Waves BG

Privacy policy

Problems falling asleep? A hot cup of lavender tea or reading our privacy policy will help. ? Joking aside, it is of course very important!

With this data protection declaration, we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data is any data that has a personal reference to you, e.g. name, address, e-mail address or user behaviour.

Who is responsible for data processing at our company

Responsible for data processing is:

Hasen Apotheke
Inh. pharmacist Ji-Young Shin e.K.
Blodigstr. 6
80933 Munich
Germany
089/31 32 365
hallo@hasenapotheke.de
https://hasenapotheke.de/impressum/

Processing of your data within the framework of our health care activities

We process your personal data transferred to us within the framework of the contractual and pre-contractual relationships existing between us. The scope, type, purpose and necessity of the processing depends on the respective underlying contractual relationship. For this purpose, we store and process your data in the computer systems we use. The data processed by us includes all those data that were provided by you for the purpose of using the contractual or pre-contractual services and are required to process your enquiry or the contract concluded between us.

This may include, in particular, the following data:

  • Name and address
  • E-mail address and telephone number
  • Contract data
  • Payment details.

The processing is limited to those data that are necessary and appropriate to answer enquiries and/or to fulfil a contract concluded between you and us. The processing also includes special categories of personal data according to Art. 9 (1) DSGVO. The processing is carried out in the context of preventive health care pursuant to Art. 9 para. 2 lit. h) DSGVO, § 22 para. 1 no. 1 b) BDSG. Furthermore, if necessary, we obtain your consent in accordance with Art. 9 Para. 2 lit. a) before processing. Data is only passed on to third parties if this is necessary for the purpose of providing the service or within the framework of the organisation of our business for the processing of financial accounting and compliance with legal obligations. In this case, only those data are transferred to external service providers that are necessary and expedient for the fulfilment of the contract or for the processing of the financial accounting as well as the compliance with legal obligations. Legal basis: The processing of your personal data as well as the transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) DSGVO and serves to fulfil the contract between you and us. Otherwise, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) DSGVO, if you have consented to the transfer, Art. 6 para. 1 lit. a), the transfer is necessary to protect vital interests concerning you or another natural person, Art. 6 para. 1 lit. d) or if there is a legitimate interest for us in this, Art. 6 para. 1 lit. f) DSGVO. This is the case, for example, if this is necessary to pursue our claims. Deletion: Your data will be deleted as soon as the data is no longer required for the fulfilment of contractual or legal duties of care and for dealing with any warranty and comparable obligations. The statutory retention obligations remain unaffected by this.

Web hosting

In order to maintain our online presence, we use an internet service provider on whose server the website is stored (hosting) and who makes our website available on the internet. In doing so, the internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf.Name and address of the internet service provider: ALL-INKL.COM Hauptstraße 68, 02742 Friedersdorf, Germany. You can view their privacy policy here: https://all-inkl.com/datenschutzinformationen/. Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 DSGVO. The data processing is based on our legitimate interest in an efficient and secure provision of our internet offer, Art. 6 para. 1 lit. f) DSGVO.

If you only use our website for information purposes, our internet service provider only collects the personal data that the browser you are using transmits to its server. This is the following data:

  • IP address
  • the date and time of access to our website
  • Time zone difference from Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • the volume of data transferred
  • the Internet service provider of the accessing system
  • the type of browser you are using and its version
  • the operating system you are using
  • the website from which you may have accessed our website
  • the pages or sub-pages that you visit on our website.

The aforementioned data is stored as log files on the servers of our internet service provider. This is necessary in order to be able to display the website on the end device you are using and to ensure stability and security. Our legitimate interest in data processing lies in the aforementioned purposes. Legal basis: The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO. Duration: The above data for the provision of our website is stored for a period of 7 days and then deleted.

CDN

We use the content delivery network KeyCDN on our website, a product of proinity LLC based in Switzerland.

