Log files

Whenever you use the internet, your browser automatically sends certain information that we store in what are known as log files.

We store the log files for the purposes of investigating disruptions and for security reasons (e.g. to investigate attempted attacks) for as long as necessary for their stated purposes, after which time they are deleted or anonymised. Log files that must continue to be kept for evidence purposes are not deleted until the final resolution of the incident, and may be passed on to investigating authorities on a case-by-case basis. The storage of log files serves our legitimate interest in the smooth, correct operation of our website.

In particular, the log files contain the following information:

• IP (Internet Protocol) address of the device used to access the website;
• Address of the website you were on before you visited our website (the referrer URL);
• Name of the service provider used to access the website;
• Name of the files and information accessed;
• Date, time and duration of your visit;
• Amount of data transferred;
• Operating system and information about your web browser, including your installed add-ons (e.g. for a password manager);
• HTTP status code (e.g. ‘Request successful’ or ‘Requested file not found’).

User analysis

The website victoria-apotheke.ch uses analytics tools (such as Google Analytics). The information collected about how you use websites is stored on servers of the tool provider.

The analytics tools enable us to collect and analyse data about how visitors use our website. This way, we can determine when page visits take place and from what region.

Other collected data would include, for example, the names of files accessed, the browser used, the features used or the time spent on the website.

Victoria Apotheke has a legitimate interest in the anonymised analysis of user behaviour in order to optimise both its website and its advertising. Where prior consent is requested when you visit our website (e.g. consent for the storage of cookies), the processing of data is based on your consent, which you can withdraw at any time with future effect.

For more detailed information about the analytics tools we use, please see our cookie policy Cookie Policy Close .

Disclosure of data

As a rule, we only disclose your personal data to other controllers if necessary for the performance of a contract, if we or the third party has an overriding legitimate interest in the disclosure of if you have given your consent.

Furthermore, data can be sent to other controllers if we are obliged to do so on the basis of the statutory provisions or an enforceable official or court order.

Service providers

We engage external service providers with tasks such as marketing services, development operations, data hosting, shipping and debugging. We have selected these service providers with care and monitor them on a regular basis, especially how carefully they handle and secure the data in their possession. We have all our service providers undertake to maintain confidentiality and adhere to the statutory provisions.

Disclosure to recipients outside of the EEA

We may also pass personal data on to recipients based outside the EEA in what are known as third countries. In this case, prior to the transfer, we ensure either that the recipient has an adequate level of data protection through corresponding contractual agreements or, if necessary, that we have your consent to the transfer.

Information about data storage: storage location and retention periods

Your data is primarily stored in Switzerland and Germany. Due to the variety of service providers, data is also stored in other EU countries and in the USA.

As a rule, we retain your data for as long as necessary to provide our offering and the related services or for as long as we have a legitimate interest in retaining the data (e.g. even after the performance of a contract, we might still have a legitimate interest in mail marketing). Afterwards, we will delete your personal data, excluding the data we need to retain in order to comply with legal obligations (e.g. retention periods under tax and commercial law require us to retain documents such as contracts and invoices for a certain period of time).

Marketing tools

We use various tools for marketing activities. When these tools are used, your browser might establish a direct connection with the server of the tool in question. Consequently, the provider of the tool is informed that your browser has accessed the corresponding page on our website. Likewise, log files similar to the log files described in section 5 are sent to the provider’s server and potentially stored there. The provider or its server may be based outside of Switzerland or the EU or EEA (such as in the USA).

The data transfer takes place via third-party cookies.

For more information about the purpose, scope, further processing and use of the data, please refer to our cookie policy Cookie Policy Close and the relevant general terms and conditions and data protection information.

Newsletter

The email address you used to subscribe to the newsletter or set up a customer account will be used to send you information about our products and services. You can object to this use at any time by clicking on the ‘Unsubscribe’ link in the email.

Security

Our employees and the service providers we engage are subject to non-disclosure obligations and are obliged to adhere to the provisions of the applicable data protection legislation.

We implement all necessary technical and organisational measures to guarantee an adequate level of protection and protect the data we manage from, in particular, the risks of unintentional or unlawful destruction, manipulation, loss, modification, unauthorised disclosure and unauthorised access.

Your rights

To exercise your rights, please use the details in section ‘Contact details’. In doing so, please make sure that we are able to clearly identify you.

Right to information and right of access

You are entitled to request information from us about the processing of your data. To do so, you can exercise a right of access with regard to the personal data concerning you that we are processing.

The data will be made available to you within 20 working days of our receipt of your request.

Right to rectification and erasure

You can demand that we rectify inaccurate data. Provided that the legal requirements are met, you can demand the completion or erasure of your data.

To demand the erasure of your data, please send your request in writing or contact us by phone. See Section contact for contact details.

This does not apply to data that is required for billing or accounting purposes or is subject to a statutory retention obligation.

The data will be erased within 20 working days of our receipt of your request.

Data portability

Provided that the legal requirements are met, you are entitled to receive the data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, have the data transmitted to a third party.

Right to object

Right to object to direct marketing

Furthermore, you can object to the processing of your personal data for marketing purposes at any time. Please note that, for organisational reasons, your objection might overlap with the use of your data as part of an ongoing campaign.

Objection to data processing on the legal grounds of a legitimate interest

Moreover, you are entitled to object to the processing of data by us at any time if the processing is based on the legal grounds of a legitimate interest. In this case, we will stop processing your data unless, in accordance with the statutory regulations, we are able to demonstrate compelling legitimate reasons to continue processing the data that override your rights.

Withdrawal of consent

If you have given us consent to process your data, you can withdraw it at any time with future effect. This does not affect the lawfulness of data processing up to the point of your withdrawal.

Amendments to the privacy policy

We reserve the right to update our security and data protection measures. In these cases, we will also update our privacy policy accordingly.