Data-Privacy Policy

1. General Information

The following information provides an overview of what happens to your personal data when you visit our website or create an account with DocID^®. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our privacy policy.

2. Data Processor

The data processing on this website is carried out by the website operator:

8awake GmbH
Konradstrasse 2
D-80801 Munich

Our current contact details can also be found in the legal notice (Impressum) on this website.

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Data Protection Officer of 8awake GmbH: A. Knorr.

Email: dataprivacy@8awake.com
Phone: +49 (0)89 248832495

If you have any questions about data protection or the processing of your personal data, you can contact our data protection officer at any time.

3. Data Collection of our Services

3.1 Collection of Personal Data

Some of your data is collected when you provide it to us, for example, by creating a DocID^® account or entering data into a contact form.

3.2 Automatic Data Collection

Other data is automatically collected by our IT systems when you visit the website. This primarily includes technical data (e.g., internet browser, operating system, time of page access). This data is collected automatically as soon as you access our website.

4. Purpose of Data Collection

4.1. Access to Content for Healthcare Professionals

DocID^® users must provide proof of their status as members of the medical or healthcare professions. This verification is based on the personal data provided and stored by the user on DocID^®. Once verification is completed, users are granted access to content that, according to the German Act on Advertising in the Healthcare Sector (Heilmittelwerbegesetz, HWG), may only be made available to healthcare professionals. This includes, among other things, information on prescription-only medicines. The processing of personal data in this context is carried out for the performance of a contract (Article 6(1)(b) GDPR) and for compliance with legal obligations (Article 6(1)(c) GDPR).

4.2. Data Transfers When Signing In to Partner Services

When you use DocID^® to sign in to a partner service, we show you before redirection which company operates the service and which categories of data it requests. We transfer data only to that company and only to the extent required for the sign-in or voluntarily authorized by you. The relevant company is responsible for subsequent processing within its partner service; its linked terms of use and privacy notice also apply.

For the basic sign-in requested by you, we transfer your unique DocID^® identifier (sub), your profession identifier (profession_id), your discipline identifier (discipline_id), and your professional verification status. Your name, email address, and phone number are not part of this basic data. To the extent necessary to provide the requested authentication and access-eligibility service, the processing and transfer of basic data is based on Article 6(1)(b) GDPR.

If a partner additionally requests the profile, email, or phone scopes, we transfer the associated data only after your explicit consent under Article 6(1)(a) GDPR. The profile scope includes title, first and last name, and gender; the email address and phone number are transferred only for the respective requested scope. If you do not consent, these optional details are omitted and the basic sign-in and access check remain available. If a partner later requests another optional category of data, it is shown to you again before it is transferred for the first time.

Separately, the partner company may ask for voluntary marketing consent. This may cover the processing of professional profile and contact data, professional interests, interactions with digital services, and event participation in order to provide relevant information and to contact you by email and phone, including related profiling. The legal basis is your consent under Article 6(1)(a) GDPR and, where applicable, the law governing electronic communications and direct marketing. Refusal does not affect the basic sign-in.

Marketing consent that you give when registering for an event is taken into account for the same company under the same marketing purpose. Data collected by the partner company independently of DocID^®, for example through its own CRM or at an event, is governed by the partner company’s own legal basis and privacy notice.

We document the grant, scope, modification, and withdrawal of authorizations and consents and, for basic authorizations, their use for sign-in where this is necessary to demonstrate lawful processing and comply with legal obligations. Evidence may remain stored after withdrawal for the required accountability and limitation periods, but it may not be reused for the withdrawn purpose.

You can review and withdraw your company-specific authorizations and consents at any time in the Preference Center. Marketing permissions for email and phone can also be withdrawn separately there. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before withdrawal. After withdrawal, no further optional data is transferred on the basis of the withdrawn consent. Withdrawing the basic authorization may mean that signing in to the relevant partner service is no longer possible. You may also exercise rights relating to data already held by the partner company directly against that company.

4.3. Analysis of Marketing Measures for Partner Services

We evaluate campaign interactions to provide website operators with campaign reports, including aggregated statistics. Underlying click records are not necessarily anonymous. The Google Ads click-tracking service is described in section 6.4. Separate sign-in, professional verification and transfers of profile information remain subject to the corresponding sections of this notice.

4.4. Personalized User Experience and Marketing

Within its own platform, DocID^® may process account, professional, and usage data where necessary to provide the agreed functions (Article 6(1)(b) GDPR) or where there is an overriding legitimate interest in presenting the service in a user-oriented manner (Article 6(1)(f) GDPR). Voluntary marketing communications, the use of optional contact details, and related profiling are carried out only on the basis of valid consent. You may withdraw this consent at any time with effect for the future and may object to direct marketing at any time.

5. Use of Cookies

This website make use of cookies. They are used to make our services more user-friendly, effective, and secure. Cookies are small text files stored on your device by your browser.

You can configure your browser to notify you when cookies are set, to allow cookies only in specific cases, to exclude cookies for certain cases or in general, and to automatically delete cookies when closing the browser. Disabling cookies may limit the functionality of this website.

6. Analytics and Advertising Tools

6.1 Google Analytics

This website uses features of Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies to analyze your use of the website. Information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is enabled on this website, your IP address will be shortened by Google within the European Union or in other contracting states of the European Economic Area before being transmitted. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.

Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage. You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we point out that in this case you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at: Browser-Plugin.

6.2 Google Ads

We use Google Ads, an online advertising program from Google Inc. Google Ads uses cookies to display relevant ads. Google uses this information to generate reports on the effectiveness of ads and to optimize them. You can disable the use of cookies for these purposes by visiting: Google Ads Settings.

6.3 META Ads (ehemals Facebook Ads)

We also use META Ads, an advertising service of META Platforms Inc. META Ads allows us to serve targeted advertisements. Cookies are used on our website to analyze user behavior and deliver personalized ads. For more information about how META uses your data, please see META's privacy policy: Privacy-Policy. You can object to the collection of data via META Ads and manage personalised ad settings at: Meta Ads Settings.

6.4 Google Ads click tracking for website operators

8awake GmbH provides the DocID^® click-tracking service to website operators for redirection and campaign measurement. Depending on the campaign configuration, requests contain the time, destination URL and its parameters, campaign and click identifiers, keywords, device information and browser information. These values originate from the advertiser’s configuration, Google and the requesting browser. Connection data, including IP addresses, may also be processed as described in section 7.

Click identifiers and technical information may be personal data; the absence of a name does not make them anonymous. Campaign reporting is provided to the website operator. This service is separate from account sign-in and our own advertising described in section 6.2. Google and the destination website process data under their respective privacy notices.

For questions about an advertiser’s campaign, contact the website operator. You can also contact dataprivacy@8awake.com. Information about your rights is provided in section 9.

Service and setup information

7. Server-Log-Dateien

The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

These data will not be combined with other PII data sources.

8. SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the browser's address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

9. Your Rights Regarding Your Personal Data

You have the right at any time to obtain, free of charge, information about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction, blocking, or deletion of this data. For this and any further questions about data protection, you can contact us at the address provided in the legal notice. Additionally, you have the right to lodge a complaint with the competent supervisory authority.

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to comply with current legal requirements or to reflect changes in our services. The updated privacy policy will apply to your next visit.

Last updated: September 7, 2026.