KeyCDN is used to optimise the loading times of our website and to secure it. For this purpose, we use KeyCDN as a Content Delivery Network (CDN). A CDN is a network of regionally distributed servers connected via the internet. The CDN provides scaling storage and delivery capacities. This ensures optimal data throughput even with large peak loads. Via KeyCDN, user requests on our website are first routed via KeyCDN servers. Statistics are created from these data streams. This serves to detect potential threats to our website from malware at an early stage and to optimise the loading times of our website. For this purpose, we have concluded an order processing agreement with KeyCDN, according to which KeyCDN is entitled and obliged to evaluate the information obtained and to create statistical reports for us on the type and extent of website use. These statistics enable us to continuously improve our offer, to carry out a cost-benefit analysis of our internet marketing and to make our internet presence more interesting and user-friendly for you as a user.

Legal basis: We use KeyCDN on the basis of our legitimate interest in an efficient and secure provision of our internet offer, Art. 6 para. 1 lit. f) DSGVO. Deletion: The data collected will be deleted by KeyCDN upon request.

Information on the third-party provider:

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are filed and stored on the terminal device you are using. Cookies neither transmit viruses nor can they execute programs. Rather, they primarily serve to exchange information between the end device you are using and our website in order to make our internet offer more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. Transient cookies include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables our website to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a set period of time, which may vary depending on the cookie. You have the option to delete these cookies at any time in the security settings of your browser.

The cookies serve to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In particular, information on language settings or log-in information may be stored in these cookies.

Our legitimate interest in data processing lies in the above purposes. The legal basis for this is Art. 6 para. 1 p. 1 lit. f DSGVO.

As the cookies are stored on your computer, you as a user also have full control over the use of cookies. You have the possibility to determine via the security settings of your browser whether cookies are stored at all. For example, you can choose not to accept cookies from the outset, or only accept them on request, or you can specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Storage period / deletion

We delete or block your personal data as soon as the purpose of storage has been achieved or no longer applies. Any further storage will only take place if we are required to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period prescribed by the respective regulations has expired, unless we need your data to fulfil a contract concluded between us or if this is necessary to assert, exercise or defend legal claims.

Details of the contact options we provide

If you contact us via e-mail, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, your telephone number or your e-mail address, or provide further information about yourself or your request, this data will be stored and processed in our company in order to process your request. Legal basisIf you have submitted your enquiry via our contact form, the legal basis for the processing of your data is Art. 6 Para. 1 lit. a DSGVO. If you submit your enquiry in the context of contractual or pre-contractual relations with us, the legal basis for processing your data is Art. 6 para. 1 lit. b. DSGVO. If your enquiry does not fall under one of the aforementioned categories, our legitimate interest in processing your data is to answer your enquiry properly and in your interest, Art. 6 para. 1 lit. f DSGVO. Deletion: The personal data we collect will be deleted if it is no longer necessary. We review the necessity every 2 years. In addition, you can revoke the data processing at any time.

The handling of your data in the application process

If you apply to us, we will process the personal data you send us during the application process. If you send the data by e-mail or via a contact form on our website, the data is processed electronically. If an employment contract is concluded following the application process, we store your data for the purpose of processing the employment relationship in compliance with the statutory provisions. Purpose: The purpose is to manage the application process. Legal basis: The legal basis for processing your data for the aforementioned purpose is Art. 6 para. 1 lit. b DSGVO. Deletion: If no employment contract is concluded, your data will be deleted after completion of the application process or at the latest 2 months after its completion. This does not apply if legal provisions prevent the deletion or if the further storage of your data is necessary for the purpose of providing evidence, for example in proceedings under the General Equal Treatment Act (AGG). The application procedure is deemed to be completed when the rejection letter is sent to you. Prevention: You also have the right to withdraw your application or request the deletion of your personal data at any time.

Blog

You have the option of commenting on the articles we post on our blog. Since we may be held liable for infringing content (insults, defamatory criticism, incitement of the people, prohibited depiction of violence, etc.) of your comment, we store your IP address for a period of 7 days in order to be able to determine your identity if necessary. Legal basisThe legal basis for the storage of your data is Art. 6 para. 1 lit. f DSGVO. DeletionThe data collected and transmitted by us in this way is automatically deleted after 14 days. Prevention: You can prevent the IP address from being stored by not posting comments.

