Privacy Policy

Data Protection Statement under the General Data Protection Regulation

1 Information on the collection of personal and contact data by the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we provide you with information on how we will handle your personal data when you use our website. In this context, personal data is data with which you can be personally identified.

1.2 The data controller of this website under the General Data Protection Regulation (GDPR) is Farmacia del Sol CB, CIF E93480572, Avda Polaris Cc Riviera, 29649 Mijas Costa (Malaga, Spain, Tel: 0034 952 93 91 10, Fax: 952 93 91 10, E-Mail: The controller of personal data is the natural or legal person who, alone or together with others, decides on the purposes and means of the processing of such personal data.

1.3 The OWNER OF THE WEBSITE informs the user and client of its website of the existence of an automated personal data file called CLIENTS, duly registered with the Spanish Data Protection Agency, where the personal data that the user and the client communicate to it in order to manage their request are collected and stored.

1.4 The OWNER OF THE WEBSITE does not request on its website, data from Internet users who visit it, except for merely identifying

1.5 The OWNER OF THE WEBSITE does not request any personal data from the internet users who visit it, except for merely identifying data.

Therefore, the communication of personal data by the user to the OWNER OF THE WEBSITE through its website can only be understood to take place when they voluntarily use the contact form service to contact the OWNER OF THE WEBSITE, since in these cases the processing of data is inevitable and implicit to the communication system. For these cases and those described in the following section, the entity informs the client that the processing of the data is carried out for the following purposes: To carry out all the formalities related to the preparation of budgets, contracting and provision of services of the OWNER OF THE WEBSITE, to the company to which it belongs or, where appropriate, to the interested party who requests it. As well as attending to and answering the communications received and those of commercial prospecting to keep users informed of possible promotions.

1.5 Identification of the recipients with respect to whom the OWNER OF THE WEBSITE intends to make

the OWNER OF THE WEBSITE intends to carry out transfers or access to data on behalf of third parties. The OWNER

OWNER OF THE WEBSITE only intends to carry out transfers or communications of data

that it must carry out in order to fulfil its obligations to the Public Administrations, Organisations or persons directly related to the WEBSITE OWNER, in cases where this is required in accordance with the Legislation in force in each area and at any given time, in this case the Data Protection and Digital Rights Guarantee Act and the European Data Protection Regulation.

Likewise, the OWNER OF THE WEBSITE informs the user that any other transfer of data that must be made

any other transfer of data that must be made, will be notified to the user when so provided for in the LOPDGDD and the European

the LOPDGDD and RGPD, informing him/her expressly, precisely and unequivocally of the recipients of the information, the purpose for which the data will be used, and the nature of the data

or, where applicable, when the LOPDGDD so provides, specific and unequivocal consent will be requested beforehand, as well as

unequivocal, specific and informed consent will be requested from the user.

However, the OWNER OF THE WEBSITE informs the user and the client that any processing of personal data is subject to current legislation in Spain on data protection, established by the LOPDGDD and its complementary and development regulations. In this sense, the OWNER OF THE WEBSITE is only responsible for and guarantees the confidentiality of the personal data requested by the user through the website.

 1.6 For security reasons and to protect the transmission of data and other confidential content (e.g. orders or enquiries to the person responsible, this website uses an SSL or TLS encryption protocol. You can identify an encrypted link by the character sequence "https://" and the padlock symbol in the browser bar.


2 Principles applied in data processing

In processing your personal data, the Data Controller (WEBSITE OWNER) will apply the following principles that comply with the requirements of the new European data protection regulation:

Principle of lawfulness, fairness and transparency: The Data Controller will always require consent for the processing of your personal data which may be for one or more specific purposes about which it will inform you in advance with absolute transparency.

Principle of data minimisation: The Data Controller will request from you only the data strictly necessary for the purpose or purposes for which it is requested.

Principle of limitation of the retention period: Data will be kept for the time strictly necessary for the purpose or purposes of the processing. The Data Controller will inform you of the relevant retention period depending on the purpose. In the case of subscriptions, the Data Controller will periodically review the lists and delete those records that have been inactive for a considerable period of time.

