Runge Pharma

Data protection


Privacy policy of Runge Pharma in Lörrach


Responsible handling of personal data is a high priority for Runge Pharma. We want you to know when we collect which data and how we use it. We have taken technical and organisational measures to ensure that the regulations on data protection (relevant laws are the DSGVO, the BDSG and TMG) are observed both by us and by our external service providers.


In principle, it is possible to use our website without providing personal data. If special services of our enterprise are used via our website, processing of personal data could become necessary.

We reserve the right to adapt this data protection declaration from time to time so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration. The updated data protection statement will then apply to your next visit.


1. Definitions

The data protection declaration of Runge Pharma uses the terms which were defined by the European Directive and Ordinance Maker when the Data Protection Basic Regulation was issued.

1.1 Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Please note that some of this is data relating to your health, i.e. special data within the meaning of Art. 9 (I) DGSVO. You are aware that this is in part a release from the pharmacist's duty of confidentiality, as you hereby consent to your data, which includes health data, being stored, processed and also passed on to third parties as described below in the context of fulfilling the services you have requested.


1.2 Data subject

Data subject means any identified or identifiable natural person whose personal data is processed by the data controller.


1.3 Processing

Processing is any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.


1.4 Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.


1.5 Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.


1.6 Controller or data controller

The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.


1.7 Processor

A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.


1.8 Recipient

A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.


1.9 Third party

Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.


1.10 Consent

Consent is any freely given indication of the data subject's wishes for the specific case in an informed and unambiguous manner in the form of a statement or other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

We only collect, process and use your personal data if you have given your prior consent or if this is permitted by law or we are legally obliged to do so. If it is sufficient for the stated purpose to use anonymised or pseudonymised data, we will restrict ourselves solely to the collection and use of such data. We will only collect, store and process your personal data, except when you log in to our website, if you are or wish to become a customer of ours, and here exclusively for the purpose of reserving your medication, answering your questions and processing your messages and/or for the purpose of preparing your customer card.


2. Collection of general data and information

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

browser type and browser version

Operating system used

referrer URL

Host name of the accessing computer

Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.


3. Data subject rights


3.1 Right to confirmation

Every data subject has the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she may, at any time, contact our Data Protection Officer or another employee of the controller.


3.2 Right of access

Any person affected by the processing of personal data has the right to obtain from the controller, at any time and free of charge, information about the personal data stored about him or her and a copy of that information. If a data subject wishes to exercise this right of rectification, he or she may contact our data protection officer at any time.


3.3 Right to erasure (right to be forgotten)

Any person concerned by the processing of personal data has the right to obtain from the controller the erasure without delay of personal data concerning him or her, where one of the following grounds applies and insofar as the processing is not necessary:

The personal data were collected or otherwise processed for such purposes for which they are no longer necessary;

The data subject withdraws his/her consent on which the processing was based pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO and there is no other legal basis for the processing;

The data subject objects to the processing pursuant to Article 21(1) DS-GVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) DS-GVO; The personal data have been processed unlawfully;

The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject or if the personal data was collected in relation to information society services offered pursuant to Art. 8(1) DS-GVO.


3.4 Right to restriction of processing

Any person concerned by the processing of personal data has the right to obtain from the controller the restriction of processing where one of the following conditions is met:

The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data;

The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data;

The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise or defence of legal claims;

The data subject has objected to the processing pursuant to Article 21(1) DS-GVO and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.


3.5 Right to data portability

Every person affected by the processing of personal data has the right to receive the personal data concerning him or her in a structured, common and machine-readable format. He or she also has the right to transmit this data to another controller without hindrance from the controller to whom the personal data have been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising the right to data portability pursuant to Article 20(1) of the GDPR, the data subject has the right to have the personal data transferred directly from one controller to another controller to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.


3.6 Right to object

Any person affected by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the DS-GVO.

The Runge Pharma in Lörrach shall no longer process the personal data in the event of the objection, unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.


3.7 Automated decisions in individual cases including profiling

Any person concerned by the processing of personal data has the right not to be subject to a decision based solely on automated processing, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is permitted by Union or Member State law to which the controller is subject and that law provides for adequate measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.


3.8 Right to withdraw consent under data protection law

Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.

Users have the right, upon request and free of charge, to obtain information about the personal data we have stored about them. In addition, users have the right to correct inaccurate data, revoke consent, block and delete their personal data, as well as the right to lodge a complaint with the competent supervisory authority in the event of the assumption of unlawful data processing.


3.9 Right of appeal

You have the right to lodge a complaint with the competent supervisory authority in the event of the assumption of unlawful data processing.


4. Contact possibility on website

Due to legal requirements, the website of Runge Pharma enables fast electronic contact to our company as well as direct communication via e-mail. If you contact us by e-mail or via a contact form, any personal data transmitted will be stored automatically. Such voluntarily transmitted personal data will be stored for the purpose of processing or contacting the person concerned. This personal data will not be passed on to third parties.


