Privacy Policy

We are pleased that you are visiting our website kadefemina.de and that you are interested in our company.
The protection of your personal data, such as your date of birth, name, telephone number, address and similar information, is important to us.
The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the statutory requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This Privacy Policy serves to fulfil the information obligations arising under the GDPR, in particular Articles 13 and 14 et seq. GDPR.

Controller

The controller within the meaning of Article 4 No. 7 GDPR is the person or entity that, alone or jointly with others, determines the purposes and means of the processing of personal data.
With regard to our website, the controller is:
DR. KADE Pharmazeutische Fabrik GmbH
Rigistraße 2
12277 Berlin
Germany
E-Mail: [email protected]
Tel.: +49 (30) 7 20 82-0
Fax: +49 (30) 200 95-1200

Contact details of the Data Protection Officer

We have appointed a Data Protection Officer pursuant to Article 37 GDPR. You can contact our Data Protection Officer using the following contact details:
MKM Datenschutz GmbH
Martin-Albert-Str. 1
90491 Nürnberg
Germany
E-Mail: [email protected]
Tel.: +49 911 669577-0
Fax: +49 911 669577-66
Website: https://mkm.legal/

Provision of the website and creation of log files

Whenever our website is accessed, our system automatically collects data and information from the device used to access it, such as a computer, mobile phone or tablet.

What personal data is collected and to what extent is it processed?

(1) information about the browser type and version used;
(2) the operating system of the accessing device;
(3) the host name of the accessing computer;
(4) the IP address of the accessing device;
(5) the date and time of access;
(6) websites and resources, such as images, files and other website content, accessed on our website;
(7) websites from which the user’s system accessed our website (referrer tracking);
(8) information as to whether the access request was successful;
(9) the volume of data transferred.
These data are stored in the log files of our system. These data are not stored together with personal data of a specific user, so individual website visitors are not identified.

Legal basis for the processing of personal data

Article 6 (1) (f) GDPR (legitimate interests). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of data processing

Temporary automated storage of the data is necessary for the technical operation of a website visit and to enable the website to be delivered. The storage and processing of personal data also serves to maintain the compatibility of our website for as many visitors as possible, to combat misuse and to rectify malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer so that we can respond as early as possible to display errors, attacks on our IT systems and/or functional errors on our website. In addition, the data help us optimise the website and generally ensure the security of our information technology systems.

Duration of storage

The above technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than three months after our website has been accessed.

Right to object and erasure option

You may object to the processing at any time pursuant to Article 21 GDPR and request erasure of the data pursuant to Article 17 GDPR. The rights available to you and how you may exercise them are set out in the lower section of this Privacy Policy.

Special functions of the website

Our website offers various functions. When you use these functions, we collect, process and store personal data. The following explains what happens to these data:

Contact form(s)

  • What personal data is collected and to what extent is it processed?

    We will process the data that you enter in the input screen of our contact forms in order to fulfil the purpose described below.

  • Legal basis for the processing of personal data

    Article 6 (1) (a) GDPR and, where applicable, Article 9 (2) (a) GDPR (consent by means of a clear affirmative act or behaviour, or explicit consent).

  • Purpose of data processing

    We will use the data collected via our contact form or contact forms solely for processing the specific contact request received through the contact form.

  • Duration of storage

    Once your request has been processed, the collected data will be deleted without undue delay unless statutory retention periods apply.

  • Withdrawal and erasure option

    The withdrawal and erasure options are governed by the general provisions on the data protection right of withdrawal and right to erasure set out below in this Privacy Policy.

  • Need for disclosure of personal data

    Use of the contact forms is voluntary and is neither contractually nor legally required. You are not obliged to contact us via the contact form; you may also use the other contact options stated on our website. If you wish to use our contact form, you must complete the fields marked as mandatory. If you do not provide the required information in the contact form, you will either not be able to submit the request or we will unfortunately not be able to process your request.

Newsletter sign-up form

  • What personal data is collected and to what extent is it processed?

    When you subscribe to the newsletter on our website, we receive the email address entered by you in the registration field and, where applicable, any additional contact details that you provide to us via the newsletter sign-up form.

  • Legal basis for the processing of personal data

    Article 6 (1) (a) GDPR and, where applicable, Article 9 (2) (a) GDPR (consent by means of a clear affirmative act or behaviour, or explicit consent).

  • Purpose of data processing

    The data collected in the registration form for our newsletter will be used by us exclusively to send our newsletter, in which we provide information about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete the subscription to our newsletter (double opt-in).

  • Duration of storage

    Our newsletter can be unsubscribed from at any time by clicking the unsubscribe link, which is included in every newsletter. Your data will be deleted by us without undue delay after unsubscribing. Your data will also be deleted without undue delay if the registration process is not completed. We reserve the right to delete data without giving reasons and without prior or subsequent notification.

