Privacy policy for online services and stationary trade
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in this privacy policy.
1. Privacy Policy concerning the Internet
We protect your privacy and your private data. The processing of our users' personal data is limited to the data required to provide a functioning website together with our content and services. We collect, process and use your personal data in accordance with the content of the present privacy policy as well as the applicable data protection regulations, in particular the Swiss Data Protection Law (DSG). This privacy policy regulates what personal data we collect, process and use. We would therefore ask you to read the following very carefully.
Data controller
Drogerie Moll AG in 6312 Steinhausen, including the branch in 6280 Hochdorf, as well as HL-Drogerie AG in 6300 Zug (hereinafter referred to as: “we”) are, as the operator of the websites drogeriemoll.ch, apothekemoll.ch and datumplus.ch, responsible for the personal data of those using (hereinafter referred to as: “you”) the website within the meaning of the Swiss Data Protection Law.
Description and scope of data processing
Personal data within the meaning of this privacy policy concerns all information relating to a specific or identifiable natural person (hereinafter referred to as the "data subject"). This includes, in particular, your name, your email address and your postal address. When arranging services, further data may be collected depending on the type of service and billing. E.g. gender, telephone number, date of birth, health insurance information and insurance number.
Personal data also includes information about your use of our website. In this context, we collect personal data as follows: Information about your visits to our website, such as the amount of data transferred, the location from which you retrieve data from our website and other connection data and sources accessed by you. This is usually done through the use of log files and cookies. Further information about log files and cookies can be found below.
Your personal data will only be stored for the duration of the cooperation or to ensure that the service is provided in a safe and secure way. For some services, we also transfer your data to our internal operating system. If this is the case, we store the data for at least 10 years in accordance with Swiss law and the KVG (Swiss Federal Law on Compulsory Health Care). If we collect your IP address, it will only be stored for the time you are using the website and then be deleted within 14 days or made anonymous by shortening it.
Intended use
We use your personal data for the following purposes:
After being redirected to the online shop apothekedrogerie.ch, the privacy policy of apothekedrogerie.ch shall apply. On being redirected to our reservation platform datumplus.ch., this privacy policy shall apply.
Principles of data processing
When processing data, we take the processing principles of legality, proportionality, specified purpose limitation, transparency - in particular the fulfillment of obligations to provide information - and data security into consideration.
Information about your computer and cookies
Each time you access our site, we collect the following information about your computer: The IP address of your computer, the request from your browser and the time of that request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the operating system running on your computer. We also record from which website our site was accessed. The IP address will only be stored for the time you are using the website and then be deleted immediately or made anonymous by shortening it. We use this data to operate our website, in particular to identify and eliminate errors on the website, to determine the capacity utilization of the website and to make adjustments or improvements.
Cookies help to make your visit to our website easier, more pleasant and more useful. Cookies are information files that your web browser automatically saves on your computer's hard drive when you visit our website.
For example, we use cookies to temporarily save the services and entries selected by you when filling out a form on the website so that you do not have to repeat the entry when you access another subpage. Cookies may also be used to identify you as a registered user after registering on the website, without you having to log in again when you call up another subpage.
If you do not want browser cookies to be used, you can set your browser in such a way that storing cookies is not accepted. Please note that in this case you may only be able to use our website to a limited extent or possibly not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the "Block third-party cookies" setting in your browser.
Data security
All information that you transmit to us is stored on servers in Switzerland. We secure our website and other systems against loss, destruction, access, modification or distribution of your data by unauthorized persons through the use of technical and organizational measures. In particular, your personal data will be encrypted before being transmitted by us. We use the coding system SSL (Secure Socket Layer) or TLS (Transport Layer Security). We would point out that security vulnerabilities can occur when transmitting data on the Internet (e.g. when communicating by email). Complete protection of the data against access by third parties is not possible.
No passing on of your personal data
We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are entitled or obliged to pass on data on the basis of legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights. For services that are billed via the health insurance company, we transmit the following data to your health insurance company; name, gender, date of birth, address, insurance number and the services or products purchased. This transmission takes place via a protected data line and is then stored in our internal operating system in accordance with the relevant legal requirements.
