Legal

Privacy Policy

This is a translation for your convenience. In case of any discrepancy, the German version shall prevail.

1. Controller

2. General information

We process personal data only to the extent necessary to operate this website, to answer your enquiries, or to initiate and carry out business relationships. This website does not use cookies for analytics or advertising, does not use tracking services, and does not load any content (e.g. fonts, videos or maps) from third-party servers.

3. Hosting

We host the content of our website with the following provider:

ALL-INKL
The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter All-Inkl). For details, please refer to All-Inkl's privacy policy: https://all-inkl.com/datenschutzinformationen/.

All-Inkl is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Server log files
When you access the pages, technically necessary data is processed: IP address, date and time, page accessed, amount of data transferred, browser and operating system, and the previously visited page. This data is processed to ensure smooth operation and to defend against attacks (Art. 6(1)(f) GDPR) and is deleted as soon as it is no longer required for these purposes.

4. Contact by email

If you email us, we process the information you provide (e.g. name, institution, email address, content of your enquiry) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in responding (Art. 6(1)(f) GDPR). We delete the data once it is no longer required, unless statutory retention obligations (e.g. under the German Commercial Code or Fiscal Code) apply.

5. Contact via WhatsApp

Our website links to WhatsApp. You are only redirected to WhatsApp once you click the link. The provider is WhatsApp Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. If you contact us via WhatsApp, WhatsApp and Meta Platforms process data such as your phone number, metadata and, where applicable, your address book, including in the USA. Transfers to the USA are based on the EU-US Data Privacy Framework. If you do not want this, please contact us by email instead. The legal basis is Art. 6(1)(b) or (f) GDPR.

6. Enquiry list in the shop

The enquiry list in the Cassel Medical Shop is stored only in your browser and is not transmitted to us. We only receive the information once you send the saved list to us by email. Section 4 then applies.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). A short email to info@cassel-medical.de is sufficient.

You may also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

8. Last updated

October 2026