Data Protection

 

1 Privacy Policy of Dermapharm AG

We, the operators of the Dermapharm AG website, take the protection of your personal data very seriously and strictly adhere to data protection regulations (GDPR, BDSG, TMG) and other legal provisions. Data protection applies to personal data. This refers to any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, mailing address, email address, or phone number, as well as usage data such as your IP address.

In the following, we would like to inform you about how we handle your personal data.

1.1 Data Controller and Data Protection Officer

This Privacy Policy applies to all pages on  https://dermapharm.com/ .  It does not apply to any linked websites or online presences operated by other providers.

1.2 Data Controller and Data Protection Officer

The following entity is responsible for the processing of personal data within the scope of this Privacy Policy, as defined in Article 4(7) of the GDPR:

Dermapharm AG
Lil-Dagover-Ring 7
82031 Grünwald
Germany

E-Mail: service@dermapharm.de 
Phone.: +49 (89) 6 41 86-0
Fax: +49 (89) 6 41 86-130 

If you have any questions regarding data protection in connection with our company or our website, you can contact our external Data Protection Officer at:

Sebastian Heinemann
Internal Auditor DIIR
Senior Consultant

Merkurhaus
Petersstraße 50
D-04109 Leipzig

Phone: + 49 (0) 341 355821 -502
Fax:      + 49 (0) 341 355821 -599
E-Mail:   datenschutz@dermapharm.com 

1.3 Purposes and scope of data processing when visiting the website

Every time a user accesses a page on our website or retrieves a file, access data regarding this operation is stored in a log file on our server.

Each data record consists of:

We store IP addresses in server log files for a maximum period of 180 days (depending on the log file created).

This data will only be used or shared with the website developer in the event of an error. The analysis is used to verify the functionality of the web server or the website.

This data is stored for data security purposes to ensure the stability and operational reliability of our website. The legal basis for this is Article 6(1)(b) of the GDPR.

As a general rule, we do not disclose your data to third parties unless you have given your consent. For certain areas (e.g., the hosting of our website), however, we rely on service providers, whom we generally oblige to comply with legal requirements through a data processing agreement.

1.4 Collection, Use, and Disclosure of Personal Data

Personal data is stored only if you voluntarily provide it to us, for example, when you register on the website, order informational materials, or subscribe to the newsletter. We use your personal data exclusively for the technical administration of our websites, to provide you with access to specific information, and for other communications with you. We take precautions to protect your personal data from loss, destruction, falsification, manipulation, and unauthorized access. We naturally comply with all applicable data protection laws. In exceptional cases—such as when handling inquiries about products—we reserve the right to disclose your personal data to the currently registered and responsible manufacturer. Our employees are bound by confidentiality obligations. If data is transferred to service providers in the context of commissioned data processing, these providers are also bound by confidentiality obligations and are subject to data protection laws, other legal regulations, and this Privacy Policy.

1.5 External Links

This website may contain links to external websites that are not covered by this Privacy Policy. The website operator provides access to these third-party websites but is not responsible for their content, as the operator does not initiate the transmission of the information, does not select the recipients of the transmitted information, and has not selected, modified, or temporarily stored the transmitted information. When you leave this website, we recommend that you carefully read the privacy policy of each other website.

 

2 Data Collection and Processing

2.1 Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, phone number, message text, mailing address) only to the extent that you provide it. The purpose of data processing is to establish contact with you. Processing is based on Article 6(1)(b) of the GDPR.

We use your personal data solely to process your inquiry. Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is generally the case when the circumstances indicate that the matter in question has been conclusively resolved.

2.2 Contact via Email, Phone, or Fax

If you contact us via email, we will use your personal data (name, email address, message text) solely to get in touch with you. Processing is based on Article 6(1)(b) of the GDPR. We use your email address solely to process your inquiry. Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is generally the case when the circumstances indicate that the matter in question has been conclusively resolved.

2.3 Newsletter Subscription

On our website, you may subscribe to newsletters containing general and product information, provided you have expressly consented to this. Data processing is based on Article 6(1)(b) of the GDPR with your consent. When you sign up for the newsletter, the data entered in the form is transmitted to us. Providing an email address is sufficient to receive the newsletter. Your consent is given as part of a so-called double opt-in process. In this context, the IP address of the accessing computer, as well as the date and time of registration, are also logged to document your consent. You may revoke your consent at any time with future effect and unsubscribe from our newsletter, for example, by using the unsubscribe option provided in the newsletter.

 

3 Plugins

3.1 Cookies

Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. In the case of a login, this cookie contains a unique string of characters that ensures the browser can be uniquely identified for the duration of the login session. As a rule, cookies are used to manage the website’s metadata and do not contain any personal data.

We use cookies to make our website more user-friendly, effective, and secure. Some features of our website cannot be provided without the use of cookies. Data processing is based on Article 6(1)(f) of the GDPR, which is grounded in our legitimate interest in the purposes mentioned above.

