St. Hubertus Apotheke

Privacy policy

This English version is provided for convenience only. The German version (Datenschutzerklärung) is legally binding.

1. General information

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, BDSG, DDG, TDDDG). In this privacy policy, we inform you about the nature, scope and purpose of the processing of personal data on our website and about your rights in connection with its use.

2. Controller

The controller responsible for data processing on this website is:

St. Hubertus Apotheke Kirchdorf
Owner: Apothekerin Manuela Hektor e. Kfr.
Hauptstraße 43
84375 Kirchdorf a. Inn
Germany

Phone: +49 (0) 8571 / 5500
Email: mail@st-hubertus-apotheke-kirchdorf.de

3. Technical service provider (data processing on our behalf)

For the technical operation of this website — in particular application development and the maintenance and support of the application — we use the following service provider:

Arevano Deutschland GmbH
von-Siemens-Straße 10
84375 Kirchdorf am Inn
Germany

Email: info@arevano.com
Website: www.arevano.com

We have concluded a data processing agreement with Arevano Deutschland GmbH pursuant to Art. 28 GDPR. It processes personal data exclusively on our instructions and only to the extent required to provide the agreed services.

Arevano Deutschland GmbH in turn uses Arevano UG (haftungsbeschränkt), Buchenweg 4, 84375 Kirchdorf am Inn, Germany, as a sub-processor for providing the server infrastructure (hosting, email delivery and comparable technical services). A data processing agreement pursuant to Art. 28(4) GDPR is also in place for this purpose. The data arising from technical operation (in particular server log files and data submitted via the contact form in accordance with sections 4 and 5) is processed on servers in the European Union. No data is passed on to any other third parties outside this data processing relationship.

4. Server log files

When you visit this website, the service provider named in section 3 automatically collects information and stores it in so-called server log files. The following data is collected:

  • name and URL of the file accessed
  • date and time of access
  • amount of data transferred
  • HTTP status code of the response
  • browser type and browser version
  • operating system used
  • IP address and requesting provider

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision, stability and security of our website. The data is stored for a maximum of 7 days and then deleted automatically. It is not combined with other data sources. If there are concrete indications of misuse or a security incident, the logs may be retained beyond this period until the incident has been fully resolved.

5. Contact form

If you use our contact form, we process the data you provide (name, email address and the content of your message) in order to answer your enquiry and to send you an acknowledgement of receipt by email. The data is transmitted in encrypted form via the mail system provided by our technical service provider (section 3) to the mailbox mail@st-hubertus-apotheke-kirchdorf.de.

The legal basis for the processing is Art. 6(1)(b) GDPR if your enquiry relates to the conclusion or performance of a contract; in all other cases, Art. 6(1)(f) GDPR (legitimate interest in answering enquiries efficiently).

Your data will be deleted as soon as it is no longer required for the purpose of handling your enquiry and no statutory retention obligations (e.g. under commercial or tax law) prevent its deletion.

6. Map

On our home page we show a map of our location. The map is self-hosted: the map library (MapLibre), map data, fonts and symbols are loaded exclusively from the server of this website, which the service provider named in section 3 operates on our behalf. The map data comes from OpenStreetMap (© OpenStreetMap contributors, licensed under the ODbL), the map style from Protomaps; both are stored as a copy on this server. The map loads automatically as soon as you scroll near it. As with any page request, only the access data listed in section 4 is processed; no data is transmitted to third parties. Consent is not required for this.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a clear presentation of our location and in making our address easy to find.

The “Plan route” link leads to the route planner on openstreetmap.org, a service of the OpenStreetMap Foundation (United Kingdom). Only when you click this link does your browser connect to their servers; in particular, your IP address and information about your browser are transmitted, and the privacy policy of the OpenStreetMap Foundation applies: osmfoundation.org/wiki/Privacy_Policy. The same applies to the attribution links in the map (openstreetmap.org, protomaps.com).

7. Spam protection in the contact form

We do not use any third-party services to protect our contact form against automated requests. The form contains a field that is invisible to humans and a timestamp. To limit repeated automated requests, your IP address is stored on the server of this website in hashed form when you submit the form and is only taken into account for one hour; the entry is then deleted automatically. It is not passed on to third parties. This processing is technically necessary; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of the contact form).

8. Cookies and similar technologies

We ourselves do not set any cookies on this website for analysis, tracking or marketing purposes. Where cookies that are strictly necessary to maintain the service (e.g. for session management) are used, this is done on the basis of Section 25(2) No. 2 TDDDG.

We do not embed any third-party services that set cookies or similar technologies or transmit data to other providers when this website is accessed. The map and the spam protection of the contact form work without such services (sections 6 and 7). A consent request is therefore not required.

9. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in your browser bar.

10. Your rights as a data subject

With regard to the personal data we hold about you, you have the following rights:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object (Art. 21 GDPR), in particular to processing based on Art. 6(1)(f) GDPR
  • withdrawal of consent given (Art. 7(3) GDPR) with effect for the future

To exercise your rights, an informal message to the contact address given in section 2 is sufficient.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Website: www.lda.bayern.de

12. Validity and changes to this privacy policy

This privacy policy may be amended from time to time to reflect current legal requirements or changes to our services. The version in force at the time of your visit applies.

Last updated: October 2026