Privacy policy

This English version is provided for convenience; in case of any discrepancy, theGerman version is legally binding.

We attach great importance to the protection of your personal data, which we process exclusively on the basis of the statutory provisions, namely the General Data Protection Regulation (GDPR; in German, Datenschutz-Grundverordnung, DSGVO), the Austrian Data Protection Act (Datenschutzgesetz, DSG) and the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021, TKG). In accordance with Art. 13 GDPR, this policy explains which data are processed when you visit this website.

1. Controller

Apotheke „Zur göttlichen Vorsehung“ Mag. pharm. Junger & Mag. pharm. Dr. Gasser KG
Heinrichstraße 3, 8010 Graz, Austria
Telephone: +43 316 321128
Email: info@apotheke-vorsehung.at

You may contact us at this address with any questions concerning data protection and in order to exercise your rights. We are not obliged to appoint a data protection officer.

2. At a glance

• We use Fathom Analytics to compile visitor statistics; Fathom neither sets cookies nor creates profiles, and we make no use of advertising or tracking services.
• We set only one technically necessary cookie, which stores the choice you make in the cookie banner.
• Our fonts and the cookie banner are hosted on our own server, so no data are transferred to third parties in this connection.
• Google Maps is loaded only if you give your consent.
• The enquiry form is transmitted directly to our email inbox via the form service Basin.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel delivers the pages through a worldwide network of servers (a content delivery network), generally from a location close to you, while server-side functions, such as those used for the night pharmacy schedule, run in a data centre in Frankfurt am Main.

Each time a page is accessed, Vercel processes technically necessary access data, which include your IP address, the date and time, the page requested, the volume of data transferred, the status code, the browser and operating system used, and the previously visited page (referrer). We require these data in order to deliver the website, to ensure its stability and security, and to fend off attacks. They are not combined with other data and are deleted automatically after a short period, unless they are needed to investigate a security incident.

The legal basis is our legitimate interest in a secure and properly functioning website (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR. Vercel is certified under the EU-US Data Privacy Framework, so that transfers to the USA are covered by the European Commission’s adequacy decision (Art. 45 GDPR); standard contractual clauses have also been agreed as an additional safeguard. Further information is available inVercel’s privacy policy.

4. Visitor statistics with Fathom Analytics

In order to understand how our website is used, for example which pages are visited most often, we use the analytics service Fathom Analytics, which is provided by Conva Ventures Inc., 26 Bastion Square, Third Floor Burnes House, Victoria, British Columbia, V8W 1H9, Canada.

Fathom sets no cookies, stores nothing on your device and does not track you across other websites. When you open a page, your IP address and browser details (user agent) are processed briefly in order to generate an identifier that is valid only for our website and only for a single day, and which cannot be traced back to you. Requests from the EU are routed through servers within the EU, where the IP address is removed before the anonymised statistical data are stored; these anonymous data may be held on servers in the USA. We see only aggregated figures, such as page views, country of origin, device type and referring websites, and never individual persons.

The legal basis is our legitimate interest in analysing the use of our website statistically and in improving it (Art. 6(1)(f) GDPR). Since nothing is stored on or read from your device, no consent is required under § 165(3) TKG 2021. We have concluded a data processing agreement with Fathom pursuant to Art. 28 GDPR, and Canada is the subject of an adequacy decision by the European Commission (Art. 45 GDPR). You may object to this processing at any time (Art. 21 GDPR). Further information is available inFathom’s privacy policy.

5. Cookies and cookie settings

Cookies are small text files that your browser stores on your device. This website sets just one cookie of its own:

• cc_vorsehung: this cookie records which content you have permitted in the cookie banner, so that we need not ask you again on every visit. Storage period: 182 days.

This cookie is technically necessary (§ 165(3) TKG 2021). The legal basis is our legitimate interest in storing your choice and in being able to demonstrate it (Art. 6(1)(f) and Art. 7(1) GDPR). The cookie banner is integrated directly into our website, and no data are transferred to third parties in the process.

