Required Fields

Angaben gemäß §5 Abs. 1 Telemediengesetz:

ilapo Internationale Ludwigs-Arzneimittel GmbH & Co. KG
Friedenheimer Brücke 21
D-80339 München

Tel.: (+49) 089 / 18 940-300
Fax: (+49) 089 / 18 940-333
E-Mail: info@ilapo.de

Pers. haft. Ges.: Ludwigs-Arzneimittel Beteiligungs GmbH, HRB München 139021

Aufsichtsbehörde:
Regierung von Oberbayern

Geschäftsführer:
Sabine Fuchsberger-Paukert, Apothekerin
Florian Picha, Apotheker

Handelsregister:
HRA München 78768

Umsatzsteuer-ID-Nr.:
DE 814 409 583

Gesetzliche Berufsbezeichnung, verliehen in Deutschland:
Apotheker

Zuständige Apothekerkammer:
Bayerische Landesapothekerkammer (www.blak.de)
Maria-Theresia-Str. 28
81675 München

Picture credits:

ISO, ÖkoProfit, AEO, Apotheker ohne Grenzen e.V., Apotheker helfen e.V., IHK wir bilden aus!, DocCheck, ilapo, Gisela Dachs, Exportpreis Bayern 2012 (http://www.exportpreis-bayern.de/die-sieger-2012), ÖkoProfi (http://www.arqum.de/), Internationale Ludwigs-Apotheke (http://www.ludwigsapo.de/), Apotheker ohne Grenzen (http://www.apotheker-ohne-grenzen.de/), Google (www.maps.google.de/maps), Tiroler Steinöle, Achensee

ilapo privacy policy

All personal data will be treated confidential. Our data privacy practice complies with the German Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR). The following will inform you about the details regarding data privacy: We will process personal data (mostly referred to as "data" hereinafter) only if necessary, or to provide a functional, user-friendly online presence, including its content and the services it offers.
Under Art. 4 section 1 of the EU Regulation 2016/679, the "General Data Protection Regulation" (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The following data privacy policy will inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide, either alone or in conjunction with others, about the purpose and means of that processing. It will also inform you about the external components we use for optimization and to increase user quality, to the extent that third-parties process data autonomously.

Our data privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of the users and data subjects
III. Information about data processing


I. Information about us as the controller
For the purposes of data privacy law, the controller for this online presence is:
Ilapo Internationale Ludwigs-Arzneimittel GmbH & Co. KG
Friedenheimer Brücke 21
80639 Munich
Germany
Telephone: +49 (0) 89 189 40 300
Fax: +49 (0) 89 189 40 300
Email: info@ilapo.de

We have appointed a company data protection officer. You can reach that officer as follows:
Ilapo Internationale Ludwigs-Arzneimittel GmbH & Co. KG
Thomas Müller
Friedenheimer Brücke 21
80639 Munich
Germany
Telephone: +49 (0) 89 189 40 300
Fax: +49 (0) 89 189 40 300
Email: mueller@ilapo.de


II. Rights of users and data subjects
With a view to the data processing described in greater detail in the following, users and data subjects have the rights
to confirmation of whether data concerning them is being processed, to information about that processed data, to further information about the data processing and to copies of the data (cf. also Art. 15 GDPR);
to rectification or completion of incorrect or incomplete data (cf. also Art. 16 GDPR);
to erasure of the data concerning them, without undue delay (cf. also Art. 17 GDPR), or in the alternative, insofar as further processing is necessary under Art. 17 para. 3 GDPR, to restriction of that processing based on Art. 18 GDPR;
to receive the data concerning them, which they have provided, and to have those data transmitted to other providers or controllers (cf. also Art. 20 GDPR);
to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 GPDR). The supervisory authority responsible for us is the Bayerische Landesamt für Datenschutzaufsicht [Bavarian State Office for Data Protection Supervision], Promenade 27 (Schloss), 91522 Ansbach, https://www.lda.bayern.de/de/index.html.
We are also obligated to inform all recipients to whom the provider discloses data about any rectification or erasure of data, or the restriction of its processing, which occur due to Articles 16, 17 (1), and 18 GDPR. However, we will not be obligated to do so if this notification is impossible or would entail a disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.

___________________________________________________________________________________________________________________________________
Right of objection under Art. 21 (1 and 2) GDPR.
You may object at any time, for reasons arising from your particular situation, to the processing of your personal data under Art. 6 (1) (e or f) GDPR. After you lodge such an objection, we will not process your personal data unless we can prove compulsory reasons for doing so which are worth protecting and which override your interests, rights and freedoms, or if the processing helps to assert, exercise or defend against legal claims (cf. Art. 21 (1) GDPR, "restricted right to object"). In this case, you must provide reasons for your objection which result from your particular situation.
You may also object, without giving reasons, to your personal data being processed for direct advertising.
___________________________________________________________________________________________________________________________________

III. Information about data processing

Storage period
Your data that are processed when you use our online presence will be erased or blocked as soon as (1) the purpose for their storage no longer applies, (2) such erasure does not oppose any statutory retention regulations, and (3) no individual processing procedures are otherwise stipulated in the following.