Principle of integrity and confidentiality: Your data will be treated in such a way that their security, confidentiality and integrity are guaranteed. You should be aware that the Data Controller takes the necessary precautions to prevent unauthorised access or misuse of the data of its users by third parties. Collection of personal data


3 Collection of data during the visit to the website

For purely informative use of the site, i.e. if you do not register or otherwise provide us with information, we will only collect data that your browser transfers to our server (server log files). When you visit our website, we collect the following data, which is technically necessary to display the pages to you:

    The website visited

    The date and time of access

    The amount of data sent in bytes

    The origin or referrer from which you came to the site

    The browser used

    The operating system used

    The IP address used (if applicable, in anonymised form, and in an anonymous form).

The processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interests in improving the stability and functionality of our website. We will not pass on the data or use it in any other way. However, we reserve the right to check the server log files at a later date should there be any indication of illegal use.


4 Contacting us

When you contact us (e.g. via a contact form or by e-mail), we will collect personal data. The data that will be collected in the case of a contact form is specified on the form in question. This data will be saved and used exclusively for the purpose of responding to your request or for contact and the technical administration connected with it. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) of the GDPR. If your contact is for the purpose of concluding a contract, the legal basis for processing the data is also that set out in Article 6(1)(b) of the GDPR. Once your request has been processed, your data will be deleted, provided that the circumstances indicate that the matter in question has been conclusively clarified and that there are no legal retention obligations that oppose such deletion.

It is reported that when the user does not maintain business relations with the OWNER OF THE WEBSITE, and send an email or a communication to the OWNER OF THE WEBSITE, indicating other personal data, the user will be giving their free, unequivocal, specific, informed and express consent to the processing of their personal data by the OWNER OF THE WEBSITE, for the purposes set out above, as well as to attend their communication or send documentation.

For the same purposes, the OWNER OF THE WEBSITE informs that, if the client sends an e-mail or communicates to the OWNER OF THE WEBSITE their personal data by reason of the position they hold in a company, whether as administrator, manager, representative and/or any other position as a contact person in the company, it will be understood that such communication entails the provision of their free, unequivocal, specific, informed and express consent for the processing of their personal data by the OWNER OF THE WEBSITE, for the purposes set out above.

In the contact forms on the website, where personal data is collected, the user must consent to the processing of his/her personal data by the

personal data, the user must expressly consent, prior to sending them, to the acceptance and knowledge of the privacy policy by filling in the check "I have read and accept the privacy policy", and whose content

content of which can be accessed by clicking on the link attached to this legal notice. If the

If the check box is not ticked by the user, the data contained in these forms will not be sent.


5 Data processing when opening a customer account and for the purpose of executing a contract

Pursuant to Article 6(1)(b) of the GDPR, personal data will be collected and processed if this is necessary to execute a contract or to open a customer account. The data to be collected are specified in the form in question. The customer account can be deleted at any time by sending a message to the address of the responsible person mentioned above. We will store and use the data you provide for the purpose of executing the contract. After the contract has been executed or the customer account has been deleted, we will block your data in order to comply with the statutory retention periods for tax and commercial purposes and, after these periods have expired, it will be deleted, unless you have explicitly authorised us to continue to use it or we have reserved the right to make lawful use of it retrospectively, which we will inform you about in the following.


6 Use of your data for direct mail

If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. You only need to provide us with your e-mail address. The provision of additional data is voluntary and serves to enable us to address you personally. To send the newsletter we use a so-called double opt-in procedure, which means that we will only send you the newsletter if you have expressly confirmed to us that you consent to receiving the newsletter. We will send you a confirmation e-mail asking you to click on a link to confirm that you wish to receive the newsletter from now on.

