Last updated: March 23, 2026

1. Controller

The controller responsible for data processing on this website is:

Maison Medical Services
Mohamed Abdeltawab Fekry Mohamed Amyn
Mönchenwerther Straße 12
40545 Düsseldorf
Germany

Phone: +49 174 400 88 80
Email: contact@maisonmedical.de

2. General Information on Data Processing

We take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, contact us, or otherwise interact with us online.

We process personal data only to the extent necessary to provide a functional website, respond to inquiries, and operate our business in a lawful manner. Personal data is processed in accordance with the General Data Protection Regulation (GDPR), including on the basis of contractual necessity, legal obligations, legitimate interests, and consent where applicable. (EUR-Lex)

3. Categories of Personal Data We May Process

Depending on how you use the website, we may process the following categories of personal data:

  • identification and contact data, such as your name, email address, and telephone number
  • communication data, such as the contents of messages you send to us
  • technical usage data, such as IP address, browser type, operating system, access time, and pages visited
  • inquiry or request data, where you submit information to us through forms or email
  • where voluntarily submitted by you, health-related or other sensitive information

Health-related data is considered a special category of personal data under the GDPR and may only be processed if a specific legal condition under Article 9 GDPR applies. (EUR-Lex)

4. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

a) To provide the website and ensure technical security

When you access our website, certain technical data may automatically be processed in server log files in order to ensure website functionality, system security, and protection against misuse.

The legal basis is our legitimate interest in the secure and reliable operation of the website pursuant to Article 6(1)(f) GDPR. (EUR-Lex)

b) To respond to inquiries

If you contact us by email or through a contact form, we process your data in order to handle your request and communicate with you.

The legal basis is Article 6(1)(b) GDPR where your request relates to pre-contractual measures or services requested by you, and otherwise Article 6(1)(f) GDPR for legitimate business communication. (EUR-Lex)

c) To comply with legal obligations

We may process personal data where necessary to comply with legal, professional, tax, or regulatory obligations.

The legal basis is Article 6(1)(c) GDPR. (EUR-Lex)

d) To process sensitive data voluntarily provided by you

If you voluntarily submit health-related or other sensitive personal data, we will process such data only where legally permitted, for example on the basis of your explicit consent or another applicable condition under Article 9 GDPR. (EUR-Lex)

5. Website Access and Server Log Files

When you visit this website, technical data may automatically be collected and stored in server log files. This may include:

  • IP address
  • browser type and browser version
  • operating system
  • referrer URL
  • date and time of access
  • pages accessed
  • requesting provider

This data is processed for technical and security purposes and to ensure the stability of the website.

6. Contact by Email or Contact Form

If you contact us by email or through a contact form, the data you provide will be processed solely for the purpose of handling your request and any follow-up communication.

The legal basis is Article 6(1)(b) GDPR and/or Article 6(1)(f) GDPR. (EUR-Lex)

If you contact us regarding medical or health-related matters, please note that such information may constitute special category data under Article 9 GDPR. (EUR-Lex)

7. Recipients of Personal Data

We may share personal data with recipients only where necessary, for example with:

  • IT service providers
  • professional advisers
  • public authorities, where legally required

Where third parties process data on our behalf, this is done on the basis of a data processing agreement where required by law. (EUR-Lex)

8. International Data Transfers

If personal data is transferred to recipients outside the European Economic Area, this will only take place if the legal requirements for such transfers are met, for example through an adequacy decision or appropriate safeguards under the GDPR. (EUR-Lex)

9. Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law. (EUR-Lex)

10. Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal conditions:

  • the right of access
  • the right to rectification
  • the right to erasure
  • the right to restriction of processing
  • the right to data portability
  • the right to object to processing
  • the right to withdraw consent at any time, where processing is based on consent
  • the right to lodge a complaint with a supervisory authority

These rights are provided for in the GDPR. (EUR-Lex)

To exercise your rights, please contact us at:

Maison Medical Services
Mohamed Abdeltawab Fekry Mohamed Amyn
Mönchenwerther Straße 12
40545 Düsseldorf
Germany
Email: contact@maisonmedical.de
Phone: +49 174 400 88 80

11. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law. (EUR-Lex)

The competent supervisory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de (ldi.nrw.de)

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access. (EUR-Lex)

13. Professional Information

Professional title: Pharmacist
Country of qualification: Germany

Competent Chamber:
North Rhine Chamber of Pharmacists
Poststraße 4
40213 Düsseldorf
Germany (aknr.de)

Applicable professional regulations:

  • German Pharmacy Act (Apothekengesetz – ApoG)
  • German Ordinance on the Operation of Pharmacies (Apothekenbetriebsordnung – ApBetrO)

14. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time so that it always complies with current legal requirements or reflects changes to our website or services. The version published on this website shall apply.