Privacy Policy

Privacy Policy

 

Responsible for the processing of data is:
Sükrü Aydogan
Apollostr. 13
39118 Magdeburg, Germany
Reform@kosmosapotheke.info

We appreciate your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our website without giving any personal information. Each time a web page is accessed, the web server automatically stores a so-called server log file, which, for example, contains the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and contains the requesting provider (access data) and it documents the accessing.

This access data is evaluated exclusively for the purpose of ensuring a trouble-free operation of the website as well as the improvement of our supply. In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves the purpose of ensuring that our legitimate interests, which are predominantly within the scope of a balance of interests, ensure that our offer is correctly presented. All access data will be deleted no later than seven days after your web page visit.

2. Data collection and use for contract processing and opening a customer account

We collect personal information if you voluntarily provide it to us as part of your order, when contacting us (for example, by contact form or e-mail) or when creating a customer account. Mandatory fields are marked as such, since in these cases we need the data mandatory for the contract or to process your contact or opening the customer account and you cannot complete the order and/or account opening without specifying this data. Getting in contact is also impossible under these circumstances. The data collected is shown in the respective input forms. We use the data provided by you in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for contract handling and processing of your inquiries. After completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the fiscal and commercial retention periods. Unless you have expressly consented to further use of your data or we reserve the right to further its use, it is legally permitted, and we inform you of this in this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a designated function in the customer account.

3. Transfer of data

We disclose your data to the shipping company in the scope required for the delivery of the ordered goods according to Art. 6 (1) 1 lit. b GDPR. Depending on the payment service provider you have selected during the ordering process, we disclose the payment details collected for order processing purposes to the bank commissioned to handle the payment and, as the case may be, to the payment service provider commissioned by us or to the selected payment service. Some of those data are collected by the selected payment service providers themselves if you open an account with them. In such a case, during the ordering process, you must register with your payment service provider using your access data. In this respect, the privacy notice of the relevant payment service provider applies.

Disclosure of data to a shipping provider
If, when or after placing your order, you have given your express consent to us doing so, we disclose your e-mail address and phone number to the selected shipping provider based on that consent according to Art. 6 (1) 1 lit. a GDPR, in order to enable the shipping provider to contact you to advise you of the delivery or agree with you the delivery details.

You may revoke your consent at any time by sending a message to the contact option described below or by directly notifying the shipping provider at the contact address specified below. After you revoke your consent, we will delete the data disclosed for this purpose, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by the law, of which we inform you in this notice.

DHL Paket Ltd.
Sträßchensweg 10
53113 Bonn, Germany

DHL Express Germany Ltd.
Heinrich- Brüning- Str. 5
53113 Bonn, Germany

4. E-mail Newsletter

E-mail advertising if you subscribe to the newsletter
If you subscribe to our newsletter, we will regularly send you our e-mail newsletter based on your consent according to Art. 6 (1) 1 lit a GDPR, using the data required or disclosed by you separately for this purpose.

You may unsubscribe from the newsletter service at any time. For this purpose you can either send a message to the contact option specified below or use the opt-out link in the newsletter. Upon unsubscription, we will delete your email address unless you have expressly consented to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by the law, of which we inform you in this notice.

E-mail advertising if you do not subscribe to the newsletter and your right to opt out
If we receive your e-mail address in connection with the sale of a product or service and you have not opted out and you are not a consumer who has his habitual residence in Poland, we reserve the right to regularly email you offers for products from our product range that are similar to those you have already purchased. This serves the protection of our legitimate interests in promoting and advertising our products to customers that are overriding in the process of balancing of interests.
You can opt out of this use of your email address at any time by sending a message to the contact option specified below or by using the opt-out link in the advertising email, without incurring any costs beyond the cost of transfer calculated at the base rates.

5. Data usage in payment processing

Creditcheck
If we make an advance payment, e.g., when purchasing on account or direct debit, it is necessary for the conclusion of the contract pursuant to Art. 22 para. 2 lit. a GDPR to obtain identity and credit information from specialized service companies (credit agencies). This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in order to minimise payment defaults. For this purpose, we will transfer your personal data required for a credit check to the following companies:

Creditreform Boniversum Ltd.
Hellersbergstraße 11
41460 Neuss, Germany

Appropriate measures to safeguard your rights, freedoms and legitimate interests will be considered. You have the possibility to present your point of view and to challenge the decision by getting in contact through the contact options described below.
 

Credit check and scoring when selecting BillSAFE (PayPal purchase on account)
If you choose to use the “purchase on account” payment method of the PayPal service “BillSAFE” (www.billsafe.de), you will be asked in the order process to submit to PayPal the details required to process the payment and to verify your identity and credit checks in accordance with Art. 6 para. 1 sentence 1 lit. to comply with the GDPR. If you consent to this, this data will be transmitted to PayPal. For the purpose of your own identity and credit check, either PayPal or partner companies commissioned by it transmit data to credit reporting agencies and receive information as well as creditworthiness information based on mathematical-statistical procedures which include, among other things, address data. Detailed information on this and on the credit bureaus used can be found in the data protection information provided by  privacy policy of PayPal.
The information received about the statistical probability of a default of payment is used by Paypal for a considered decision on the establishment, execution or termination of the contractual relationship.
You can revoke your consent to PayPal at any time. However, it may continue to be entitled to process, use and transmit your personal information as contractually required or simply required by law for payment purposes or as ordered by a court or agency.
 