By activating the confirmation link, you consent to the use of your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to the newsletter, we will save the IP address entered by the internet service provider (ISP) as well as the date and time of the subscription, so that we can detect possible fraudulent use of your e-mail address in the future. We will only use the data we collect for the newsletter subscription for advertising contacts via the newsletter. You can unsubscribe from the newsletter at any time by clicking on the link in the newsletter or by sending a corresponding message to the responsible person mentioned at the beginning. After unsubscribing, we will remove your e-mail address immediately from our newsletter distributor, unless you have expressly agreed to our continued use of your data or we have reserved the right to make lawful use of your data retrospectively, which we will inform you of in this statement.

This is in accordance with Article 21 of Act 34/2002 of 11 July 2002 on information society services and electronic commerce with regard to advertising and commercial communications by electronic means.


7 Data processing for order processing

In order to process your orders, we work with the following service providers, who help us to execute all or part of the contracts concluded. We will pass on certain personal data to these service providers in accordance with the following information.

We will pass on the personal data we collect for contract processing to the transport companies contracted for the shipment, insofar as this is necessary for the delivery of the goods. We will transfer your payment data for payment processing to the contracted credit institution, insofar as this is necessary for payment processing. If we use payment service providers, we will expressly inform you of this. The legal basis for the transfer of data in this regard is Article 6(1)(b) of the GDPR.


8 Online marketing

This website uses the online advertising programme "Google AdWords" and, within Google AdWords, conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use the Google AdWords offer to increase the visibility of our attractive offers on external websites with the help of advertising media (so-called Google AdWords). In connection with the campaign data, we are able to determine the success of the individual advertising campaigns. In doing so, we aim to show you advertising that is of interest to you, to design our website in a more attractive way and to achieve a fair calculation of the advertising costs.

The conversion tracking cookie is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer. These cookies usually lose their validity after 30 days and are not used to identify a user personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can detect that the user has clicked on the advertisement and has been redirected to this page. Each Google AdWords customer gets a different cookie. Therefore, cookies cannot be tracked across AdWords customers' websites. The information collected with the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. Customers get the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not get personally identifiable information about the users. If you do not want to take part in tracking, you can block this use by deactivating the Google conversion tracking cookie in your browser settings. By doing so, you will not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interests in delivering targeted advertising in accordance with Article 6(1)(f) of the GDPR.

Google LLC, based in the USA, is certified for the US-European "Privacy Shield" data protection agreement, which ensures compliance with the data protection level in force in the EU.

Further information on Google's privacy policy can be found at

You can permanently deactivate cookies for advertisements by making the corresponding settings in your browser software or by downloading and installing the browser plugin which you can find under the following link:

Please note that if you deactivate the use of cookies, you may not be able to use some functions of the website or may only be able to use them to a limited extent.


9 Tools and Miscellaneous

9.1 Google Maps

On our website we use Google Maps (API of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive maps showing geographical information. By using this service, you will be shown our location to facilitate your route to us.

When you view the subpages on which the Google Maps map is integrated, information about your use of our website (e.g. your IP address) will already be transmitted to and stored on a Google server in the USA. This is irrespective of whether Google provides a user account with which you are logged in or whether no account exists. If you are logged in to Google, your data will be assigned to your account directly. If you do not want this data to be assigned to your Google profile, you must log out before clicking the button. Google saves your data (including the data of users who are not logged in) as usage profiles and evaluates them. This evaluation takes place in accordance with Article 6(1)(f) of the GDPR on the basis of Google's legitimate interests in displaying personalised advertising, conducting market research or configuring its website to meet users' needs. You have the right to revoke the creation of these user profiles. To exercise this right, you should contact Google.

Google LLC, based in the USA, is certified for the US-European "Privacy Shield" data protection agreement, which ensures compliance with the data protection level in force in the EU.

If you do not agree to the transfer of your data to Google when using Google Maps, you also have the option of deactivating the Google Maps web service completely by disabling the JavaScript application in your browser. Google Maps and thus the map display on this website can no longer be used.

You will find Google's terms of use at and additional terms of use for Google Maps at

Comprehensive information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"):

9.2 Trusted Shops Trustbadge

We have integrated the Trusted Shops Trustbadge on this website in order to display our Trusted Shops seal of approval and to offer the Trusted Shops membership to purchasers after ordering.

