Privacy policy

BLOCKWORX GmbH, Wellishöfe 6 B, 79215 Elzach, Deutschland. Represented by the managing director Adrian Ziser. Register court Amtsgericht Freiburg, HRB 717547. VAT ID DE317655924. Contact: info@blockworx.de, https://blockworx.de. For PharmHub: info@pharmhub.de.

No data protection officer has been appointed (below the statutory threshold). Please address data protection requests to info@blockworx.de.

For the website, the customer account and the contract, BLOCKWORX is the controller. For all data a pharmacy processes in PharmHub (employee, customer and patient data), the pharmacy is the controller and BLOCKWORX is the processor under Art. 28 GDPR on the basis of a data processing agreement.

Server logs (IP address, time, page requested) are kept for operational security (access log on the server 14 days, central logging 31 days, its backup 90 days), Art. 6 (1)(f) GDPR. Cookies are strictly technically necessary (pharmhub_session, pharmhub_csrf). No analytics, no tracking, no third-party scripts.

Name, e-mail address and message are processed to handle the enquiry, Art. 6 (1)(b) GDPR. Deleted once the enquiry is closed, at the latest after 12 months.

When you book through a pharmacy's booking page, the pharmacy, as controller, processes your name, contact details and appointment data; for pharmaceutical services and vaccinations, health data under Art. 9 (2)(a) GDPR on the basis of the explicit consent given in the booking dialogue (recorded with its version). BLOCKWORX stores this data solely on behalf of the pharmacy.

For video consultations, the pharmacy you booked the appointment with is the controller. BLOCKWORX runs the video room on its behalf as a processor and does not process the data for its own purposes. The live transmission runs on a video server operated by BLOCKWORX at netcup in Nuremberg.

During a video consultation, picture and sound, a shared screen if any, the name shown in the room and technical connection data such as the IP address are processed. For the waiting room, the appointment stores whether you and whether the pharmacy are in the room and since when you have been waiting; this is deleted together with the appointment. The legal basis is Art. 6 (1)(b) and Art. 9 (2)(h) GDPR in conjunction with section 22 (1) no. 1 (b) BDSG (advice by pharmaceutical staff bound by professional secrecy).

Video consultations are currently not recorded; the recording function is not enabled. Picture and sound are only transmitted live and are not stored as a recording.

BLOCKWORX runs the video server itself on its own server in Germany; no third-party video service is used. Your browser only connects to the PharmHub address for this. Picture and sound are encrypted on the way between your device and the video server. There is no end-to-end encryption: the video server decrypts picture and sound to forward them to the other side, but does not store them.

Chat messages in the video consultation go through PharmHub, not through the video server. Without your consent they only exist for this conversation and are deleted as soon as the consultation has ended, at the latest shortly after the appointment's time window. If the pharmacy has switched storage on, the page asks you before you enter the room whether the chat may be stored with the appointment, and states the purpose, the duration, who can read it and how to withdraw. Your answer is recorded with its time and text version. The legal basis for storage is your explicit consent under Art. 9 (2)(a) GDPR; it is voluntary, and the consultation takes place without it as well.

A stored chat is kept for as long as the pharmacy has set (by default four years after the appointment, at most ten years) and is then deleted automatically. Only pharmacy staff with access to the appointment can read it; every read is logged. Messages cannot be changed afterwards. If your customer record is erased at your request, the chat messages are erased as well.

You can withdraw your consent at any time with effect for the future: on the "Manage booking" page with your booking reference and your manage code, or in your customer account. There you can also see the stored messages. Withdrawing deletes them.

Contract data is processed under Art. 6 (1)(b) GDPR. Payment processing: Stripe Payments Europe Ltd., Dublin. BLOCKWORX never receives complete payment data. When a pharmacy concludes the data processing agreement electronically in PharmHub, we store the accepting person's name, e-mail address, time, IP address and browser identifier as proof of the conclusion of the contract, Art. 6 (1)(b) and (f) GDPR.

netcup GmbH (application servers and database as well as video consultations – live transmission, data centre in Nuremberg; the servers’ disks are not encrypted); Hetzner Online GmbH (storage of training videos without server-side encryption, as well as a copy of the client-side encrypted backup, Object Storage Nuremberg; storage for future pDL video recordings is prepared, but the recording function is currently not enabled); Backblaze Inc. (document storage and encrypted backups, stored with server-side encryption, data centre in the EU, standard contractual clauses).

E-mail delivery and error logging run on BLOCKWORX's own servers. App push notifications are delivered via Google Firebase Cloud Messaging on Android and via Apple Push Notification service on iOS (device token only, no content in either case).

AI-assisted features in the QM module are switched off for every pharmacy by default and are only used if the pharmacy explicitly enables them. In that case we use the following additional processors (sub-processors under Art. 28(4) GDPR): Cortecs GmbH, Vienna, Austria (text generation, processing in the EU, no retention of requests - zero data retention); Berget AI AB, Stockholm, Sweden (text generation as a fallback provider if Cortecs is unavailable); Microsoft Ireland Operations Ltd. with Azure OpenAI in the EU data zone (embeddings for document search). Only content from the QM module is transmitted, i.e. QM documents and the free text entered there into AI features. Patient data is never transmitted. QM documents marked as confidential are never processed for document search and are only passed to an AI feature when an authorised member of their circle triggers this themselves.

Contract data for the commercial and tax retention periods; pharmacy data as instructed by the pharmacy; chats from video consultations as described in section 6; operational logs centrally 31 days, their backup 90 days, web server access log 14 days, metrics and error reports 30 days.

You have the right to access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent given.

Complaints: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

Encrypted transport, role-based access, tenant separation at database level, tamper-evident logging of access to health data.