Privacy policy

Privacy policy

 

1. Introduction

With the following information, we would like to give you, as the "data subject", an overview of the processing of your personal data by us and your rights under data protection laws. The use of our web pages is possible without providing personal data. However, if you want to use special services of our company via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

 

The processing of personal data, such as the name, address, or email address, shall always take place in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Sonnen-Apotheke BV registered merchant. With this data protection declaration (privacy policy), we would like to inform you about the scope and purpose of the personal data collected, used and processed by us.

 

As the controller, we have implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can have security gaps, meaning that absolute protection cannot be guaranteed. You are therefore free to send us personal data by other means, e.g. by telephone or by post.

 

2. Data controller

The data controller within the meaning of the GDPR is:

 

Company name:

Sonnen-Apotheke BV 

Inh. Ciprian Militaru 

Pannenberg 12A 

5951 DM, Belfeld

Telefon: +31 (0) 77 204 33 66

E-Mail: info@sonnen-apotheke.nl

Representative of the data controller: Ciprian Militaru 

 

3. Data Protection Officer

The appointment of a data protection officer is not a legal requirement for us. If you have any questions about privacy, please contact us at info@eumed.ro.

 

4. Definitions

The data protection declaration (privacy policy) is based on the terms used by the legislators responsible for European legislature when issuing the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public, as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

 

In this privacy policy, we use the following terms, among others:

 

1.Personal data

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2.Data subject

The data subject is any identified or identifiable natural person whose personal data is processed by the controller (our company).

3.Processing

Processing is any operation or set of operations which is/are performed on personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or combination, restriction, erasure or destruction.

4.Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.

5.Profiling

Profiling is any form of automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person's performance at work, financial circumstances, health, personal preferences, interests, reliability, behaviour, location or change of location.

6.Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person.

7.Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

8.Recipient

Recipient means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether they are a third party or not. However, authorities that receive personal data in the context of a specific investigation carried out in accordance with the law of the European Union or a Member State shall not be considered as recipients.

9.Third parties

Third party means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.

10.Consent

Consent is any indication of the data subject's wishes, given in an informed and unambiguous manner, in the form of a statement or other unambiguous affirmative act by which the data subject signifies his/her agreement to personal data relating to him/her being processed.

 

5. Legal basis of the processing

Art. 6(1)(a) GDPR (in conjunction with Section 15(3) of the German Telemedia Act (TMG)) serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose.

 

If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, in the case of processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to such processing which is necessary for the implementation of pre-contractual measures, e.g. in the case of enquiries about our products or services.

 

If our company is subject to a legal obligation through which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1)(c) GDPR.

 

In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were to be injured on our premises and, as a result, his/her name, age, health insurance information or other important information needed to be disclosed to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1)(d) GDPR.

 

Finally, processing operations could be based on Article 6(1)(f) of the GDPR. Processing that does not fall under one of the above legal bases is based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh our legitimate interest. We are permitted to carry out such processing in particular because it is expressly mentioned by the European legislator. In this respect, the legislator considered that a legitimate interest can be assumed if you are a customer of our company (GDPR recital 47, second clause).

 

6. Transmission of data to third parties

Your personal data will not be passed on to third parties for purposes other than those listed below.

 

We will only share your personal information with third parties if:

 

1. You have given your express consent to this in accordance with Art. 6(1) clause 1(a) GDPR,

2. the disclosure according to Art. 6(1) clause. 1 lit. f GDPR to protect our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,

3. in the event of a legal obligation to disclose in accordance with Art. 6(1) clause 1(c) GDPR, as well as

4. this is legally permissible and necessary according to Art. 6(1) clause 1(b) GDPR for the processing of contractual relationships with you.

 

We would like to point out that our online shop is (co-)operated by Mauve Mailorder Software GmbH & Co KG. In this context, that company acts as an order data processor. If you have already made a purchase in our pharmacy, your existing data record will be supplemented by the additional data entered during ordering or registration.

The processing of your data takes place on servers in Germany and thus within the scope of the EU data protection.

 

 

7. Technology

7.1 SSL/TLS encryption

This website uses SSL and/or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator. You can recognise an encrypted connection by the fact that there is a "https://" instead of a "http://" in the address line of the browser and by the lock symbol in your browser line.

 

We use this technology to protect your transmitted data.

 

7.2 Data collection when visiting the website

If you only use our website for informational purposes, i.e. you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (in "server log files"). Our website collects a series of general data and information each time you or an automated system call up a page. This general data and information is stored in the server log files. The following can be recorded:

 

1. the browser types and versions used,

2. the operating system used by the accessing system,

3. the website from which an accessing system arrives at our website ("referrer"),

4. the sub-pages that are accessed via a system accessing our website,

5. the date and time of access to the website,

6. an abbreviated Internet Protocol address (anonymised IP address),

7. the Internet service provider of the accessing system.

 

When using this general data and information, we do not draw any conclusions about your person. Rather, this information is needed to

 

1. deliver the contents of our website correctly,

2. optimise the content of our website and the advertising for it,

3. ensure the continuous operability of our IT systems and the technology of our website, and

4. provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack.

 

Therefore, we evaluate the collected data and information only for statistical purposes, with the aim of increasing the data protection and data security of our company, and with the aim of ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files is stored separately from any personal data provided by a data subject.

