General Notice and Mandatory Information

Name of the Responsible Party

The responsible party for data processing on this website is:

Stefan Wyss

Langnaustrasse 30

3436 Zollbrück

 

The responsible party decides, alone or jointly with others, on the purposes and means of processing personal data (e.g., names, contact details, etc.).

Thank you for your interest in our company. We protect your privacy and your personal data. The processing of your personal data is limited to the data necessary for our drugstore operations or, if you have given your verbal consent, for targeted marketing measures.

We collect, process, and use your personal data in accordance with the content of this Privacy Policy and the applicable data protection regulations, in particular the new Swiss Data Protection Act (nDSG). This Privacy Policy regulates which personal data we collect, process, and use about you. We therefore ask you to read the following information carefully.

 

Collection of personal data and purpose of processing

Personal data within the meaning of this privacy policy is all information relating to an identified or identifiable natural person (hereinafter “data subject”). We collect the following personal data from you on a case-by-case basis and depending on the purpose:

– Title

– Last name, first name

– Gender

– Address

– Email address

– Telephone numbers

– Date of birth

– IP addresses (only when using our website)

– Other data related to our services

 

Purpose of use

We only store your data if:

– we have registered you as a customer in our merchandise management system.

– we have been authorized to order something for you or on behalf of third parties.

– you have concluded a loan or rental agreement with us.

– we have registered you as an invoice recipient.

– we are legally obliged to do so.

– you would like to be informed about our offers, courses, and events and we may send you our newsletter, as well as for other marketing purposes.

 

Principles of our data processing

When processing data, we adhere to the principles of legality, proportionality, purpose limitation, transparency, and data security.

 

Data security

We protect our systems through technical and organizational measures against loss, destruction, access, alteration, or distribution of your data by unauthorized persons.

 

Disclosure of your personal data

We do not disclose your personal data to third parties unless we are authorized or required to do so by law and/or official or court orders.

However, our IT service providers may access, process, or delete your personal data during maintenance work or a support incident. We use this software in our day-to-day work.

All service providers with whom we work as a pharmacy/drugstore are also subject to Swiss data protection law and therefore to the same principles and legal framework.

 

Retention period

We generally only retain your personal data for as long as necessary for the purposes for which it was collected in accordance with this privacy policy. However, we may be legally obligated to store certain data for a longer period of time. In this case, we will ensure that your personal data is treated in accordance with this privacy policy throughout the entire period.

 

Changes to the Data Protection Policy

We reserve the right to change this data protection policy at any time with future effect, taking into account the legal requirements of the Swiss Data Protection Act.

 

Revocation of your consent to data processing

Some data processing operations are only possible with your express consent. You can revoke your previously granted consent at any time. An informal email notification is sufficient for revocation. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

 

Right to lodge a complaint with the competent supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a data protection violation. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is headquartered. The following link provides a list of data protection officers and their contact details:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

 

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. This data will be provided in a machine-readable format. If you request that the data be transferred directly to another controller, this will only be done if technically feasible.

 

Right to information, correction, blocking, and deletion

You have the right at any time, within the scope of the applicable legal provisions, to free information about your stored personal data, the origin of the data, its recipients, and the purpose of the data processing, and, if applicable, the right to correction, blocking, or deletion of this data. You can contact us at any time regarding this and other questions regarding personal data using the contact details listed in the legal notice.

 

Use of Instagram

Our website uses so-called social plugins from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

 

Right to access, correct, block, and delete data When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page on our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plug-ins, for example, by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.

For information about the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and settings options to protect your privacy, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plug-in from loading using add-ons for your browser, e.g., the script blocker “NoScript” (http://noscript.net/).

 

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address bar of your browser and the lock symbol in the browser bar.

 

Server Log Files

The website provider automatically collects and stores information that your browser automatically transmits to us in server log files. This includes:

  • Page visited on our domain
  • Date and time of the server request
  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • IP address

 

This data is not merged with other data sources. The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data to fulfill a contract or to take pre-contractual measures.

 

Data transfer upon conclusion of a contract for the purchase and shipping of goods

Personal data will only be transferred to third parties if necessary for contract processing. Third parties can be, for example, payment service providers or logistics companies. Further transfer of data will not take place or will only take place if you have expressly consented to it.

