Privacy Policy (Online Services)

As of July 2026

Dear visitors to our websites,
Dear users of our online services,

We – Bionorica SE – are not only committed to protecting your health, but also to protecting your data and thus your privacy. With this privacy policy, we would like to inform you:
• what personal data we process,
• what we use it for,
• how you can object to the use or withdraw consent, and
• what rights you have as a data subject and how you can exercise them.

1. Controller

The responsible body for data processing within the meaning of the GDPR is

Bionorica SE
Kerschensteinerstr. 11-15
92318 Neumarkt
Phone: +49 (0) 9181 231-90
Fax: +49 (0) 9181 231-265

You can contact our company data protection officer by e-mail to datenschutz@bionorica.de [mailto:datenschutz@bionorica.de] or by post at the above address with the note "Company Data Protection Officer".

2. Scope of Application

This privacy policy applies to your visit to the websites accessible under the following domains:

• agnucaston.de
• bionorica.de
• bionorica.com
• bionorica-dermaline.de
• bionorica-fortbildungen.de
• blase-gesundheit.de
• bronchipret.de
• canephron.de
• digestopret.de
• fachkreise.bionorica.de
• frau-gesundheit.de
• imupret.de
• intranet.phytothek.de
• mein-kind-gesundheit.de
• phytothek.de
• sinupret-extract.de
• sinupret-saft.de

Since the services/functionalities described below do not run on all of the domains mentioned, we will name the affected domain(s) for each individual service.

3. Processed data categories and data

When visiting the respective website, the following categories of data and individual data may be processed:

Web Usage Data

• IP address;
• the date and time of the request;
• time zone difference to Greenwich Mean Time (GMT);
• Content of the request (specific page);
• Access status/HTTP status code;
• the amount of data transferred in each case;
• Website from which the request comes;
• browser used, including language and version;
• Operating system of the device used and its interface.

Personal details and contact details

• Name;
• Address;
• Date of birth;
• marital status;
• occupation/professional position;
• nationality;
• telephone number(s);
• e-mail address;
• Other contact details provided, including social media accounts (e.g., Facebook, Twitter).

Electronic communication data (especially e-mail)

• Content of electronic communications that you direct to us or have with us;
• Metadata, e.g. e-mail addresses involved, time and date of e-mail correspondence, details of your opening and clicking behaviour in our newsletters.

If additional data is processed in individual processes or applications, you will find additional information in the respective section for the corresponding tool.

4. General processing when visiting the website (incl. server log files and cookies)

Applies to: all of the websites mentioned

When you simply visit the website, i.e. if you do not register or otherwise transmit information to us, we only process the personal data that your browser automatically transmits to our server.

This includes, in particular, so-called web usage data and server log files, such as:

• accessed pages or files,
• date and time of access,
• amount of data transferred,
• notification of successful retrieval,
• browser type and version,
• operating system used,
• referrer-URL,
• IP address and
• requesting Internet Service Provider.

This data is processed for the technical provision of our website and to ensure stability, functionality and IT security. In addition, we use the data for error analysis as well as for the detection and defense against abuse or attacks. This data is not merged with other data sources or evaluated for marketing or profiling purposes.

The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure, stable and functional provision of our website.

The server log files are generally stored for a maximum of 14 days and then deleted. Longer storage will only take place if this is necessary to clarify specific security or abuse cases.

In addition, cookies are stored on your device when you use the website. These are small text files that are placed on your device and contain certain information. The following types of cookies are used:

a) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies, which store a session ID that can be used to assign various requests from your browser to the same session.

b) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

Cookies are used to technically enable the use of the website and to improve its functionality.

5. When contacting us

Applies to: all websites mentioned with the exception of www.bionorica-fortbildung.de

When you contact us, web usage data, personal data and contact details as well as electronic communication data are collected and processed, depending on the information you provide.

When contacting us (for example via a contact form or an e-mail), your information is voluntary. This information will be processed by us to process the request.

Depending on the nature of your request, the legal basis results from Art. 6 (1) lit b, c or f GDPR

6. Health insurance reimbursement for over-the-counter medicines ("The Green Prescription")

Applies to: sinupret-extract.de, bronchipret.de, agnucaston.de, bionorica.de

You can search for statutory health insurance companies that reimburse you for expenses for certain over-the-counter medications on the websites mentioned under Service -> Reimbursement. You can fill out a refund form directly on the website and either download it or have it sent to a specific email address. If you wish to receive the mailing, we need your e-mail address, which we use exclusively for this mailing and then delete immediately from our systems.