 

The legal basis for the data processing is Art. 6(1) clause 1(f) GDPR. Our legitimate interest is derived from the above purposes of data collection.

 

8. Cookies

8.1 General information about cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your IT system (laptop, tablet, smartphone or similar) when you visit our website.

 

In the cookie, information is stored that relates to the respective end device used. This does not mean, however, that we thereby obtain direct knowledge of your identity.

 

The use of cookies serves on the one hand to make the use of our services more pleasant for you. We use "session cookies" to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

 

In addition, in order to optimise user-friendliness, we also use temporary cookies which are stored on your terminal device for a certain period of time. When you visit our site again to use our services, it is automatically recognised that you have already been with us and which entries and settings you have made, so that you do not have to enter them again.

 

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies allow us to automatically recognise that you have already been to our website when you visit it again. These cookies are automatically deleted after a certain period of time.

 

8.2 Legal basis for the use of cookies / Usercentrics

The data processed by cookies, which are necessary for the proper functioning of the website, are thus necessary to protect our legitimate interests as well as those of third parties in accordance with Art. 6(1) clause 1(f) GDPR.

 

For all other cookies, you must have given your consent within the meaning of Art. 6(1)(a) GDPR via our opt-in cookie banner.

 

This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this consent in accordance with data protection law. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter: "Usercentrics").

When you visit our website, the following personal data is transmitted to Usercentrics:

     - Your consent(s) or revocation of your consent(s)

     - Your IP address

     - Information about your browser

     - Information about your terminal device

     - Time of your visit to the website

In addition, Usercentrics stores a cookie in your browser in order to be able to assign the consent you have given or its revocation. 
Usercentrics is used to obtain consent for the use of certain technologies as required by law. The legal basis for this is Art. 6(1) clause 1(c) GDPR.

 

The data is deleted as soon as it is no longer required for our logging purposes. The duration of the cookie is 60 days. The consent data must be retained for 6 years in accordance with Section 257 of the German Commercial Code (HGB). Any withdrawal of consent previously given shall be retained for three years. The retention is based on the one hand on our accountability according to Art. 5(2) GDPR. This obliges compliance with the processing of personal data in accordance with the General Data Protection Regulation. In contrast, the retention period in the regular limitation period according to Section 195 of the German Civil Code (BGB) is three years.

 

Usercentrics collects log file data and consent data using JavaScript. This JavaScript allows us to inform users of their consent to certain cookies and other technologies on our website and to obtain, manage and record that consent. You can permanently prevent the execution of JavaScript at any time by changing your browser settings accordingly, which also prevents the execution of JavaScript by Usercentrics.

 

For more information about Usercentrics' privacy practices, please visit: https://usercentrics.com/de/datenschutzerklarung/.

 

 

 

9. Content of our website

9.1 Registering as a user

You have the option to register on our website by providing personal data.

 

Which personal data is transmitted to us in the process is determined by the respective form used for registration. The personal data you enter is collected and stored exclusively for internal use by us and for our own purposes. We may have the data transferred to one or more processors, e.g. a parcel service provider, who will also use the personal data exclusively for an internal use for which we are accountable.

 

When you register on our website, the IP address assigned by your Internet Service Provider (ISP), the date and time of registration are also stored. The storage of this data takes place against the background that only in such a way the abuse of our services can be prevented, and the data makes it possible in the event of need to clarify criminal offences that have been committed. In this context, the storage of this data is necessary for our security. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

 

Your registration, including the voluntary provision of personal data, also serves us to offer you contents or services which, due to the nature of the contents or services, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from our database.

 

On request, we will provide you at any time with information about what personal data is stored about you. In addition, we will correct or delete personal data at your request, insofar as this does not conflict with any legal obligations to retain data. A data protection officer named in this data protection declaration and all other employees are available to the data subject as contact persons in this context.

 

The processing of your data takes place in the interest of a comfortable and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

 

9.2 Data processing when opening a customer account and for contract processing

According to Art. 6(1)(b) GDPR, personal data is collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the data controller. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to a further use of your data or a legally permissible further use of the data by us is reserved, about which we will inform you accordingly below.

 

9.3 Data processing for order processing

The personal data collected by us will be passed on to the transport company commissioned with the delivery in the context of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institute within the context of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly point this out to you in the following. The legal basis for the transmission of data here is Art. 6(1)(b) GDPR.

 

9.4 Conclusion of contracts for online shops, dealers and the shipment of goods

We only pass on personal data to third parties if this is necessary in the context of processing the contract, for example to the companies entrusted with the delivery of the goods or to the credit institution entrusted with the processing of payments. A further transmission of the data does not take place or only takes place if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes.

 

The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

 

9.5 Contacting/contact form

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be taken from the respective contact form. This data is stored and used exclusively to answer your enquiry or to contact you and for the related technical administration. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1)(b) GDPR. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter at hand has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

 

9.6 Services / Digital goods

We only transmit personal data to third parties if this is necessary for the processing of the contract, for example to the credit institution commissioned with the processing of payments.

 

A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes.

 

The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

 

9.7 Blog comment function

We offer users the opportunity to leave individual comments on individual blog posts on a blog that is located on our website. A blog is a usually publicly viewable portal on a website where one or more persons, called bloggers or web bloggers, can publish articles or write down thoughts in blog posts. Blog posts can usually be commented on by third parties.

