Privacy policy

Thank you for choosing to engage with our pharmaceutical wholesale company. The protection of your personal data is of great importance to us. In this data protection policy, we would like to transparently explain how we handle your data, what data we collect, how we use it, and what rights you have regarding your data. Please take a moment to carefully read this data protection policy.

Data Controller

The data controller responsible for processing your personal data is Vitex Pharma
Address: Billstr. 180, 20539 Hamburg, Germany
Email:

Personal Data

We collect and process various types of data necessary to fulfill our services and legal obligations. According to Art. 4 of the GDPR, this includes:

  • Contact information (name, address, phone number, email address)
  • Business information (company name, VAT identification number, trade register number)
  • Order information and payment data
  • Communication history (emails, messages)
  • Information about your use of our services

Data Processing

Data processing only occurs if there is a legal requirement. This is necessary when using the website and the listed services, with your consent to the use of your data, or when modifying a contractual relationship (legal basis: Art. 6 (1) lit. b GDPR). The disclosure to third parties also occurs under these conditions or if ordered by a court or authority (legal basis: Art. 6 (1) lit. b GDPR (contractual relationship) and Art. 6 (1) lit. a GDPR (consent)). Data is generally deleted after the fulfillment of the purpose and expiration of the respective legal retention period.

Purpose of Data Processing
We process your data for the following purposes:

  • Provision and management of our services
  • Processing of orders and deliveries
  • Communication with you (inquiries, support, updates)
  • Compliance with legal obligations (e.g., retention obligations)
  • Improvement of our services and development of new offerings
  • Marketing activities (if you have expressly consented)
  • Protection against fraud, abuse, or other unlawful activities

Legal Basis for Data Processing
The processing of your data is based on one or more of the following legal bases:

  • Fulfillment of a contract or performance of pre-contractual measures
  • Compliance with legal obligations
  • Your explicit consent
  • Protection of our legitimate interests

Data Disclosure
We only disclose your data to third parties if it is necessary to fulfill our services or legal obligations. This may include sharing with shipping service providers, payment service providers, or authorities. In such cases, we ensure that appropriate data protection measures are taken.

Storage Duration
We store your personal data only for as long as necessary to fulfill the purposes mentioned above or as required by law. Once the data is no longer needed, it will be securely deleted or anonymized.

Your Rights

As a data subject, you have certain rights regarding your data. These include:

Right to information (Art. 15 GDPR)
You have the right to obtain information about the data we store and the purposes of processing.

Right to rectification or erasure (Art. 16 and 17 GDPR)
If your data is incomplete or incorrect, you have the right to request rectification or supplementation.
Under certain circumstances, you can request the erasure of your data, for example, if the data is no longer necessary for the original processing purposes or if the processing is unlawful. The right does not apply if the data is necessary to comply with legal obligations.

Right to restriction of processing (Art. 18 GDPR)
In certain cases, you have the right to request the restriction of the processing of your data, for example, if you dispute the accuracy of the data or if the processing is unlawful.

Right to data portability (Art. 20 GDPR)
You have the right to receivethe data in a structured, commonly used, and machine-readable format and to transfer it to another controller, where technically feasible.

Right to object
You have the right to object to the processing of your data based on reasons arising from your particular situation. We will cease processing your data unless compelling legitimate grounds for the processing override your interests, rights, and freedoms.

Withdrawal of consent
If you have given us consent to process your data, you can withdraw that consent at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. To exercise your rights or if you have any questions regarding the processing of your data, you can contact us at any time (see contact details in Section 1).

Data Security

We implement reasonable technical and organizational measures to ensure the security of your data and to protect it against unauthorized access, misuse, loss, or disclosure.

Updating the Data Protection Policy

We reserve the right to update this data protection policy from time to time. The most current version will be available on our website. We recommend that you regularly review the data protection policy to stay informed about any changes.

This privacy policy is current and effective as of July 2023