  • Withdrawal and erasure option

    You may withdraw your consent at any time pursuant to Article 7 (3) GDPR. However, the lawfulness of processing carried out before the withdrawal remains unaffected. With regard to your further rights, please refer to the overview at the end of this Privacy Policy.

  • Need to provide personal data

    If you wish to use our newsletter, you must complete the fields marked as mandatory and confirm your email address by clicking the double opt-in link. The information required to subscribe to the newsletter is neither necessary for entering into a contract with us nor legally required. It is used exclusively for sending our newsletter. If you do not provide the required information, we will unfortunately be unable to provide you with our newsletter service.

Statistical analysis of visits to this website – web trackers

When this website or individual files on this website are accessed, we collect, process and store the following data: IP address, website from which the file was accessed, file name, date and time of access, volume of data transferred and notification of successful access (so-called web log). We use these access data exclusively in non-personalised form for the continuous improvement of our online offering and for statistical purposes. We also use the following web trackers to analyse visits to this website:

  • Collect.chat

    We use the Collect.chat service provided by COLLECT.CHAT INC, 2035 Sunset Lake Road, Suite B-2, 19702 Newark, United States, website: https://collect.chat/, on our website. Data is also transferred to a third country for which no adequacy decision by the Commission exists. Therefore, the level of protection normally applicable under the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that authorities in the third country may access the collected data.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Collect.chat is a service that we need in order to integrate a chatbot into our website. The chatbot enables us to stay in contact with our customers at any time.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://collect.chat/privacy/.

  • Facebook Connect

    We use the Facebook Connect service provided by Meta Platforms Ireland Ltd., Merrion Road, D04 X2K5 Dublin 4, Ireland, email: [email protected], website: http://www.facebook.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Facebook Connect allows users to use their Facebook profile for simplified registration with other web services.
    The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://www.facebook.com/privacy/policy/.
    The provider also offers an opt-out option at https://www.facebook.com/privacy/policy/.

  • Google

    We use the Google service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    We use Google in order to be able to load further Google services on the website. The service is used to provide additional Google services, such as the data processing required for the provision of streams and fonts and relevant Google Search content. It is technically necessary in order to exchange information about the website visitor that is already available to Google between Google services and to provide the website visitor with individual content tailored to their Google account.
    For the processing itself, the service or we collect the following data: background data stored about the website visitor in the Google user account or in other Google services, background data for the provision of Google services such as streaming data or advertising data, data on the website user’s interaction with Google Search, information about the device used, the user’s IP address and browser, and other data from Google services for the provision of Google services in relation to our website.
    If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transmit and process information from further Google services in order to provide background services for the display and data processing of the services provided by Google. This may also involve a transfer of data to the Google services Google APIs, DoubleClick, Google Cloud, Google Ads and Google Fonts in accordance with Google’s privacy policy. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

  • Google Ads

    We use the Google Ads service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Google Ads is an advertising system that enables us to place advertisements on external websites on the internet in order to inform our customers about our services. Based on parameters configured by us, Google Ads displays advertising on external websites that is individually tailored to our customer base and links to our website. If a website visitor clicks on a Google Ads advertisement, they are taken to our website. In order to measure the success of Google Ads advertisements and calculate any remuneration, Google Ads measures the success of the advertising measure when our website is accessed. Our website processes the data provided by Google Ads in order to analyse and improve our advertising measures and, where applicable, to calculate any remuneration payable. If you have given the relevant consent, your data may also be used for remarketing purposes.
    For the processing itself, the service or we collect the following data: data on the advertising interests of website visitors, interactions of website visitors with advertising in relation to our website, data on visits to our website by website visitors who previously clicked on Google Ads advertising and were redirected to our website, data about the device used, the user’s IP address and browser, and other data from Google services for the provision and refinement of Google advertising in relation to our website.
    If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When Google Ads is used on our website, Google may transmit and process information from further Google services in order to provide background services for improving and individualising Google advertising. This may also involve data processing by further Google services such as Google APIs, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Platform and Google Fonts in accordance with Google’s privacy policy under Google’s own responsibility under data protection law. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list. Further information on the responsible handling of business data can be found at https://business.safety.google/privacy/.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