This serves, in the context of a satisfaction of interests, to safeguard our overriding legitimate interests in optimising the marketing of our offer in accordance with Article 6(1)(f) of the GDPR. The Trustbadge and the services promoted with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is activated, the web server automatically saves a server log file containing, for example, your IP address, the date and time of the query, the amount of data transferred and the provider making the query (access data) and documenting the query. This access data is not analysed and is automatically overwritten no later than seven days after the end of the visit to the site.

Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.


10 Rights of the data subject

10.1 The applicable data protection regulations grant you extensive rights vis-à-vis the controller of your personal data (rights of information and intervention, which we inform you of below:

    Right of access under Article 15 of the GDPR

    Right of rectification under Article 16 of the GDPR

    Right of erasure pursuant to Article 17 of the GDPR

    Right of restriction of processing pursuant to Article 18 of the GDPR

    Right of information pursuant to Article 19 of the GDPR

    Right to data portability pursuant to Article 20 of the GDPR

    Right to withdraw consent given pursuant to Article 7(3) of the GDPR

    Right to lodge a complaint pursuant to Article 77 of the GDPR.

The OWNER OF THE WEBSITE informs the user of the possibility of exercising their rights of access, rectification, cancellation and opposition by means of a written request together with legally valid proof such as a photocopy of their ID card or equivalent addressed to the OWNER OF THE WEBSITE at the following address: AV POLARIS CC RIVIERA MIJAS COSTA 29649 MALAGA.

The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly to the Owner, which means that any customer, subscriber or collaborator who has provided their data at any time may contact the Owner and request information about the data stored and how it was obtained, request the rectification of the same, request the portability of their personal data, oppose the processing, limit its use or request the cancellation of such data in the files of the Owner.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data concerning you is in breach of the Regulation.

10.2 Right to object

If we process your personal data in the context of a balancing of interests based on our overriding legitimate interests, you have the right at any time to object to this processing with future effect on the grounds that arise from your specific situation.

If you exercise your right to object, we will terminate the processing of the data in question. However, we reserve the right to process the data further if we can demonstrate compelling legitimate grounds which override your interests and fundamental rights and freedoms, or if the processing serves to assert, exercise or defend rights.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of the personal data in question for such marketing purposes. You can exercise your objection as described above.

If you exercise your right to object, we will terminate the processing of the data in question for direct marketing purposes.


11 Retention period of your personal data

The retention period for personal data is calculated on the basis of the relevant statutory retention period (e.g. the retention periods under tax and commercial law. After this period has elapsed, the data will be routinely deleted, provided that it is no longer required to perform or prepare the contract, or that there is no longer any legitimate interest on our part in continuing to store it.


12 Data quality

The WEBSITE OWNER warns the user that, except for the existence of a legally constituted representation, no user may use the identity of another person and communicate their personal data, so that the user must at all times bear in mind that they may only include personal data corresponding to their own identity and which are adequate, relevant, current, accurate and true. To this end, the user shall be solely liable for any direct and/or indirect damage caused to third parties or to the OWNER OF THE WEBSITE, by the use of personal data of another person, or their own personal data when they are false, erroneous, not current, inadequate or irrelevant.

Likewise, the user who uses the personal data of a third party shall be liable to the latter for the obligation of information established in article 5.4 of the LOPDGDD for when the personal data have not been obtained from the interested party, and/or for the consequences of not having informed him/her.


13 Updating of policies

The OWNER OF THE WEBSITE will modify, without prior notice, this privacy policy whenever necessary to adapt it to any legislative, regulatory, jurisprudential, administrative change or in order to adapt this policy to the instructions issued by the Data Protection Agency or legitimate object of any modification of this policy, notwithstanding the foregoing, will be published and warned on the website of the OWNER OF THE WEBSITE.

In view of the foregoing, the WEBSITE OWNER recommends that users read these policies

periodic reading of these policies in order to be aware of any changes that may be made to them.

made to them.

Product added to wishlist
Product added to compare.