Server log files
Whenever our internet site is accessed, our system automatically records data and information from the system of the accessing computer. These server log files are small files which log your inquiries and accesses of our website. The following data will be logged:

• Name of the visited website
• Date and time of access
• Quantity of transmitted data
• Reference from which you arrived at the site (the "referrer URL")
• Your browser type
• Your operating system
• Your IP address

These data do not normally allow us to identify you directly and will be processed to improve our website services. The legal basis for processing your personal data is a legitimate interest under Art. 6 (1) (f) GDPR. We have a legitimate interest in presenting you with a website optimized for your browser and facilitating communication between our server and your end device.
Moreover, if the system is misused, we can process and use the information captured by the web server in cooperation with your internet provider, the local authorities, or both, to determine the perpetrator of that misuse. The legal basis for doing so is also a legitimate interest, Art. 6 (1) (f) GDPR. In this scenario, our legitimate interest is to protect the integrity of our system and those of our users.

Cookies
a) Session cookies
We use cookies for our online presence. Cookies are small text files or other storage technologies which are placed and stored on your end device by your internet browser. These cookies certain information about you, determined to an individualized extent, such as your browser or location data or IP address. 
This processing helps make our online presence more user-friendly, effective and secure, since the processing or forwarding makes it possible to offer our online presence in different languages or to offer a shopping cart function.
The legal basis for this processing is Art. 6 (1) (b) GDPR, provided these cookies are processed to initiate or execute a contract.
If the processing doesn't serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our online presence. The legal basis is Article 6 (1) (f) GDPR.
These session cookies will be deleted when you close your browser.
b) Third-party cookies
If need be, our online presence will also use cookies from partner companies with which we cooperate for the purposes of advertising, analysis, or the functionality of our online presence.
The details in this regard, particularly those concerning the purposes and legal bases of the processing of such third-party cookies, are revealed in the following information.
c) Rectification option
You can prevent or restrict the installation of cookies by changing your browser settings appropriately. You can also delete at any time cookies that have already been stored. The necessary steps and measures to that end depend on the browser you use. Therefore, if you have questions, please use the "Help" function or documentation of your browser, or contact its manufacturer or support team. However, you cannot use your browser settings to prevent Flash cookies from being processed. Instead, you must change the settings of your Flash player. The necessary steps and measures to that end depend on the Flash player you use. Therefore, if you have questions, please use the "Help" function or documentation of your Flash player, or contact its manufacturer or user support team.
Please remember that if you prevent or restrict the installation of cookies, you might not be able to use all the functions of our online presence to their full extent.

Contract execution

Identification using DocCheck
We use the identification services of DocCheck Medical Services GmbH for visits to the parts of our website which are not open to the public. To this end, you must enter your user name and password in the input screen. This login procedure is performed on DocCheck servers, so no personal data is forwarded to us. DocCheck Medical Services GmbH uses cookies to independently provide and operate DocCheck services. To that end, you must enter your user name and password in DocCheck's input screen. The information generated by the cookies will be transmitted only to the servers of DocCheck Medical Services GmbH in Germany, and will not be shared with us or other third parties.

Orders in the online shop
For the orders in our online shop to be placed and handled, your name, address, payment method and order data must be processed. The data transmitted from you to take advantage of our goods or services will be processed by us in order to process the contract, and are necessary to that extent. Contracts cannot be concluded or processed unless you provide your data.
The legal basis for processing is Article 6 (1) (b) GDPR.
We will erase the data when the contract has been executed, but the retention periods under commercial and tax law must be observed.
During contract execution, we will forward your data to the transport firm commissioned to deliver the merchandise, or to the financial service provider, provided such forwarding is necessary for goods delivery or payment purposes.
The legal basis for forwarding the data is Article 6 (1) (b) GDPR.

Customer account; Registration function
If you open a customer account with us through our online presence, we will collect and store the data you provide during registration (such as your name, address or email address) exclusively for pre-contractual services, contract execution, or customer services (for example, to give you an overview of your orders so far or offer you the "bookmark" function). At the same time, we store the IP address and date and time of your registration. Those data will not be forwarded to third parties.

If opening the customer account also helps with a pre-contractual measure or contract execution, the legal basis for the processing will still be Art. 6 (1) (b) GDPR.
You may at any time withdraw the consent you have granted us to open and maintain the customer account, with effect for the future, under Art. 7 (3) GDPR. To do so, you must merely inform us of your withdrawal.
The data collected to that extent will be erased when their processing is no longer necessary. However, we must still observe the retention periods under commercial and tax law.
Contact questions; Contact options
If you wish to contact us using the contact form or through email, the data you provide when doing so will be used to process your request. Providing that data is necessary to handle and answer your request; without those data, we cannot answer your request completely or at all.
The legal basis for this processing is Article 6 (1) (b) GDPR.
Your data will be erased when your question has been conclusively answered and such erasure does not oppose any statutory retention obligations, such as those which apply to any subsequent contract execution.