Legal basis for this use of data is Art. 6 (1) lit a GDPR.

7. Google

7.1. Google Analytics 4

Applies to: all of the websites mentioned

We use Google Analytics 4, a web analysis service provided by Google Ireland Limited, on our website. Google Analytics uses cookies and similar technologies to analyze how our website is used. Information about your usage behaviour (e.g. pages visited, length of stay, device used) is processed. Your IP address will not be stored. It is only used for a short time to determine the approximate location and then deleted immediately. It is not possible for us to identify you directly.

The information collected by Google Analytics is usually transmitted to Google servers. This may also result in a transfer to the USA. Such transfers only take place where the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner. You can withdraw your consent at any time with effect for the future. You can also prevent the collection of your data by Google Analytics by installing the BrowserAddon provided by Google:
https://tools.google.com/dlpage/gaoptout.

Google processes this data on our behalf in order to evaluate the use of our website and to compile reports on website activity, on the basis of a data processing agreement. This order processing does not include any use of data by Google itself (e.g. for advertising purposes). Google itself is responsible for this, you can find corresponding information on the Google website.

7.2. Google Maps: Pharmacy or Event Radius Search

Applies to: canephron.de, bronchipret.de, bionorica-dermaline.de, digestopret.de, sinupret-extract.de, imupret.de, bionorica.de, phytothek.de, sinupret-saft.de, agnucaston.de

On the websites mentioned, we integrate map material from Google Maps. The provider is Google Ireland Limited. Google Maps enables us to provide you with a convenient pharmacy and event radius search as well as to clearly display geographical content. When a page with embedded map material is accessed, a connection to Google's servers is established. In particular, your IP address, location data (if released) and technical information such as browser, device and access information are processed.

When using Google Maps, personal data may be transmitted to Google servers in third countries, in particular the USA. Such transfers only take place where the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis for the initial transfer of the data is Art. 6 (1) lit f GDPR. Our legitimate interest lies in the user-friendly presentation and the provision of a radius search.

The integration is done by us. The further processing of personal data by Google is carried out under Google's own responsibility under data protection law. Google itself is responsible for this, you can find corresponding information on the Google website.

7.3. Google Consent Mode V2

Applies to: all of the websites mentioned

We use Google Consent Mode V2 on our websites. This is a technical interface that we use to ensure that the privacy choices you make in the cookie banner are taken into account when using Google services. In this context, only consent decisions will be processed and transmitted to Google to the extent that this is technically necessary to control the use of Google services in accordance with your choices.

In the course of use, personal data may be transmitted to Google servers in third countries. Such transfers only take place where the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis is Art. 6 (1) lit c GDPR in conjunction with the legal requirements for effective consent management as well as our legitimate interest in accordance with Art. 6 (1) lit f GDPR in the data protection-compliant operation of our website.

The data processing takes place in connection with various Google services. Google is generally responsible for the respective processing, corresponding information can be found on the Google website.

7.4 Google Text to Speech (TTS)

Applies to: all of the websites mentioned

On our websites, we use the Google Text-to-Speech service of Google Ireland Limited to improve digital accessibility. The service enables users to have selected content from our website read aloud automatically. The aim is to provide easier access to health-related information, especially for people with visual impairments, limited reading ability or cognitive impairments. This can only be used after active selection by you. In particular, your IP address, the transmitted text content, times of use and technical information about the end device and browser are processed.

As part of the use, personal data may be transmitted to Google servers in third countries, in particular to the USA. Such transfers only take place where the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis for the processing is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you give by actively using the function. You can withdraw your consent at any time with effect for the future.

Google processes the data on our behalf on the basis of a data processing agreement.

7.5.YouTube-Videos

Applies to: sinupret-extract.de, bionorica.com, digestopret.de, bronchipret.de

We embed videos from the YouTube video portal on the websites mentioned. The provider for users in the European Economic Area is Google Ireland Limited. The videos are embedded in the enhanced privacy mode and will only load after your active consent (2-click solution). Only after the video has been activated personal data will be processed, in particular your IP address and technical information such as device and browser data. If you are logged in to your Google or YouTube account, the video visit can be associated with your user account.