 

If you leave a comment in the blog published on this website, in addition to the comments you leave, information on the time of comment entry as well as the selected username (pseudonym) will be stored and published. In addition, the IP address assigned by your Internet Service Provider (ISP) is also logged. This storage of the IP address is done for security reasons and in the event that you have violated the rights of third parties or posted illegal content through a submitted comment. It is therefore in our own interest to store this personal data so that we can exculpate ourselves in the event of a breach. This represents a legitimate interest in the sense of Art. 6(1)(f) GDPR, a transfer of this collected personal data to third parties does not take place, unless such a transfer is required by law or serves our legal defence.

 

9.8 Application management / job exchange

We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing may also be carried out by electronic means. This is particularly the case if an applicant sends us the relevant application documents electronically, e.g. by email or via a form on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests on our part oppose the deletion. Another legitimate interest in this sense is, for example, a duty of proof in proceedings under the German General Equal Treatment Act (AGG).

 

The legal basis for the processing of your data is Art. 88 GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG).

 

9.9. Note on health data

 

(1) The processing of our customers' data is carried out in accordance with Art. 6(1)(b) GDPR for the provision of contractual and contractual services. Which data is collected and processed depends on the type, scope, purpose and necessity of the processing. Essentially, inventory and contact data of the customers (name, address, telephone, email address, etc.), contract data (products used and their costs, names of contact persons) and payment data (order process, payment history, bank details, etc.) are collected and processed. (2) In the area of health care, special categories of data are collected in accordance with Art. 9(1) GDPR. This includes, in particular, information about the patient's health, including sexual orientation and sex life, as well as questions about the patient's state of health, previous illnesses or existing pregnancies. This information is necessary in order to be able to recognise interactions of the prescribed medications. For the processing of these particularly sensitive data, if necessary, the explicit consent of the patient is always required in accordance with Art. 6(1(a), Art. 7, Art. 9(2)(a) GDPR. Another purpose is the health care of the patient on the basis of Art. 9(2)(h) GDPR in conjunction with Section 22(1) No. 1b BDSG. (3) To the extent required by law or necessary for the performance of the contract, we also disclose and transfer patient data when communicating with health care professionals and those customarily involved in the performance of the contract. This includes, among others, laboratories, billing offices and comparable service providers, factoring companies. The basis for this processing is Art. 6(1)(b) and (c) GDPR. In addition, we have a legitimate interest under Art. 6 (1)(f) GDPR to provide patients with efficient and cost-effective healthcare. Further bases for processing are, in addition to the vital interest of the patient (Art. 6(1)(d) GDPR), the express consent of the customer (Art. 6(1)(a), Art. 7 GDPR). The data will be deleted immediately when it is no longer required for the fulfilment of contractual and legal obligations as well as for the processing of warranty and other obligations. Within the context of the statutory retention periods, a necessity test is carried out every three years.

 

9.10 Pre-orders of medication / courier service

We offer the convenient service of "medication pre-order" and "courier service". In this way, you can conveniently reserve medicines from us without obligation or have medicines delivered to your home. For the non-binding reservation of medication, we process the following data: Your first name, your last name, your email address, your telephone number as well as the details of the desired medication and the health insurance company if a prescription is available.

This information is mandatory so that we can process your medication pre-order and notify you by email and phone when your pre-order is available at our pharmacy. If you have chosen the courier service, the address is also a mandatory field. Your phone number, on the other hand, is not. Mandatory fields are marked with an asterisk (*). All other information is optional so that we can make the collection of your medication even more convenient. Processing for the above purposes is based on the consent we obtain from you. Pre-ordering is not possible without this consent. You can revoke your consent at any time with effect for the future. The legal basis for the processing within the scope of the data processing for your medication pre-order and the courier service is Art. 9(2)(a) GDPR. You have expressly consented to the processing of the above data within the context of the pre-order or courier service. You can revoke this consent at any time.

 

 

10. Newsletter delivery

10.1 Newsletter delivery to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to periodically email you offers for goods or services similar to those you have already purchased from us. According to Section 7(3) of the German Fair Trade Practices Act (UWG), we do not need to obtain separate consent from you for this. In this respect, data processing is carried out exclusively on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6(1)(f) GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the above advertising purpose at any time with effect for the future by notifying the data controller named at the beginning. You will only incur transmission costs in accordance with the base rates. After receipt of your objection, the use of your email address for advertising purposes will cease immediately.

 

10.2 Advertising newsletter

On our website, you are given the opportunity to subscribe to our company newsletter. Which personal data is transmitted to us when ordering the newsletter, results from the form used for this purpose.

 

We inform our customers and business partners at regular intervals about our offers through a newsletter. In principle, you can only receive the newsletter of our company if

 

1. you have a valid email address and

2. you have signed up to receive the newsletter.

 

For legal reasons, a confirmation email will be sent to the email address you provided for the first time for the newsletter delivery as part of the double opt-in procedure. This confirmation email is used to verify that you, as the owner of the email address, have authorised receipt of the newsletter.

 

When you register for the newsletter, we also store the IP address of the IT system you are using at the time of registration as well as the date and time of registration as assigned by your Internet Service Provider (ISP). The collection of this data is necessary in order to be able to trace the (possible) misuse of your email address at a later date and thus serves our legal protection.

