Privacy Policy
1. Who we are
This privacy policy explains how we process personal data when you visit swisspharmagroup.com, including all brand pages (for example vitamin brands such as Swiss AlpenWell) (together, the “Website”).
Controller (and main contact for privacy, including EU/EEA visitors):
Swiss Pharma Group AG
Rigistrasse 2, 6300 Zug, Switzerland
Phone: +41 41 266 07 65
Email: office@swisspharmagroup.com
Website: swisspharmagroup.com
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Scope of this policy
This policy applies to:
Visits to swisspharmagroup.com and all its brand and product pages
Use of our contact form
Use of cookies, Google Analytics 4 and Meta Pixel on the Website
The Website is informational only. You cannot buy products, create an account, or manage orders on this Website. We do not collect payment data or login data.
3. Personal data we collect
3.1 Data you provide
When you contact us via the contact form, we process:
First name
Last name
Email address
Your message / inquiry
Providing this data is voluntary, but we cannot respond without at least your email address and message.
You may also provide personal data if you contact us by email, phone or other channels. In that case we process the data you provide (e.g. name, contact details, content of communication).
3.2 Data collected automatically (cookies, logs, analytics)
When you visit the Website, we and our service providers may automatically collect:
Device and browser information (e.g. browser type and version, operating system)
IP address and approximate location (country/region)
Date and time of access
Pages visited, clicks, time spent on pages
Referrer URL (the page you came from)
This is done mainly through:
Server logs
Cookies and similar technologies
Analytics and tracking tools (see Section 5)
We use this data primarily to operate and secure the Website and to obtain aggregated usage statistics.
4. Purposes and legal bases
We process your personal data for the following purposes and, where GDPR applies, on the following legal bases:
Responding to inquiries
Purpose: to receive, process and respond to your contact form submissions or other inquiries.
Legal basis (GDPR):
Art. 6(1)(b) GDPR (steps prior to entering into a contract) where your inquiry relates to a contract or potential contract; and
Art. 6(1)(f) GDPR (legitimate interests) in communicating with customers, potential customers, partners and other stakeholders.
Operating and securing the Website
Purpose: to provide the Website, monitor performance, detect and prevent misuse and ensure IT security (e.g. via server logs).
Legal basis (GDPR): Art. 6(1)(f) GDPR (legitimate interests in a secure and stable website).
Website analytics (Google Analytics 4)
Purpose: to understand how visitors use the Website and to improve content, navigation and user experience.
Legal basis:
For visitors in the EU/EEA and where required: Art. 6(1)(a) GDPR (consent via cookie banner).
Otherwise: Art. 6(1)(f) GDPR (legitimate interest in usage statistics).
Marketing / measurement (Meta Pixel)
Purpose: to measure and optimize the effectiveness of our marketing activities on Meta platforms (e.g. Facebook, Instagram).
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner) where required.
You may withdraw your consent at any time with effect for the future (see Sections 5 and 9).
5. Cookies, analytics and tracking
5.1 Cookies and similar technologies
We use cookies and similar technologies on the Website. These can be:
Strictly necessary cookies – required for basic functionality and security of the Website.
Analytics cookies – help us understand how visitors use the Website.
Marketing / tracking cookies – used, for example, by Meta Pixel to measure the effect of ads.
You can manage your preferences via the Squarespace cookie banner that appears when you first visit the Website (and later, via the banner’s settings link if available).
You can also block or delete cookies in your browser settings. This may affect some functionalities.
5.2 Google Analytics 4 (GA4)
We use Google Analytics 4 to obtain statistics about Website usage (e.g. number of visitors, popular pages, time spent).
GA4 may collect, for example:
Pseudonymized user identifiers
Information about pages visited and interactions
Approximate location (based on IP address)
Where required by law, GA4 is only activated once you have given consent via the cookie banner. You can withdraw consent at any time via the banner or by deleting cookies.