As part of the use of YouTube, personal data may be transmitted to Google servers in third countries, in particular to the USA. Such transfers only take place where the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis for data processing is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give by activating the video or via our cookie banner __and withdraw at any time with effect for the future. __

The initial integration of the videos is done by us. The further processing of personal data by Google in connection with YouTube is carried out under Google's own responsibility under data protection law. Google itself is responsible for this, you can find corresponding information on the Google website.

8. Wistia-Videos

Applies to: bronchipret.de, fachkreise.bionorica.de, bionorica.de, intranet.phytothek.de

On the aforementioned websites, we use the Wistia video service of Wistia, Inc. to provide and analyze video content. In the course of use, technical usage data in particular is processed, such as an abbreviated or anonymised IP address, time and duration of video playback, information on video content viewed as well as device and browser information. The processing serves the provision of the videos as well as the analysis and optimization of our video offering. The processing of this data is carried out exclusively for analysis and presentation purposes in connection with video playback. It is not possible for us to identify you directly.

As part of the use of Wistia, personal data may be transmitted to servers in third countries, in particular to the USA. Such transfers only take place where the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis for data processing is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner and withdraw at any time with effect for the future.

Wistia processes the data on our behalf on the basis of a contract for data processing. This order processing does not include any use of data by Wistia itself (e.g. for advertising purposes). Wistia is responsible for this, and you can find information on the Wistia website.

9. Mouse tracking with Mouseflow

Applies to: all of the websites mentioned

We use the analysis tool Mouseflow on our websites. The provider is Mouseflow ApS. Mouseflow serves to better understand usage behavior and to optimize our online offering. In particular, mouse movements, clicks, scrolling behavior, form interactions and technical information such as abbreviated IP address, device, browser and usage data are processed. The processing of this data is exclusively pseudonymised. Keystrokes in sensitive fields (such as passwords) are not recorded.

The processing takes place within the European Union. A transfer to third countries will only take place if, the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis is your consent in accordance with Art. 6 (1) lit a GDPR in conjunction with § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future, e.g. via the cookie settings or via the opt-out option provided by Mouseflow: https://mouseflow.de/opt-out/.

Mouseflow processes the data on our behalf on the basis of a data processing agreement.

10. Website tracking with Bloomreach

Applies to: canephron.de, sinupret-extract.de, imupret.de, bronchipret.de, bionorica-dermaline.de, digestopret.de, agnucaston.de, blase-gesundheit.de, frau-gesundheit.de, mein-kind-gesundheit.de, fachkreise.bionorica.de

On the websites mentioned, we use the web analysis and marketing service Bloomreach from Bloomreach B.V.. Bloomreach supports us in evaluating usage behavior and optimizing content and offers. In particular, IP address, usage and interaction data, page views, usage times and cookie information are processed.

The processing generally takes place within the European Economic Area. A transfer to third countries will only take place if, the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner. You can withdraw your consent at any time with effect for the future.

Bloomreach processes the data on our behalf on the basis of a data processing agreement.

11. Email newsletter/ Patient information

a) Healthcare professionals:
Applies to: fachkreise.bionorica.de, phytothek.de, intranet.phytothek.de

We offer an email newsletter called "PhytothekNews" or "PhytoNews" on the aforementioned websites for information about our products, services and events. You can subscribe to this newsletter by entering an email address; Providing information beyond the email address is voluntary. We use the data collected for the purpose of registering for the newsletter to send the corresponding newsletter and evaluate your click behaviour in the emails (opens, clicks) in order to improve our newsletter offer.

The legal basis for the processing of your data for the purpose of sending the newsletter is Art. 6 (1) lit a GDPR, for the purpose of evaluating click behaviour Art. 6 (1) lit f GDPR. You can withdraw your consent to the newsletter at any time by clicking on the "unsubscribe" link that you will find in each newsletter.

b) End users/patients:
Applies to: all websites mentioned except intranet.phytothek.de

On the aforementioned websites, we offer a comprehensive range of information ("Health Info Package") for end consumers/patients, with which we want to provide you with targeted information about our products, interesting service offers, health information and, if necessary, discount campaigns. You can register for this offer by providing an email address and, if applicable, a first name; We use the data collected for the purpose of registration to send tailored emails (newsletters), information offers and (only on canephron.de) links to feedback requests. If you give us your feedback via the email link, only your IP address will be processed in the context of website use (consent incl. revocation option via the cookie banner), but your answers will be anonymous and cannot be linked to you or your IP address.

As part of the processing, we create a profile that contains your email address as well as data for segmentation, such as indication(s), product(s), usage behavior of the above-mentioned websites and calculated scores ("profiling").