  • Google Analytics

    We use the Google Analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Google Analytics is a web tracker that analyses the behaviour of website visitors and their interactions with our website and provides us with evaluations and forecasts regarding the content and products on our website and their popularity (so-called tracking). We have integrated Google Analytics so that the service can compile an analysis of users’ browsing behaviour. For this purpose, Google collects website visitors’ interactions with our website and, where applicable, existing information resulting from the reading of cookies or other storage technologies and prepares this information statistically for us. Google Analytics uses data processing technologies that enable individual website visitors and their interactions with other Google services, such as the Google Ads advertising network, to be tracked. Data from other Google services is also used to close data gaps by means of machine-learning technologies, modelled statistics and forecasting functions and to create comprehensive statistics on the content of our website. If Google Analytics is activated on our website, the data determined by Google Analytics is transferred to servers of Google Ireland Limited. As part of processing on our behalf, personal data may also be transferred to servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We use Google Analytics to continuously optimise our online offering and make it more readily available. This is a form of reach measurement.
    For the processing itself, the service or we collect the following data: data on website visitors’ interactions with the content of the website, data on how the services displayed on our website are used, data from external Google services where they interact with our website, such as advertising data or data on behaviour in relation to advertising, data on approximate geographical origin, the browser used, the operating system and other information about the device used.
    Google Analytics will store the data relevant for providing web tracking for as long as necessary to perform the booked web service. Data collection and storage take place in anonymised form. Where individual interactions by website visitors make it possible to subsequently establish a personal reference to specific actions, we will delete the collected data once the purpose has been achieved. The data will be deleted at the latest when it is no longer subject to statutory retention obligations. As a rule, we will delete these data after 12 months at the latest. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=de.

  • Google Analytics (Google Signals)

    We use the Google Analytics (Google Signals) service provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Google Analytics is a web tracker that analyses the behaviour of website visitors and their interactions with our website and provides us with evaluations and forecasts regarding the content and products on our website and their popularity (so-called tracking). We have integrated Google Analytics so that the service can compile an analysis of users’ browsing behaviour. For this purpose, Google collects website visitors’ interactions with our website and, where applicable, existing information resulting from the reading of cookies or other storage technologies and prepares this information statistically for us. Google Analytics uses data processing technologies that enable individual website visitors and their interactions with other Google services, such as the Google Ads advertising network, to be tracked across devices and independently of sessions. Data from other Google services is also used to close data gaps by means of machine-learning technologies, modelled statistics and forecasting functions and to create comprehensive statistics on the content of our website. If Google Analytics is activated on our website, the data determined by Google Analytics is transferred to servers of Google Ireland Limited. As part of processing on our behalf, personal data may also be transferred to servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Personal data is also transferred to the United States. We use the analysis by Google Analytics to continuously optimise our online offering and make it more readily available. This is a form of reach measurement.
    For the processing itself, the service or we collect the following data: data on website visitors’ interactions with the content of the website, data on how the services displayed on our website are used, data from external Google services where they interact with our website, such as advertising data or data on behaviour in relation to advertising, data on approximate geographical origin, the browser used, the operating system and other information about the device used, where applicable across devices and independently of sessions.
    Google Analytics will store the data relevant for providing web tracking for as long as necessary to perform the booked web service. Data collection and storage take place in anonymised form. Where individual interactions by website visitors make it possible to subsequently establish a personal reference to specific actions, we will delete the collected data once the purpose has been achieved. The data will be deleted at the latest when it is no longer subject to statutory retention obligations. As a rule, we will delete these data after 12 months at the latest. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=de.

  • Google Tag Manager

    We use the Google Tag Manager service provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Google Tag Manager provides a technical platform for running and centrally controlling other web tools and web tracking programs by means of so-called tags. In this context, Google Tag Manager stores cookies on your computer and, where web tracking tools are executed via Google Tag Manager, analyses your browsing behaviour (so-called tracking). The data generated by the tags is combined, stored and processed by Google Tag Manager under a single user interface. All integrated tags are listed separately again in this Privacy Policy. When you use our website with tags integrated via Google Tag Manager enabled, data such as, in particular, your IP address and your user activities are transmitted to Google’s servers. The tracking tools used in Google Tag Manager ensure, through IP anonymisation in the source code, that the IP address is anonymised by Google Tag Manager before transmission. On the basis of so-called tag management, Tag Manager allows measured values from various service providers (Google and third-party providers) to be linked and evaluated. Google Tag Manager helps us compile reports on website activities and control the web tools used on our website.
    For the processing itself, the service or we collect the following data: cookies, web tracking data, outgoing or incoming links, and information generated when JavaScript code is integrated and activated on the website by Google Tag Manager and the web tools triggered by Google Tag Manager.
    The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://policies.google.com/privacy.

  • Gstatic

    We use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and preload required catalogue files. In particular, the service loads background data for Google Fonts and Google Maps.
    As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

  • Microsoft Advertising

    We use the Microsoft Advertising service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, 18 Dublin, Ireland, email: [email protected], website: https://www.microsoft.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    Microsoft processes information about your interactions and activities for the purpose of analysing your usage behaviour in order to display targeted usage- and interest-based advertising to you in the Microsoft search engine Bing and in the Microsoft Audience Network. For this purpose, Microsoft uses the UET tag, which uses cookies to record your activities. The information collected in this way is also used to create target audiences for usage- and interest-based advertising on the basis of your use. Details on the personal data processed in this context are available at https://help.ads.microsoft.com/#apex/ads/de/53056/2/#exp6949. These data are stored for 390 days.
    The certification of the parent company Microsoft under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.
    The provider also offers an opt-out option at https://optout.networkadvertising.org/.

