Privacy Policy

Data Controller

The controller responsible for processing personal data through this website is:

Questions relating to the processing of personal data or the exercise of privacy rights may be sent to the email address above.

Personal Data We Process

Depending on how you interact with German Drugstore, we may process the following categories of personal data:

• Identity and contact data, such as name and email address
• Billing and shipping addresses
• Order information, including products purchased, amounts and transaction timestamps
• Customer account information
• Payment-related information required for processing a transaction
• Delivery information and shipment tracking data
• Customer service communications
• Technical information such as IP address, browser, device information and server logs
• Website usage and analytics information where consent has been given

We generally receive this information directly from you, automatically through use of the website or from service providers involved in completing your order.

Purposes and Legal Bases

Personal data is processed only where a legal basis applies.

Performance of a Contract – Art. 6(1)(b) GDPR

We process data where necessary to process orders, receive payments, arrange shipping, handle returns, manage customer accounts and provide customer service relating to an order.

Legal Obligations – Art. 6(1)(c) GDPR

Certain data must be processed or retained to comply with legal obligations, including accounting, tax and commercial record-keeping requirements.

Legitimate Interests – Art. 6(1)(f) GDPR

Where appropriate, data may be processed based on our legitimate interests in operating a secure and reliable website, preventing fraud, protecting our systems and resolving customer or payment disputes.

Consent – Art. 6(1)(a) GDPR

Where consent is required, for example for certain analytics or non-essential cookies, processing takes place only after the relevant consent has been given.

Consent may be withdrawn at any time with effect for the future.

Orders and Customer Accounts

When you place an order, we process information required to complete the purchase. This includes your name, contact information, billing and shipping address, products ordered and transaction information.

If you create a customer account, account-related information is processed to provide account functions, order history and related services.

Order information may also be processed where required to handle returns, refunds, customer service requests, payment disputes or legal obligations.

Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(c) or Art. 6(1)(f) GDPR.

Payment Processing

Payment information required to complete an order is transmitted to the payment service provider used for the selected payment method.

PayPal

PayPal payment services are provided by:

If PayPal is selected, information necessary for payment processing, authentication and fraud prevention is transmitted to PayPal.

Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR.

Shipping and Logistics Providers

To prepare and deliver orders, we transmit the data necessary for delivery to shipping and logistics providers.

Depending on the shipment, this may include:

• Name
• Shipping address
• Email address
• Telephone number where required for delivery
• Shipment and customs-related information

Shipping providers used by German Drugstore may include DHL and FedEx, depending on the destination and shipping method.

For international deliveries, shipment information may also be transmitted to carriers, customs authorities, customs brokers or other parties involved in import processing where necessary.

Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(c) GDPR.

Website Hosting and Security

Rocket.net

Our website is hosted using services provided by Rocket.net.

When the website is accessed, technical information such as IP addresses, request data, browser information and server logs may be processed as necessary to deliver, secure and maintain the website.

Legal basis: Art. 6(1)(f) GDPR based on our legitimate interest in secure, stable and efficient operation of the website.

Google Analytics, Cookies and Consent

Google Analytics 4

German Drugstore uses Google Analytics 4 to understand how visitors interact with the website and to improve website performance and user experience.

Depending on the configuration and consent provided, Google Analytics may process information about website visits, interactions, devices, browsers and approximate geographic location.

The retention period currently configured for user-level Google Analytics data is 14 months.

Legal basis: Art. 6(1)(a) GDPR.

Cookies and Similar Technologies

German Drugstore uses technically necessary cookies and, where consent is provided, additional cookies or similar technologies for analytics and related purposes.

Non-essential technologies requiring consent are intended to be activated only after the relevant consent has been given.

Withdrawal of Consent

You may withdraw or change consent at any time through the cookie settings available on the website.

International Data Transfers

Some service providers used by German Drugstore are located outside the European Economic Area or may process personal data outside the EEA.

Where personal data is transferred internationally, the transfer is carried out in accordance with the applicable requirements of the GDPR.

Depending on the recipient and destination, applicable safeguards may include an adequacy decision of the European Commission, Standard Contractual Clauses or another legally permitted transfer mechanism.

Additional safeguards may be used where appropriate.

Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable legal obligations.

Different retention periods may apply depending on the type of data and purpose of processing.

In particular, accounting, tax and commercial records may need to be retained for statutory periods even after an order has been completed.

Data may also be retained where necessary for the establishment, exercise or defence of legal claims.

Once there is no further legal basis or purpose for retention, the data is deleted or anonymized.

Your Rights Under the GDPR

Subject to the applicable legal requirements, you may have the following rights in relation to your personal data:

Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time in accordance with Art. 7(3) GDPR.

Right to Object

Where personal data is processed on the basis of legitimate interests under Art. 6(1)(f) GDPR, you may have the right to object to such processing under Art. 21 GDPR.

To exercise your rights, contact: info@german-drugstore.com.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for Berlin is:

Privacy Contact

For privacy-related questions or requests, please contact: