Personal data at Klosterdrogerie
Privacy policy
How we handle personal data when you visit our website, contact us or place an online order — and how to get in touch about your information.
Who is responsible?
Klosterdrogerie AGContact: Marco Gantenbein
Auf dem Damm 17
9000 St. Gallen
Switzerland
Scope and applicable law
This policy explains how personal data is handled in connection with our website, enquiries and online orders. Personal data is information relating to an identified or identifiable person.
We process personal data in accordance with Swiss data protection law. Where the EU General Data Protection Regulation applies, processing may rely on consent, steps requested before a contract, contractual performance, legal obligations or legitimate interests, as appropriate to the purpose.
Website visits and technical data
When you visit the website, technical information may be recorded in server logs. This includes browser and operating-system information, the referring page, the time of a request and information about the connection.
This information supports the operation, security and maintenance of the website. You can generally visit public pages without creating a customer account.
Enquiries and contact forms
When you contact us, we use the information you provide to respond to your enquiry and handle follow-up questions. This may include your name, telephone number, email address, subject and message.
Please send only the information needed for your enquiry. If a confidential discussion is required, contact us to agree how it should take place.
Consultations and laboratory services
A personal consultation or a laboratory service may involve information about your health. Such information can be particularly sensitive. The information needed and the involvement of a laboratory partner depend on the service you choose.
Before sending health information or arranging an analysis, please ask us how the information for that service is handled and which partner is involved.
Online orders and customer accounts
We process customer, contact, order and payment-related information to handle purchases, payment, delivery and customer service. Information marked as required is needed to carry out the relevant transaction.
If you create a customer account, it allows you to access account functions such as your order history. We may record technical information connected with account activity to help prevent misuse. Closing an account does not remove information that must be retained for legal or accounting purposes.
Payment services
Payment transactions involve external providers, including wallee, PostFinance and providers connected with card and wallet payments. The provider involved depends on the payment option selected.
A payment provider processes the details needed for the transaction under its own terms and privacy information. We receive information needed to confirm and reconcile the payment. Please consult the provider information shown for your payment option.
Newsletter
If you subscribe to our newsletter, we use your email address and subscription information to send the requested messages. You can withdraw your subscription using the unsubscribe link in a newsletter or by contacting us.
Cookies and preferences
The website uses cookies for functions such as sessions, language preferences and the shopping basket. Cookies and similar technologies may also be involved when analysis, advertising or embedded services are enabled.
You can manage or delete cookies through your browser. Where the website presents consent or preference controls, use those controls for the choices they offer. Blocking certain cookies can affect website functions.
Read the cookie policyGoogle Analytics
We use Google Analytics to understand how visitors use our website. It is our only analysis or marketing service. Analytics can process information about website interactions, devices and connections; the scope depends on the configuration and the choices available on the website.
Google processes information under its privacy terms. You can manage cookies through your browser and use any consent or preference controls provided on the website.
Google privacy informationRecipients and processing abroad
Personal data may be shared with service providers where this is necessary for website operation, communication, payments, delivery or other agreed services. Disclosure may also be required by law.
External services can involve processing outside Switzerland. Applicable data protection requirements must be taken into account, including the rules on disclosures to countries without an adequate level of protection. The specific recipients, countries and safeguards depend on the services used.
Retention of information
We retain personal data for the purposes for which it is needed and for applicable legal retention requirements. The period depends on the type of information and the purpose. Data required for accounting or legal obligations may have to be retained after an enquiry or customer relationship has ended.
Security
We take appropriate technical and organisational measures to protect personal data. The website uses HTTPS to encrypt information in transit between your browser and the website.
No internet communication or storage system can be guaranteed to be completely secure. Please contact us if you have a concern about the security of information you have provided.
Your data protection rights
Subject to applicable law and the circumstances, you can request information about the personal data concerning you, correction of inaccurate data and deletion of data that no longer needs to be retained. Other rights may include restriction of processing, portability, objection and withdrawal of consent.
To make a request, contact us using the details above. We may need to verify your identity. Statutory exceptions and retention requirements may limit a request. Withdrawal of consent does not affect processing that was lawful before withdrawal.
You may also contact the competent data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).
FDPIC websiteChanges and questions
We may update this policy when the website, our services or applicable requirements change. The current version is published on this page. Contact us if you have questions about this policy or your personal data.