  • YouTube

    We use the YouTube service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    The YouTube service is used to embed videos from the YouTube platform on our website. Through this integration, we can display videos directly on our website. This enables website visitors to view information about our services without having to access the YouTube platform.
    For the processing itself, the service or we collect the following data: data for displaying the stream, data on videos clicked, playlists created, ratings and comments, information about the device used, the user’s IP address and browser, and further data from Google services for providing the video in accordance with Google’s privacy policy.
    If YouTube is activated on our website and a video is played, our website establishes a connection to the servers of Google Ireland Limited and transmits the data required to display the stream or video. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer. When YouTube videos are displayed on our website, YouTube may transmit and process information from other Google services in order to provide background services for the video, such as streaming data. This may also involve data transfers to the Google services Google Fonts, Google APIs, Google Video and DoubleClick. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Integration of external web services and processing of data outside the EU

We use active content from external providers, so-called web services, on our website. When you access our website, these external providers may receive personal information about your visit to our website. In this context, data may be processed outside the EU. You can prevent this by installing an appropriate browser plug-in or by disabling the execution of scripts in your browser. This may result in functional restrictions on websites that you visit.
We use the following external web services:

  • Bing

    We use the Bing service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, 18 Dublin, Ireland, email: [email protected], website: https://www.bing.com/?cc=de, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    The Bing service enables faster searches via our website or the internet and links search engine content to our website.
    The certification of the parent company Microsoft under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

  • Cookie Consent Manager CCM19

    We use the Cookie Consent Manager CCM19 service provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany, email: [email protected], website: https://www.ccm19.de/, on our website. Personal data is transferred exclusively to servers located within the European Union.
    The legal basis for the processing is Article 6 (1) (c) GDPR. The use of the service supports us in complying with our legal obligations.
    By integrating Cookie Consent Manager CCM19, we fulfil our legal obligation regarding the consent management required for cookies.
    The rights available to you in relation to the processing are set out at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://www.ccm19.de/datenschutzerklaerung.html.

  • Google Fonts

    We use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    We use Google Fonts in order to integrate attractive fonts on our website and to display our website to you in a visually improved version. The service may also be used on our website where other Google services are loaded subsequently and require Google Fonts fonts for their operation. This is the case, for example, where our website uses Google services that necessarily require Google Fonts for their operation.
    For the processing itself, the service or we collect the following data: data relating to fonts, the IP address of the website visitor, statistics on the use of fonts and further data from Google services relating to our website.
    If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transmit and process information from further Google services in order to provide background services for the display and data processing of the services provided by Google. This may also involve a transfer of data to the Google services Google APIs, Google Cloud and Google Ads in accordance with Google’s privacy policy. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://policies.google.com/privacy.
    The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

  • Google reCaptcha

    We use the Google reCaptcha service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/, on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the EU Commission within the meaning of Article 45 GDPR for the EU-US Data Privacy Framework (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
    The legal basis for the processing of personal data is your consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have given on our website.
    If Google reCaptcha is activated on our website, the data determined by Google reCaptcha is transferred to servers of Google Ireland Limited. As part of processing on our behalf, personal data may also be transferred to servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Based on specific characteristics and an analysis of website behaviour, the service detects whether the entries made are automated entries by means of a program (so-called bot) or are made by a human being. The service has three different levels. Either the service automatically recognises that the entry is not automated by a bot, or it requires the user to select a captcha checkbox. A third option is the display of small image, audio or text tasks that must be solved by the website visitor. Google reCaptcha is a captcha service used on our website for security reasons to rule out interactions by bots (robot programs) on our website. Google reCaptcha verifies on our behalf that only humans and not bots can use our website. This enables us, in particular, to protect the special functions of our website, such as contact forms or other input options such as login areas, against misuse.
    For the processing itself, the service or we collect the following data: user behaviour, such as mouse movements or input behaviour, IP address, browser data and computer information.
    If you wish to use the input options on our website protected by Google reCaptcha, you must allow the use of Google reCaptcha and, where applicable, solve the corresponding captchas. If you do not complete the captcha or do not allow the use of Google reCaptcha, you will not be able to use the form protected by the captcha. Alternatively, you may use our other contact options, such as post or email, at any time. The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.
    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent notice itself or at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://cloud.google.com/terms/service-terms.
    The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

  • Legal Text Snippets and Modules

    We use the Legal Text Snippets and Modules service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: [email protected], website: https://www.website-check.de/, on our website. Personal data is transferred exclusively to servers located within the European Union.
    The legal basis for the processing is Article 6 (1) (c) GDPR. The use of the service supports us in complying with our legal obligations.
    The service is used to load content from our legal texts on our website. Through the integration on our website, the respective current legal texts are loaded. This integration may also load further technical modules relating to legal texts or legally required elements.
    The rights available to you in relation to the processing are set out at the end of this Privacy Policy.
    Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://www.website-check.de/datenschutzerklaerung/.

