Privacy Policy

We appreciate your interest in our website. The protection of your personal data is an important concern for us. Below we inform you in detail about how we handle your data.

Data Controller and Data Protection Officer

Apotheke zum weissen Schwan - Katerina Petrovska e.Kfr.

Springeberger Weg 16 12589 Berlin

Email: info@apotheke-zum-weissen-schwan.de

Phone: 030 641 69 313

External Data Protection Officer

Apotheken-Datenschutzbeauftragter (Pharmacy Data Protection Officer)

Email: kontakt@apotheken-datenschutzbeauftragter.de

Your Rights as a Data Subject

Under the GDPR, you have the following rights:

  • Right of Access (Art. 15 GDPR): You have the right to request information about your personal data processed by us.
  • Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate data.
  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your data, provided no legal retention obligations apply.
  • Right to Restriction (Art. 18 GDPR): You have the right to request the restriction of processing of your data.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21 GDPR): You have the right to object to the processing of your data where it is based on legitimate interests.
  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the browser address bar changing from "http://" to "https://" and by the lock icon in your browser bar.

Hosting

Our website is hosted by Amazon Web Services (AWS). When you visit our website, information transmitted by your browser is automatically collected (server log files).

Provider: Amazon Web Services (AWS)

Server Location: EU (Frankfurt am Main, Germany)

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient provision of our website)

Google Tag Manager

We use Google Tag Manager to manage website tags. The Tag Manager itself does not set cookies and does not process personal data.

Purpose: Technical management and control of tracking scripts

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest)

Data Transfer: USA (Google LLC is certified under the EU-US Data Privacy Framework)

Storage Period: The Tag Manager does not store data itself; storage periods depend on the individual integrated services

Google Analytics 4

We use Google Analytics 4 to analyze user behavior on our website. This only occurs with your explicit consent.

Purpose: Analysis of website usage to optimize our services

Legal Basis: Art. 6(1)(a) GDPR (consent)

Cookies: _ga, _ga_*, Google Analytics uses cookies to distinguish users

Storage Period: 14 months from the last website visit

Data Transfer: USA (Google LLC is certified under the EU-US Data Privacy Framework)

We use Google Consent Mode v2. Without your consent, no personal data is collected.

Meta Pixel (Facebook)

We use the Meta Pixel to measure the success of our advertising campaigns on Facebook and Instagram. This only occurs with your explicit consent.

Purpose: Measurement of advertising effectiveness and targeted advertising

Legal Basis: Art. 6(1)(a) GDPR (consent)

Cookies: _fbp, fr – Meta-specific cookies for user identification

Storage Period: Up to 90 days

Data Transfer: USA (Meta Platforms Ireland Ltd. uses Standard Contractual Clauses)

You can withdraw or adjust your consent at any time:

YouTube Videos

We embed videos from YouTube. We use the enhanced privacy mode.

Purpose: Embedding video content to improve our information offering

Legal Basis: Art. 6(1)(a) GDPR (consent)

Through the enhanced privacy mode, data is only transmitted to YouTube when you actively start a video.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

More information about data protection at YouTube can be found at: https://policies.google.com/privacy

Appointment Booking (Cal.com)

For online appointment booking, we use the service Cal.com (cal.eu).

Purpose: Enabling online appointment scheduling

Legal Basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(a) GDPR (consent)

Data Processed: Name, email address, selected appointment, and any other information you provide

Storage Period: Your data is stored for the duration of appointment scheduling and execution

Server Location: EU (Cal.com Europe)

Newsletter (CleverReach)

We use CleverReach for sending our newsletter.

Purpose: Sending newsletters and marketing information

Legal Basis: Art. 6(1)(a) GDPR (consent) – You can only subscribe with explicit consent (double opt-in)

Data Processed: Email address, name (optional), time of registration, IP address

Storage Period: Until you withdraw your consent (unsubscribe from the newsletter)

Withdrawal: You can unsubscribe from the newsletter at any time via the unsubscribe link in each email or by contacting us

Provider: CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany

More information about data protection at CleverReach: https://www.cleverreach.com/en/privacy-policy/

Contact

When you contact us by email, phone, or contact form, your details are processed to handle your inquiry.

Legal Basis: Art. 6(1)(b) GDPR (contract performance/pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries)

Storage Period: Your inquiries are deleted after processing is complete, unless legal retention obligations apply (e.g., 10 years for tax purposes)

Data Security

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

Changes to This Privacy Policy

We reserve the right to update this privacy policy to adapt it to changed legal requirements or when changes are made to our services. The current version can always be found on this page.

Last Updated: January 2025