1. General

1.1. MediService AG, based in Zuchwil, Switzerland (hereinafter referred to as “MediS-ervice”) is responsible for data processing and is the operator of the MediService online platforms such as the customer account and the website.
1.2 In this privacy policy, MediService describes what MediService does with your per-sonal data
- when you use our online platforms,
- if you or your company purchase our services or products,
- if, conversely, we make use of services from you or your company,
- if you are otherwise in contact with us within the scope of a contract, communicate with us or otherwise have dealings with us.

You will be informed separately about the processing of your data, e.g., in declarations of consent, contractual terms, additional privacy policies, forms and notices. The privacy policy also describes how your personal data can be checked, corrected or deleted.

1.3. For reasons of readability, the masculine form has been used in the text, but the information refers to both genders.

2. Acknowledgement and application of the privacy policy
When you register or log in to your customer account, place an order, use a service or otherwise contact us, we may collect your personal data in accordance with section 3 be-low and use it in accordance with sections 4-6 below.

3. Personal data
3.1. The provision of your data is essential for placing an online order or purchasing services and products. We use this data for the purpose of processing the order, to perform our services and to improve them.
3.2. In order to process your order via your customer account, we also require your e-mail address and your mobile number in addition to the data you provided when sending the prescription.

4. Use of personal data
4.1. Data transmitted by the user to MediService will be used by MediService for the following purposes:
- to create a user account
- to process and execute orders
- To better understand your needs, e.g., through surveys, and to improve the services of MediService.
- for marketing purposes and maintaining relationships, e.g., to send you personalised offers for our products and services,
to evaluate the ordering behaviour of our customers and thus to improve our services, e.g. by dividing them into specific customer segments
4.2. Access to personal data is limited to those employees who need to know and process this data in accordance with the aforementioned purposes. As a basic principle, MediS-ervice will not pass on personal data to third parties; except in respect of sections 4.3 and 4.4.
4.3. We may disclose the data to administrative and supervisory authorities or health insurers in compliance with applicable regulations, orders, subpoenas, official requests or similar procedures, to the extent required or permitted by applicable law.
4.4. MediService may share the data with its own employees as well as external agents and affiliated companies of the Galenica Group for the purpose of providing MediService services. Our employees, agents, affiliated companies and third-party service providers who have access to personal data collected by MediService are obliged to comply with data protection regulations and this privacy policy.

5. Cookies
5.1. Information may be automatically stored on your computer when you visit the MediService online platforms. This takes the form of “cookies” or a similar file, which helps MediService in various ways, for example to improve the functionality of the website or to better understand the preferences of visitors and thus improve our services.
5.2. Most browsers allow you to delete cookies, prevent their installation or generate a warning before a cookie is installed. Further information on this can be found in the browser instructions.
5.3. MediService will use automatically stored information in particular for statistical anal-yses, but may also associate it with any personal data provided to MediService, unless you object to this.

6. Google Analytics
6.1. The MediService online platforms use Google Analytics, a web analysis service pro-vided by Google Inc. (hereinafter referred to as “Google”). Google Analytics uses cookies which are stored on the user’s computer and enable the user’s use of the MediService cus-tomer account to be analysed.
6.2. The information generated by the cookie about the user’s use of the MediService online platforms is usually transmitted to a Google server in the USA and stored there.
6.3. You can prevent cookies from being stored by selecting the appropriate settings on your browser; however, MediService would like to point out that you may not be able to use the full functionality of the MediService online platforms. You can also prevent Google from collecting and processing the data generated by the cookie and related to the use of the platform (including the user’s IP address) by downloading and installing the browser plug-in available from Google.
6.4. You can find more information on the relevant Google Analytics websites.

7. Security measures
7.1. MediService implements the necessary technical and organisational security measures to adequately protect personal data against unauthorised access, accidental or intentional manipulation, loss and destruction.
7.2. The customer account information is password-protected so that, other than the exceptions set out in this privacy policy, only the user has access to their personal information. All personal information is processed by MediService in accordance with data protection regulations.
7.3. In general, the Internet should not be regarded as a secure environment. Unauthorised third parties may access information sent by the user via the Internet. This may lead to this information being disclosed or altered in terms of content, or to technical errors. Even if the sender and recipient are located in the same country, data sent over the Internet may leave the country in question and be forwarded to a country where data protection requirements are less stringent than in the country where you reside. Please note that we are not responsible or liable for the security of users’ data while they are transmitted to MediService via the Internet. In order to protect your data in the best possible way, we recommend using a different method of communication with MediService. However, MediS-ervice can offer you secure transmission via HIN e-mail, provided that you are able to re-ceive such HIN e-mails.

8. User rights
You may at any time request that MediService send you a copy of the personal data it holds about you or provide you with information about its use. Furthermore, MediService will correct or delete this data at your request at any time to the extent permitted by law. In addition, you may object to data processing unless this is absolutely necessary for the ful-filment of the contract. You can contact the office responsible for data protection issues as follows:
MediService AG, Ausserfeldweg 1, CH-4528 Zuchwil
Telephone: +41 32 686 20 20
E-mail: contact@mediservice.ch

9. Amendment
MediService AG reserves the right to amend this privacy policy at any time without prior notice, taking into account the legal requirements.

10. Accessing the privacy policy
The user may access, download, save or print out the data protection provisions at any time.

Last updated: January 2022