Changes to this Privacy Policy
We reserve the right to change this privacy policy at any time with effect for the future. A current version is always available on our website. Please visit the website regularly to gain up-to-date information about our current privacy policy.
Your rights
You have the right to request information about your personal data processed by us. In particular, you can find out information about your personal data itself, the purpose of the processing and the period for which it is stored.
You also have the right to revoke any consent you may have given for the use of your personal data at any time.
You can assert your rights as stated here with us. Processing takes place during our business hours. You can contact us by email (infodrogeriemollch), telephone no. 041 741 70 00 or visit one of our stores in person.
If you believe that the processing of your personal data by us is inconsistent with the applicable data protection regulations, you have the option of complaining to the Federal Data Protection and Information Commissioner.
Social Media
Elements of the social network Facebook are integrated into this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
According to Facebook, however, the data collected is also transmitted to the USA and other third countries.
You can find an overview of the Facebook social media elements here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
If the social media element is active, a direct connection is established between your terminal device and the Facebook server. The provides Facebook with the information that you have visited this website with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We would point out that we, as the provider of the pages, have no knowledge of the content of the data transmitted or how it is used by Facebook. You can find more information about this in Facebook's privacy statement at: https://de-de.facebook.com/privacy/explanation.
If consent has been obtained, use of the above-mentioned service is based on the Swiss Data Protection Law. Such consent can be revoked at any time. If no consent has been obtained, the use of the service is based on our legitimate interest in the widest possible visibility on social media.
Insofar as personal data is collected on our website and forwarded to Facebook using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 of the GDPR). Joint responsibility is limited to collecting the data and passing it on to Facebook. The processing by Facebook after the forwarding of the data is not part of the joint responsibility Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for issuing data protection information when using the Facebook tool and for implementing the tool on our website in a secure manner in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert your rights (e.g. requests for information) regarding the data processed by Facebook directly vis-à-vis Facebook. If you assert the data subject rights with us, we are obliged to forward these to Facebook.
Data transfer to the USA is based on the EU Commission standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 und https://www.facebook.com/policy.php.
Functions of the Instagram service are integrated into this website. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If the social media element is active, a direct connection is established between your terminal device and the Instagram server. This provides Instagram with information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would point out that we, as the provider of the pages, have no knowledge of the content of the data transmitted or how it is used by Instagram.
If consent has been obtained, use of the above-mentioned service is based on the Swiss Data Protection Law. Such consent can be revoked at any time. If no consent has been obtained, the use of the service is based on our legitimate interest in the widest possible visibility on social media.
Insofar as personal data is collected on our website and forwarded to Facebook or Instagram using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 of the GDPR). Joint responsibility is limited to collecting the data and passing it on to Facebook or Instagram. The processing by Facebook or Instagram after the forwarding of the data is not part of the joint responsibility Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for issuing data protection information when using the Facebook or Instagram tool and for implementing the tool on our website in a secure manner in accordance with data protection law. Facebook is responsible for the data security of Facebook or Instagram products. You can assert your rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly vis-à-vis Facebook. If you assert the data subject rights with us, we are obliged to forward these to Facebook.
Data transfer to the USA is based on the EU Commission standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 und https://de-de.facebook.com/help/566994660333381.
For more information, see Instagram's privacy policy at: https://instagram.com/about/legal/privacy/.
Analytics Tools and Advertising
Google Analytics
This website uses functions of the Google Analytics web analysis service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is assigned to the respective terminal device of the user. There is no assignment to a user ID.
Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.
This service is used on the basis of your consent in accordance with the Swiss Data Protection Law. Such consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Browser plug-in
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information on how Google Analytics handles user data in the Google privacy statement https://support.google.com/analytics/answer/6004245?hl=de.
Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google Conversion Tracking, we and Google can recognize whether the user has carried out certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to generate conversion statistics. We find out the total number of users who have clicked on our ads and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for the purpose of identification.
This service is used on the basis of your consent in accordance with the Swiss Data Protection Law. Such consent can be revoked at any time.
You can find more information on Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de.
