Privacy Policy
1. Who we are
This privacy policy explains how we process personal data when you visit the Swiss AlpenWell brand pages on swisspharmagroup.com and use our contact form.
Controller / contact for privacy matters (including for EU/EEA visitors):
Swiss Pharma Group AG
Rigistrasse 2, 6300 Zug, Switzerland
Phone: +41 41 266 07 65
Email: office@swisspharmagroup.com
Website: swisspharmagroup.com
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Scope of this policy
This policy applies to:
• Visits to our informational website (no user accounts, no online orders)
• Use of our contact form
• Website analytics (Google Analytics 4) and marketing tracking (Meta Pixel)
We do not offer direct online purchasing on this website and do not collect payment or account data.
3. Personal data we collect
3.1 Data you provide
When you use the contact form, we process:
• First name
• Last name
• Email address
• Your message
Providing this data is voluntary, but we cannot respond if you do not give us at least an email address and a message.
3.2 Data collected automatically (cookies, logs, analytics)
When you visit our website, we and our service providers may automatically collect:
• Device and browser information (e.g. browser type and version, operating system)
• IP address and approximate location (country/region)
• Date and time of access
• Pages visited, clicks, time spent on pages
• Referrer URL (the page you came from)
We use cookies and similar technologies for this (see Section 5).
We do not intentionally use this website to create detailed individual profiles, but analytics and marketing tools may track usage across websites when you consent.
⸻
4. Purposes and legal bases
We process your personal data for the following purposes and, where GDPR applies, on the following legal bases:
1. Responding to inquiries
• Purpose: to read, process and respond to your contact form submissions.
• Legal basis (GDPR):
• Art. 6(1)(b) GDPR (pre-contractual steps) where your inquiry relates to a contract or potential contract; and
• Art. 6(1)(f) GDPR (legitimate interests) in communicating with business partners, health professionals, and consumers.
2. Operating and securing the website
• Purpose: to operate the site, prevent misuse, ensure IT security (e.g. server logs, error logs).
• Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure and stable operation).
3. Website analytics (Google Analytics 4)
• Purpose: to understand how visitors use our website and to improve content and structure.
• Legal basis:
• For visitors in the EU/EEA and where required by law: Art. 6(1)(a) GDPR (consent via cookie banner).
• Otherwise: Art. 6(1)(f) GDPR (legitimate interest in simple usage statistics).
4. Marketing / measurement (Meta Pixel)
• Purpose: to measure the effectiveness of our marketing and, where applicable, to optimize campaigns on Meta platforms (e.g. Facebook, Instagram).
• Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner) where required.
You may withdraw your consent at any time with effect for the future (see Sections 5 and 8).
⸻
5. Cookies, analytics and tracking
5.1 Cookies and similar technologies
We use cookies and similar technologies on our website. These can be:
• Strictly necessary cookies: required for basic functionality of the site (e.g. security, load balancing).
• Analytics cookies: help us understand how the website is used.
• Marketing / tracking cookies: support our marketing activities (e.g. Meta Pixel).
You can manage your choices via the Squarespace cookie banner that appears when you first visit the site (and later via the banner’s settings link, if provided).
You can also block or delete cookies in your browser settings. This may affect the functionality of some parts of the site.
5.2 Google Analytics 4
We use Google Analytics 4 (GA4) to obtain aggregated statistics about website use. GA4 may use cookies and similar technologies to collect pseudonymized data such as page views, duration of visit, and general location.
Where required by law (especially for EU/EEA visitors), GA4 is only used with your consent via the cookie banner. You can withdraw consent at any time in the banner or by deleting cookies.
5.3 Meta Pixel
We use the Meta Pixel to measure and improve our marketing on Meta platforms (e.g. Facebook, Instagram). This technology can help us understand whether users visit our website after seeing or clicking on an ad on Meta platforms.
Where required, we only use Meta Pixel after you have given consent via the cookie banner.
Data collected through Meta technologies may also be processed by Meta Platforms in their own responsibility; for details, please refer to Meta’s own privacy notices.
⸻
6. How we process contact form data
When you submit the contact form:
1. Your data is processed by Squarespace’s form functionality.
2. The contents of the form are sent by email to our corporate email address (e.g. office@swisspharmagroup.com).
3. An internal admin or relevant team member reads your inquiry and responds via email or other communication channels you may use.
We do not use contact form data for email newsletters or mass marketing, and we do not currently run an email newsletter related to this website.
⸻
7. Recipients and international transfers
We may share or make data accessible to the following categories of recipients, to the extent necessary for the purposes described:
• Website provider / hosting: Squarespace
• Analytics provider: Google (Google Analytics 4)
• Marketing / tracking provider: Meta Platforms (Meta Pixel)
• IT service providers: as needed for operation, maintenance and security of our systems
• Authorities and legal advisors: where required by law or to enforce or defend legal claims
These service providers may be located in countries outside Switzerland and the EU/EEA, in particular the United States. Where such countries do not provide an adequate level of data protection, we take appropriate safeguards (e.g. standard contractual clauses or equivalent safeguards) where required by law.
⸻
8. How long we keep your data
We keep personal data only as long as necessary for the purposes for which it was collected or as long as required by law.
In particular:
• Contact form data / email correspondence:
• Typically kept for up to 3 years after the last relevant interaction, in line with limitation periods and our legitimate interests in documentation and communication, unless longer retention is required by statutory retention obligations (e.g. if communications become part of business records).
• Server logs and security-related data:
• Typically kept for a short period (usually a few weeks or months) and then deleted or anonymized, unless longer retention is necessary for security or evidence purposes.
• Analytics data:
• Retention periods are set within our analytics tools; data is retained only in aggregated or pseudonymized form where possible.
If you exercise your rights (e.g. deletion), we will also review whether continued storage is still necessary and lawful.
⸻
9. Your rights under GDPR and Swiss data protection law
To the extent provided by applicable law (especially GDPR and FADP), you have the following rights:
• Right of access: to know whether we process your personal data and to receive information about it.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to request deletion of your personal data, where legal grounds apply.
• Right to restriction of processing: to request that processing be limited in certain cases.
• Right to data portability (GDPR only): to receive personal data you provided in a structured, commonly used and machine-readable format and to transmit it to another controller, where technically feasible.
• Right to object:
• You can object at any time to processing based on our legitimate interests (Art. 6(1)(f) GDPR) on grounds relating to your particular situation.
• You can object at any time to the use of your data for direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time with effect for the future (e.g. via the cookie banner or by contacting us).
To exercise your rights, please contact us at: office@swisspharmagroup.com
You also have the right to lodge a complaint with a competent data protection authority:
• In Switzerland: with the Federal Data Protection and Information Commissioner (FDPIC).
• In the EU/EEA: with the data protection authority in your place of residence or work, or where the alleged infringement occurred.
⸻
10. Children’s data
Our website and products are not specifically targeted at children, and we do not intend to knowingly collect personal data from children.
If you believe that a child has provided personal data through our website, please contact us so we can delete such data where required.
⸻
11. Data security
We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
⸻
12. Changes to this privacy policy
We may update this privacy policy from time to time, for example if our website, services or applicable laws change.
The current version is always available on swisspharmagroup.com. The date at the top indicates when it was last updated.
⸻
13. How to contact us
For any questions or requests related to this privacy policy or to your personal data, please contact:
Swiss Pharma Group AG
Rigistrasse 2, 6300 Zug, Switzerland
Phone: +41 41 266 07 65
Email: office@swisspharmagroup.com