Data Protection Declaration - As of May 2018

We take the protection of your personal data very seriously and adhere to the regulations of data protection laws. Our websites may include links to websites of contractual partners and other providers for which we do not accept liability. The following declaration gives you an overview of how we ensure this protection and what kind of data is collected for what purpose.

Name and contact details of the data controller and the data privacy officer

The data controller is:

HWI pharma services GmbH
Rheinzaberner Str. 8
76761 Rülzheim
Phone: +49 7272 7767-0
Fax: +49 7272 7767-11
Email: info(at)

The data protection officer of the data controller is:

Herr Jan Morgenstern
Morgenstern Rechtsanwaltsgesellschaft mbH
Große Himmelsgasse 1
67346 Speyer
Tel:       +49 6232 1001190
E-Mail:  speyer(at)

Data processing when accessing the website

When accessing our website, certain information is automatically sent by the web browser installed on your device to the server hosting our website. This information is temporarily recorded in a so called logfile. The following information is collected and recorded without any action on your part as long as necessary for the purposes mentioned below:

  • IP-address of the device used to access our website
  • Date and time of the access
  • Name and URL of the file that was accessed
  • Website that was referring you to our website (Referrer-URL)
  • Used web browser and if applicable operating system of your device and name of your internet access Provider.

The data mentioned above is used by us for the following purposes:

  • To ensure a smooth connection to our website
  • To ensure comfortable use of our website
  • To evaluate system security and stability and
  • For other administrative purposes.

The legal basis for processing the data is Art. 6 para. 1 1st sentence lit. f GDPR (General Data Protection Regulation).  Our legitimate interest arises out of the purposes for data processing mentioned above. However, we will never use such data to draw any conclusions with respect to your identity.  

Use of data for contract implementation

In order to implement the contract we, HWI pharma services GmbH, require your first name and surname, the company you are working for, information with respect to your request, information with respect to the goods ordered by you, date and time of your order, the contractual text referring to your order, your postal address, the billing address (if different), the bank information required for proper payment, with the VAT ID/tax number if required, and your email address. We will record and use these details to conclude the contract and fulfil it.  This includes queries as to creditworthiness to Creditreform GmbH and transfer of the information to assigned service providers required to implement the contract. Legal basis for such processing of data is Art.  6 para. 1 1st sentence lit. b GDPR with respect to the data necessary for the implementation of the contract and Art.  6 para. 1 1st sentence lit. f GDPR with respect to queries as to creditworthiness. Unless otherwise required by applicable law such as the German commercial code, your data will be deleted as soon as they are not required anymore for the implementation of the contract.

Personal Data

If you contact us by email or by filling out a form with personal details via our website, we can respond to you using this information and provide you with the requested information, materials or services. The collected data will in no case be sold or passed on to third parties for other reasons unless we are legally obliged to do so. Legal basis for such data processing is Art.  6 para. 1 1st sentence lit. a GDPR. The personal data collected by us will be automatically deleted after completion of your request.

If you wish to receive the newsletter offered on our website, we need a valid email address from you. After registration to receive our newsletter, you will receive an email which will contain a link. By clicking on such link, you confirm that you want to receive the newsletter (Double-Opt-In). If there is no other legal basis to use your data for another purpose, we will solely use your data to send the newsletter. Legal basis for such data processing is Art.  6 para. 1 1st sentence lit. a GDPR.

You can revoke your consent to store your data, email address and its use to send the newsletter at any time.


In several places, our websites use so-called cookies. They are required to make our service more user-friendly, effective and secure. Cookies are small text files which are stored on your computer and which your browser saves. Our cookies do not contain your personal data in any form. Cookies do not damage your computer and do not contain any viruses. A description of which software sets cookies on our websites is given in the following section ‘Statistics’. You can disable cookies via your browser at any time. However, please note that, by doing so, parts of our websites will not be optimally displayed and possibly may not function properly. The data processed by such cookies is necessary for the above mentioned purposes of legitimate interests in accordance with Art.  6 para. 1 1st sentence lit. f GDPR.

Google Analytics

For the purpose of a demand-oriented design and the continuous improvement of our websites, we use Google Analytics, a web analysis service by Google Inc. ( (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as „Google“). To that extent, pseudonymised user profiles are created and cookies are used. The information generated by such cookies in respect of your use of the website such as

  • Type of web browser and version
  • Used operating system
  • Referrer-URL
  • Hostname of the device accessing the website (IP-address)
  • Time of access

are transmitted to a server of Google in the USA and recorded there. Such information is used to evaluate the use of the website, to compile reports on the activities on the website and to perform additional services in connection with the use of this website and the internet in general for the purposes of market research and a demand-oriented design of this website. Such information may also be transmitted to third parties, if this is necessary to comply with applicable law or if such third party processes such information by proxy. Your IP-address will not be mixed with other data by Google. IP-addresses are anonymized so that it is not possible to connect such IP-address to a person.

