Lenné Apotheke in 15230 Frankfurt (Oder)

Privacy Policy

The protection of your personal data when it is collected, processed and used during your visit to our website is important to us. Your data is protected in accordance with legal regulations.

This data protection information explains the type, scope and purpose of the processing of personal data within our online offer and the associated websites, functions and content as well as external online presences, such as our social media profiles.

Responsible

The responsible body for data processing on this website is:

Lenné Apotheke
Antje Berndt e.K.

Karl-Marx-Straße 192
15230 Frankfurt (Oder)

Phone: 0335 / 5311680335 / 531168
Telefax: 0335 / 5004014
E-Mail: info@lenneapo.de

Contact Privacy:

Phone: +49 (0)335 280511-50
E-Mail:

Categories of processed data

• Inventory data (e.g. name, address)
• Contact information (e.g., e-mail, telephone numbers)
• Content data (e.g., text input, photos, videos)
• Usage data (e.g. websites visited, interest in content, access times)
• Meta/communication data (e.g. browser information, IP addresses)

Categories of data subjects

Visitors and users of the online offer (hereinafter the persons concerned are also referred to as "users").

Purpose of processing

• Provision of the online offer, its functions and content
• Answering contact requests and communicating with users
• Reach measurement/marketing
• Safety measures

Terms

"personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical , physiological, genetic, mental, economic, cultural or social identity of that natural person;

"Processing" means any process carried out with or without the help of automated processes or any such series of processes in connection with personal data, such as collection, recording, organization, ordering, storage, adaptation or modification, reading out, querying, use , disclosure by transmission, distribution or any other form of making available, matching or linking, restriction, deletion or destruction;

"Consent" of the data subject means any voluntary, informed and unequivocal expression of will in the specific case, in the form of a declaration or other clear affirmative action, with which the data subject indicates that they consent to the processing of their personal data agrees;

"Responsible" the natural or legal person, public authority, agency or other body that alone or jointly with others decides on the purposes and means of the processing of personal data; if the purposes and means of this processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for his naming can be provided for by Union law or the law of the Member States;

"Processor" a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller;

“third party” a natural or legal person, public authority, agency or other body other than the data subject, controller, processor and persons who, under the direct responsibility of the controller or processor, are authorized to process the personal data;

"Profiling" any type of automated processing of personal data, which consists in using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects related to work performance, economic situation, health, personal Analyze or predict that natural person's preferences, interests, reliability, behaviour, whereabouts or relocation;

"Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data not attributed to an identified or identifiable natural person;

Relevant legal bases

In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not mentioned in the data protection information, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art Answering inquiries is Article 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(c) GDPR 6 Paragraph 1 lit. f GDPR.

Safety measures

In accordance with Art. 32 GDPR, we take appropriate technical measures, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk.

The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, transfer, securing availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, deletion of data and reaction to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Article 25 GDPR).

Encryption by SSL

We transfer your personal data securely using SSL encryption. This applies to the entire website including all forms. You can recognize the encryption in the address line of your browser by the green lock and check the corresponding security certificate there. The use of SSL encryption prevents data from being recorded or intercepted by third parties during transmission.

Cooperation with processors and third parties

If, as part of our processing, we disclose data to other people and companies (contract processors or third parties), transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, as to payment service providers, pursuant to Art. 6 Para. 1 lit. b GDPR is required for the fulfillment of the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 DSGVO.

Rights of data subjects

You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have accordingly. Art. 16 DSGVO the right to request the completion of the data concerning you or the correction of incorrect data concerning you.

In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately, or alternatively, in accordance with Art. 18 GDPR, to demand a restriction of the processing of the data.

You have the right to request that you receive the data that you have provided to us in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties.

You also have the right, pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates this regulation.

Right of withdrawal

You have the right to revoke your consent in accordance with Article 7 (3) GDPR with effect for the future

Right of appeal

You can object to the future processing of data relating to you at any time in accordance with Art. 21 GDPR. The objection can be made in particular against processing for direct advertising purposes.

Cookies

We use cookies on this site. Cookies are text files that are filed and saved on a computer system via an Internet browser. Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimized for the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is done by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in the online shop. The online shop uses a cookie to remember the items that a customer has placed in the virtual shopping cart.

By clicking on privacy settings, you can select and change your cookie preferences again.

When you visit our website, the following cookies are stored on your computer:

Privacy settings | Change cookie preferences

The person concerned can also prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

Deletion of data

The data processed by us will be deleted or their processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this data protection information, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

According to legal requirements in Germany, storage takes place in particular for 10 years in accordance with §§ 147 Paragraph 1 AO, 257 Paragraph 1 No. 1 and 4, Paragraph 4 HGB (books, records, management reports, accounting documents, trading books, relevant for taxation documents, etc.) and 6 years in accordance with Section 257 Paragraph 1 Nos. 2 and 3, Paragraph 4 HGB (commercial letters).

Contact

When contacting us via the contact form, personal data is collected. Which data is collected when using the contact form can be seen from the contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 Paragraph 1 Letter f of the GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and the deletion does not conflict with any statutory storage obligations.

hosting and email delivery

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online offer.

We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offer on the basis of our legitimate interests in making this online offer available efficiently and securely in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract).

Collection of access data and log files

We, or our hosting provider, automatically save information in so-called server log files, which your web browser automatically transmits to us, on the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR. These are in detail:

• Name of the retrieved web page
• File
• Date and time of retrieval
• amount of data transferred
• Notification of successful retrieval
• Browser type and browser version
• the user's operating system
• Referrer URL (the previously visited page)
• IP address and the requesting provider

We reserve the right to subsequently check this data if we become aware of specific indications of illegal use.

Google Maps

We integrate the maps of the service “Google Maps” from the provider “Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland”. The processed data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually as part of the settings on their mobile devices). The data can be processed in the USA. Data protection information: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

Datenschutz bei Bewerbungen und im Bewerbungsverfahren

Der für die Verarbeitung Verantwortliche erhebt und verarbeitet die personenbezogenen Daten von Bewerbern zum Zwecke der Abwicklung des Bewerbungsverfahrens. Die Verarbeitung kann auch auf elektronischem Wege erfolgen. Dies ist insbesondere dann der Fall, wenn ein Bewerber entsprechende Bewerbungsunterlagen auf dem elektronischen Wege, beispielsweise per E-Mail oder über ein auf der Internetseite befindliches Webformular, an den für die Verarbeitung Verantwortlichen übermittelt. Schließt der für die Verarbeitung Verantwortliche einen Anstellungsvertrag mit einem Bewerber, werden die übermittelten Daten zum Zwecke der Abwicklung des Beschäftigungsverhältnisses unter Beachtung der gesetzlichen Vorschriften gespeichert. Wird von dem für die Verarbeitung Verantwortlichen kein Anstellungsvertrag mit dem Bewerber geschlossen, so werden die Bewerbungsunterlagen zwei Monate nach Bekanntgabe der Absageentscheidung automatisch gelöscht, sofern einer Löschung keine sonstigen berechtigten Interessen des für die Verarbeitung Verantwortlichen entgegenstehen. Sonstiges berechtigtes Interesse in diesem Sinne ist beispielsweise eine Beweispflicht in einem Verfahren nach dem Allgemeinen Gleichbehandlungsgesetz (AGG).

Transfers to third countries / forwarding to third countries

Services may transfer the collected data to another country. This may be for various purposes, such as storage or processing. Please note that some Services may transfer data outside the European Union (EU) and the European Economic Area (EEA) and countries without an adequate level of data protection.

Note on data transfer to the USA

Tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.