Newsletter

We send out a newsletter at regular intervals to inform our customers, business partners and interested parties about our offers and related news. You have the option of registering for our newsletter on our website and agreeing to receive the newsletter as part of the registration process. If you register for our newsletter, it is obligatory to provide your e-mail address. We store the e-mail address in order to be able to send you the newsletter. The provision of further data such as title or name is voluntary and is used in order to be able to address you personally. As soon as you register for our newsletter, you will receive a confirmation e-mail at the e-mail address you entered during registration in the so-called double opt-in procedure. This e-mail contains a link. When you click on this link, you confirm that you would like to receive the newsletter. In this way, we ensure that your e-mail address has not been misused by a third party during registration. For the same reason, we store the date and time of registration as well as the IP address assigned to you during registration. We do not pass on the aforementioned data to third parties. Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. Deletion: The deletion of the e-mail address takes place either if you have not clicked on the confirmation link 1 month after sending the confirmation e-mail in the double opt-in procedure or immediately after you have unsubscribed from our newsletter.Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. We offer the following options through which you can declare the revocation:

  • Click on the link provided for this purpose in the newsletter

Shipping by shipping service provider

We have commissioned the following shipping service provider to send our newsletter: Mailjet GmbH, Rankestr. 21, 10789 Berlin, Germany. You can view their privacy policy here: https://www.mailjet.de/privacy-policy/. The dispatch service provider may use your data in pseudonymous form, i.e. without assigning it to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider is not entitled to write to you itself or to pass on your data to third parties. Legal basis: The dispatch service provider acts on our behalf on the basis of our legitimate interests in the proper dispatch of the newsletter pursuant to Art. 6 para. 1 lit. f DSGVO and within the framework of a contract processing agreement pursuant to Art. 28 para. 3 sentence 1 DSGVO.

Evaluation of user behaviour

If you have consented to this, we evaluate your user behaviour when sending the newsletter. Our newsletter contains tracking pixels and tracking links for this purpose. This allows us to recognise whether and when you have opened the newsletter and whether and which links you have clicked on in the newsletter. Purpose: We evaluate the newsletter as described above in order to be able to measure a statistical evaluation of the success or failure of our newsletter. Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. Prevention: You can withdraw your consent to receive the newsletter at any time using the options provided above. DeletionWe will delete your data after revocation.

Internal communication

We use Slack for our internal team communication, where we receive notifications of new enquiries via us contact form and new prescription pre-orders via our Stripe channel. Please visit their privacy policy at https://slack.com/intl/de-de/privacy-policy and https://slack.com/intl/de-de/privacy-shield-notice for the Slack EU-U.S. and Swiss-U.S. Privacy Shield Notice.

Help widget

The help widget on our website is embedded via HelpShelf, a service provided by HelpShelf, Kemp House, 160 City Road, London, EC1V 2NX, United Kingdom. Please visit their privacy policy at https://helpshelf.co/legal/privacy/.

Reviews

For the collection and display of customer reviews we use Endorsal, a service provided by Sticky Toffee Studios Ltd, 6 Sunnyside Close, Kempsey, Worcester, Worcestershire, WR5 3NP, United Kingdom. Please visit their privacy policy at  https://endorsal.io/privacy/ and under https://endorsal.gdprpage.com/.

Online counselling

For online video counselling we use MeetFox, a service of Coachfox GmbH, Strehlgasse 18/7, 1190 Vienna, Austria. Please visit their privacy policy at https://meetfox.com/de/datenschutz/.

Corona quick tests

For the detection of COVID-19 rapid test results we use schnelltest.click, a service of Simba n³ GmbH, Dr.-Friedrichs-Straße 42, 08606 Oelsnitz. Please visit their privacy policy at https://www.schnelltest.click/datenschutz.html.

