Privacy Policy

1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data by which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Hommel Pharma GmbH & Co. KG, Auf dem Quellberg 8, 48249 Dülmen, Germany, Tel.: 0800 / 500 70 70, Fax: 0800 / 500 70 71, Email: info@hommel-pharma.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the server of our site (so-called ‘server log files’). When you access our website, we collect the following data, which are technically necessary to display the website to you:
– Our visited website
– Date and time at the moment of access
– Amount of data sent in bytes
– Source/reference from which you came to the page
– Browser used
– Operating system used
– IP address used (if applicable, in anonymized form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string ‘https://’ and the lock symbol in your browser bar.

3) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies. Some are automatically deleted after closing the browser (so-called ‘session cookies’), while others remain longer on your device and allow site settings to be saved (‘persistent cookies’). The storage duration can be found in your browser’s cookie settings.

If personal data are processed via cookies, this is done pursuant to Art. 6(1)(b) GDPR (contract execution), Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in functionality and user-friendly design). You can configure your browser to be informed about cookies and decide individually, exclude cookies for specific cases, or generally disable them. Please note that if cookies are not accepted, the functionality of our website may be limited.

4) Contacting Us
When contacting us (e.g., via contact form or email), personal data are collected. The data collected can be seen from the respective contact form. These data are stored and used exclusively for responding to your inquiry and related technical administration.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in processing your request). If your contact is aimed at concluding a contract, the legal basis is additionally Art. 6(1)(b) GDPR. Data will be deleted once the request is finally processed, provided no statutory retention obligations exist.

5) Online Marketing
Google AdSense: This website uses Google AdSense (Google Ireland Limited, Dublin, Ireland). AdSense uses cookies and web beacons to analyze use of the website. The information (including IP address) is transferred to Google servers and may be transferred to the USA. Processing takes place only with consent (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time via the cookie consent tool. Google participates in the EU-US Data Privacy Framework.

Privacy information: https://business.safety.google/intl/en/privacy/, https://www.google.com/policies/privacy/

6) Web Analytics Services
6.1 Google Analytics 4: This site uses GA4 (Google Ireland Limited). Cookies are set to collect information, including IP addresses (shortened to avoid identification). Data may be transferred to the USA. Processing is only with consent (Art. 6(1)(a) GDPR). Data are stored for two months. We have a data processing agreement with Google. Further legal info: https://business.safety.google/intl/en/privacy/
Additional GA4 features: ‘Demographics’ (statistics on age, gender, interests), ‘Google Signals’ (cross-device analysis if logged in with a Google account and personalized ads activated), and ‘UserIDs’ (cross-device tracking for registered users).
6.2 Google Tag Manager: Allows management of tracking tools via one interface. No own data storage, but IP addresses may be transmitted to Google. Only with consent (Art. 6(1)(a) GDPR).

7) Retargeting/Remarketing and Conversion Tracking
7.1 Google Ads Remarketing: Uses cookies to display interest-based ads. Processing only with consent (Art. 6(1)(a) GDPR). Withdrawal possible at any time via the cookie tool.

7.2 Google Ads Conversion Tracking: Sets a cookie when you click on an ad. Expires after 30 days. Used to create statistics. No personal identification. Processing only with consent (Art. 6(1)(a) GDPR). Opt-out: https://www.google.com/settings/ads/plugin?hl=en

8) Site Functionalities
Google reCAPTCHA: Used to check if entries are made by humans. Transfers IP address, browser details, and usage data to Google. Google Fonts are also loaded for visual design. If cookies are used, processing only with consent (Art. 6(1)(a) GDPR). Otherwise, based on legitimate interest (Art. 6(1)(f) GDPR).

9) Tools and Miscellaneous
Cookie Consent Tool: Used to manage cookie consents. Ensures cookies requiring consent are only set if granted. Necessary cookies are set to store preferences. Processing may be based on legitimate interest (Art. 6(1)(f) GDPR) or legal obligation (Art. 6(1)(c) GDPR).

10) Rights of the Data Subject
You have the following rights under the GDPR:
– Right of access (Art. 15 GDPR)
– Right to rectification (Art. 16 GDPR)
– Right to erasure (Art. 17 GDPR)
– Right to restriction of processing (Art. 18 GDPR)
– Right to notification (Art. 19 GDPR)
– Right to data portability (Art. 20 GDPR)
– Right to withdraw consent (Art. 7(3) GDPR)
– Right to lodge a complaint (Art. 77 GDPR)
Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests. If you object, processing will cease unless we demonstrate compelling legitimate grounds or the processing serves legal claims. If your data are processed for direct marketing, you may object at any time, and we will stop such processing immediately.

11) Duration of Storage of Personal Data
The storage period depends on the legal basis, purpose of processing, and statutory retention periods. – If based on consent (Art. 6(1)(a) GDPR), data are stored until withdrawal.
– If retention periods exist under commercial or tax law, data are deleted after expiry unless needed further.
– If based on legitimate interest (Art. 6(1)(f) GDPR), stored until objection unless overriding reasons exist.
– For direct marketing (Art. 6(1)(f) GDPR), stored until objection.

Otherwise, data are deleted once no longer necessary.

Copyright notice: This privacy policy was created by the lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de).

Status: 25.07.2025, 17:11:31