5. Legal basis for data processing

Art. 6 para. I a DS-GVO serves as the legal basis for processing operations in which consent is obtained for a specific processing purpose. If the processing is necessary for the performance of a contract to which the data subject is a party, the processing is based on Art. 6 para. I b DS-GVO. The same applies to processing operations for the implementation of pre-contractual measures. If we are subject to a legal obligation by which the processing of personal data becomes necessary, the processing is based on Article 6 (I) (c) of the GDPR. More rarely, the processing of personal data is necessary to protect the vital interests of the data subject pursuant to Article 6(I)(d) of the GDPR. Finally, processing operations could be based on Art. 6 para. I f DS-GVO if the processing is necessary for the protection of a legitimate interest on our part or on the part of a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden.


6. Erasure and blocking

The controller shall process and store personal data of the data subject only for the period of time necessary to achieve the purpose of storage or where provided for by the European Directive and Regulation or other legislator in laws or regulations to which the controller is subject.


7. Cooperation with processors and third parties

Insofar as we disclose data to other persons and companies (processors or third parties) in the course of our processing, transmit it to them or otherwise grant access to the data, this shall only be done on the basis of a legal permission, your consent, or a legal obligation, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 DSGVO.


8. Transfers to third countries

If we process data in a third country or do so in the context of using third-party services or disclosing or transferring data to third parties, this will only be done if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. DSGVO are met. This means, for example, that processing takes place on the basis of special guarantees or compliance with officially recognised special contractual obligations.


9. Cookies

We use so-called cookies. Cookies are alphanumeric identifiers that are either stored in your working memory for a short period of time and deleted again as soon as you close your browser ("session cookies") or stored in your storage medium for a longer period of time ("permanent cookies") We use session cookies to maintain the connection while visiting our website. Permanent cookies are only used to design our offer for you in a needs-based and convenient manner and to make it easier for you to use our offer by not having to re-enter certain information when you use it repeatedly and by quickly redirecting you to our offer. The lifetime of permanent cookies is a few days to a maximum of 1 year.

You can use your browser settings to reject cookies, delete them from your computer, block them or activate the function so that you are always prompted before a cookie is set. It is not necessary to accept cookies in order to visit our website. However, we would like to point out that individual functions of our website may only be usable to a limited extent, in particular the "medication reservation" functionality cannot be used.

Below we show you an example of how you can deactivate cookies:


Example in the Internet Explorer browser:

  • Open Internet Explorer.

  • In the "Tools" menu, select the item "Internet Options".

  • Click on the "Privacy" tab

  • Now you can set whether cookies should be accepted, selected or rejected.

  • Confirm your setting with "OK



Example in the Firefox browser:

  • Open the Firefox browser.

  • Select "Settings" in the "Tools" menu.

  • Click on the "Privacy" tab

  • In the drop-down menu, select the entry "Create according to user-defined settings".

  • Now you can set whether cookies should be accepted, how long you want to keep these cookies and you can add as exceptions which websites you always or never want to allow to use cookies.

  • Confirm your setting with "OK".


Example in the Safari browser:

  • Open the Safari browser.

  • Select "Settings" in the function bar (pictogram: grey gearwheel in the upper right corner) and click on "Privacy".

  • Under "Accept Cookies" you can determine whether and when Safari should accept cookies from websites. For more information, click on "Help" (?).

  • If you would like more information about cookies that are stored on your computer, click on "View cookies".


10. Web analysis Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). The use is based on Art. 6 para. 1 p. 1 lit. f. DSGVO. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website such as

  • Browser type/version,

  • operating system used,

  • Referrer URL (the previously visited page),

  • host name of the accessing computer (IP address),

  • time of the server request,

are generally transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We have also extended Google Analytics on this website with the code "anonymizeIP". This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.


On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.


You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. [You can find information on how to integrate the opt-out cookie at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable].


We continue to use Google Analytics to analyse data from Double-Click-Cookies and also AdWords for statistical purposes. If you do not wish to do this, you can deactivate this via the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de).


Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).


You have the option to prevent the future collection of your data when visiting this website by clicking on the following link to activate an opt-out cookie: Deactivate Google Analytics.


11. Information on the newsletter

If you have the option of subscribing to a newsletter on this website, we would like to inform you about the contents of this newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection with the following information. By subscribing to our newsletter, you agree to receive it and to the procedures described.


11.1 Content of the newsletter

We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. Insofar as the contents of the Newsletter are specifically described in the context of a registration, they shall be decisive for the consent of the users. Apart from that, our newsletters contain information on clinical pictures, medicinal products and news from the pharmacy or wholesale sector.


11.2 Registration data

To register for the newsletter, it is sufficient to enter your e-mail address.


11.3 Use of the "MailChimp" dispatch service provider

The newsletter is sent using "MailChimp", a newsletter sending platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and the presentation of the newsletters or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or pass the data on to third parties.

We trust in the reliability and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and thus undertakes to comply with the EU data protection regulations. Furthermore, we have concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. You can view MailChimp's privacy policy here.


11.4 Double opt-in and logging

Registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an email in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses.

The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.