Google Fonts (local hosting)
This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts. Google Fonts are installed locally. There is no connection to Google servers.
You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy statement: https://policies.google.com/privacy?hl=de.
Google Maps
This site uses the map service from Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, it is necessary to save your IP address. The information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on such data transmission. When Google Maps is activated, Google can use Google Fonts for the purpose of displaying the fonts in a uniform manner. When accessing Google Maps, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
Google Maps is used for the purpose of providing an attractive presentation of our online offers and to make it easier to find the locations we have indicated on the website.
Data transfer to the USA is based on the EU Commission standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
You can find more information on how user data is handled in Google's privacy statement: https://policies.google.com/privacy?hl=de.
Newsletter
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No other data is collected or is only collected on a voluntary basis. We use the service of Pixels & Points GmbH to process the newsletter.
Order processing
We have concluded an order processing contract (OPC) for the use of the above-mentioned service. This is a contract required under data protection law, to ensure that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the Swiss Data Protection Law.
Own services
Handling of job applicant data
We offer you the opportunity to apply for a job with us (e.g. by e-mail, by post or via the online application form). In the following, we provide you with information concerning the scope, purpose and use of your personal data collected as part of the job application process. We assure you that the collection, processing and use of your data takes place in accordance with the applicable data protection law and all other relevant statutory provisions and that your data will be treated with the utmost confidentiality.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication details, application documents, notes from job interviews, etc.) insofar as this is necessary to make a decision with regard to offering a contract of employment. Within our company, your personal data will only be passed on to people who are involved in processing your application.
If the application is successful, the data submitted by you will be transferred to our system,
Data retention period
If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to store the data transmitted by you for up to 6 months after the end of the application process (rejection or withdrawal of the application). The data will then be deleted, and the physical job application documents will be destroyed. The storage serves, in particular, as evidence in the event of any legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted if the purpose for further storage no longer applies.
A longer storage period can also apply if you have given your consent or if statutory storage obligations stand in the way of deletion.
Admission to the pool of job applicants
If we do not make you a job offer, it may be possible to include you in our pool of applicants. In the event of such inclusion, all documents and information from the application will be transferred to the applicant pool so that you can be contacted if suitable vacancies become available.
Inclusion in the pool of applicants takes place exclusively on the basis of your express consent. Giving your consent is voluntary and does not relate to the ongoing application process. The data subject can revoke his/her consent at any time. In such a case, the data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for the retention of such data.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
Contact person in the EU
For people living in the EU who obtain medicines or services from us, our contact in the EU is:
Fabian Spitzmüller, Alm 70a in D-77704 Oberkirch-Ödsbach
Email: infodrogeriemollch
2. Privacy Policy (Swiss Data Protection Law) of Drogerie Moll AG
We treat your data confidentially in accordance with the relevant data protection legislation. We only record the information that is absolutely necessary to meet the relevant legal requirements and effect prescriptions, orders and reservations. We use this data to settle accounts with the health insurance company, process reservations or for your personal bonus, customer or depot system.
The data provided by you will not be passed on or sold to third parties.
Our employees are subject to professional secrecy in accordance with Art. 321 of the Swiss Federal Criminal Code (StGB). If we are asked to provide customer information for legal reasons, we are obliged to cooperate accordingly. You can request information concerning the personal data collected by us at any time. If permitted by law, we will delete your data as quickly as possible on request. As your contact in matters regarding health, we are aware that we also manage particularly sensitive data concerning you, such as an overview of your illnesses, diagnoses and the purchase of medication.
We collect, process and use your personal data in accordance with the content of the present privacy policy as well as the applicable data protection regulations, in particular the Swiss Data Protection Law (DSG). This privacy policy regulates what personal data we collect, process and use. We would therefore ask you to read the following very
carefully. Our team receives constant training on the subject of the Swiss Data Protection Law (DSG).
Data controller
Drogerie Moll AG in 6312 Steinhausen, including the branch in 6280 Hochdorf, as well as HL-Drogerie AG in 6300 Zug (hereinafter referred to as: “We”) Controller regarding the personal data of customers relating to the aforementioned business transactions (hereinafter referred to as: “You”) within the meaning of the Swiss Data Protection Law.