Your rights under the GDPR

According to the GDPR, you are entitled to the rights listed below, which you can assert at any time with the controller named in section 1 of this privacy policy:

  • Right to information: In accordance with Art. 15 of the GDPR, you can request confirmation as to whether and which of your personal data we are processing. In addition, you can request information from us free of charge about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint and the origin of your data if it has not been collected by us. Furthermore, you have the right to be informed whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to obtain information about the appropriate safeguards in connection with the transfer.
  • Right of rectification: Pursuant to Art. 16 DSGVO, you may request the correction of inaccurate or the completion of incomplete personal data stored by us and relating to you.
  • Right to erasure: Pursuant to Art. 17 DSGVO, you have the right to request the deletion of your personal data stored by us, insofar as we do not need to process it for the following purposes:
    • to fulfil a legal obligation,
    • for the assertion, exercise or defence of legal claims,
    • to exercise the right to freedom of expression and information, or
    • for reasons of public interest as set out in Art. 17(3)(c) and (d) DSGVO.
  • Right to restriction: In accordance with Art. 18 DSGVO, you have the right to request the restriction of the processing of your personal data if
    • the accuracy of the data is contested by you for a period of time that enables us to verify the accuracy of the personal data,
    • the processing of your data is unlawful, but you object to its erasure and instead request the restriction of the use of the data,
    • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims
    • you have objected to the processing of your data in accordance with Art. 21 DSGVO, but it has not yet been determined whether the legitimate grounds which entitle us to continue processing despite your objection outweigh your rights.
  • Right to information: If you have exercised the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom personal data relating to you has been disclosed of the rectification or erasure of the data or the restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
  • Right to data portability: Pursuant to Art. 20 DSGVO, you may request that we receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or that we transfer it to another controller.
  • Right of appealPursuant to Art. 77 DSGVO, you have the right to complain to a supervisory authority. For this purpose, you can contact the supervisory authority of your usual place of residence, your place of work or our registered office.

Right of withdrawal

In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not change the lawfulness of the processing of your personal data that took place until the revocation.

Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of a balance of interests (Art. 6 (1) (f) DSGVO). This is particularly the case if the data processing is not necessary for the performance of a contract. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons worthy of protection for the data processing outweigh your interests and rights.

Irrespective of the above, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.

Please send your objection to the contact address of the responsible person given above.

YouTube

We use components of YouTube on this website, a service of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

The use of Youtube allows us to embed various videos and clips that are available on the internet platform www.youtube.de are made available to you. After a page or sub-page of our website is called up on which such an embedding has taken place, the internet browser used by you will be prompted to download video components of the respective embedded video or clip. During your visit to our website and its subpages, both YouTube and Google are informed about which page or subpage you have accessed by transmitting your IP address to Google's external servers in the USA. This transmission of information takes place regardless of whether the videos or clips displayed are actually viewed or clicked on, or whether you are logged into your Youtube or Google account. Google is a participant in the Privacy Shield agreement and is certified to process data in accordance with European standards. This information is collected and assigned to your Google account if you are logged in to it during your visit. Purpose: The use of the Youtube components on our website serve to make videos and clips from the website www.youtube.de available to you on our website for the purpose of viewing and interaction. Legal basis: We use Youtube based on our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f DSGVO. Prevention: You can prevent data transmission at any time by logging out of your YouTube account or by clicking on the following link https://adssettings.google.com/authenticated set an opt-out cookie after logging in to your Google Account by pressing the unsubscribe button.

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Maps

We use components of "Google Maps" on our website, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google").

Google Maps visually displays geographical information. Google collects and processes the IP address of the visitor. This is transmitted to Google regardless of whether Google Maps is actually used or you are logged into your Google account. Your IP address will be assigned to your Google account if you are logged in to it when you visit our website. This data is transferred to external Google servers in the USA. Google is a participant in the Privacy Shield agreement and is certified to process data in accordance with European standards. Google may pass on this data collected via the technical procedure to third parties. Purpose: The integration of Google Maps serves to simplify visualisation and navigation when visiting our site. Google processes data for the purposes of advertising, market research, website design and the provision of needs-based advertising. Legal basis: We use Google Maps based on our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f DSGVO. Prevention: You can prevent the allocation of data by refraining from using Google Maps on our website and logging out of your Google account before your visit. You can also deactivate JavaScript in your browser to prevent the map display. Furthermore, we refer to the data protection regulations of Google under the following link http://www.google.com/intl/de_de/help/terms_maps.html

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google (Invisible) reCAPTCHA

We use "Google (Invisible) reCAPTCHA ", a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.