You can prevent your web browser from installing cookies by making the appropriate settings in your web browser. However, in this case you might not be able to use every function of the website to the full extent.

Furthermore, you can prevent the collection and use of the data generated by the cookies on your use of the website (including you IP-address) by Google by downloading and installing a browser add-on (

Alternatively, especially if you are using a mobile device, you can prevent the collection of data by Google Analytics if you click on this link. In this case, an opt-out cookie will be set, which will prevent the future collection of your data when visiting this website. This opt-out cookie will be stored on your device, is only working with this web browser and only valid for this website. If you delete the cookies in this web browser, you have to set the opt-out cookie again.

Further information with respect to data protection in connection with Google Analytics can be found here:  (


To protect the data sent to us via internet forms, we use reCAPTCHA, a service by Google Inc. that enables us to recognize if the input of the data was done by a human or by automatic processing in an abusive way. Such service requires to transmit the IP-address and possibly also other data required by Google for reCAPTCHA to Google. To that extent, special privacy policies by Google Inc. apply. You can find further information with respect to such privacy policy on or


On our website, we use videos that are hosted by YouTube LLC, a subsidiary of Google LLC. If you view such videos, your IP-address will be transmitted to YouTube and YouTube receives the information that you viewed such video. If you are logged in at YouTube, such information will also be assigned to your user account (you can prevent this by logging out before watching the video). Further information can be found in the privacy policy of YouTube under

Google Maps

This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. For more information on how to handle user data, please refer to Google's Privacy Policy:

Disclosure of personal data

As a general rule, there is no transfer of your personal data to a third Person. We will only disclose your personal data to third persons, if

  • You gave your explicit consent in accordance with Art.  6 para. 1 1st sentence lit. a GDPR
  • The disclosure is required for the establishment, exercise or  defense of legal claims as set forth in Art.  6 para. 1 1st sentence lit. f GDPR, and there is no reason to believe, that you have an overriding and legitimate interest in the non-disclosure of such data
  • There is a legal obligation to disclose such information as set forth in  Art.  6 para. 1 1st sentence lit. c GDPR
  • This is in compliance with applicable law and necessary for the performance of a contract with you (Art.  6 para. 1 1st sentence lit. b GDPR).

Your rights

You have the right,

  • In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purpose of the processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, the planned period for which the personal data will be stored,  the existence of the right to request rectification, erasure, restriction of processing of personal data, the right to lodge a complaint with a supervisory authority,  information about the source of the data, if not collected by us, as well as information about the existence of automated decision-making, including profiling and if applicable meaningful information with respect to the details of such automated decision-making;
  • In accordance with Art. 16 GDPR, to demand us to rectify without undue delay inaccurate personal data or complete incomplete personal data stored by us;
  • In accordance with Art. 17 GDPR,  to request us to delete your personal data stored by us, unless the further processing of such data is required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • In accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, if the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure of the personal data and we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims or you objected to the processing in accordance with Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, to receive your personal data that you provided to us in a structured, commonly used and machine-readable format or request us to transmit such data to another data controller;
  • In accordance with Art. 7 para. 3 GDPR, to withdraw your consent at any time. If you choose to make use of this right, we are not allowed to continue the data processing that was based on such consent;
  • In accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. Usually, you can lodge such complaint at your habitual residence, place of work or our registered seat.

Right to object

If the legal basis for the processing of your personal data is a legitimate interest by us in the sense of Art. 6 para. 1 1st sentence lit. f GDPR, you have the right to object such processing on grounds relating your particular situation or if the data is processed for direct marketing purposes.  In the latter case, you have a right to object irrespective of your particular situation.

If you want to exercise such right, please write an email to widerruf(at)

Data security

Currently, the connection to our website is not encrypted. However, we are working on implementing a Secure Socket Layer (SSL)-encryption with the strongest encryption supported by your web browser.

Apart from that, we use appropriate organisational and technical measures to protect your data against accidental or willful manipulation, partial or complete loss or destruction and unauthorized access by third parties. Our security measures are constantly improved in accordance with the technological developments.

Certificate Data Protection

The Institute of IT law confirms that HWI pharma services GmbH is governed by the provisions of the Data Protection Act.

Certification data protection


We use cookies to optimise the design of our websites. By continuing your visit on the website, you consent to the use of cookies. Find out more about our cookies and how we use them.