Stand: 03.11.2026 · Verantwortlicher: Betreiber der Service Pharmacy Plattform (SPHP)
1. Controller
The controller for data processing on this website is the operator of the “Service Pharmacy” / doctor portal. Contact details are in the legal notice and on the contact page.
2. Purposes
We process personal data in order to:
- provide and authenticate user accounts (patients / doctors),
- enable doctor profiles, search, reviews and appointment booking,
- deliver messages between users and practices,
- keep the platform secure (abuse detection, logs),
- optionally – with consent – use statistics, marketing and external media (for example maps).
3. Legal bases
- Art. 6 (1) (b) GDPR – contract (account, appointments, messages),
- Art. 6 (1) (f) GDPR – legitimate interest (security, stability),
- Art. 6 (1) (a) GDPR – consent (optional cookies / tracking / external media).
4. Cookie categories
- Necessary: session, security, storing your consent – always on.
- Statistics: helps us understand usage – consent only.
- Marketing: optional campaign measurement – consent only.
- External media: for example maps (Leaflet / OpenStreetMap) – consent only.
You can change your choice at any time via the cookie settings in the footer or the button on this page.
5. Review and appointment opt-ins
- Reviews: a review is published only with the required consent and under the platform rules.
- Booking: appointment data is processed to complete the booking and notify the practice.
6. Recipients
Data may be shared with technical providers (hosting, email, payment providers for doctor packages) where required to run the service. We conclude Art. 28 GDPR contracts with processors.
7. Retention
We keep data only as long as needed for the purposes above or as required by statutory retention periods. Cookie consent is stored for the chosen duration (365 days by default).
8. Your rights
You have in particular the right to:
- access (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object (Art. 21 GDPR),
- withdraw consent for the future.
You may also lodge a complaint with a data protection authority.
9. Security
We use technical and organisational measures to protect your data (for example HTTPS and access limits). Absolute security on the internet cannot be guaranteed.
10. Ihr aktueller Einwilligungsstatus