Legal basis for processing your data for the purpose of sending the newsletter is your voluntary consent in accordance with Art. 6 (1) lit a GDPR. You can withdraw your consent to the newsletter at any time with effect for the future by clicking on the corresponding link that you will find in each newsletter.

Applies to: Sign up for the consumer newsletter via Meta advertising banner

We offer a comprehensive range of information for end consumers, with which we want to provide you with specific information about our products. As part of the Meta advertising banners, you can register for this offer by entering an email address and a first name in the form. We use the data collected for the purpose of registration to send tailored emails, information offers and links to feedback requests. If you give us your feedback via the email link, the answers will be stored and processed as part of your profile (see paragraph 2) (consent incl. withdrawal option via the cookie banner).

As part of the processing, we create a profile that contains your email address and first name as well as data for segmentation, such as indication(s), product(s), usage behaviour of the respective websites (see general information on the site's email newsletter) and calculated scores ("profiling").

The legal basis for the processing of your data for the above-mentioned purposes (including the sending of the newsletter) is your voluntary consent in accordance with Art. 6 (1) lit a GDPR. You can withdraw your consent to the newsletter at any time with effect for the future by clicking on the corresponding link that you will find in each newsletter.

c) Applicants:
Applies to: bionorica.de/karriere/ihre-bewerbung

On our website, we offer an email newsletter for applicants, with which we inform you about our current job offers. To register for the newsletter, you must enter your email address. No further information is necessary. We use the data collected during the registration process exclusively for sending the applicant newsletter. There is no further evaluation or profiling.

The legal basis for the processing of your data for the purpose of sending the newsletter is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you give as part of the registration. You can withdraw your consent at any time with effect for the future by using the unsubscribe link contained in every newsletter.

12. Chatbot Loyjoy

Applies to: canephron.de, agnucaston.de, bionorica.de, imupret.de

On the aforementioned websites, we use the LoyJoy chatbot platform from LoyJoy GmbH to provide you with interactive information and to support you with health-related questions. In the course of use, in particular, technically necessary data such as your IP address, times of use and the content of your entries, which may also contain health-related information, are processed. This information will not be linked to you and will be deleted or completely anonymized immediately after the chat session has ended. Any further processing of anonymised data for statistical purposes is carried out without any personal reference.

If you voluntarily provide your email address in the chat for further communication, this data will be transmitted to our newsletter system and processed in accordance with the data protection information there (see section "End user/patients newsletter").

The processing generally takes place within the European Economic Area. Personal data will only be transferred to third countries if, the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis for the processing of your data is your voluntary consent in accordance with Art. 6 (1) lit a GDPR. If you voluntarily provide health-related information, the processing will also be carried out on the basis of your explicit consent in accordance with Art. 9 (2) lit a GDPR. __You can withdraw your consent at any time with effect for the future by no longer using the chatbot or by making appropriate settings via the cookie banner. __

LoyJoy processes personal data on our behalf on the basis of a data processing agreement.

13. User Management

Applies to: fachkreise.bionorica.de, intranet.phytothek.de

On the websites mentioned above, we offer members of healthcare professionals the opportunity to create a personal user account. As part of user administration, we process the data that you voluntarily provide in connection with your user account or your participation in training courses or events. This includes, in particular, contact details as well as information about your professional activity and the pharmacy or medical practice for which you work, as well as information about training courses or events you have attended (e.g. date, type, content). This data is processed for the purpose of providing specialist group content, for organising and carrying out training courses and events, as well as for targeted support for pharmacies or medical practices and for market research purposes. The provision of data is generally voluntary; however, without a user account, certain specialist group content cannot be used.

The legal basis for the processing of your personal data is your consent in accordance with Art. 6 (1) lit a GDPR. If you voluntarily provide additional information, the processing will also be based on your consent. You can withdraw your consent at any time with effect for the future.

You can delete your user account and the personal data stored in it yourself at any time by logging in and selecting deletion in the "My Account" menu item. With the deletion of the user account, the personal data stored in the account will be deleted or anonymized, provided that there are no statutory retention obligations to the contrary.

14. DocCheck login

Applies to: fachkreise.bionorica.de, intranet.phytothek.de

On the websites mentioned, we offer the option of logging in via the DocCheck service. The provider is DocCheck Medical Services GmbH. DocCheck is used to verify affiliation with medical professionals.