5.3 Meta Pixel
We use Meta Pixel (Meta Platforms) to understand whether users interact with our Website after seeing or clicking ads on Meta platforms, and to optimize our marketing there.
Where required, Meta Pixel is only used when you give consent via the cookie banner. You can withdraw this consent at any time via the banner or by deleting cookies.
Data collected through Meta technologies may also be processed by Meta in its own responsibility, as described in Meta’s privacy policies.
6. How we handle contact form data
When you submit the contact form on the Website:
The form is processed by the built-in Squarespace form functionality.
The data you enter is forwarded by email to our corporate email address (e.g. office@swisspharmagroup.com).
An internal responsible person or team reads your message and replies, typically via email.
We currently do not:
Use contact form data to subscribe you to a newsletter, or
Send mass marketing emails based solely on contact form submissions.
7. Recipients and international transfers
We may share or provide access to personal data to the following categories of recipients, to the extent necessary for the purposes described:
Website / hosting provider: Squarespace
Analytics provider: Google (Google Analytics 4)
Marketing provider: Meta Platforms (Meta Pixel)
IT service providers: who support operation, maintenance and security of our systems
Authorities, courts, and legal advisors: if required by law or to assert or defend legal claims
These providers may be located in countries outside Switzerland and the EU/EEA, in particular in the United States. Where such countries do not provide an adequate level of data protection under Swiss or EU law, we take appropriate safeguards (e.g. standard contractual clauses or equivalent safeguards) where required.
8. How long we keep your data
We keep personal data only as long as necessary for the purposes described or as required by law.
In particular:
Contact form data / email correspondence:
Typically stored for up to 3 years after the last relevant interaction, to respond to your inquiries, document communications, and assert or defend legal claims, unless statutory retention periods require longer storage (e.g. if communications become part of business records).
Server logs and security-related data:
Typically kept for a limited period (often a few weeks or months) and then deleted or anonymized, unless longer retention is required for security or evidence purposes.
Analytics and tracking data:
Retention periods are configured in the relevant tools. Where possible, data is kept in aggregated or pseudonymized form.
If you exercise your rights (e.g. deletion request), we will review whether continued storage is still necessary and lawful.
9. Your rights under GDPR and Swiss data protection law
To the extent granted by applicable law (including the FADP and GDPR), you have in particular the following rights:
Right of access: to obtain confirmation whether we process personal data about you and to receive information about such data.
Right to rectification: to have inaccurate or incomplete personal data corrected.
Right to erasure: to request deletion of personal data where legal grounds apply.
Right to restriction of processing: to request limitation of processing in certain circumstances.
Right to data portability (GDPR): to receive personal data you provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
Right to object:
You may object at any time to processing based on our legitimate interests (Art. 6(1)(f) GDPR) for reasons relating to your particular situation.
You may object at any time to processing for direct marketing purposes.
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time with effect for the future (e.g. via the cookie banner or by contacting us).
To exercise your rights, please contact us at: office@swisspharmagroup.com
You also have the right to lodge a complaint with a competent supervisory authority:
In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC).
In the EU/EEA: the data protection authority in your place of residence, place of work, or place of the alleged infringement.
10. Children’s data
The Website is not aimed specifically at children and is principally intended for adults (including healthcare professionals). We do not intend to knowingly collect personal data from children via the Website.
If you believe that a child has provided personal data to us via the Website, please contact us so that we can take appropriate steps (e.g. deletion) where required.
11. Data security
We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
Despite these measures, no system is completely secure. We cannot guarantee absolute security of data transmitted via the internet.
12. Changes to this privacy policy
We may update this privacy policy from time to time, for example to reflect changes to the Website, our data processing, or applicable laws.
The current version is always available on swisspharmagroup.com. The “Last updated” date at the top indicates when it was most recently revised.
13. How to contact us
For any questions, concerns, or requests related to this privacy policy or your personal data, please contact:
Swiss Pharma Group AG
Rigistrasse 2, 6300 Zug, Switzerland
Phone: +41 41 266 07 65
Email: office@swisspharmagroup.com