The data collected from you in this manner is pseudonymized through technical measures. As the website operator, we are therefore no longer able to link the data to your identity. The data is not stored together with any other personal data we collect from you.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to use all features of this website to their full extent. The links below provide information on how to manage (including disabling) cookies in the most common browsers: Chrome, Internet Explorer, Firefox, Safari.

3.2 Google Analytics

We use Google Analytics to analyze website usage. The data collected is used to optimize our website and our advertising efforts.

Google Analytics is a web analytics service operated and provided by Google Ireland Limited (“Google”), a company incorporated and operating under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the website usage data on our behalf and is contractually obligated to take measures to ensure the confidentiality of the processed data.

During your visit to the website, the following data, among other things, is recorded:

This data is transferred to Google’s servers in the United States. Please note that data protection laws in the United States cannot guarantee the same level of protection as those within the EU. Google Analytics stores cookies in your web browser for a period of two years from the date of your last visit. These cookies contain a randomly generated user ID that allows you to be recognized during future visits to the website. The recorded data is stored together with the randomly generated user ID, which enables the analysis of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

The Google Analytics service is used to analyze usage patterns on our website. The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR. If you do not consent to this data collection, you can prevent it by installing the browser add-on to disable Google Analytics.

3.3 Google Ads

This website also uses conversion tracking. This is a service provided by Google Ireland Limited (“Google”), a company incorporated and operating under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Ads places a cookie on your computer if you arrived at our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages on the Google Ads customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking.

Google Ads customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

The legal basis for the use of this Google service is your consent pursuant to Article 6(1)(a) of the GDPR. If you do not wish to participate in the tracking process, you can also refuse the placement of the cookie required for this purpose—for example, by adjusting your browser settings to generally disable the automatic placement of cookies. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain “www.ads.google.com.” Google’s privacy policy regarding conversion tracking can be found here.

3.4 Google Tag Manager

This website uses Google Tag Manager. This is a service provided by Google Ireland Limited (“Google”), a company incorporated and operating under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This organizational tool allows for the centralized integration and management of various tracking tools. In the process, code snippets—also known as tags—are inserted into the website’s source code to, for example, track user activity, support marketing tools, set cookies, and track users across different websites.

We use Google Tag Manager to manage our website more efficiently and provide a better user experience. This tool allows us to easily integrate the necessary scripts and manage them from a central location without requiring any programming knowledge.

Google Tag Manager itself does not store any data or set any cookies. The data collected by the implemented tags is forwarded directly to the corresponding tracking tools, such as Google Analytics. Please refer to the privacy policies of the individual analytics and tracking tools to find out what data is collected, stored, and processed.

In the Tag Manager account settings, we have allowed Google to receive anonymized data; however, this pertains exclusively to the use of Tag Manager itself and not to your personal data collected via the implemented code snippets. We consent to the anonymous sharing of website data, whereby Google deletes all information that could identify our website. The collected data is anonymized and combined with other website data to analyze trends and optimize processes.

3.5 Google Remarketing

This website uses Google Remarketing, an advertising analytics tool. This is a service provided by Google Ireland Limited (“Google”), a company incorporated and operating under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google uses cookies that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies regarding your use of this website (including your IP address) is transmitted to a Google server in the United States and stored there. Google then truncates the IP address by the last three digits, so that the IP address can no longer be uniquely identified. Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide other services related to website and internet usage. Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf. Third-party vendors, including Google, serve ads on websites across the Internet. Third-party vendors, including Google, use stored cookies to serve ads based on a user’s previous visits to this website. Google will not associate your IP address with any other data held by Google. You may object to the collection and storage of data at any time with future effect. You can disable the use of cookies by Google by visiting the page to disable Google ads. However, please note that in this case, you may not be able to use all features of this website to their full extent.

This service is used to analyze usage patterns on our website and to tailor marketing campaigns to individual users through remarketing. The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR. You may object to the collection and storage of data at any time with future effect. For more information on Google’s policies, please visit https://policies.google.com/privacy?hl=de.

3.6 Google Web Fonts

This website uses Google Fonts to ensure consistent font display. Google Fonts is a service provided by Google Ireland Limited (“Google”), a company incorporated and operating under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Fonts play a key role in maintaining the quality of our website. All Google fonts are automatically optimized for web use, which results in efficient data transmission and is particularly beneficial for mobile devices. The small file size of Google fonts ensures fast loading times for our website, which has a positive impact on the user experience.

Google Fonts are installed locally on our server. No connection to Google’s servers is established.

3.7 YouTube

We embed YouTube videos in our online content that are stored at www.youtube.com and can be played directly from our website. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube automatically collects your IP address, the date and time of access, as well as information about the webpage you visited and the video you watched. This occurs regardless of whether you are logged into a YouTube account or not. In addition, a connection is established to Google’s advertising network.

