Dermapharm Holding SE

Key facts of the Company
Investor Relations

Data protection

Dermapharm Holding SE Privacy Policy

We, the operators of the Dermapharm Holding SE website, take the protection of your personal data very seriously and adhere strictly to data protection regulations (DS-GVO, BDSG, TMG and other legal provisions). The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as name, postal address, email address or telephone number, but also usage data such as your IP address.

We would like to inform you below about how we handle your personal data.

1. Responsible body and data protection officer

The website is an offer of Dermapharm Holding SE. Dermapharm Holding SE is therefore the responsible party within the meaning of Art. 5 II DS-GVO.

UYou can reach our data protection officer at and at the address given in the imprint.

2. Collection, use and disclosure of personal data

We take precautions to protect your personal data from loss, destruction, falsification, manipulation and unauthorised access. The legal data protection regulations are of course observed. As a matter of principle, we do not pass on your data to third parties unless you have consented to this. However, for certain areas (e.g. the hosting of our website) we are dependent on the use of service providers, who we usually oblige to comply with the legal requirements by means of order processing. We also reserve the right in exceptional cases, e.g. in the event of enquiries about our products, to pass on your personal data to the currently notified and responsible manufacturer. Our employees are bound to confidentiality. If data is passed on to service providers within the scope of order processing, these service providers are also obliged to maintain confidentiality and are bound by the data protection laws, other legal regulations and this data protection declaration.

3. External links

This website may contain links to external websites which are not covered by this data protection declaration. The operator of the website provides access to the use of these external internet offers (§8 Telemedia Act), but is not responsible for their content, as he does not initiate the transmission of the information, does not select the addressee of the transmitted information and has not selected, changed or temporarily stored the transmitted information. When you leave the website, it is recommended that you carefully read the privacy policy of any other website.

4. Purposes and scope of data processing when visiting the website

4.1 Access to the website

Each time a user accesses a page of our website and each time a file is retrieved, access data about this process is stored in a log file on our server.

Each record consists of:

  • Information about the browser type and version used
  • The operating system of the user's terminal device
  • The user's internet service provider
  • The IP address of the user
  • Date and time of access
  • The previous website from which the user accessed our website
  • Miscellaneous communication data

We store IP addresses in server log files for a period of 21 days.

This data is stored for reasons of data security in order to ensure the stability and operational security of our website.

The legal basis for this is Art. 6 para. 1 lit. f DS-GVO.

4.3. Further data processing on our website

4.3.1 Contact by e-mail, telephone, fax

If you contact us by e-mail, we will only use your personal data (name, e-mail address/telephone number/fax number, message text) to contact you. We only use your contact data to process your enquiry. Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the circumstances indicate that the matter in question has been conclusively clarified.

The processing is based on Art. 6 para. 1 lit. f DS-GVO.

4.3.2 Use of the contact form

When using the contact form, we collect your personal data (name, telephone number, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you. We only use your data to process your enquiry. Your data will then be deleted unless you have consented to further processing and use.

The processing is based on Art. 6 para. 1 lit. f DS-GVO.

5. Changes to our privacy policy

In order to ensure that our data protection declaration always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, e.g. new services. The new data protection statement will then apply the next time you visit our website.

6. Rights of the data subject

Every data subject has the right to information pursuant to Art. 15 DS-GVO, the right to rectification pursuant to Art. 16 DS-GVO, the right to deletion pursuant to Art. 17 DS-GVO, the right to restriction of processing pursuant to Art. 18 DS-GVO, the right to object pursuant to Art. 21 DS-GVO as well as the right to data portability pursuant to Art. 20 DS-GVO, insofar as this does not conflict with any statutory provisions (in particular pursuant to Art. 15, 17 DS-GVO, Sections 34 and 35 BDSG).

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data which is carried out on the basis of Article 6(1)(e) DSGVO (data processing in the public interest) and Article 6(1)(f) DSGVO (data processing on the basis of a balance of interests).

You have the right to object to the processing of your data for the purpose of direct marketing at any time. This also applies to profiling, insofar as it is connected with such direct advertising.

To exercise your rights, simply send us a letter by post or e-mail. You can reach our data protection officer at and at the address given in the imprint.

If you are of the opinion that the processing of your personal data is not lawful, you can lodge a complaint with a competent data protection supervisory authority (Article 77 DS-GVO in conjunction with Section 19 BDSG).

7. Data transfer to third countries

No data is transferred to countries outside the European Union (so-called third countries).

8. Use of automated decision making or profiling

As a matter of principle, we do not use fully automated decision-making or profiling pursuant to Article 22 of the GDPR. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law.

Status of the data protection declaration: 18.02.2020