The service enables us to check whether certain actions or entries are made by a human being or abusively by a bot, i.e. by a computer in an automated process. For this purpose, Google (Invisible) reCAPTCHA processes information about your user behaviour on our website. In addition, your IP address is transmitted to a Google server. Google (Invisible) reCAPTCHA uses, among other things, cookies (see the term above under the heading Cookies), which are stored in the cache of your browser and which enable an analysis of your use of our website. You can find more information about the way in which data is collected and processed in Google's privacy policy, which you can access here: http://www.google.de/intl/de/policies/privacy. Purpose: The aforementioned interests are the purpose of our use of the service. Legal basis: We use Google (Invisible) reCAPTCHA based on our legitimate interest in the secure and efficient provision and optimisation of our online offer, Art. 6 para. 1 lit. f DSGVO. Prevention: Please refer to the information provided above under the heading "Cookies" regarding the use and prevention of cookies. If you are not logged in via your Google account when you access our site, the IP address transmitted to Google via the service will not be merged with other Google data. You must therefore log out of Google before visiting our site if you wish to prevent your IP address from being merged with other data. Google has submitted to the Privacy Shield agreement concluded between the European Union and the USA and has certified itself. This means that Google undertakes to comply with the standards and regulations of European data protection law. You can find more information in the entry linked below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Web Fonts

We use "Google Web Fonts", a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.

The service enables us to integrate the display of external fonts (web fonts) into the design of our website and to display them correctly when displaying the website. This gives us certain design options with which we want to make the design of our website more user-friendly. The integration of these web fonts is done by a server call. From this server, the fonts are delivered to your browser in compressed form and unpacked there. This server is usually located in the USA. If you visit one of our pages on which we integrate Google Fonts, Google will be informed which of our Internet pages you have visited. In addition, the IP address of the browser of the end device of the visitor is stored by Google. Purpose: The aforementioned interests constitute the purpose of the use of Google Web Fonts. Legal basis: We use Google Web Fonts on the basis of our legitimate interest in the optimisation and design of our online offer, Art. 6 (1) lit. f DSGVO..

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Vimeo

We use components of Vimeo on this website, a service of Vimeo LLC, 555 West 18th Street, New York 10011, USA.

Vimeo is a video portal where users can watch videos free of charge. Vimeo offers website operators the possibility to embed videos on their own website. For this purpose, Vimeo provides a code snippet that displays the video in a so-called inline frame. After a page or sub-page of our website is called up on which such an embedding has taken place, the internet browser used by you is prompted to download video components of the respective embedded video or clip. This process requires that Vimeo reads the IP address assigned to you; otherwise, Vimeo would not be able to transmit the video to your browser. Vimeo can recognise that you have visited one of our pages on which we have embedded a Vimeo video if you are logged in to Vimeo. This information is transmitted to Vimeo even if you do not click on the Vimeo video. Vimeo collects this information and associates it with your Vimeo account. Purpose: The purpose of using the Vimeo components on our website is to make videos and clips from the Vimeo website available to you on our website for the purpose of viewing and interaction. Legal basis: We use Vimeo based on our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f DSGVO. Prevention: You can prevent this data transfer at any time by logging out of your Vimeo account.

Information on the third-party provider:

Our online presence on social networks

We operate online presences within the social networks listed below. If you visit one of these sites, your usage data will be collected and processed by the respective provider. As a rule, this is done by cookies that are stored on the end device you use. For the term "cookie", see above under the corresponding heading. The cookies are used to store your usage behaviour and interests and to create corresponding usage profiles. In the usage profiles, data can also be stored regardless of the device you use. This is particularly the case if you are a member of the respective platform and logged in to it.

We have embedded plugins in the form of "social media buttons" of the providers we use on our website. You can tell which plugin belongs to which provider by the respective logo with which the plugin is marked. We have deactivated the social media plugins on our website by default so that data is not automatically transmitted to the provider of the plugin when our pages are called up. For this purpose, we use the so-called Shariff solution. Only when you click on the "social media button" of the respective provider is the collection of information and its transmission to the provider triggered. If you click on one of these buttons, data can be sent to the operator of the social network even if you do not have an account there or have an account there but are not logged in there at the moment you visit our website.