Description and scope of data processing
Personal data within the meaning of this privacy policy concerns all information relating to a specific or identifiable natural person. This includes, in particular, your name, your email address, your postal address and your telephone number. When purchasing medicines or services, your gender, telephone number, date of birth, health insurance details and insurance number are also recorded.
Your personal data will be transferred to our operating system. When purchasing medicines and medical services, we store the data for at least 10 years in accordance with Swiss law and the KVG (Swiss Federal Law on Compulsory Health Care). Data collected for the bonus, customer or depot card can be deleted at any time. If the bonus or depot card is deleted, the points or credit collected will be forfeited.
Intended use
We use your personal data for the following purposes:
As there is an obligation to document the dispensing of prescription drugs and medical services, the following details are mandatory.
To ensure uncomplicated communication, we can send emails or SMS messages to confirm orders, reservations, test results and queries in the event of any doubts or uncertainties. Important and sensitive data is not communicated via these channels.
Principles of data processing
When processing data, we take the processing principles of legality, proportionality, specified purpose limitation, transparency - in particular the fulfillment of obligations to provide information - and data security into consideration.
Data security
All the information collected about you is stored exclusively on local servers in Switzerland.
No passing on of your personal data
We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are entitled or obliged to pass on data on the basis of legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights. For services that are billed via the health insurance company, we transmit the following data to your health insurance company: name, gender, date of birth, address, insurance number and the services or products purchased. This transmission takes place via a protected data line and is then stored in our internal operating system in accordance with the relevant legal requirements.
Changes to this Privacy Policy
We reserve the right to change this privacy policy at any time with effect for the future. A current version is always available on our website. Please visit the website regularly to gain up-to-date information about our current privacy policy.
Your rights
You have the right to request information about your personal data processed by us. In particular, you can find out information about your personal data itself, the purpose of the processing and the period for which it is stored.
You also have the right to revoke any consent you may have given for the use of your personal data at any time.
You can assert your rights as stated here with us. Processing takes place during our business hours. You can contact us by email (infodrogeriemollch), telephone no. 041 741 70 00 or visit one of our stores in person.
If you believe that the processing of your personal data by us is inconsistent with the applicable data protection regulations, you have the option of complaining to the Federal Data Protection and Information Commissioner.
Own services
Handling of job applicant data
We offer you the opportunity to apply for a job with us (e.g. by e-mail, by post or via the online application form). In the following, we provide you with information concerning the scope, purpose and use of your personal data collected as part of the job application process. We assure you that the collection, processing and use of your data takes place in accordance with the applicable data protection law and all other relevant statutory provisions and that your data will be treated with the utmost confidentiality.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication details, application documents, notes from job interviews, etc.) insofar as this is necessary to make a decision with regard to offering a contract of employment. Within our company, your personal data will only be passed on to people who are involved in processing your application.
If the application is successful, the data submitted by you will be transferred to our system,
Data retention period
If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to store the data transmitted by you for up to 6 months after the end of the application process (rejection or withdrawal of the application). The data will then be deleted, and the physical job application documents will be destroyed. The storage serves, in particular, as evidence in the event of any legal dispute. If it is apparent that the data will still be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted once the purpose for further storage no longer applies.
A longer storage period can also apply if you have given your consent or if statutory storage obligations stand in the way of deletion.
Admission to the pool of job applicants
If we do not make you a job offer, it may be possible to include you in our pool of applicants. In the event of such inclusion, all documents and information from the application will be transferred to the applicant pool so that you can be contacted if suitable vacancies become available.
Inclusion in the pool of applicants takes place exclusively on the basis of your express consent. Giving your consent is voluntary and does not relate to the ongoing application process. The data subject can revoke his/her consent at any time. In such a case, the data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for the retention of such data.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
Contact person in the EU
For people living in the EU who obtain medicines or services from us, our contact in the EU is:
Fabian Spitzmüller, Alm 70a in D-77704 Oberkirch-Ödsbach
Email: infodrogeriemollch
As per: April 2023