11.5 Online access and data management

There are instances where we direct newsletter recipients to MailChimp's websites. For example, our newsletters contain a link with which newsletter recipients can call up the newsletters online (e.g. in the event of display problems in the email programme). Furthermore, newsletter recipients can subsequently correct their data, such as the email address. Likewise, MailChimp's privacy policy can only be accessed on their site.

In this context, we pointed out that on the websites of MailChimp Co.


11.6 Online call-up and data management

There are cases where we direct newsletter recipients to MailChimp's websites. E.g. our newsletters contain a link with which newsletter recipients can call up the newsletters online (e.g. in the event of display problems in the email program). Furthermore, newsletter recipients can subsequently correct their data, such as the email address. Likewise, MailChimp's privacy policy can only be accessed on their site.

In this context, we pointed out that cookies are used on MailChimp's websites and that personal data is thus processed by MailChimp, its partners and service providers used (e.g. Google Analytics). We have no influence on this data collection. For further information, please refer to MailChimp's privacy policy. We would also like to draw your attention to the options for objecting to the collection of data for advertising purposes on the websites http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the European region).


11.7 Revocation

You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. At the same time, your consent to the sending of the newsletter via MailChimp and the statistical analyses will expire. Unfortunately, it is not possible to separately revoke the sending via MailChimp or the statistical analysis.

You will find a link to cancel the newsletter at the end of each newsletter.


12. E-mail communication

If you send us an e-mail, we collect and process the personal data that you provide to us in the e-mail. This may include, for example, your first name, last name, address, telephone number, email address and the content of your message or communication if it contains personal data about you. This is done in order to be able to communicate with you if you have contacted us, e.g. by answering your questions, processing orders or providing you with requested information.

Please note that data about your health that you provide to us is special personal data within the meaning of Article 9 (I) DGSVO. Due to the need for protection of this data, please take special measures to provide the data with special protection during transport.


12.1 Statistical collection and analyses

The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times.

Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of MailChimp to observe individual users. The evaluations serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.


13. Transfer of data

Your personal data will only be passed on and transmitted if this is absolutely necessary for the purpose of processing your medication reservation, communicating with you and for the purpose of creating a customer card or if you have given your prior consent.

For the purpose of processing these services - in particular the transport of your medication reservation - the service providers we use receive the necessary data. The data passed on in this way may only be used by our service providers to fulfil these tasks specified by us within the framework of an order data agreement in accordance with Art.28 Para. III DGSVO. Any other use of the data is not permitted. The processing of the data takes place exclusively in the territory of the Federal Republic of Germany, in a member state of the European Union or in a contracting state of the Agreement on the European Economic Area. Your data will be deleted immediately after successful transmission.

Subject to the above provisions, your personal data will never be disclosed or passed on to third parties for advertising or marketing purposes or for other purposes without your consent. This only does not apply if we are obliged by law or by official order, in particular in cases of criminal prosecution or for the purpose of averting danger, to hand over the data.


14. Handling of applicant data

Thank you for your interest in working for Runge Pharma. You send us your application documents via the e-mail address bewerbung@rungepharma.de. Your application data is necessary for filling a position at Runge Pharma - without this data, employment at Runge Pharma is not possible. As we take the protection of your personal data and your rights as a data subject very seriously, we would like to inform you below about how we process your data.

We process your application data solely for the purpose of selecting suitable applicants for employment. We process your data on the basis of Art. 88 DS-GVO in conjunction with. § 26 BDSG(new) "Data processing for the purposes of the employment relationship". Your application data may be passed on within Runge Pharma to the following departments: HR department, management, specialist department with the corresponding personnel requirement or department requesting personnel. Your application data will not be forwarded to offices outside the EU.

Your application data will be included in the personnel file if you are hired. If you are not hired, your application data will be deleted within six months unless you expressly give us permission in writing to store your data in our applicant pool. You can revoke this consent at any time.

You have the right to obtain information about the processing of your personal data by Runge Pharma. You also have the right to demand the correction of your data, the deletion of your data, insofar as this does not conflict with any other legal provision, or to have this data blocked for further processing by Runge Pharma. You also have the right to receive your data stored by us in a standardised, machine-readable format.

If you believe that Runge Pharma is not handling your personal data lawfully, you have the option of complaining to our data protection officer as well as to a state data protection supervisory authority. A list and the respective contact details of the state data protection officers can be found here: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.


15. Name and address of the controller

For the purposes of the General Data Protection Regulation and other data protection laws applicable in the Member States of the European Union, the controller is:


Runge Pharma GmbH & Co. KG

Luisenstrasse 15

79539 Lörrach


Telephone: +49 7621 / 16 79 3-0

Fax: +49 7621 / 16 79 3-33
Email: info@rungepharma.de


Register Court: Freiburg Local Court

Commercial register number: HRA 411367

Owner: Dr. Hauke Heinrich Runge


16. The data protection officer of the data controller is

Ms Larissa Zirke

Data Protection Officer of Runge Pharma


Telephone: +49 7621 / 16 79 3-0

Fax: +49 7621 / 16 79 3-33

E-mail: datenschutz@rungepharma.de


Address:

Luisenstraße 15

79539 Lörrach


Data subjects can contact our data protection officer directly with all questions and suggestions regarding data protection.