 

The personal data collected in the course of registering for the newsletter is used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or changes in technical circumstances. The personal data collected in the context of the newsletter service will not be passed on to third parties. You can unsubscribe from our newsletter at any time. The consent to the storage of personal data that you have given us for the newsletter dispatch can be revoked at any time. For the purpose of revoking consent, a corresponding link can be found in each newsletter. In addition, it is possible at any time to unsubscribe from the newsletter directly on our website or to inform us of this in another way.

 

The legal basis for data processing for the purpose of sending newsletters is Art. 6(1)(a) GDPR.

 

11. Our social network activities

So that we can also communicate with you via social networks and inform you about our services, we are represented there with our own pages. If you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform within the meaning of Art. 26 GDPR for the processing operations triggered thereby that concern personal data.

 

We are not the original provider of these sites, but only use them within the scope of the possibilities offered by the respective providers.

Therefore, as a precautionary measure, we would like to inform you that your data may also be processed outside the European Union or the European Economic Area. The use can therefore be associated with data protection risks for you, as the protection of your rights, e.g. to information, deletion, objection, etc., may be more difficult and the processing on social networks often takes place directly for advertising purposes or for the analysis of user behaviour by the providers, without us being able to influence this. If usage profiles are created by the provider, cookies are often used or the usage behaviour is directly assigned to your own member profile of the social networks (if you are logged in there).

 

The described processing of personal data takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to be able to communicate with you in a timely manner or to inform you about our services. If you as a user have to give your consent to data processing with the respective providers, the legal basis refers to Art. 6(1)(a) GDPR in conjunction with Art. 7 GDPR.

 

Since we do not have access to the databases of the providers, we would like to point out that it is best to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data on social networks and the possibility to make use of your right of objection or revocation ("opt-out"), we have listed below with the respective provider of the social networks used by us:

 

11.1 Facebook

(Joint) data controller responsible for data processing in Europe:

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

 

Privacy policy:

https://www.facebook.com/about/privacy

 

Opt-out and advertising preferences:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

 

https://de-de.facebook.com/about/privacy/

 

11.2 Instagram

(Joint) data controller responsible for data processing in Germany:

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

 

Privacy policy:

http://instagram.com/legal/privacy/

 

Opt-out and advertising preferences:

https://www.instagram.com/accounts/privacy_and_security/

 

11.3 LinkedIn

(Joint) data controller responsible for data processing in Europe:

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

 

Privacy policy:

https://www.linkedin.com/legal/privacy-policy

 

Opt-out and advertising preferences:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

 

12. Social media plugins

12.1 Facebook plugin

We have integrated components of the company Facebook on this website. Facebook is a social network.

 

A social network is a social meeting place operated on the Internet, an online community that usually allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos and connect via friend requests, among other things.

 

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data where a data subject lives outside the US or Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

 

Each time you access one of the individual pages of this website operated by us on which a Facebook component (Facebook plugin) has been integrated, the Internet browser on your information technology system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. For a complete overview of all Facebook plug-ins, please visit https://developers.facebook.com/docs/plugins/?locale=de_DE. in the context of this technical process, Facebook receives information about which specific sub-page of our website is visited by you.

 

If you are logged in to Facebook at the same time, Facebook recognises which specific sub-page of our website you are visiting each time you visit our website and for the entire duration of your respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account. If you click on one of the Facebook buttons integrated on our website, e.g. the "Like" button, or post a comment, Facebook assigns this information to your personal Facebook user account and stores this personal data.

 

Facebook always receives information via the Facebook component that you have visited our website if you are logged into Facebook at the same time as accessing our website; this takes place irrespective of whether you have clicked on the Facebook component or not. If you do not want this information to be transmitted to Facebook, you can prevent the transmission by logging out of your Facebook account before accessing our website.

 

Facebook's published privacy policy, which is available at https://de-de.facebook.com/about/privacy/, provide information about Facebook's collection, processing and use of personal data. It also explains the privacy settings that Facebook offers. In addition, there are various applications that make it possible to suppress data transmission to Facebook. Such applications can be used by you to suppress data transmission to Facebook.

 

12.2 Instagram plugin

We have integrated components of the service Instagram on this website. Instagram is a service that is considered an audio-visual platform and allows users to share photos and videos, as well as share this data on other social networks.

 

The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

 

Each time you access one of the individual pages of this website operated by us on which an Instagram component (Instagram button) has been integrated, the internet browser on your information technology system is automatically prompted by the respective Instagram component to download a representation of the corresponding component from Instagram. In the context of this technical process, Instagram receives information about which specific sub-page of our website is visited by you.

 

If you are logged in to Instagram at the same time, Instagram recognizes which specific sub-page you are visiting each time you visit our website and for the entire duration of your respective stay on our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click on one of the Instagram buttons integrated on our website, the data and information transmitted in the process will be assigned to your personal Instagram user account and stored and processed by Instagram.

 

Instagram always receives information via the Instagram component that you have visited our website if you are simultaneously logged into Instagram at the time of calling up our website; this takes place irrespective of whether you have clicked on the Instagram component or not. If you do not want this information to be transmitted to Instagram, you can prevent the transmission by logging out of your Instagram account before accessing our website.

 

For more information and to review Instagram's applicable privacy policy, please visit https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

 

13. Web analytics

13.1 Facebook Pixel (Custom Audience)

This website uses the "Facebook Pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If express consent is given, users' behaviour can be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and may help optimise future advertising efforts.

 

The data collected is anonymous for us, i.e. it does not allow any conclusions to be drawn about the identity of the user. However, the data is stored and processed by Facebook so that a link to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to serve ads on and off Facebook. In addition, a cookie may be stored on your computer for these purposes. This processing is carried out exclusively with explicit consent in accordance with Art. 6(1)(a) GDPR.

 

This processing is carried out exclusively with explicit consent in accordance with Art. 6(1)(a) GDPR.

 

To deactivate the use of cookies on your IT system, you can change your Internet browser settings so that no more cookies can be stored on your IT system in the future or so that cookies that have already been stored are deleted. However, switching off all cookies may mean that some functions on our Internet pages can no longer be used. You can also opt-out of the use of cookies by third parties such as Facebook at the following Digital Advertising Alliance website: https://www.aboutads.info/choices/.

 

In addition, you can disable cookies for reach measurement and advertising purposes on the following websites:

 

1. http://optout.networkadvertising.org/

2. http://www.youronlinechoices.com/uk/your-ad-choices/

 

Please note that this setting will also be deleted when you delete your cookies.

 

13.2 Google Analytics

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see point "Cookies") are used. The information generated by the cookie about your use of the website, such as

 

1. Browser type/version,

2. Operating system used,

3. Referrer URL (the previously visited page),

4. Host name of the accessing computer (IP address),

5. Time of the server request,

 

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be disclosed to third parties if required by law or if third parties process this data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymised so that an assignment is not possible (IP masking).

 

You may refuse the use of cookies by choosing the corresponding settings on your browse. However, please note that if you do this you may not be able to use the full functionality of this website.

 

This processing is carried out exclusively with explicit consent in accordance with Art. 6(1)(a) GDPR.

 

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

 

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the following link: Disable Google Analytics. An opt-out cookie is set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

 

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

 

13.3 Google Analytics Remarketing

We have integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords that allows a company to show ads to Internet users who have previously visited the company's website. The integration of Google Remarketing thus enables a company to create user-related advertising and thus display interest-relevant advertising to the Internet user.

 

The company that operates the Google Remarketing Services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

The purpose of Google Remarketing is to display interest-based advertising. Google Remarketing enables us to use the Google advertising network to place ads or display ads on other websites that are tailored to the individual needs and interests of Internet users.

 

Google Remarketing sets a cookie on the IT system of the data subject. By setting the cookie, Google is able to recognise the visitor to our website when he/she subsequently visits websites that are also members of the Google advertising network. Each time you access a website on which the Google Remarketing service has been integrated, your internet browser automatically identifies itself to Google. Within the context of this technical procedure, Google obtains knowledge of personal data, such as your IP address or your surfing behaviour, which Google uses, among other things, to display interest-based advertising.

 

By means of the cookie, personal information, such as the Internet pages you have visited, is stored. When you visit our website, personal data, including your IP address, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal information collected through the technical process with third parties.

 

You can prevent the use of cookies by our website, as already described above, at any time by means of an appropriate setting in your Internet browser used and thus permanently object to the use of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

 

You also have the option to object to interest-based advertising by Google. To do this, you must access the link www.google.de/settings/ads via the Internet browser you are using and choose the desired settings there.

 

These processing operations are only carried out if express consent has been given in accordance with Art. 6(1)(a) GDPR.

 

For more information and to review Google's applicable privacy policy, please visit https://www.google.de/intl/de/policies/privacy/.

 

13.4 Kairion (only with consent)

We use the service Kairion, provided by ePrivacy GmbH, Große Bleichen 21, 20354 Hamburg, Germany (www.kairion.de/datenschutzbestimmungen) .Kairion collects transaction data in the connected online shops, such as product or category interests, but NOT data such as names, addresses or similar from the users. Conclusions on your identity are not possible for Kairion. This service may involve, inter alia, medical products such as medication. Therefore, under certain circumstances, the collection of transaction data on this website may involve the collection and processing of health data.

After you grant your consent under Art. 6(1)(a) GDPR, Kairion uses for a profile data collection in particular services of the technical service provider ADEX GmbH, Torstraße 19, 10119 Berlin, Germany, to place advertising also on other websites. ADEX offers "targeting" technologies, in which ADEX evaluates specific usage behaviour on the websites in order to optimise advertising for the user on the basis of individual usage interests.

Cookies, web beacons or similar technologies are used for this purpose. The collected usage data is stored under a pseudonym. Information about user activities on our websites, services, applications and tools (e.g. advertising banners clicked on, sub-pages visited, search queries, etc.) is assigned to this pseudonym. A personal identification of the user is therefore excluded. The IP address of your computer transmitted for technical reasons is completely anonymised and not used for the targeted display of advertising. Further information on data protection at ADEX can be found at:

     http://de.theadex.com/company/privacy/

If the user wishes to stop receiving usage-based advertising and prevent further collection of usage data, the user may use the following opt-out link:

     http://de.theadex.com/company/consumer-opt-out/

Adex uses cookies. The data in the cookies can only be read again by the platform that stored them.

