Privacy Policy Shop-Apotheke

1) Information about the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our shop-apotheke.com website (hereinafter referred to as the "website") and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.

1.2 The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is axion GmbH, Mollenbachstr. 13, 71229 Leonberg, Germany, Tel.: +49 (0) 7152 - 353 911 - 0, Fax: +49 (0) 07152 - 353911 - 1, Email: service@axion-net.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Contact us
When you contact us (e.g. via contact form or email), personal data is collected. You can see what this is from the contact form. This data is stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Paragraph 1 Letter f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Paragraph 1 Letter b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

3) Data processing for order processing
3.1 To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Paragraph 1 Letter b of GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact details you provided when ordering (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period by suitable communication channels (e.g. by post or email) within the scope of our statutory information obligations in accordance with Art. 6 Paragraph 1 Letter c GDPR. Your contact details will be used strictly for the purpose of notifying you about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

3.2 If you order via www.shop-apotheke.com, you have several options for the payment method. Depending on what you choose, shop-apotheke.com will transfer the required personal data to one of the following payment service providers if necessary.

You have selected PayPal, Klarna or credit card payment as your payment method? In these cases we use the companies
Adyen NV
Simon Carmiggelstraat 6-50
1011 DJ Amsterdam

and

CrefoPay GmbH & Co. KG
Feurigstrasse 59
10827 Berlin

as a processor.

If you choose one of the payment via
PayPal (Europe) S.à rl et Cie, SCA,
5th floor, 22-24 Boulevard Royal,
L-2449 Luxembourg

decide to process payments

Surname
address
Telephone number
E-mail address
Order and invoice data

to PayPal. Further information on data processing can be found in PayPal's privacy policy .

If you choose one of the payment via
Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm

decide to process payments

Surname
address
Telephone number
E-mail address
Order and invoice data

to Klarna. Further information on data processing can be found in Klarna's privacy policy .

In order to be able to offer you more payment options, shop-apotheke.com also uses the

Ratepay GmbH
Ritterstr. 12-14
10969 Berlin

as a processor. If you decide to pay by invoice, the payment processing will be carried out

Surname
address
Telephone number
E-mail address
Order and invoice data

to Ratepay. Further information on data processing can be found in Ratepay's privacy policy .

The payment service providers never receive any information about the products you have ordered!

(Legal basis: Art. 6 Para. 1 Clause 1 Letters b and f, Art. 9 Para. 2 Letter h GDPR)

Your data will only be passed on for the purpose of processing payments via shop-apotheke.com and only to the extent that it is necessary for this purpose. You can find further information about shop-apotheke.com's data protection policy at the following internet address:

https://www.shop-apotheke.com/datenschutz.htm

4) Rights of the data subject
4.1 The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:

Right to information in accordance with Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when your data is forwarded to third countries;
Right to rectification in accordance with Art. 16 GDPR: You have the right to have inaccurate data concerning you rectified without delay and/or to have incomplete data stored by us completed;
Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved, or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh yours;
Right to information in accordance with Art. 19 GDPR: If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the responsible party, this party is obliged to inform all recipients to whom the personal data concerning you was disclosed of said rectification, erasure or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure. You have the right to be informed of these recipients.
Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller, where technically feasible;
Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation;
Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

4.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

5) Duration of storage of personal data
The duration for which personal data is stored is determined based on the respective legal basis, the purpose of processing and – if applicable – also on the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of an explicit consent in accordance with Art. 6 (1) (a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after expiry of the retention periods, provided that they are no longer required to fulfill or initiate a contract and/or we no longer have a legitimate interest in continuing to store them.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 (1) (f) GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.