Section 1 Information on the collection of personal data
- The following information provides details about the collection of personal data when using our website. Personal data refers to all data that relates to you personally, e.g. name, address, e-mail addresses, user behaviour.
- In accordance with Art. 4 (7) of the General Data Protection Regulation (GDPR), responsibility for the collection of data is the pharmacy or its owner specified in the legal notice (see our Legal Notice). Please refer to the legal notice for details on contacting our Data Protection Officer (Owner)
- If you contact us by e-mail or by using a contact form, the data you provide (your e-mail address, your name and your telephone number, if applicable) is stored in order to respond to your questions. We will delete the data that arises in this context once storage is no longer required, or limit the processing of the data if there are any statutory retention requirements.
- If we use any third-party providers to provide individual functions of our service or wish to use your data for advertising purposes, we will inform you in detail about the respective processes involved below. We also state the criteria used to determine the duration of retention.
Section 2 Your rights
- You have the following rights regarding the personal data that concerns you as data subject:
- Right of access (Art. 15 GDPR),
- Right to rectification or erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object to processing (Art. 21 GDPR),
- Right to data portability (Art. 20 GDPR).
- You also have the right to submit a complaint to a data protection supervisory authority about our processing of your personal data.
Section 3 Personal data collected when visiting our website
- If you use our website for purely informational purposes, i.e. you do not register or provide us with any other information, we will only collect personal data that your browser transmits to our server. If you wish to view our website, we will collect the following data, which is technically required to display our website and ensure its stability and security (legal basis is Art. 6 (1) sentence 1 (f) GDPR). This information will be temporarily stored in a so-called log file until it is automatically erased:
- IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- Amount of data transferred in each case,
- Website from which the request originates,
- Browser,
- Operating system and its interface,
- Language and version of the browser software,
- Accessed host name.
- In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files stored on your hard drive which are assigned to the browser you are using and through which certain information flows to the location that has set the cookie (in this case to us). Cookies cannot execute any programs or transmit any viruses to your computer. They serve to make online services more user-friendly and efficient. Legal basis is Art. 6 (1) sentence 1 (f) GDPR.
- Use of cookies:
- This website uses the following types of cookies, the scope and extent of which are explained below:
- Transient cookies (see 2),
- Persistent cookies (see 3).
- Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognised again when you return to our website. Session cookies are deleted when you log out or close your browser.
- Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
- You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We draw your attention to the fact that you may not be able to use all the functions of our website.
- This website uses the following types of cookies, the scope and extent of which are explained below:
Section 4 Other functions and services on our website
- In addition to the purely informational use of our website, we offer various services that you can use if you are interested. In order to use them, you will generally need to provide further personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply.
- In some cases, we use external providers to process your data. These have been carefully selected and commissioned by us. They are bound by our instructions and are regularly checked.
- We may also disclose your personal data to third parties when offering promotions, competitions, contract conclusions, or similar services together with our partners. You will receive further information about this when entering your personal data or it can be found in further detail in the description of our services below.
- If our service providers or partners are based in a country outside the European Economic Area (EAA), we will inform you about the consequences of this in the description of our services.
Section 5 Objection or revocation of consent to the processing of your data
- If you have granted consent to the processing of your data, this can be revoked at any time. Once you have notified us of the wish to revoke your consent, this will alter the permissibility of processing your personal data.
- Insofar as the processing of your personal data is based on a balance of interests, you may object to the processing. This is the case if, in particular, processing is not required to fulfil a contract with you, as is set out in each case in the description of the features below. If you do object to the processing, we would ask you to explain the reasons why we should not process your personal data as we have done. In the case of a justified objection, we will examine the matter and will either discontinue or adjust the data processing, or point out the compelling legitimate reasons allowing us to continue the processing of your data.
- You may of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising by contacting us at the address provided in the legal notice.
Section 6 Newsletter
- With your consent, you can subscribe to our newsletter in which we will inform you about current and interesting health topics.
- We use the so-called double opt-in method for registering for our newsletter. That means that after you have registered, we will send you an e-mail to the address you have provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your details will be blocked and automatically deleted after one month. In addition, we will store the IP address you have used in each case and the times of registration and confirmation. The purpose of the procedure is to document your registration and, if necessary, to investigate any possible misuse of your data.
- Your e-mail address is the only mandatory information required for sending the newsletter. The provision of other data, marked separately, is voluntary and is used to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter. Legal basis is Art. 6 (1) sentence 1 (a) GDPR.
- You can revoke your consent to being sent the newsletter at any time and can cancel the newsletter. You can notify us of your revocation by clicking on the link provided in each newsletter e-mail or by sending us a message to the address provided in the legal notice.
Section 7 Advance orders
- If you would like to place – non-binding – advance orders through our website, it is necessary for you to enter your personal data that we require to process your advance order. The mandatory information required to process your advance order is separately marked, other details are voluntary. The data you provide is used to process your advance order. Please note that this data also relates to your health, which is awarded increased protection as special personal data within the meaning of Art. 9 (1) GDPR. We meet this requirement by using a special encryption system. In order to inform you about the status of your reservation and/or any special features of the product ordered, we will contact you using one of the options you have provided (e-mail, telephone, SMS). Legal basis is Art. 6 (1) sentence 1 (b) GDPR.
- In order to prevent any unauthorised access to your personal data by third parties, in particular to any health data, the ordering process is encrypted using SSL technology.
Section 8 Contacting us through our website
- If you contact us through our website (e.g. for enquiries or to arrange appointments), it is currently mandatory to provide your e-mail address; all further details are voluntary, but they may make it easier to contact you (e.g. telephone number). We use the data you provide to respond to your enquiries. Legal basis is Art. 6 (1) sentence 1 (b) GDPR.
- Your data will be deleted once we have fully responded to your enquiry, provided there are no statutory retention requirements.