Cookies are used when you visit a website that uses Kairion's services. That is, when you visit a page that prepares the delivery of advertising by Kairion. The cookies used by the platform do not cause any damage to your end device (e.g. computer / tablet), in particular they do not contain viruses. You may refuse the use of cookies by selecting the appropriate settings in your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. The same applies to the deletion of stored cookies. Cookies can be synchronised with other platforms to facilitate the exchange of information. Cookies always belong to a website, or more precisely to the associated domain. Only the owner of this website – as the "1st party" – can write and read the corresponding cookie.

These cookies are used to tailor the delivery of advertising outside the shop to target groups and interests. For this purpose, an "advertising ID" is stored in the cookie (e.g. so that you are not shown the same advertisement again and again). The ID can also be assigned to advertising categories (e.g. age between 18 and 35 / interest in cars). However, these categories always apply to a larger group of persons, both individually and collectively. This means that the operator can neither identify you as a person via the advertising ID as such nor via the categories assigned to the ID. The cookies with the advertising ID can also be used by the customers for whom the operator processes data on behalf when delivering advertising via the platform. The operator's customers can assign the advertising ID to their own ID with advertising categories. In this respect, however, the respective customer is responsible for data processing, to which the privacy policy on the website you are visiting applies.

 

 

14. Advertising

14.1 Google Ads (formerly AdWords)

Our website uses the functions of Google Ads, so we advertise this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited.

 

This processing is carried out exclusively with express consent in accordance with Art. 6(1)(a) GDPR.

 

Additional data processing will only occur if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalise the ads you see online. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data in order to build target groups.

 

You can permanently disable the creation of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/.

 

Alternatively, you can obtain information from the Digital Advertising Alliance at the Internet address www.aboutads.info about the setting of cookies and make settings in this respect. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

 

Further information and the privacy policy on advertising and Google can be found here: https://www.google.com/policies/technologies/ads/.

 

14.2 Google AdSense

We have integrated Google AdSense on this website. Google AdSense is an online service that enables the placement of ads on third-party websites. Google AdSense is based on an algorithm that selects the ads displayed on third-party websites according to the content of each third-party website. Google AdSense enables Interest-based targeting of Internet users, which is achieved by creating individual user profiles.

 

The operating company of the Google AdSense component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

The purpose of the Google AdSense component is the integration of advertising on our website. Google-AdSense sets a cookie on your IT system. By setting the cookie, Alphabet Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, is enabled to analyse the use of our website. Each time you access one of the individual pages of this website operated by us on which a Google AdSense component is integrated, the Internet browser on your IT system is automatically prompted by the respective Google AdSense component to transmit data to Alphabet Inc. for the purpose of online advertising and the settlement of commissions. In the course of this technical procedure, Alphabet Inc. obtains knowledge of personal data, such as your IP address, which Alphabet Inc. uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission calculations.

 

You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Alphabet Inc. from setting a cookie on your IT system. In addition, a cookie already set by Alphabet Inc. can be deleted at any time via the Internet browser or other software programs.

 

Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in web pages to allow log files to be recorded and analysed so that statistical analysis can be performed. By means of the embedded tracking pixel, Alphabet Inc. can see whether and when an Internet page was opened by your IT system and which links you clicked on. Among other things, tracking pixels are used to evaluate the flow of visitors to a website.

 

Via Google AdSense, personal data and information, which also includes the IP address and which is necessary for the collection and billing of the displayed advertising, is transmitted to Alphabet Inc. in the United States of America. This personal data is stored and processed in the United States of America. Alphabet Inc. may share this personal information collected through the technical process with third parties.

 

Google-AdSense is explained in more detail at this link https://www.google.de/intl/de/adsense/start/.

 

This processing is carried out exclusively with express consent in accordance with Art. 6(1)(a) GDPR.

 

14.3 Google Ads with conversion tracking

We have integrated Google Ads on this website. Google Ads is an Internet advertising service that allows advertisers to display ads in both Google's search engine results and the Google advertising network. Google Ads allows an advertiser to pre-define certain keywords for which an ad will be displayed in Google's search engine results only when the user accesses a search result relevant to the keyword through the search engine. In the Google advertising network, the ads are distributed to relevant websites using an automatic algorithm and taking into account the previously defined keywords.

 

The company operating the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

The purpose of Google Ads is to promote our website by displaying interest-relevant ads on third-party websites and in the search engine results of the Google search engine, as well as displaying third-party ads on our website.

 

If you reach our website via a Google ad, Google will store a "conversion cookie" on your IT system. A conversion cookie expires after thirty days and is not used to identify you. The conversion cookie is used, provided that the cookie has not yet expired, to track whether certain sub-pages, for example the shopping basket of an online shop system, have been accessed on our website. The conversion cookie allows both us and Google to track whether a user who came to our website via an AdWords ad generated turnover, i.e. completed or cancelled a purchase.

 

The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who have been referred to us via ads, i.e. to determine the success or failure of the respective ads and to optimise our ads for the future. Neither our company nor other advertisers of Google Ads receive any information from Google that could identify you.

 

By means of the conversion cookie, personal information, such as the web pages you have visited, is stored. Whenever you visit our website, personal data, including the IP address of the internet connection you are using, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal information collected through the technical process with third parties.