All other cookies and embedded third-party content (at present only Google Maps) are permitted only once you have given your consent (§ 165(3) TKG 2021, Art. 6(1)(a) GDPR). You may change or withdraw your choice at any time; the withdrawal takes effect for the future and does not affect the lawfulness of any processing carried out before it.

Open cookie settings

6. Google Maps

On the contact page, you can choose to display a map from Google Maps, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The map is loaded only once you permit “Google Maps” in the cookie banner or click “Accept cookies” on the contact page. From that moment onwards, your browser establishes a connection to Google’s servers, in the course of which your IP address, the page visited, browser information and the date and time in particular are transmitted to Google, and Google may set cookies. If you are signed in to a Google account, Google may associate the visit with your account. We have no influence over the nature and extent of this processing by Google.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021), which you may withdraw at any time in the cookie settings. In this context, data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Further information is available inGoogle’s privacy policy.

Links such as “Directions” or “Show route” are ordinary links, so Google receives data only if you actually click on one of them.

7. Contact via the enquiry form, email, telephone or fax

When you submit the enquiry form on the contact page, the details you provide (name, email address, telephone number and message) are transmitted to our email inbox via the form service Basin (usebasin.com), which processes these data exclusively on our behalf as a processor. [Details of the provider, server location and the basis for any transfer to third countries to be added.]

We use the details you provide in order to deal with your enquiry, for example to prepare an order of medicines for collection, and to contact you should we have any questions. The legal basis is the taking of steps prior to entering into a contract or the performance of a contract (Art. 6(1)(b) GDPR) or, failing that, our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Health data: If your enquiry mentions medicines, symptoms or other health-related information, these constitute special categories of personal data, which we process on the basis of your explicit consent (Art. 9(2)(a) GDPR), given by submitting the enquiry, and for the purposes of pharmaceutical care and advice (Art. 9(2)(h) and (3) GDPR). All members of the pharmacy’s staff are bound by professional secrecy. You may withdraw your consent at any time with effect for the future. Please bear in mind that ordinary emails are not encrypted end to end; for sensitive matters, you are welcome to telephone us or to visit us in person at the pharmacy.

Our email inbox is operated on our behalf, as a processor, by T-Mobile Austria GmbH (Magenta Telekom), Rennweg 97–99, 1030 Vienna, and the data are processed within the EU.

Storage period: We retain enquiries for as long as is necessary to deal with them and to be able to trace them subsequently, for instance should questions arise about an order. Thereafter we delete them, at the latest upon expiry of the statutory limitation periods (generally three years under § 1489 of the Austrian Civil Code, Allgemeines Bürgerliches Gesetzbuch, ABGB). Documents that we are required to retain for tax reasons or under pharmacy law are kept for the period prescribed (for example, seven years under § 132 of the Austrian Federal Fiscal Code, Bundesabgabenordnung, BAO).

We do not pass your data on to third parties, except where we are legally obliged to do so or where disclosure is necessary in order to carry out your order.

8. Links to other websites

Our website contains links to other services, for example to our online shop at shoplife.at, to Dolomia, rat-tat.at, apothekenindex.at, the City of Graz or Google Maps. Data are transferred to these providers only when you click on a link. To the link to the online shop we append an identifier that tells the shop you have come from our website; this identifier contains no information about you personally. Responsibility for the linked pages lies with the respective provider, whose own privacy policy applies.

9. Your rights

You are entitled to the following rights in relation to us:

• access to the data we process about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing that is based on our legitimate interest (Art. 21 GDPR)
• withdrawal of any consent you have given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, simply contact us atinfo@apotheke-vorsehung.at or at our postal address.

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority, which in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email dsb@dsb.gv.at,www.dsb.gv.at.

10. Obligation to provide data; no automated decision-making

You are under no obligation to provide us with any data. Without the technically necessary access data, however, the website cannot be displayed, and without your contact details we are unable to respond to your enquiry. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

11. Changes

We revise this privacy policy whenever changes to the website or to the legal requirements make this necessary, and the version published here at any given time shall apply.

Last updated: November 2026