  • Social Plug-in – Facebook by META

    • What personal data is collected and to what extent is it processed?

      We have integrated a social plug-in of the social network “Facebook by META” on our website, operated by Meta Platforms Ireland Ltd., Merrion Road, D04 X2K5 Dublin 4, Ireland, email: [email protected], website: http://www.facebook.com/ (“Facebook by META”). When you access a page containing such a plug-in, your browser automatically establishes a background connection to the servers of Facebook by META. The content of the plug-in is transmitted directly by Facebook by META to your browser and merely integrated into our page. Through this integration, Facebook by META receives the information that your browser has loaded a specific page of our website. This also applies if you do not have a Facebook by META profile or are not currently logged in to Facebook by META. This information, including your IP address, is transmitted directly by your browser to a Facebook by META server in Ireland and stored there. If you are logged in to Facebook by META, Facebook by META may directly associate your visit to our website with your Facebook by META profile. If you interact with the plug-ins, for example by clicking the “Like” button or posting a comment, this information is also transmitted directly to a Facebook by META server and stored there. The information is also published on your Facebook by META profile and displayed to your Facebook by META contacts whom you have enabled for this purpose.

    • Legal basis for the processing of personal data

      Article 6 (1) (a) GDPR, if you have registered with “Facebook by META”, and Article 6 (1) (f) GDPR, if you have not registered with Facebook by META. Where the processing is based on Article 6 (1) sentence 1 (f) GDPR, the website operator’s legitimate interest is to enable users to interact with the website operator’s content on Facebook by META.

    • Purpose of data processing

      The primary purpose of data collection is to provide you with a means of social interaction connected to Facebook by META and thereby make our website interactive. The scope of data collection and the further processing and use of the data you provide by Facebook by META, as well as your related rights and settings options for protecting your privacy, can be found in Facebook by META’s privacy notices: https://www.facebook.com/privacy/policy/

    • Duration of storage

      Facebook by META will store the data relevant for providing the web service for as long as necessary. Where the data is subject to statutory retention obligations, deletion will take place after expiry of the retention period.

    • Right to object and erasure option

      If you do not want the Facebook by META social plug-in to run, you can also prevent its execution by installing a suitable add-on or script blocker. If you do not want Facebook by META to associate the data collected through our website with your Facebook by META profile, you must log out of Facebook by META before visiting our website. The objection and removal options are otherwise governed by the general provisions on the data protection right to object and right to erasure set out below in this Privacy Policy.

  • Social Plug-in – Instagram

    • What personal data is collected and to what extent is it processed?

      We have integrated a social plug-in of the social network “Instagram” on our website, operated by Meta Platforms Ireland Ltd., Merrion Road, D04 X2K5 Dublin 4, Ireland, email: [email protected], website: https://www.instagram.com/ (“Instagram”). When you access a page containing such a plug-in, your browser automatically establishes a background connection to the servers of Instagram. The content of the plug-in is transmitted directly by Instagram to your browser and merely integrated into our page. Through this integration, Instagram receives the information that your browser has loaded a specific page of our website. This also applies if you do not have an Instagram profile or are not currently logged in to Instagram. This information, including your IP address, is transmitted directly by your browser to an Instagram server in Ireland and stored there. If you are logged in to Instagram, Instagram may directly associate your visit to our website with your Instagram profile. If you interact with the plug-ins, for example by clicking the “Like” button or posting a comment, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram profile and displayed to your Instagram contacts whom you have enabled for this purpose.

    • Legal basis for the processing of personal data

      Article 6 (1) (a) GDPR, if you have registered with “Instagram”, and Article 6 (1) (f) GDPR, if you have not registered with Instagram. Where the processing is based on Article 6 (1) sentence 1 (f) GDPR, the website operator’s legitimate interest is to enable users to interact with the website operator’s content on Instagram.

    • Purpose of data processing

      The primary purpose of data collection is to provide you with a means of social interaction connected to Instagram and thereby make our website interactive. The scope of data collection and the further processing and use of the data you provide by Instagram, as well as your related rights and settings options for protecting your privacy, can be found in Instagram’s privacy notices: https://help.instagram.com/519522125107875

    • Duration of storage

      Instagram will store the data relevant for providing the web service for as long as necessary. Where the data is subject to statutory retention obligations, deletion will take place after expiry of the retention period.

    • Right to object and erasure option

      If you do not want the Instagram social plug-in to run, you can also prevent its execution by installing a suitable add-on or script blocker. If you do not want Instagram to associate the data collected through our website with your Instagram profile, you must log out of Instagram before visiting our website. The objection and removal options are otherwise governed by the general provisions on the data protection right to object and right to erasure set out below in this Privacy Policy.

