Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data means all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is StakonMed GmbH, Schozachstraße 102, 74232 Abstatt, Germany, Tel.: 015234151810, Email: info@stakonmed.de. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/referral from which you accessed the site
Used browser
Used operating system
Used IP address (if applicable: in anonymized form)

The processing is carried out according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No data is passed on or used otherwise. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the servers of the provider. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6 para. 1 lit. b GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the effective support of our website visitors.
Your data transmitted in this way will be deleted subject to any conflicting statutory retention periods once the relevant matter has been conclusively resolved.

Additionally, for the purpose of creating pseudonymized usage profiles, further information may be collected and evaluated using cookies, which, however, do not serve your personal identification and are not merged with other data sets. If this information has a personal reference, processing is carried out according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by appropriate browser settings. However, in this case, the functionality of our website may be limited.
You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 Trusted Shops

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany

Only based on your explicit consent according to Art. 6 para. 1 lit. a GDPR do we transmit your email address and, if applicable, other customer data to the provider so that they can contact you by email with a review reminder.

You can revoke your consent at any time with effect for the future towards us or the provider.

We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The contract on joint responsibility can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-contract-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

5.3 When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request according to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively resolved and provided that no legal retention obligations prevent this.

6) Data processing when opening a customer account

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us during the creation of a customer account. Which data is required for account creation can be found in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned address of the responsible party. After deleting your customer account, your data will be deleted provided that all contracts concluded have been fully processed, no legal retention periods prevent this, and we have no legitimate interest in further storage.

7) Use of customer data for direct advertising

7.1 Sign up for our email newsletter

When you sign up for our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have explicitly confirmed your consent to receive the newsletter by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store the IP address registered by your Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later time. The data we collect when signing up for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the designated link in the newsletter or by sending a corresponding message to the responsible party named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use your data beyond this in a legally permitted manner, about which we inform you in this statement.

7.2 Rapidmail

The dispatch of our email newsletters is carried out by this provider: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany

Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provide when signing up for the newsletter to this provider in accordance with Art. 6 para. 1 lit. f GDPR, so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent according to Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated but is not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits forwarding to third parties.

7.3 Shopify Email

The dispatch of our email newsletters is carried out by this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits forwarding to third parties.

In the case of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8) Data processing for order processing

8.1 Collection and processing of health data

Processing of personal health data may be necessary for the processing of medicine orders.

Health data is a special category of personal data that allows direct or indirect conclusions about a person's physical and/or mental health condition.

The health data you provide as part of the order (e.g., information about the type and quantity of the ordered medicines) will only be processed by us for the purpose of contract execution if you have given us your explicit consent by opt-in in accordance with Art. 6 para. 1 lit. a GDPR.

Your communicated health data will be collected and processed strictly for specific purposes and within the framework of applicable legal data protection regulations. Your health data will generally not be passed on to third parties. Only in the case of ordering prescription drugs will we forward your communicated health data - subject to your consent - to your health insurance company for billing purposes.

You can revoke your consent at any time with effect for the future towards the party responsible for data processing.

8.2 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be forwarded in accordance with Art. 6 para. 1 lit. b GDPR to the commissioned transport company and the commissioned credit institution.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order to personally inform you within the scope of our legal information obligations according to Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also cooperate with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data are transmitted to these service providers according to the following information.

8.3 Transfer of personal data to shipping service providers

- DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We pass on your email address and/or phone number to the provider before delivery in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR, we only pass on the recipient's name and delivery address to the provider. The transfer only takes place to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent can be revoked at any time with effect for the future towards the responsible party named above or towards the provider.
- Trans-o-flex

As a transport service provider, we use the following provider: trans-o-flex Express GmbH & Co. KGaA, Hertzstraße 10, 69469 Weinheim, Germany

Consent can be revoked at any time with effect for the future towards the responsible party named above or towards the provider.

8.4 Use of payment service providers (payment services)

- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you advance the payment, your payment data provided during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the contents of your order will be passed on to them in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method where we advance the payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, if applicable data for an alternative payment method).

To protect our legitimate interest in determining your creditworthiness in such cases, these data are forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks, based on the personal data you provide as well as other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment method you selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). As far as score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.

You can object to this processing of your data at any time by sending us or the provider a message. However, the provider may still be entitled to process your personal data if this is necessary for proper payment processing under the contract.
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

When selecting a payment method from the provider where you pay in advance (such as credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order are passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

9) Web analytics services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when visiting the website, Google Analytics 4 cookies are set, which are small text files stored on your device and collect certain information. This information also includes your IP address, which Google shortens by removing the last digits to exclude direct personal identification.

The information is transmitted to Google servers and further processed there. This may also include transfers to Google LLC based in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The truncated IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google. The data collected during the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, especially the setting of cookies on the device used, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, the use of Google Analytics 4 during your site visit will not take place. You can revoke your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special feature "demographic characteristics" and can generate statistics that provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to any specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics according to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the "Personalized Ads" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 according to Art. 6 para. 1 lit. a GDPR, have set up an account on this website, and log in on different devices with this account, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

10) Retargeting/Remarketing and Conversion Tracking

Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our goal is to show you ads that are of interest to you, make our website more interesting for you, and achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with conversion tracking. However, they do not receive any information that would allow users to be personally identified. In the context of using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.

Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.
Google's privacy policies can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11) Page functionalities

11.1 Trusted Shops Trustbadge

Our website includes graphic elements from the following provider to display external customer reviews and/or an externally awarded quality seal: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, this is done according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the optimal marketing of our offer and the appealing design of our website.

Further processing may occur in the case of an online order with us.

Depending on your explicit consent according to Art. 6 para. 1 lit. a GDPR, your order information (order total, order number, possibly purchased product) as well as your email address will be encrypted and transmitted to the provider via the Trustbadge after completing an order to check for an existing registration for the provider's services (especially "buyer protection") and, if necessary, to enable a new registration.

In the case of an existing registration or a new registration with the provider for their services (especially buyer protection), your order information (order total, order number, purchased product) as well as your email address will be transmitted to and further processed by the provider based on the contractual agreement with the provider according to Art. 6 para. 1 lit. b GDPR to provide the services (especially buyer protection).

11.2 - Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the Captcha window, the provider uses "Google Fonts," i.e., fonts loaded from Google via the internet. No processing of information beyond what is already transmitted to Google through the functionality of ReCaptcha takes place.

The service checks whether an input is made by a natural person or abusively by machine and automated processing and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this for evaluation to the provider's servers. Cookies may be used here, i.e., small text files stored in the browser of the device.

If the above-described processing is based on cookies, these are only set if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

If the above-described processing is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

12) Data subject rights

12.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) against the controller regarding the processing of your personal data, whereby the respective legal basis for exercising these rights is referenced:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to deletion pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw given consents pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the processing purpose, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on an explicit consent according to Art. 6 para. 1 lit. a GDPR, the affected data will be stored as long as you do not withdraw your consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided it is no longer required for contract fulfillment or initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purpose of direct advertising based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.

Unless otherwise specified by the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Status: 05/13/2026, 03:29:48