EU GDP certified · §52a AMG ISO 13485 certified
Request a quote
Services
Services overview Pharmaceutical wholesale Medical devices (ISO 13485) Own GDP warehouse Lommatzsch Cold chain logistics Export
Company
About us Quality & Compliance Certificates Careers
Legal
Imprint Privacy policy Terms & Conditions Wholesale enquiry
Home / Privacy policy
Legal

Privacy policy

Information on the processing of personal data under the GDPR.

This is a translation for convenience. Sanicura Medical GmbH is a German company; in the event of any discrepancy, the German version shall prevail.

1. Controller

The controller responsible for data processing on this website is:

Sanicura Medical GmbH
Weissacher Strasse 10
01623 Lommatzsch
Germany
Phone: +49 (0) 35241 – 87 01 07
Email: info@sanicura-medical.com

Thank you for your interest in our company. Protecting your data matters to us. Below we explain which data we process when you visit this website, for what purpose and on what legal basis.

This website is purely an information service for healthcare professionals and business customers. It contains no ordering process, no payment processing and no customer account. A separate privacy policy applies to the consumer shop at www.sanicura-medical.de.

2. Access data and hosting

You can visit this website without providing any personal information. Each time a page is accessed, access data transmitted by your browser is processed automatically: the address requested, the date and time of access, the volume of data transferred, the referrer, information about your browser and operating system, and your IP address. This data is used solely to ensure trouble-free operation, security and the prevention of attacks. The legal basis is our legitimate interest in a secure and available website pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

This website is operated on the Cloudflare Pages platform. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, represented in Europe by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany. Cloudflare processes the access data as a processor on our behalf. Insofar as data is transferred to the USA, the transfer is based on the European Commission's standard contractual clauses. Cloudflare operates a global server network and generally delivers the pages from a location within the European Union.

To protect against automated attacks, Cloudflare may set a technically necessary cookie that distinguishes human visitors from bots. It does not contain usage profiles that we can evaluate.

3. Contact form and wholesale enquiries

You can send us an enquiry using the forms on this website. We process the information you enter — company, type of authorisation, email address, subject and your message — as well as the page you were on, the country of origin derived from your IP address, and the time of receipt. Mandatory fields are marked as such.

The legal basis is Art. 6 (1) sentence 1 lit. b GDPR where your enquiry is aimed at concluding or performing a contract, and otherwise our legitimate interest in responding to enquiries pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

Once your enquiry has been fully processed, we delete your data unless commercial or tax retention obligations apply or you have consented to further use.

Delivery of form messages

Form messages are delivered via the Brevo service operated by Brevo GmbH, Köpenicker Strasse 126, 10179 Berlin, Germany (parent company: Brevo SAS, 106 Boulevard Haussmann, 75008 Paris, France). Brevo processes the transmitted data exclusively on our instructions on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Protection against misuse

To prevent automated submissions, our forms contain an additional field that is invisible to humans and measure the time between page load and submission. No cookies are set and no data is transmitted to third parties in this process. The legal basis is our legitimate interest in preventing spam pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

4. Newsletter for healthcare professionals

If you subscribe to our professional newsletter, we use your email address to send you information about our product range and regulatory topics. Dispatch takes place on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR. By subscribing you also confirm that you are authorised to purchase under §47 AMG.

We confirm your subscription using the double opt-in procedure: you receive an email containing a confirmation link and are only added to the distribution list afterwards. We store the time of subscription, the time of confirmation and the IP address as evidence of consent.

You may unsubscribe at any time — via the unsubscribe link in every email or informally to info@sanicura-medical.com. After unsubscribing we delete your email address from the distribution list. Dispatch is likewise handled via Brevo (see section 3).

5. Cookies, analytics and advertising

We do not use any cookies for analytics, marketing or advertising purposes on this website. No web analytics take place, no usage profiles are created and no social media plugins are embedded. A consent banner is therefore not required. Technically necessary cookies may only be set by our hosting provider for attack prevention (see section 2).

6. Fonts

To display fonts consistently, this website embeds fonts from the Google Fonts service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page is accessed, your browser loads the required font files from a Google server, and your IP address is transmitted to Google in the process. The legal basis is our legitimate interest in a consistent and fast presentation of our website pursuant to Art. 6 (1) sentence 1 lit. f GDPR. Insofar as data is transferred to the USA, the transfer is based on the European Commission's standard contractual clauses. Further information can be found in Google's privacy policy.

7. Recipients of your data

Your data is only disclosed to the extent described above. The recipients are:

  • Cloudflare, Inc. — operation and delivery of the website (processor)
  • Brevo GmbH — delivery of form messages and newsletters (processor)
  • Google Ireland Limited — delivery of fonts

Beyond this, we only pass on data where we are legally obliged to do so or where you have expressly consented. Transmission to authorities takes place only within the scope of mandatory statutory provisions, such as reporting and documentation obligations under medicinal products law.

8. Retention periods

  • Access data and server log files: as a rule 7 days, at most 30 days
  • Enquiries submitted via the forms: until final processing, thereafter within the commercial and tax retention periods of 6 or 10 years where a business transaction has arisen
  • Newsletter data: until you withdraw your consent; evidence of consent is retained thereafter until the limitation periods expire

9. Your rights

As a data subject you have the following rights:

  • under Art. 15 GDPR, the right to request information about the personal data we process concerning you;
  • under Art. 16 GDPR, the right to request the immediate correction of inaccurate data or the completion of your personal data stored by us;
  • under Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • under Art. 18 GDPR, the right to request the restriction of processing of your personal data;
  • under Art. 20 GDPR, the right to receive your personal data in a structured, commonly used and machine-readable format or to request its transmission to another controller;
  • under Art. 7 (3) GDPR, the right to withdraw consent once given at any time with effect for the future;
  • under Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule you may contact the supervisory authority of your usual place of residence or work, or the authority responsible for our registered office: Saxon Commissioner for Data Protection and Transparency, Devrientstrasse 5, 01067 Dresden, Germany.

Right to object

Insofar as we process personal data to safeguard our legitimate interests, you may object to this processing with effect for the future. Where processing takes place for direct marketing purposes, you may exercise this right at any time without giving reasons. Where processing takes place for other purposes, you have a right to object on grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for those purposes unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

10. Contact for data protection matters

For questions about the collection, processing or use of your personal data, for information, correction, restriction or erasure of data, and to withdraw consent, please contact info@sanicura-medical.com or the address given in the imprint.

Last updated: August 2026