If you use the DocCheck login, the registration and specialist group check is always done via DocCheck. The processing of the data required for this purpose is carried out by DocCheck under its own responsibility under data protection law. As part of the DocCheck login, we do not receive any profile data stored with DocCheck, such as name, email address or professional information.

Only if you explicit select this, information stored with DocCheck can be transferred to our forms to simplify the entry. The transferred data can be checked and changed before saving.

Further information on data processing by DocCheck can be found in DocCheck's privacy policy.

15. Hotjar

Applies to: bionorica.de, bionorica.com, agnucaston.de

We use the web analysis service Hotjar Ltd. on our websites to evaluate user behaviour. In particular, interaction data such as click and scrolling behaviour, page views, usage times and technical information such as IP address, device and browser data are processed. The evaluation is carried out exclusively in pseudonymised form.

The legal basis is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner. Your data will be deleted after one year at the latest. You can withdraw your consent at any time with effect for the future and deactivate the data collection by Hotjar via the following opt-out option: https://www.hotjar.com/legal/compliance/opt-out/.

Hotjar processes the data on our behalf on the basis of a data processing agreement.

16. Friendly Captcha

Applies to: agnucaston.de, bronchipret.de, canephron.de, imupret.de, phytothek.de, sinupret-extract.de, sinupret-saft.de, frau-gesundheit.de, mein-kind-gesundheit.de, bionorica.de, bionorica.com, blase-gesundheit.de

On the aforementioned websites, we use Friendly Captcha from Friendly Captcha GmbH in order to be able to guarantee the security of our websites, in particular as protection against improper access by bots (i.e. spam protection or protection against attacks (e.g. mass requests)). In particular, IP address, technical information about the end device, browser information and interaction data in connection with the captcha solution are processed. A combination of numbers (so-called hash value) is formed from the IP address by means of one-way encryption, which does not allow any conclusions to be drawn about your person. The IP address is then immediately anonymized, only the hash value is stored on the Friendly Captcha server for a maximum of 30 days and then deleted. Friendly Captcha does not have access to the content you enter in the contact form.

We pay special attention to the protection of your personal data when using this tool, which is why we use the EU Endpoint from Friendly Captcha, through which the data is processed exclusively in the European Union. In addition, we have no access to the data processed by Friendly Captcha.

The legal basis is Art. 6 (1) lit f GDPR. Our legitimate interest is to ensure the security of our contact form and to prevent misuse for automated spying.

Friendly Captcha processes the data on our behalf on the basis of a data processing agreement. This agreement does not include any use of data by Friendly Captcha itself (e.g. for advertising purposes). Friendly Captcha is responsible for this itself, corresponding information can be found on the Friendly Captcha website.

17. Adition

Applies to: phytothek.de

We use the Adition ad server of ADITION technologies AG on our websites to display advertising. In particular, usage data such as page views, access times, IP address and technical information on devices and browsers are processed.

The processing takes place within the European Union.

The legal basis is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner. The data will be deleted as soon as the purpose of the processing ceases to apply or you withdraw your consent, but no later than three months after collection. You can withdraw your consent at any time with effect for the future.

Adition processes the data on our behalf on the basis of a data processing agreement. This agreement does not include any use of data by Adition itself (e.g. for advertising purposes). Adition is responsible for this itself, corresponding information can be found on the Adition website.

18. Typeform

Applies to: all of the websites mentioned

We use the Typeform service of Typeform S.L. on our websites to carry out surveys and to provide forms. In particular, technical usage data (e.g. access times, IP address, device and browser information) as well as voluntarily provided information such as name, email address and content of your request are processed. If you voluntarily provide further information, this data will be processed separately from the technical usage data and will not be merged with each other.

A transfer to third countries will only take place, if the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner. You can withdraw your consent at any time with effect for the future. Your contact details provided in the form will be deleted from Typeform after six months at the latest. Depending on the purpose of the form, your information may subsequently be further processed under this Privacy Policy and transmitted to other services we use (e.g., Bloomreach or email newsletter/patient information).

Typeform processes the data on our behalf on the basis of a data processing agreement. This agreement does not include any use of data by Typeform itself (e.g. for advertising purposes). Typeform is responsible for this itself, corresponding information can be found on the Typeform website.