 

You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on your IT system. In addition, a cookie already set by Google Ads can be deleted at any time via the Internet browser or other software programs.

 

You also have the option to object to interest-based advertising by Google. To do this, you must access the link www.google.de/settings/ads via the Internet browser you are using and make the desired settings there.

 

This processing is carried out exclusively with explicit consent in accordance with Art. 6(1)(a) GDPR.

 

For more information and to review Google's applicable privacy policy, please visit https://www.google.de/intl/de/policies/privacy/.

 

14.4 Perfect Audience

We use the Perfect Audience re-targeting tool from Marin Software Inc, 123 Mission Street, 25th Floor, San Francisco, CA 94105, USA ("Perfect Audience"). For this purpose, we have integrated the Perfect Audience pixel on our website, which is used to collect statistical, pseudonymous data about your visit and use of our website. Based on this information, Perfect Audience allows us to show you interest-specific and relevant offers on our partners' websites. No identifying information about you is transmitted to the partner sites; instead, based on the information stored in a cookie, advertisements are displayed for services in which you have expressed interest on our website. No usage profiles are merged with other data about you. You can prevent the storage of cookies by a browser setting. Alternatively, you can object to this form of re-targeting by using the following link to set an opt-out cookie that will remain on your device until you delete the cookies: https://www.perfectaudience.com/privacy/.

 

This processing is carried out exclusively with express consent in accordance with Art. 6(1)(a) GDPR.

 

15. Partner and affiliate programs

15.1 Amazon Affiliate Program (AmazonPartnerNet)

As a participant in the Amazon Affiliate Program, we have integrated Amazon components on this website. The Amazon components were designed by Amazon with the aim of directing customers via ads to various websites of the Amazon group, in particular Amazon.co.uk, Local.Amazon.co.uk, Amazon.de, BuyVIP.com, Amazon.fr, Amazon.it and Amazon.es. BuyVIP.com in exchange for a commission. Our company may earn advertising revenue from the use of the Amazon components.

 

The operating company of these Amazon components is Amazon EU S.à.r.l, 5 Rue Plaetis, L-2338 Luxembourg, Luxembourg.

 

Amazon sets a cookie on your IT system. Each time you access one of the individual pages of this website operated by us on which an Amazon component is integrated, the Internet browser on your information technology system is automatically prompted by the respective Amazon component to transmit data to Amazon for the purpose of online advertising and the settlement of commissions. In the context of this technical process, Amazon obtains knowledge of personal data which it uses to trace the origin of the orders received by Amazon and subsequently to enable commission accounting. Among other things, Amazon can track that you have clicked on an affiliate link on our website.

 

You can prevent the setting of cookies by Amazon and our website at any time by selecting the appropriate setting in your internet browser. In addition, cookies that have already been set can be deleted at any time via the Internet browser or using other software programs.

 

The use of the Amazon Affiliate Program is in the best interest of the welfare of all our employees and our shareholders. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

 

For more information and to review Amazon's applicable privacy policy, please visit https://www.amazon.de/gp/help/customer/display.html?nodeId=3312401.

 

16. Payment providers

16.1 Klarna

We have integrated components from Klarna into our website. Klarna is an online payment service provider that enables purchase on account or flexible payment by instalments. Klarna also offers other services, such as buyer protection or an identity and credit check.

 

The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

 

If you choose "purchase on account" or "payment in instalments" as a payment option during the ordering process in our online shop, your data will automatically be transmitted to Klarna. By selecting one of these payment options, you consent to the transmission of personal data that is required for the processing of the invoice or purchase with payment in instalments or for the identity and credit check.

 

The personal data transmitted to Klarna is usually first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data required for the processing of a purchase with payment on account or payment in instalments. The processing of the purchase agreement also requires such personal data in connection with the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and taxes, details of your previous purchasing behaviour or other information about your financial situation.

 

The transmission of data serves in particular to verify identity, to manage payments and to combat fraud. We transmit personal data to Klarna in particular if there is a legitimate interest in the transmission. The personal data exchanged between Klarna and us will be transmitted by Klarna to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.

 

Klarna also discloses personal data to affiliated companies (Klarna Group) and service providers or subcontractors to the extent necessary to fulfil contractual obligations or to process the data on behalf of Klarna.

 

In order to decide on the establishment, implementation or termination of a contractual relationship, Klarna collects and uses data and information about the payment behaviour of the data subject and probability values for his future behaviour ("scoring"). Scoring is based on scientifically recognised mathematical-statistical procedures.

 

You have the possibility to revoke your consent to the processing of personal data at any time with respect to Klarna. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

 

The use of Klarna is in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

 

You can find Klarna's applicable privacy policy at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

 

16.2 PayPal

We have integrated components from PayPal on this website. PayPal is a provider of online payment services. Payments are processed via PayPal accounts, which are virtual private or business accounts. In addition, PayPal offers the possibility to process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also performs escrow functions and offers buyer protection services.

 

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

 

If you select "PayPal" as a payment option during the ordering process in our online shop, your data will automatically be transmitted to PayPal. By selecting this payment option, you agree to the transmission of the personal data required for payment processing.

 

The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The processing of the purchase agreement also requires personal data in connection with the respective order.

 

The purpose of the transfer of data is payment processing and fraud prevention. We transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit reporting agencies. The purpose of this transmission is to verify identities and creditworthiness.