  • Social Plug-in – TikTok

    • What personal data is collected and to what extent is it processed?

      We have integrated a social plug-in of the social network “TikTok” on our website, operated by TikTok Technology Limited, 10 Earlsfort Terrace, D02 T380 Dublin, Ireland, email: [email protected], website: https://www.tiktok.com/ (“TikTok”). When you access a page containing such a plug-in, your browser automatically establishes a background connection to the servers of TikTok. The content of the plug-in is transmitted directly by TikTok to your browser and merely integrated into our page. Through this integration, TikTok receives the information that your browser has loaded a specific page of our website. This also applies if you do not have a TikTok profile or are not currently logged in to TikTok. This information, including your IP address, is transmitted directly by your browser to a TikTok server in Ireland and stored there. If you are logged in to TikTok, TikTok may directly associate your visit to our website with your TikTok profile. If you interact with the plug-ins, for example by clicking the “Like” button or posting a comment, this information is also transmitted directly to a TikTok server and stored there. The information is also published on your TikTok profile and displayed to your TikTok contacts whom you have enabled for this purpose.

    • Legal basis for the processing of personal data

      Article 6 (1) (a) GDPR, if you have registered with “TikTok”, and Article 6 (1) (f) GDPR, if you have not registered with TikTok. Where the processing is based on Article 6 (1) sentence 1 (f) GDPR, the website operator’s legitimate interest is to enable users to interact with the website operator’s content on TikTok.

    • Purpose of data processing

      The primary purpose of data collection is to provide you with a means of social interaction connected to TikTok and thereby make our website interactive. The scope of data collection and the further processing and use of the data you provide by TikTok, as well as your related rights and settings options for protecting your privacy, can be found in TikTok’s privacy notices: https://www.tiktok.com/legal/privacy-policy?lang=de-DE

    • Duration of storage

      TikTok will store the data relevant for providing the web service for as long as necessary. Where the data is subject to statutory retention obligations, deletion will take place after expiry of the retention period.

    • Right to object and erasure option

      If you do not want the TikTok social plug-in to run, you can also prevent its execution by installing a suitable add-on or script blocker. If you do not want TikTok to associate the data collected through our website with your TikTok profile, you must log out of TikTok before visiting our website. The objection and removal options are otherwise governed by the general provisions on the data protection right to object and right to erasure set out below in this Privacy Policy.

Information on the use of cookies

  • What personal data is collected and to what extent is it processed?

    We integrate and use cookies on various pages in order to enable certain functions of our website and to integrate external web services. Cookies are small text files that your browser may store on your access device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of storing a cookie file is also referred to as “setting a cookie”. Cookies may be set both by the website itself and by external web services. Cookies are set by our website or by external web services in order to maintain the full functionality of our website, improve user-friendliness or pursue the purpose specified in your consent. Cookie technology also enables us to recognise individual visitors by means of pseudonyms, such as individual or random IDs, so that we can offer more individualised services. Details are set out in the table below.

  • Legal basis for the processing of personal data

    Where cookies are processed on the basis of consent pursuant to Article 6 (1) (a) GDPR, such consent also constitutes consent within the meaning of Section 25 (1) TDDDG for setting the cookie on the user’s terminal equipment. Where another legal basis under the GDPR is specified, for example for the performance of a contract or for compliance with legal obligations, the storage or setting of cookies is carried out on the basis of an exemption pursuant to Section 25 (2) TDDDG. Such an exemption applies where “the sole purpose of storing information in the end-user’s terminal equipment or the sole purpose of accessing information already stored in the end-user’s terminal equipment is to carry out the transmission of a communication over a public telecommunications network” or where “the storage of information in the end-user’s terminal equipment or access to information already stored in the end-user’s terminal equipment is strictly necessary in order for the provider of a digital service to provide a digital service expressly requested by the user”. The applicable legal basis is indicated in the cookie table set out later in this section.

  • Purpose of data processing

    Cookies are set by our website or by external web services in order to maintain the full functionality of our website, improve user-friendliness or pursue the purpose specified in your consent. Cookie technology also enables us to recognise individual visitors by means of pseudonyms, such as individual or random IDs, so that we can offer more individualised services. Details are set out in the table below.

  • Duration of storage

    Our cookies are stored until they are deleted in your browser or, where the cookie is a session cookie, until the session has expired. Details are set out in the table below.

  • Right to object and removal option

    You may configure your browser settings as you wish so that the setting of cookies is generally prevented. You may then decide on a case-by-case basis whether to accept cookies or may accept cookies as a general rule. Cookies may be used for various purposes, for example to recognise that your access device has already connected to our website (persistent cookies) or to store offers last viewed (session cookies). If you have expressly granted us permission to process your personal data, you may withdraw that consent at any time. Please note that the lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.