19. Meta Pixel (Facebook Pixel) and Meta Ads

Applies to: sinupret-extract.de, bronchipret.de, imupret.de, canephron.de, bionorica-dermaline.de, digestopret.de, agnucaston.de, sinupret-saft.de

We use the Meta Pixel and Meta Ads of Meta Platforms Ireland Limited on our websites. With the help of the Meta Pixel, it is possible to understand how visitors use our website and advertising campaigns are optimized on this basis. In particular, usage data, interactions, device information and IP address are processed.

In the course of use, personal data may be transmitted to servers in third countries, in particular to the USA. Such transfers only take place where the legal requirements for an international data transfer are met and the respective third country is recognized as providing an adequate level of data protection or where other legally prescribed safeguards for the protection of your personal data are in place.

The legal basis is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner. You can withdraw your consent at any time with effect for the future.

We are jointly responsible for the collection and transmission of the data with Meta. A corresponding joint controller agreement has been concluded with Meta. Any use of data by Meta itself is not part of this joint processing. Meta is responsible for this itself, corresponding information can be found on the Meta website.

20. Spotify Pixel / Spotify Ads

Applies to: imupret.de

We use the Spotify Pixel and Spotify Ads from Spotify AB on our websites. These services are used to evaluate how visitors use our website after clicking on an advertisement in order to optimize campaigns. In particular, usage data, interactions and technical information such as IP address, device and browser data are processed.

The legal basis is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via our cookie banner.__ You can withdraw your consent at any time with effect for the future.__

The evaluations provided to us by Spotify are anonymized; we cannot draw any conclusions about individual persons from this. However, Spotify also processes the collected data under its own responsibility under data protection law. We have no influence on this data processing. A transfer of personal data to third countries can therefore not be ruled out in the context of use.

We also promote our website on Spotify. We define the framework conditions of the respective advertising campaign (e.g. target group or campaign goal). The technical display of the advertising as well as any further processing of personal data is carried out by Spotify under its own responsibility. In this context, too, we only receive anonymized statistical key figures

21. Pharmacy finder // Use of OpenStreetMap to search for pharmacies

Applies to: phytothek.de

On the website mentioned above, we use map material from OpenStreetMap to enable you to search for pharmacies in your area. In particular, IP address, location data (if released) and technical information on the browser and end device are processed. This processing is carried out exclusively for the purpose of displaying the map and enabling the pharmacy search.

The legal basis is your voluntary consent in accordance with Art. 6 (1) lit a GDPR, which you can give via the cookie banner or before using the function for the first time. You can withdraw your consent at any time with effect for the future.

Further processing is carried out under the OpenStreetMap Foundation's own responsibility under data protection law. A transfer of personal data to third countries can therefore not be ruled out in the context of use.

22. Push Messages

Applies to: fachkreise.bionorica.de

You have the option to sign up to receive push notifications. With this function, we inform you directly about current content via your browser or device.

Registration for push notifications is only possible in the "My Account" area. There you can activate or deactivate the function at any time. In the context of registering and using push notifications, we only process technically necessary data (in particular: an Endpoint-URL (technical address of your browser or device for delivery), authentication keys (e.g. publicKey and authToken) for secure transmission, an internal user ID (UID) for assigning the registered user account).

This data will not be passed on to third parties. The processing takes place exclusively within our own technical infrastructure.

Your data will be processed on the basis of your consent in accordance with Art. 6 (1) lit a GDPR. The consent applies only to the device or browser used and can be withdraw at any time with effect for the future by deactivating the push notifications in the settings of your browser or device. The data stored in connection with Push Notifications will be deleted as soon as it is no longer required for the purpose of delivery – at the latest when the push notifications are deactivated.

23. Your rights

As a data subject, you have the right of access in accordance with Article 15 GDPR, the right to rectification in accordance with Article 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restriction of processing in accordance with Article 18 GDPR and the right to data portability in accordance with Article 20 GDPR. The right of access and the right to erasure are subject to the restrictions under §§ 34 and 35 BDSG (German Bundesdatenschutzgesetz). In addition, there is a right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

Furthermore, you have the right to object under Article 21 GDPR. You can object to the processing of personal data on the basis of Article 6 (1) lit e or f GDPR at any time without giving reasons.

You can withdraw any consent you have given us at any time, whereby the method recommended by us is indicated in the relevant section of this Privacy Policy depending on the medium (you can register for the newsletter, for example, simply by clicking on "unsubscribe", which you will find in every newsletter). However, you can also use the web form or send an email to datenschutz@bionorica.de. The way via the web form and by email is not automated and therefore takes longer than the automatic way recommended by us.