 

PayPal may share personal information with affiliates and service providers or subcontractors as necessary to fulfil contractual obligations or process the information on our behalf.

 

You have the option to revoke your consent to the processing of personal data at any time to PayPal. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

 

The use of PayPal is in the interest of a proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

 

You can find PayPal's applicable privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

 

16.3 Sofort

We have integrated components of Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment for products and services on the Internet. Sofortüberweisung is a technical procedure in which the online merchant immediately receives a payment confirmation. This allows the merchant to deliver goods, services or downloads to the customer immediately after the order is placed.

 

The operating company of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany, part of Klarna Bank AB, (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

 

If you choose "Sofortüberweisung" as payment method during the order process in our online shop, your data will automatically be transmitted to Sofort. By selecting this payment option, you agree to the transmission of the personal data required for payment processing.

 

For the purchase transaction via Sofortüberweisung, you transmit your PIN and the TAN to Sofort GmbH. Sofort carries out a transfer to us after a technical check of the account balance and retrieval of further data to check the account coverage. We are automatically notified of the performance of this financial transaction.

 

The personal data exchanged with Sofort is first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The purpose of the transfer of data is payment processing and fraud prevention. We also transmit other personal data to Sofort if there is a legitimate interest in the transmission. The personal data exchanged between Sofort and us can be transmitted by Sofort to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.

 

Sofort may pass on personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfilment of contractual obligations or the data is to be processed based on an order.

 

The data subject has the option to revoke the consent to the processing of personal data at any time with respect to Sofort. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

 

The use of Sofortüberweisung is in the interest of a proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

 

The applicable data protection provisions of Sofort can be found at klarna.com/en/datenschutz/.

 

17. Your rights as a data subject

17.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data relating to you is being processed.

 

17.2 Right to information pursuant to Art. 15 GDPR

You have the right to receive from us at any time and free of charge information about the data stored about you as well as a copy of this data in accordance with the statutory provisions.

 

17.3 Right of rectification pursuant to Art. 16 GDPR

You have the right to request that inaccurate personal data concerning you be corrected. You also have the right to request the completion of incomplete personal data, taking into account the purpose of the processing.

 

17.4 Deletion pursuant to Art. 17 GDPR

You have the right to demand that we delete the personal data concerning you without delay, provided that one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

 

17.5 Restriction of processing pursuant to Art. 18 GDPR

You have the right to request that we restrict processing if one of the legal requirements is met.

 

17.6 Data portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract under Article 6(1)(b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority granted to us.

 

In addition, when exercising your right to data portability pursuant to Article 20(1) GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

 

 

17.7 Objection pursuant to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out on the basis of Article 6(1)(e) (data processing in the public interest) or (f) (data processing on the basis of a balance of interests) GDPR.

 

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of the establishment, exercise or defence of legal claims.

 

In individual cases, we process personal data in order to carry out direct advertising. You can object to the processing of personal data for the purposes of this advertising at any time. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to the processing of your data for direct marketing purposes, we will no longer process the personal data for these purposes.

 

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

 

You are free to exercise your right to object in relation to the use of information company services by automated means using technical specifications, notwithstanding Directive 2002/58/EC.

 

 

17.8 Revocation of consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time with effect for the future.

 

17.9 Complaint to a supervisory authority

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.

 

18. Routine storage, deletion and blocking of personal data

We process and store your personal data only for the period of time necessary to achieve the purpose of storage or if this is provided for in the legal provisions to which our company is subject.

 

If the purpose of the storage no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

 

19. Duration of the storage of personal data

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of this period, the corresponding data will be routinely deleted if it is no longer required for the fulfilment or initiation of the contract.

 

20. Actuality and change of the data protection regulations

This privacy policy is currently valid and was last updated in: September 2021.

 

Due to the further development of our web pages and offers on them or due to changed legal or official requirements, it may become necessary to change this privacy policy. You can access and print the current privacy policy at any time on the website under https://www.eumed.ro/privacy-policy.html.

 

Follow us on our social media channels
Thank you for being part of the EUmed community, a community that values health. We are glad you are here and we can support you with a variety of products and personal advice. This way, we can make the best decision for you together!
Sign up for our news blog!
Sign in here
Zurück

Wenn Sie in unserem Shop ein Benutzerkonto einrichten, werden Sie schneller durch den Bestellvorgang geführt, können Ihren bisherigen Bestellablauf verfolgen und vieles mehr.

Registrieren
Zurück
Der Warenkorb ist noch leer.
{{ productName }} ist nicht rabattierfähig.

{{ added.quantity }}x {{ added.item.name }} wurde Ihrem Warenkorb hinzugefügt.

Zur Kasse Warenkorb bearbeiten
Gutschein ():
Zwischensumme
Bis zur Versandkostenfreigrenze fehlen
0,00€
Zur Kasse Warenkorb bearbeiten Zahlung mit PayPal
Zurück

Öffnungszeiten

Montag 08:00 - 18:30
Dienstag 08:00 - 18:30
Mittwoch 08:00 - 18:30
Donnerstag 08:00 - 18:30
Freitag 08:00 - 18:30
Samstag 08:30 - 12:30
Sonntag geschlossen
Mehr über unsere Apotheke