The collected data is generally used by the provider for the purpose of advertising and market research by creating usage profiles from your usage behaviour. These in turn may be used by the providers to play interest-based advertising to you. You have a right of revocation against the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data may be linked to it. To prevent such a linkage of your data, you can log out of the provider's service before visiting our site.

The purpose and extent to which data is collected by the provider can be found in the respective data protection declarations of the providers, which are communicated below. We ourselves have no influence on what data is collected and how this data is used by the provider. If you wish to request detailed information or exercise your rights as a data subject, the most effective way to do this is to contact the provider in question yourself, as only the provider in question has access to your data.

We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that the enforcement of your data subject rights may become more difficult. Those US providers that are certified under the Privacy Shield have undertaken to comply with EU data protection standards. Information on whether the respective provider has such a certificate can be found in the information on the providers listed below.

Legal basis: If you have been asked for consent to data processing by one of the providers mentioned below, the legal basis for the processing is Art. 6 (1) lit. a DSGVO. Otherwise, the processing of your data is based on our legitimate interests to contact you and communicate with you, Art. 6 para. 1 lit. f. DSGVO.Prevention: For the respective opt-out options, please refer to the information provided by the providers linked below.

We maintain online presences on the following social networks:

Twitter

Twitter is a service of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107 - USA

Registered office in the EU: Twitter Inc., 26 Fernian St, Dublin - Ireland

Instagram

Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 - USA

Whatsapp

Whatsapp is a service provided by Whatsapp Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 - Ireland.

XING

XING is a service of XING AG, Gänsemarkt 43, 20354 Hamburg - Germany

LinkedIn

LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 - USA

Registered office in the EU: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich, Germany

Facebook

Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 - USA.

EU Headquarters: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 - Ireland

Google Universal Analytics

We use "Google Universal Analytics", a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.

We use Google Universal Analytics to record and statistically evaluate the flow of visitors to our website. Among other things, Google Universal Analytics collects data about the website from which you accessed our website (so-called referrer), which subpages of the website you accessed or how often and for how long a subpage was viewed and which interactions you carried out. In order to collect and store this data, Google Analytics sets a cookie on the end device you use (see the term above under the heading Cookies). Through the cookie set, the pages you visit, including your IP address, are collected and transferred to Google servers in the USA. However, data processing is also possible without setting cookies, provided that Google Universal Analytics has been implemented in the website. We use the AnonymizeIP function to anonymise your IP address so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to or linked with the anonymised IP address by Google. The information generated in this way is transferred to Google servers in the USA and stored there. Google may pass on this personal data collected via the technical procedure to third parties. We have concluded an order processing agreement with Google. Accordingly, Google is entitled and obliged to evaluate the information obtained on our behalf and to compile statistical reports for us on the type and extent of website use. These statistics enable us to continuously improve our services, to carry out a cost-benefit analysis of our internet marketing and to make our website more interesting and user-friendly for you as a user. Legal basis: We use Google Universal Analytics based on our legitimate interest in the analysis, optimisation and economic operation of our online offer, Art. 6 para. 1 lit. f DSGVO. Deletion: The data we collect and transmit in this way is automatically deleted after 26 months. You can find more information on Google's terms of use and data protection at https://www.google.de/analytics/terms/de.html. Prevention: Google Analytics is deactivated by default. Only after you have actively activated Google Analytics in the cookie banner will data be collected from you on our website. You can also prevent cookies from being stored by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all the functions of our website to their full extent. You also have the option of preventing the storage of cookies by setting this in your browser. You can delete cookies that have already been set at any time.

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Security measures

We also take technical and organisational security measures in accordance with the state of the art in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties.

Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and was updated in April 2021. Due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy.

This privacy policy was created with the help of SOS Law created. You can find the data protection declaration generator here. SOS Recht is an offer of the Mueller.legal Attorneys at Law Partnership based in Berlin.

Hasen Apotheke