service providers and facility management providers;
- IT service providers and business support service providers;
- Professional advisers, auditors, and consultants;
- German government bodies, regulatory authorities, courts, and law enforcement agencies;
- Any entity to whom we are authorized or required by law to disclose your personal information.
- The above entities may in turn process your personal data in accordance with their own legal obligations and privacy notices.
V. How can you access your personal data or ask for a correction?
- If you wish to access your personal data, exercise any of your data protection rights, or have questions or concerns regarding how Ascend processes your personal data, you may contact the Data Protection Officer using the contact details provided below.
- If you believe that your personal data has been processed unlawfully or are not satisfied with the response received, you have the right to lodge a complaint with the competent data protection authority in Germany or in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
- You also have the right to seek judicial remedies where you consider that your data protection rights have been violated.
VI. Which data protection rights do you have with regards to your personal data?
Subject to applicable law, you may have the following rights:
- Right of Access – To obtain confirmation of whether we process your personal data and receive a copy of such data.
- Right to Rectification – To request correction of inaccurate or incomplete personal data.
- Right to Erasure – To request deletion of your personal data under certain circumstances.
- Right to Restriction of Processing – To request restriction of processing in certain situations.
- Right to Data Portability – To receive your personal data in a structured, commonly used, machine-readable format and request transfer to another controller where applicable.
- Right to Object – To object to processing based on legitimate interests, including processing carried out for security or business management purposes where permitted by law.
- Right to Withdraw Consent – Where processing is based on consent, you may withdraw your consent at any time.
- Right to Lodge a Complaint – To lodge a complaint with a competent supervisory authority.
VII. Storage and security of personal information
Ascend takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures include:
- Secure electronic systems with controlled access rights;
- Authentication mechanisms and role-based access controls;
- Physical security controls for facilities and records;
- CCTV and monitoring systems where appropriate;
- Regular security assessments and monitoring;
Staff training on data protection and confidentiality obligations.
Personal data will only be retained for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, contractual, or operational requirements.
Where personal data is no longer required, it will be securely deleted, anonymized, or destroyed in accordance with applicable laws and retention schedules.
VIII. Do we disclose your information outside the EEA?
Ascend operates as part of an international group of companies and may transfer personal data to affiliated entities, including Alkem Laboratories Limited in India, and to service providers located outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, Ascend will ensure that appropriate safeguards are implemented in accordance with Chapter V of the GDPR, including where appropriate:
- European Commission Adequacy Decisions;
- Standard Contractual Clauses (SCCs);
- Other lawful transfer mechanisms recognized under the GDPR.
Ascend will take reasonable steps to ensure that overseas recipients provide an adequate level of protection for personal data.
IX. Contact us
If you have any questions about this Privacy Notice or the processing of your personal data, please contact us at:
Email: privacy@ascend-de.eu
Postal Address:
Ascend GmbH
Sebastian-Kneipp-Straße 41
60439 Frankfurt am Main
Germany