The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data to fulfill a contract or to take pre-contractual measures.

 

Cookies

Unsere Website verwendet Cookies. Das sind kleine Textdateien, die Ihr Webbrowser auf Ihrem Endgerät speichert. Cookies helfen uns dabei, unser Angebot nutzerfreundlicher, effektiver und sicherer zu machen.

Einige Cookies sind “Session-Cookies.” Solche Cookies werden nach Ende Ihrer Browser-Sitzung von selbst gelöscht. Hingegen bleiben andere Cookies auf Ihrem Endgerät bestehen, bis Sie diese selbst löschen. Solche Cookies helfen uns, Sie bei Rückkehr auf unserer Website wiederzuerkennen.

Mit einem modernen Webbrowser können Sie das Setzen von Cookies überwachen, einschränken oder unterbinden. Viele Webbrowser lassen sich so konfigurieren, dass Cookies mit dem Schließen des Programms von selbst gelöscht werden. Die Deaktivierung von Cookies kann eine eingeschränkte Funktionalität unserer Website zur Folge haben.

Das Setzen von Cookies, die zur Ausübung elektronischer Kommunikationsvorgänge oder der Bereitstellung bestimmter, von Ihnen erwünschter Funktionen (z.B. Warenkorb) notwendig sind, erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Als Betreiber dieser Website haben wir ein berechtigtes Interesse an der Speicherung von Cookies zur technisch fehlerfreien und reibungslosen Bereitstellung unserer Dienste. Sofern die Setzung anderer Cookies (z.B. für Analyse-Funktionen) erfolgt, werden diese in dieser Datenschutzerklärung separat behandelt.

 

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of this web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies.” These are small text files that your web browser stores on your device and enable an analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server is usually located in the USA.

Google Analytics cookies are set on the basis of Art. 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, where applicable, our advertising.

IP Anonymization

We use Google Analytics in conjunction with the IP anonymization function. This ensures that Google shortens your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent cookies from being set by your web browser. However, some features of our website may be restricted. You can also prevent Google from collecting data relating to your website usage, including your IP address, and subsequently processing it. This is possible by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set that prevents your data from being collected on future visits to our website: Deactivate Google Analytics.

Details on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing

In order to fully comply with statutory data protection requirements, we have concluded a data processing agreement with Google.

Demographic characteristics in Google Analytics

Our website uses the “demographic characteristics” feature of Google Analytics. This allows reports to be created that contain information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third parties. It is not possible to assign the data to a specific person. You can deactivate this feature at any time. This is possible via the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained in the “Objection to data collection” section. 

PayPal

Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you pay with PayPal, the payment details you enter will be transmitted to PayPal.

Your data will be transmitted to PayPal on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). You can revoke your previously granted consent at any time. Past data processing operations remain in effect upon revocation.

 

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. As part of our online advertising program, we use conversion tracking. After you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used to personally identify users. The cookie allows Google and us to recognize that you clicked on an ad and were redirected to our website.

 

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customer websites. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that allows users to be personally identified. If you do not wish to participate in tracking, you can object to its use. The conversion cookie must be deactivated in the browser’s user settings. This means that it will not be included in the conversion tracking statistics.

Conversion cookies are stored on the basis of Art. 6 (1) (f) GDPR. As website operators, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

Details about Google AdWords and Google Conversion Tracking can be found in Google’s privacy policy: https://www.google.de/policies/privacy/.

With a modern web browser, you can monitor, restrict, or prevent the use of cookies. Deactivating cookies may result in limited functionality on our website.

 

Google Web Fonts

Our website uses web fonts from Google. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The use of these web fonts makes it possible to present our website to you in the way we requested, regardless of which fonts are available locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and the associated transfer of your data to Google. This includes your IP address and which page you visited on our site. The use of Google Web Fonts is based on Art. 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in the optimal display and transmission of our website.

Google is certified for the US-European data protection agreement “Privacy Shield.” This data protection agreement is intended to ensure compliance with the level of data protection applicable in the EU.

Details about Google Web Fonts can be found at: https://www.google.com/fonts#AboutPlace:about and further information in Google’s privacy policy: https://policies.google.com/privacy/partners?hl=de

Source: Data protection configurator from mein-datenschutzbeauftragter.de