If you visit one of our webpages that contains an embedded YouTube video without playing the video, no data will be transmitted to YouTube initially, provided that YouTube’s “Enhanced Privacy Mode” is enabled. Data is only transmitted once you start the video.

We use a cookie to save your settings regarding video playback and data transmission to YouTube. These cookies do not contain any personal data; they are used solely to customize your browser settings.

If you are logged into YouTube at the same time, YouTube may link the connection information to your YouTube account and use it for personalized advertising. For more information, please see Google’s Privacy Policy: http://www.google.de/intl/de/policies/privacy/.

We use YouTube to display videos on our websites. The legal basis for this processing is your consent under Article 6(1)(a) of the GDPR.

3.8 Usercentrics Consent Management

We use the Usercentrics Consent Management Platform on our website as a consent management tool for our analytics activities. The service provider is the German company Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

The Usercentrics Consent Management Platform uses JavaScript to collect log file and consent data. This JavaScript makes it possible to inform users about their consent regarding specific tags on our website, as well as to obtain, manage, and document that consent.

The following consent-related data is collected during processing: anonymized log data (Consent ID, Processor ID, Controller ID), consent status and timestamp, data regarding the devices used (including truncated IP addresses (IP v4, IP v6), device information, and timestamp), as well as user data (including email, ID, browser information, SettingIDs, changelog). The Consent ID (which contains the data listed above) and the consent status, including the timestamp, are stored in your browser’s local storage and simultaneously on the cloud servers in use. Further processing occurs only in the event of a request for information or the revocation of your consent.

No user information is stored for the statistical analysis of consent granted or not granted. Only the frequency and locations of clicks are logged.

Personal data is stored on a Google Cloud server located in the EU (Brussels, Frankfurt am Main).

The purpose of processing your data is to analyze and manage the consents granted in order to fulfill our obligation to manage consent in compliance with the GDPR. The use of Usercentrics serves the purpose of verifying and managing consents that have been granted or not granted. The legal basis for managing your consents to the processing of your personal data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the legally compliant documentation and verifiability of consents, the targeting of marketing measures based on the consent granted, and the optimization of consent rates.

3.9 Use of OpenStreetMap

Our website uses map data from the open-source service “OpenStreetMap” (OSM), provided by the OpenStreetMap Foundation, St. John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The maps are integrated via an API, so that map content is loaded directly from the OpenStreetMap Foundation’s servers. This may result in your IP address and, if applicable, other technical data being transmitted to OSM’s servers. This data processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, in order to provide you with an attractive and functional representation of our location. For more information on data processing by the OpenStreetMap Foundation, please visit: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

3.10 DocCheck Log-In

We are only permitted to make certain information about prescription medications on this website available to members of the healthcare profession. To verify your access authorization, we are therefore required to request proof of your professional affiliation. For this purpose, we use the external service provided by DocCheck Medical Services GmbH via an iframe. Your login credentials stored with DocCheck are transmitted to DocCheck for verification each time you log in. We do not process any additional data from you in this context; rather, by integrating this service, we merely facilitate the data processing. This serves to ensure the proper provision of information, which constitutes our legitimate interest. The legal basis is therefore Article 6(1)(f) of the GDPR.

For more information, please visit http://info.doccheck.com/de/privacy/.

 

4 Protection of Minors

Consent to the processing of personal data may only be given by an adult. For services provided by Dermapharm AG, consent from a child who has reached the age of sixteen is permitted in accordance with Article 8 of the GDPR.

 

5 Changes to Our Privacy Policy

To ensure that our Privacy Policy always complies with current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the Privacy Policy needs to be updated due to new or revised offerings, such as new services. The new Privacy Policy will then take effect the next time you visit our website.

 

6 Rights of the Data Subject

Under the provisions of the GDPR, you generally have the following rights:

To exercise any of these rights or if you have further questions regarding personal data, you may contact us at any time at datenschutz@dermapharm.com or using the contact information provided in Section 1.2 above.

Irrespective of this, you have the right to lodge a complaint with a supervisory authority—in particular in the EU Member State where you reside, where you work, or where the alleged infringement occurred—if you believe that the processing of your personal data violates the GDPR or other applicable data protection laws (Art. 77 GDPR, § 19 BDSG).

 

7 Data Transfers to Third Countries

No data is transferred to entities in countries outside the European Union (so-called third countries) (Note: Please refer to the information on this topic in Section 3).

 

8 Use of Automated Decision-Making or Profiling

As a general rule, we do not use fully automated decision-making or profiling as defined in Article 22 of the GDPR. Should we use these processes in individual cases, we will inform you separately, provided this is required by law. (Note: Please refer to the information on this topic in Sections 4–6).

Status of the Privacy Policy

This Privacy Policy is currently valid and is effective as of June 2025.