Privacy Policy

Stand: Juli 2026

1. Controller

The controller responsible for processing personal data is:
PrimeCare Medical & Pharma Export UG (haftungsbeschränkt) i. G.
Auf der Bünte 1
27321 Thedinghausen
Germany

Represented by Managing Director Hubert Nshizirungu. Phone: +49 152 16202589, email: info@primecare-export.com.

2. Data Protection Contact

For questions about the processing of personal data or the exercise of your data protection rights, you may contact datenschutz@primecare-export.com. This contact address is a general data protection contact point and does not automatically constitute the appointment of a company data protection officer.

3. General Information on Data Processing

We process personal data only where necessary to provide the website, handle business inquiries, initiate or perform business relationships, comply with legal obligations or safeguard legitimate interests. Personal data means information relating to an identified or identifiable natural person.

4. Hosting and Email Services

The website and business email mailboxes are operated through STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes technical and communication data where necessary for web hosting, domains, email mailboxes, security and administration. Where STRATO processes personal data on our behalf, this is based on a data processing agreement under Art. 28 GDPR. Legal basis: Art. 6(1)(f) GDPR.

5. Server Log Data

When our website is accessed, the hosting provider automatically processes technical access data for website delivery, stability, security and the detection and prevention of attacks or misuse. Legal basis: Art. 6(1)(f) GDPR.

• IP address
• date and time of access
• page or file accessed
• data volume transferred
• browser type and version
• operating system
• referrer URL
• host name
• HTTP status code

6. Backups

Technically necessary backup copies of website, database and communication data may be created as part of hosting. Deleted data may temporarily remain in backups and will be removed through regular overwriting or deletion unless statutory retention duties apply.

7. Contact by Email or Telephone

If you contact us by email or telephone, we process the data you provide in order to handle your inquiry. Depending on the purpose, processing is based on Art. 6(1)(b) or Art. 6(1)(f) GDPR.

• name and function
• company or organization
• email address
• telephone number
• content of the inquiry
• requested products or services
• destination country or delivery location
• required documents and certificates

8. Contact, Product and Quotation Form

Our contact form may be used for product, quotation, tender and project inquiries. Mandatory fields are required to assign and process the request; further information is voluntary. Legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR depending on context.

• company name
• contact person
• email address
• telephone number
• requested WhatsApp contact
• destination country
• product category
• product description
• quantities
• tender or project information
• delivery or shipping conditions
• voluntary additional information

9. Communication via WhatsApp

If you expressly request communication via WhatsApp or contact us via WhatsApp, we process your telephone number, profile name, message and any further information you provide. For users in the European Region, the provider is generally WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. Use is voluntary; you may alternatively contact us by email or telephone. Please do not transmit patient data, medical findings or other sensitive personal data via WhatsApp.

10. No Transmission of Patient or Health Data

The website and contact form are intended exclusively for business B2B inquiries. Please do not transmit patient data, medical findings, health data, identity documents, insurance documents or other highly sensitive personal data via the website, contact form, email or WhatsApp. Unneeded data will be deleted or anonymized.

11. Business Customers, Suppliers and Contacts

In our business activities we process contact data of representatives of hospitals, clinics, distributors, pharmacies, laboratories, manufacturers, suppliers, authorities, NGOs, logistics providers and other project partners. Processing serves the initiation, performance and management of business relationships and is based on Art. 6(1)(b), (c) and (f) GDPR.

12. Business Outreach and Publicly Available Data

As part of international B2B activity, we may collect business contact data from publicly available sources such as company and authority websites, public directories, registers, trade fair and industry directories and professional networks. Processing is based on Art. 6(1)(f) GDPR. You may object to processing for direct marketing at any time.

13. Compliance, Supplier and Product Checks

For medical devices, pharmaceutical products and other regulated healthcare products, we may process data of contacts, suppliers, manufacturers and business partners to assess regulatory, customs, product-related or other legal requirements. Legal bases include Art. 6(1)(b), (c) and (f) GDPR.

14. Technical Website Support

The website is designed, technically implemented and maintained by SBC Office Group GmbH, German branch, Beedstraße 54, 40468 Düsseldorf, Germany, Local Court of Düsseldorf, HRB 93005, represented by Ümit Arslan. Responsible contact for website support: Juan Salim, j.salim@primecare-export.com. Any processing by the technical service provider takes place only as required and on instruction of the controller.

15. Recipients of Personal Data

Personal data is disclosed only where necessary to handle inquiries, prepare or perform contracts, comply with legal obligations or operate the website. Recipients may include hosting and email providers, IT service providers, manufacturers, suppliers, distributors, logistics providers, customs agents, banks, authorities and external advisors.

16. Transfers to Third Countries

PrimeCare operates internationally and handles inquiries and projects especially for Africa and Asia. In specific inquiries it may be necessary to transfer business contact data to recipients outside the EU or EEA. Such transfers take place only where the requirements of Art. 44 et seq. GDPR are met, for example through adequacy decisions, EU standard contractual clauses, contractual necessity, consent or another lawful exception.

17. Cookies and Local Storage Technologies

Technically necessary cookies or comparable storage technologies may be used on this website. Non-essential analytics, marketing or tracking technologies are used only after valid consent has been obtained.

18. External Content and Services

If external content or services such as videos, maps, fonts, analytics tools, captcha services or social media content are integrated in the future, personal data may be transferred to the relevant provider. This policy will be updated accordingly when new external services are introduced.

19. Retention Period

We store personal data only for as long as required for the relevant purpose. Longer storage may occur where statutory retention duties apply, data is needed for contracts or legal claims, consent has been given, or legitimate business contact interests continue without overriding interests of the data subject.

20. Legal Bases

Depending on processing, we rely in particular on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (pre-contractual steps or contract performance), Art. 6(1)(c) GDPR (legal obligations) and Art. 6(1)(f) GDPR (legitimate interests).

21. Rights of Data Subjects

Subject to statutory requirements, you have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority. To exercise your rights, contact datenschutz@primecare-export.com.

22. Right to Object

Where personal data is processed under Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. Where data is processed for direct marketing, you may object at any time without giving reasons.

23. Withdrawal of Consent

Consent may be withdrawn at any time with effect for the future. Processing carried out before withdrawal remains lawful.

24. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. For non-public companies based in Lower Saxony, the competent authority is generally: Der Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany, phone 0511 120-4500, email poststelle@lfd.niedersachsen.de.

25. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access and misuse. The website is provided via encrypted HTTPS.

26. Automated Decision-Making and Profiling

No solely automated decision-making including profiling within the meaning of Art. 22 GDPR takes place through this website.

27. Updates to this Privacy Policy

We reserve the right to update this privacy policy if legal requirements, our services, the technical design of the website or service providers change.