1. General

1.1. The operator of the mediservice.ch website is MediService AG based in Zuchwil, Switzerland (hereinafter referred to as “MediService”).
1.2. Where the masculine form has been used in this text to make it easier to read, it refers to both genders.
1.3. This privacy policy explains how MediService deals with personal data and sets out in particular which personal data of the user (hereinafter referred to as “user”) are processed in the MediService customer account and the purposes for which these data are processed. It also describes how collected personal data can be checked, corrected or deleted.

2. Acceptance of the privacy policy
By registering or logging into the customer account, the user agrees to this privacy policy. In particular, he consents to the collection of personal data in accordance with Section 3 below and the use of these data in accordance with Sections 4-6 below.

3. Personal data
3.1. It is essential that you provide your data in order to place an online order or to purchase services and products. We use thes data for the purpose of order processing and to improve our services.
3.2. For order processing via a customer account, we require your email address and your mobile number in addition to the data we already received when you transmitted the prescription.

4. Use of personal data
4.1. Data transmitted by the user to MediService will be used by MediService as follows:
- To create a user account;
- To process and execute orders placed by the user;
- For marketing purposes, in particular to better understand the needs of users and to improve MediService services.
4.2. Access to personal data is limited to those employees who need to know and to process these data for the stated purposes. MediService will under no circumstances sell or – subject to Sections 4.3 and 4.4 – transmit or otherwise market personal data to third parties.
4.3. We may disclose the data to administrative and regulatory authorities or health insurers in compliance with applicable regulations, orders, subpoenas, official requests or similar procedures to the extent required or permitted by applicable law.
4.4. MediService may pass on the data to its own employees as well as to agents and affiliated companies of the Galenica Group for the purpose of providing MediService services. Our employees, agents, affiliated companies and third-party service providers who have access to personal data collected by MediService are obliged to comply with data protection regulations and this privacy policy.

5. Cookies
5.1. Information may be automatically stored on the user’s computer when he logs into his MediService customer account. This happens through “cookies” or a similar file that helps MediService in various ways, e.g. to find out the preferences of visitors to the MediService customer account and to improve the MediService customer account.
5.2. Most browsers allow you to delete cookies, prevent them from being installed or generate a warning before a cookie is installed. Users will find further information on this in the instructions relating to their browser.
5.3. MediService will use automatically stored information exclusively for statistical analyses and in particular will not associate it with any personal data provided to MediService.

6. Google Analytics
6.1. The MediService customer account uses Google Analytics, a web analysis service provided by Google Inc. (hereinafter referred to as “Google”). Google Analytics uses cookies, which are stored on the user’s computer and enable the use of the MediService customer account by the user to be analysed.
6.2. The information generated by the cookie about the use of the MediService customer account by the user is usually transmitted to a Google server in the USA and stored there.
6.3. Users can prevent cookies from being stored by setting their browser software accordingly; however, MediService would like to point out that, in that case, users will not be able to use all the functions of the MediService customer account. Users can also prevent Google from collecting and processing the data generated by the cookie and related to the use of the platform (including the user’s IP address) by downloading and installing the corresponding browser plug-in available from Google.
6.4. Users can find more information on Google Analytics on the relevant Google web pages.

7. Security measures
7.1. MediService implements technical and organisational security measures to ensure adequate protection of personal data against unauthorised access, accidental or intentional manipulation, loss and destruction.
7.2. The customer account information is password-protected so that, other than the exceptions set out in this privacy policy, only users have access to their own personal information.
7.3. In general, the Internet should not be considered to be a secure environment. Unauthorised third parties may access information sent by the user over the Internet. This may result in this information being disclosed or modified or in technical errors occurring. Even if the sender and recipient are in the same country, data sent over the Internet may leave the country and be transmitted to a country where data protection requirements are less stringent than in the country where you reside. Please note that we are not responsible or liable for the security of users’ data while they are transmitted to MediService via the Internet. To ensure the best possible protection of your data, we recommend that you choose another method of communication with MediService.

8. User rights
Users may at any time request that MediService provide them with a copy of the personal data pertaining to them or provide information on the use of such data. At the request of the user, MediService will also correct or delete these data at any time insofar as this is legally possible. The user can contact the responsible body as follows:
MediService AG, Ausserfeldweg 1, 4528 Zuchwil
Telephone: 032 686 20 20
Email: contact@mediservice.ch

9. Right of amendment
MediService AG reserves the right to amend this privacy policy in compliance with legal requirements at any time and without prior notice.

10. Accessing the privacy policy
The user can access, download, save or print the privacy policy at any time.

Last updated: May 2020