Cookie name Server Provider Purpose Legal basis Storage period Type
MUID .bing.com Bing This cookie is used by Microsoft to assign a unique user ID to the website visitor. The cookie enables tracking of website visitors on other websites offered by Microsoft by synchronising the ID. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 13 months Analytics
PHPSESSID www.kadefemina.de, kadefemina.de Website operator We use the “PHPSESSID” cookie to manage the user session on our website. This cookie is intended to provide a unique identifier for a user’s session while the user visits our website. This enables us to track the status of the session and ensure that the server can correctly identify the user in order to ensure smooth interaction with the website. The cookie usually contains a random string that acts as a session ID. After the end of the session, for example when the user closes the browser, the cookie is generally deleted. Article 6 (1) (f) GDPR (legitimate interests) Session Convenience
__tmbid www.kadefemina.de Website operator This cookie enables us to store individual convenience settings selected by you and keep them available for your current and future visits to the site. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 12 months Configuration
_ga kadefemina.de Google Analytics This cookie assigns an ID to a user so that the web tracker can group the user’s actions under this ID. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 24 months Analytics
_ga_ kadefemina.de Google Analytics In connection with Google Analytics or Google Tag Manager, this cookie stores a unique ID for a website visitor and tracks how the visitor uses the website. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 24 months Analytics
_gcl_au kadefemina.de Google Tag Manager This cookie is used by Google AdSense to increase the efficiency of advertising. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 3 months Marketing
_tt_enable_cookie .kadefemina.de, .de TikTok The cookie is used by the TikTok social networking service to track the use of embedded services on the website. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 13 months Analytics
_ttp tiktok.com, .kadefemina.de TikTok The cookie is set in connection with TikTok Pixel to measure and improve the performance of advertising campaigns and to personalise the user experience (including advertising) on TikTok. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 13 months Analytics
_uetsid .kadefemina.de Microsoft Advertising This cookie assigns an ID to the website visitor. Data on visitor behaviour across multiple websites are collected under this ID in order to display personalised advertising to the website visitor. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 24 hours Marketing
_uetvid .kadefemina.de Microsoft Advertising This cookie assigns an ID to the website visitor. Data on visitor behaviour across multiple websites are collected under this ID in order to display personalised advertising to the website visitor. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 13 months Marketing
_wpfuuid www.kadefemina.de, kadefemina.de Website operator The cookie is used by our website to assign an ID to the website visitor. In this way, our website can recognise the website visitor when the website is accessed again. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) Session Configuration
_wpfuuid www.kadefemina.de Website operator The cookie is used by our website to assign an ID to the website visitor. In this way, our website can recognise the website visitor when the website is accessed again. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 11 years Configuration
bid .consentag.eu Website operator The cookie used assigns an ID to the website visitor and collects statistical data on the website visitor’s visits. This serves to personalise the advertising displayed to the user. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 5 months Marketing
ccm_consent www.kadefemina.de, kadefemina.de Website operator The cookie stores the decision made in the cookie banner. Article 6 (1) (c) GDPR (compliance with a legal obligation) approx. 30 days Cookie banner
cid_ .ctnsnet.com Website operator This cookie assigns a unique ID to website visitors and allocates the website visitor’s interactions to that ID. The data on the interactions are used to statistically evaluate the website visitor’s interactions. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 12 months Analytics
collect_chat_page_load www.kadefemina.de Website operator The cookie is used in connection with Collect.chat to recognise the website visitor and thereby improve the functionality of the chatbot. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 30 days Analytics
pll_language www.kadefemina.de, kadefemina.de Website operator This cookie is used to determine the visitor’s origin by means of the IP address and to set the language of the website based on the origin of the website access. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) Session Convenience
pll_language www.kadefemina.de, kadefemina.de Website operator This cookie is used to determine the visitor’s origin by means of the IP address and to set the language of the website based on the origin of the website access. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 12 months Convenience
test_cookie .doubleclick.net Website operator This cookie is set to determine whether the website visitor’s browser supports cookies for the DoubleClick service. Article 6 (1) (c) GDPR (compliance with a legal obligation) approx. 16 minutes Cookie banner
ttcsid .kadefemina.de TikTok We use this cookie on our website to measure the effectiveness of TikTok advertising campaigns, attribute conversions and display relevant ads to users. Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent) approx. 13 months Marketing

Data security and data protection, communication by email

Your personal data are protected by technical and organisational measures during collection, storage and processing in such a way that they are not accessible to third parties. In the case of unencrypted communication by email, we cannot guarantee complete data security during transmission to our IT systems; therefore, for information requiring a high level of confidentiality, we recommend encrypted communication or communication by post.

Automatic email archiving

  • Scope of the processing of personal data

    We expressly inform you that our email system uses an automated archiving procedure. As a result, all incoming and outgoing emails are digitally archived in an audit-proof manner.