6. Integration of the Trusted Shops Trustbadge

To display our Trusted Shops quality seal and the collected reviews as well as the offer of Trusted Shops products for buyers after placing an order, the Trusted Shops Trustbadge is included on this website.

This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our offer pursuant to Art. 6 (1) sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops Ltd., Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is evoked, the web server automatically saves a so-called server log file, which, for example, saves your IP address, date and time of retrieval, transmitted amount of data and the requesting provider (access data). Your access will also be documented. These access data will not be evaluated and automatically overwritten within seven days after the end of your page visit.
Further personal data is only transferred to Trusted Shops as far as you decide after the conclusion of an order for the use of Trusted Shops products or have already registered for the use. In this case, the contractual agreement between you and Trusted Shops applies.
 

7. Cookies and web analytics

In order to make the visit to our website attractive and to allow the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which are predominant in the context of a weighing up of interests, in an optimised representation of our offer. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the “Help” menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html

Failing to accept cookies may limit the functionality of our website.
 

Using of Google (Universal) Analytics for web analytics
Insofar as you consent to this pursuant to Art. 6 para. 1 sentence 1 lit. For the purpose of website analysis, this website uses Google (Universal) Analytics, a web analytics service provided by Google Ltd. (www.google.com). Google (Universal) Analytics uses methods that allow you to analyse the use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address will be shortened prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymised IP address provided by Google Analytics within the scope of Google Analytics will generally not be merged with other data provided by Google. After the purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

Google Ltd. is headquartered in the US and is certified under the EU-US Privacy Shield. A current certificate can be viewed  here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You may revoke your consent at any time with future effect by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This prevents the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google.


As an alternative to the browser plug-in, you can click on this link, to prevent the collection by Google Analytics on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you will be asked to give your consent again.

 

8. Advertising via marketing networks

Google AdWords Remarketing

Google Adwords promotes this site on Google’s search results and on third-party websites. Insofar as you give us your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, Google’s remarketing cookie will be set when visiting our website, which will automatically enable interest-based advertising using a pseudonymous Cookie ID and based on the pages you visit. After the expiration and end of the use of Google AdWords remarketing by us, the data collected in this context will be deleted.

Further processing will only take place if you have agreed with Google that its web and app browsing history be linked to its Google account. Information from your Google account will be used to personalise ads that you see on the website. In this case, when you log on to Google during the page visit of our website, Google will use your data with Google Analytics data to create and define audience lists for cross-device marketing. To do this, Google will temporarily associate your personal information with Google Analytics data to create audiences.

Google AdWords Remarketing is an offer from Google Ltd. (www.google.com). Google Ltd. is headquartered in the US and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You may revoke your consent at any time with future effect by disabling the remarketing cookie through this link. In addition, you can inform yourself about the setting of cookies and make adjustments to the Digital Advertising Alliance.

9. Sending rating reminders by email

Rating reminder by Trusted Shops
If, when or after placing your order, you have given us your express consent to doing so according to Art. 6 (1) 1 lit a GDPR, we will disclose your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.com), so that they can email you a rating reminder.

You may revoke your consent at any time by sending a message to the contact option specified below or directly to Trusted Shops.

10. Contact options and your rights

As a person affected, you have the following rights:

according to Art. 15 of the GDPR, the right to demand information on the personal data processed by us in the scope therein specified;
in accordance with Art. 16 of the GDPR, the right to immediately demand the rectification of incorrectly gathered data or completion of data stored by us;
in accordance with Art. 17 of the GDPR, the right to demand the deletion of your personal data stored by us unless the further processing is required
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims;
according to Art. 18 of the GDPR, the right to demand the restriction of the processing of your personal data as far as
- the accuracy of the data is disputed by you;
- the processing is illegal, but you reject its deletion;
- we no longer need the data, but you need it for asserting, exercising or defending legal claims or
- you have objected to the processing in accordance with Art. 21 of the GDPR;
according to Art. 20 of the GDPR, the right to receive your personal data, which you have provided us, in a structured, common and machine-readable format or to request the transfer to another person responsible;
according to Art. 77 of the GDPR, the right to complain to supervisory authority. In general, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, restrict or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact our in-house data protection officer
Jean Sorge, Apollostr. 13, 39118 Magdeburg
via e-mail directly: datenschutz@kosmosapotheke.eu

In addition, you have the right of appeal to the responsible data protection supervisory authority.

Data Protection Officer:
Jean Sorge
Apollostr. 13
39118 Magdeburg

datenschutz@kosmosapotheke.eu