Protecting personal data is an important concern for Pharmalys. Please use the contact details below to get in touch whenever you have questions regarding your personal data; we will respond to every enquiry as soon as possible.
We, Pharmalys Laboratories SA, Schochenmühlestrasse 2, 6340 Baar, Switzerland (hereafter "Pharmalys", "we", "us" or "our") are committed to protecting the privacy and security of the personal data that is provided to us or collected by us on our website and during our business. We store and process personal data in accordance with the Swiss Data Protection Act ("DPA") and, to the extent applicable, the EU General Data Protection Regulation ("GDPR").
This privacy policy ("Privacy Policy") explains how we may collect and use any personal data that we obtain about you and your rights in relation to that data. We may provide you with additional privacy notices where we believe that it is appropriate to do so. In this case, such additional notices supplement this Privacy Policy and should be read as one.
The data controller responsible for processing your personal data is:
Pharmalys Laboratories SA
Schochenmühlestrasse 2
6340 Baar
Switzerland
Email: XY@pharmalys.ch
Pharmalys processes personal data in several ways. For example, your personal data is processed when you visit our website or use any tools or services on the website. Personal data is also processed when you contact us (via email, contact form or chat function), access our newsroom or sign up for our newsletter. A detailed list of our data processing activities can be found in section III of this Privacy Policy.
Personal data is generally processed and stored in Switzerland and/or the EU (in particular Germany) as well as Tunisia. In some cases, Pharmalys also works with third-party providers that may store your data in another country, such as the United States. Please see section V of this Privacy Policy for further information.
We collect and process your personal data as described in the following.
1. Use of our website and its tools
When you visit our website, we collect the following information: version of web browser, IP address, time zone, cookie information, device source, what sites or products you view, search terms, and how you interact with our website.
We collect this personal data about you so that we can offer website content such as providing you with information about our company, providing tools for you (e.g., namefinder for your baby, newsroom, etc.), ensuring that the website loads accurately, analyzing the usage of our website, displaying products that might interest you or conducting surveys or contests. In such cases, the legal basis for the processing is the fulfillment of contractual obligations towards you and our legitimate interest in providing you with the best experience on your website as your interest in the protection of your personal data does not override our interests.
In order to achieve the above purposes, we use cookies and tools on our website. Specifically for analyzing the usage of our website and for tag management, we use Google Analytics and Google Tag Manager, both services provided from Google Inc ("Google"). We reserve the right to use more or different analytical tools.
For more information on what cookies and tools we use, for what purposes they are used and your rights regarding these cookies, please consult our Cookie Policy that you can find here: [insert Cookie Policy URL].
2. Contacting us
We collect personal data about possible customers, suppliers as well as other business contacts when you contact us by email, through the contact form on our website or any other way.
The type of personal data we collect includes your name, contact details (such as your address, email address and telephone numbers), and the content of your correspondence with us. We mainly obtain this data directly from you.
We may use your personal data to answer your queries, complaints or other questions in your correspondence with us.
The legal basis for processing your personal data for these purposes is our legitimate interest in answering your requests or our contractual obligations as your interest in the protection of your personal data does not override our interests.
3. Purchase of our products
If you choose to purchase our products provided on the website, we also process personal data during and after your purchase.
The type of personal data we collect includes your name, contact details (e.g., first name, last name, billing address, delivery address and e-mail address).
We may use this data for the purpose of executing the contract with you, responding to you and handling your order. If necessary, we may share your data with third parties e.g., the shipping company commissioned by us with the delivery in order to handle your order. If payment is processed via a payment service provider, we transmit any data required for this purpose to the payment service provider.
The legal basis for processing your personal data for these purposes is our legitimate interest in answering your requests or our contractual obligations as your interest in the protection of your personal data does not override our interests.
4. User accounts and user space
We collect personal data about you, if you choose to create an account on our website and while you are using our exclusive user space after signing up.
The type of personal data we collect includes your name, contact details (such as your address, email address and telephone numbers), the data you share with us while creating your personal profile and the content of your correspondence with us. We mainly obtain this data directly from you.
We may use your personal data to personalize your browsing experience.
The legal basis for processing your personal data for these purposes is your consent.
5. Chat function with medical professionals
We collect personal data about you, if you contact medical professionals through our chat function.
The type of personal data we collect includes your name, contact details (such as your address, email address and telephone numbers) and the data and content you voluntarily provide to us and/or share with the medical professionals through our chat function. This data may include sensitive personal data on health.
We may use your personal data to answer your queries, complaints or other questions in your correspondence with us.
The legal basis for processing your personal data for these purposes is your consent.
6. Newsletter subscription
We only send you marketing emails if we are in an existing business relationship with you or you have subscribed to our newsletter.
The personal data collected in such cases is your name and email address.
Our main legal basis for these processing purposes is your consent or our existing business relationship and therefore, our legitimate interest to conduct business as long as your interest in the protection of your personal data does not override our interests.
You can choose which information you would like to receive through our newsletter by using the corresponding button at the bottom of our emails. If you no longer wish to receive newsletters relating to our products or services, you can unsubscribe at any time by using the "unsubscribe" button at the bottom of the email or by contacting us as indicated in section IX of this Privacy Policy.
7. Recruiting
If you apply for a job with us, you may need to provide personal data including special categories of personal data.
This personal data may include CVs (including diplomas, professional experience), evaluation tests and reports, criminal records, family situation, any disability requiring special arrangements of the workplace.