  • Legal basis for the processing of personal data

    Article 6 (1) (c) GDPR (legal obligation). The legal obligation consists in complying with tax and commercial-law requirements (e.g. Sections 146, 147 AO and Sections 238, 257 HGB).

  • Purpose of data processing

    The purpose of archiving is to comply with tax-law requirements (e.g. Sections 146, 147 AO – obligation to retain emails of tax relevance) and commercial-law requirements (e.g. Sections 238, 257 HGB – obligation to archive business correspondence).

  • Duration of storage

    Our email communications are stored until the tax-law and commercial-law retention obligations expire. The retention period may be up to 10 years.

  • Right to object and erasure option

    You may object to the processing at any time pursuant to Article 21 GDPR and request erasure of the data pursuant to Article 17 GDPR. The rights available to you and how you may exercise them are set out in the lower section of this Privacy Policy.

  • Handling of application documents

    If you have any questions regarding our email archiving system, please contact our Data Protection Officer. We also point out that we only consider application documents submitted in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and are not delivered. We do not consider applications in Word file format or other file formats and delete them unread. Please note that application documents transmitted by unencrypted email may potentially be opened by third parties before they reach our IT systems. We assume that we may also reply to unencrypted application emails without encryption. If you do not wish this, please state this in your application email.

Right of access and rectification requests – erasure and restriction of data – withdrawal of consent – right to object

Right of access

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have a right of access to the information specified in Article 15 (1) GDPR, provided that the rights and freedoms of other persons are not adversely affected (see Article 15 (4) GDPR). We will also be happy to provide you with a copy of the data.

Right to rectification

Pursuant to Article 16 GDPR, you have the right to have any incorrectly stored personal data (such as address, name, etc.) corrected by us at any time. You may also request completion of the data stored by us at any time. The corresponding adjustment will be made without undue delay.

Right to erasure

Pursuant to Article 17 (1) GDPR, you have the right to have the personal data concerning you that we have collected erased where

    • the data are no longer required;
    • the legal basis for the processing has ceased to apply without replacement due to withdrawal of your consent;
    • you have objected to the processing and there are no legitimate grounds for the processing;
    • your data are processed unlawfully;
    • a legal obligation requires this or the data were collected pursuant to Article 8 (1) GDPR.

The right does not apply pursuant to Article 17 (3) GDPR where

  • the processing is necessary for exercising the right of freedom of expression and information;
  • your data have been collected on the basis of a legal obligation;
  • the processing is necessary for reasons of public interest;
  • the data are necessary for the establishment, exercise or defence of legal claims.

Right to restriction of processing

Pursuant to Article 18 (1) GDPR, in individual cases you have the right to request restriction of the processing of your personal data.
This is the case where

  • the accuracy of the personal data is contested by you;
  • the processing is unlawful and you do not agree to erasure;
  • the data are no longer required for the purpose of processing, but the collected data are needed for the establishment, exercise or defence of legal claims;
  • an objection to the processing has been lodged pursuant to Article 21 (1) GDPR and it is not yet clear which interests prevail.

Right to withdraw consent

Where you have given us explicit consent to the processing of your personal data (Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR), you may withdraw that consent at any time. Please note that this does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Right to object

Pursuant to Article 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Article 6 (1) (f) GDPR (in the context of a legitimate interest). You only have this right where special circumstances speak against storage and processing.

How do you exercise your rights?

You may exercise your rights at any time by contacting us using the contact details below:
DR. KADE Pharmazeutische Fabrik GmbH
Rigistraße 2
12277 Berlin
Germany
E-Mail: [email protected]
Tel.: +49 (30) 7 20 82-0
Fax: +49 (30) 200 95-1200

Right to data portability

Pursuant to Article 20 GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. The data may be transmitted either to you or to a controller designated by you.
Upon request, we will provide you with the following data pursuant to Article 20 (1) GDPR:

    • data collected on the basis of explicit consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR;
    • data that we have received from you pursuant to Article 6 (1) (b) GDPR in the context of existing contracts;
    • data that have been processed by automated means.

We will transfer the personal data directly to a controller designated by you where this is technically feasible. Please note that, pursuant to Article 20 (4) GDPR, we are not permitted to transfer data that adversely affect the freedoms and rights of other persons.

Right to lodge a complaint with the supervisory authority pursuant to Article 77 (1) GDPR

If you suspect that your data are being processed unlawfully on our website, you may of course seek judicial clarification of the matter at any time. You also have access to any other legal remedies. Irrespective of this, pursuant to Article 77 (1) GDPR you have the option of contacting a supervisory authority. The right to lodge a complaint pursuant to Article 77 GDPR exists in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you may choose the supervisory authority from among the aforementioned places. The supervisory authority with which the complaint has been lodged will then inform you about the status and outcome of your complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.