Google Analytics
We use Google Analytics in our online presence. This is a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA ("Google").
By being certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google guarantees that the data protection provisions of the EU will be complied with when data are processed in the USA.
The Google Analytics service helps us analyze user behavior on our online presence. The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in analyzing and optimizing our online presence and operating it in a cost-effective way.
Usage and user information, such as the IP address, place, time or frequency of the visit to our online presence, will be transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the anonymization function. By using this function, Google truncates the IP address with the EU or EEA.
Google then uses the data collected in this way to provide us with an evaluation of the visit to our online presence and the usage activities there. These data can also be used to render additional services related to the use of our online presence and of the internet.
Google declares it will not combine your IP address with other data. In addition, Google provides other information related to data privacy law under https://www.google.com/intl/de/policies/privacy/partners, including instructions for preventing data use.
Google also offers a deactivation add-on, plus additional information, under https://tools.google.com/dlpage/gaoptout?hl=de. This add-on can be installed on common browsers and offers you a further opportunity to monitor the data captured by Google when you access our online presence. As part of this process, the add-on informs JavaScript (ga.js) of Google Analytics that information about your visit to our online presence is not to be transmitted to Google Analytics. However, this will not prevent information from being transmitted to us or to other web analysis services. Naturally, this data privacy statement will also inform you of the other web analysis services we use, if any.

YouTube
We use YouTube in our online presence. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA ("YouTube").
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA ("Google").
By being certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google and its subsidiary YouTube guarantee that the data protection provisions of the EU will be complied with when data are processed in the USA.
We use YouTube in connection with the function "enhanced data protection mode" to be able to show you videos. The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online presence. According to statements from YouTube, the function "enhanced data protection mode" means that the data more closely described below will be transmitted to the YouTube server only when you actually start a video.
Without this "enhanced data protection," a connection to the YouTube server in the USA is established as soon as you access one of our internet sites on which a YouTube video is embedded.
We need this connection to be able to show the video in question on our internet site through your browser. During this process, YouTube will capture and process at least your IP address, the data and time, and the internet site you visit. In addition, a connection will be established to the advertising network "DoubleClick," a Google subsidiary.
If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our online presence or make the appropriate changes to the settings of your YouTube user account.
For functionality purposes and to analyze usage behavior, YouTube continually stores cookies on your end device through your browser. If you do not agree to such processing, you can prevent cookies from being stored by changing your browser settings appropriately. You can find more information above, under "Cookies."
Google provides further information about the collection and use of data, and your rights and privacy options in the matter, in the data privacy notice accessible under https://policies.google.com/privacy.

Online job applications; Publishing job ads
We give you the opportunity to apply for a job with us through our online presence. As part of these digital applications, we will collect and process your applicant and application data electronically to handle the application process.
The legal bases for this processing are Art. 6 (1) (b) GDPR, Sec. 26 (1) (1) BDSG in conjunction with Art. 88 (1) GDPR.
If an employment contract is concluded after the application procedure, we will store the data transmitted during your application in your personnel file, for the typical organization and administration processes, naturally under observance of further legal obligations.
The legal bases for this processing are also Art. 6 (1) (b) GDPR, Sec. 26 (1) (1) BDSG in conjunction with Art. 88 (1) GDPR.
If an application is rejected, we delete the transmitted data automatically two months after that rejection is announced. However, the data will not be deleted if they must be stored longer—for up to four months or until court proceedings have been concluded—due to statutory obligations such as the burden of proof obligations under the German General Equal Treatment Act (AGG).
In this case, the legal bases are Art. 6 (1) (f) GDPR and Sec. 24 (1) (2) BDSG. Our legitimate interest lies in legal defense or enforcement.
If you expressly agree to a longer storage period for your data (so you can be included in a database of applicants or interested parties, for example), the data will be processed further on the basis of that consent.  The legal basis will then be Article 6 (1) (a) GDPR. Naturally, you may withdraw your consent under Art. 7 (3) GDPR at any time, with effect for the future, by sending us a declaration to that effect.

Data security
We take adequate measures to secure your personal data. All data transmission on the platform and as part of our services uses encryption procedures and occurs through HTTPS, which meets state of the art technology.

Right to make changes
We reserve the right to change these data privacy principles at any time in accordance with statutory regulations. This can be the case, for example, if new statutory provisions must be complied with or new services are required. A revision history will inform you about the adjustments made. The currently valid data privacy principles apply to your visit.