We will use this personal data to consider your application. We may also use this data to carry out checks to verify the information you provided (including references, background, identity, suitability, excerpts from the debt enforcements register and criminal record checks). While handling your application, we may use software from third-party providers.
The legal basis for these processing purposes is our legitimate interest in recruiting new employees pursuant as your interest in the protection of your personal data does not override our interests and, in case the application is successful, the conclusion and performance of a contract.
Where we need to collect information required for your employment and you fail to provide that information when requested, we may not be able to further consider your employment.
8. Other processing activities
We may also process your personal data for personalized marketing, to the extent we have a legal obligation to do so or to defend, exercise or establish a legal claim which is in our legitimate interest. Finally, we may process and share your personal data in connection with a substantial corporate transaction, such as the sale of a website, a merger, consolidation, asset sale, or in the unlikely event of bankruptcy.
We do not process your personal data in a way that creates a profile of you in our databases (e.g., a customer profile) or allows us to deduct certain aspects of your life such as interest, hobbies, financial situation, health etc. However, we do use your personal data (and account information) to personalize our website content when you access it, depending on the country you are accessing it from.
We do not use automated decision-making to decide about ways to handle your data.
Where necessary or useful for the provision of our services or for other purposes defined in this Privacy Policy, we may share your personal data with third parties in the course of our business.
1. With third parties
We may share your personal data with third parties (such as our software, marketing, strategy, IT, recruitment software or other service providers, our business partners, our affiliates, our advisors and lawyers and courts) in Switzerland, the EU or other countries for the provision of our services and in our legitimate interest. In addition, we may share your personal data with third parties if:
- You have consented to us doing so (where necessary).
- We are under a legal, regulatory, or professional obligation to do so.
- It is necessary in connection with legal proceedings or to exercise or defend legal rights.
- In connection with a substantial corporate transaction, such as the sale of a website, a merger, consolidation, asset sale, or in the unlikely event of bankruptcy.
2. Disclosing data to third parties in foreign countries
During our business activities and for the purposes described in this Privacy Policy, the third parties mentioned above may be located outside of Switzerland.
We only share your personal data abroad to the extent permitted and required by law. Personal data is only transferred to third parties in foreign countries if the relevant legal requirements are met. Third parties in foreign countries are required to maintain the same level of data protection as we do.
The recipients are located in the following countries, and we ensure with the safeguards indicated in brackets so that the protection of personal data is equivalent to that in Switzerland, if the level of data protection in a country is not adequate under applicable law:
- EU Member States, in particular Germany (no safeguards required as these countries provide an adequate level of data protection)
- US (EU standard contractual clauses including the required Swiss amendments)
- Our subsidiary based in Tunisia (EU standard contractual clauses including the required amendments)
You may request a copy of these contractual guarantees, whereby in individual cases we may need to redact parts that are relevant to the privacy of others or confidentiality obligations.
In exceptional cases, we may rely on your explicit consent or transfer your personal data abroad if it is necessary for the performance of contract, establishment, exercise, or enforcement of legal claims or overriding public interests.
We have put in place technical and organizational security measures to hold your personal data securely in electronic and physical form, to protect it from unauthorized access, improper use or disclosure, unauthorized modification or unlawful destruction or accidental loss.
Our employees and third-party service providers who have access to confidential information (including personal data) are subject to confidentiality obligations and, to the extent necessary, have entered into data processing agreements with us.
We will retain your personal data for as long as is necessary for the purpose for which it was collected.
Therefore:
- Personal data that is collected for the purpose of fulfilling a contract agreed between and you will be stored until this contract has been fulfilled. In general, this means that Pharmalys stores your personal data for ten year For job candidates who do not receive a job offer or decline our offer we store the personal data for three months.
- Personal data that is collected for the purpose of maintaining Pharmalys's legitimate interests, including data security, will be stored until this purpose has been fulfilled.
- In addition, Pharmalys is permitted to store personal data for a longer period if you have consented to this and have not revoked your consent or if this is required to fulfil legal or regulatory requirements (for example accounting rules or tax law) and for as long as claims could be brought against us.
- Your personal data is deleted when the retention period expires.
You have the right to:
- Request access to your personal data and certain information in relation to its processing.
- Request the correction of your personal data.
- Request the erasure of your personal data.
- Request that we restrict the processing of your personal data.
- Obtain your personal data in a portable format for migration to another company in certain cases.
- Object to the processing of your personal data.
In case you have provided your consent to the collection, processing, and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so.
Please note, that we may refuse or limit to grant these rights for legal reasons or based on data protection legislation, in which case we will provide the reasons for our decision as required by law.
In general, you will not have to pay a fee to exercise any of your individual rights. However, we may charge a fee for access to your personal data if the relevant data protection legislation allows us to do so, in which case we will inform you as required by law.
If you feel we have not handled your query or concern to your satisfaction you can file a complaint with the competent data protection authority, in Switzerland this is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).
If you would like to exercise these rights, please contact us in writing by email or letter in accordance with section IX of this Privacy Policy.
Pharmalys Laboratories SA
Schochenmühlestrasse 2
6340 Baar
Switzerland
Email: xy@pharmalys.ch
We reserve the right to update and change this Privacy Policy from time to time to reflect any changes to the way in which we process your personal data or changing legal requirements. Any changes we may make to our Privacy Policy in the future will be posted on this website. Please check back frequently to see any updates or changes to our Privacy Policy.
As at: 3rd November, 2023
