This Privacy Policy explains how Doetsch Grether AG collects and processes personal data when you visit the online stores ricare.ch, ceylor.ch, or vitahealthcare.ch, use a customer account there, place an order, or contact us.
The data controller for the data processing described in this Privacy Policy is:
Doetsch Grether AG,
Aeschengraben 29,
4051 Basel,
Switzerland,
UID CHE-105.966.399, VAT.
Inquiries, requests for information, or data subject requests may be submitted at any time by email to datenschutz@doetschgrether.ch or by mail marked “Data Protection” to our postal address.
The processing of personal data is governed by the Swiss Data Protection Act (DSG) and, where applicable, by the provisions of the EU GDPR.
Depending on your use of the online store, we process the following categories of personal data in particular:
·Masterdata such as name, title, billing address, and shipping address
·Contactinformation such as email address and phone number
·Order and contract data such as shopping cart, products ordered, order number, price, discounts, date and status
·Paymentdata such as selected payment method, payment status, and transaction reference; complete card or account details are generally processed directly by the payment service provider
·Shipping and return data such as recipient address, tracking number, delivery status, reason for return, and information regarding complaints
·Account and communication data such as login credentials, consents, support requests, emails, and phone notes
·Usage and device data such as IP address, date and time, pages viewed, browser, operating system, referring websites, cookie identifiers, and similar technical data
·Marketingdata such as newsletter subscriptions, opens, clicks, interests, and reactions to advertising, provided that the relevant services are used and the necessary consent has been obtained.
Sensitive personal data:
If you voluntarily provide us with information regarding your health, privacy, or adverse effects of a product in the context of support requests, product consultations, or complaints, this may constitute sensitive personal data. By voluntarily providing such data, you consent to our processing this information exclusively for the purpose of handling and responding to your specific inquiry.
Fulfillment of Contractual Obligations
We process personal data to securely provide our online stores, process orders and payments, deliver goods, handle returns and complaints, respond to customer inquiries, fulfill legal obligations, and prevent misuse. With your consent, we also use data for newsletters, audience measurement, personalization, and advertising.
Within the Framework of Balancing Interests
To the extent necessary and provided that the customer’s interest in the protection of their personal data does not outweigh it, we process personal data beyond the actual fulfillment of contractual obligations to safeguard our legitimate interests or those of third parties.
Based on consent
To the extent that consent has been granted to us to process personal data for specific purposes (e.g., analysis for marketing or market research purposes), the lawfulness of this processing is based on this consent. Consent that has been granted may be revoked at any time. The withdrawal of consent does not affect the lawfulness of the data processed prior to the withdrawal. Any processing that took place before the withdrawal remains unaffected.
Legal Requirements or Public Interest
The purposes of processing include, among other things, identity verification and the prevention of fraud and money laundering.
To the extent that the EU GDPR applies, we base the processing—depending on the specific transaction—on the performance of a contract or pre-contractual measures, legal obligations, our legitimate interests in the secure and efficient operation of our online store, or your consent. You may revoke your consent at any time with future effect.
When you visit an online store, technically necessary data is processed. This includes, in particular, your IP address, date and time, content accessed, access status, browser, operating system, referring website, and the amount of data transferred. We use this data to deliver the website, ensure its stability and security, and investigate technical errors or unauthorized access.
The online stores are operated on the infrastructure of Shopify International Limited, The Sidings, 4th Floor, Grand Canal Quay, Dublin 4, D02 E7K8, Ireland (“Shopify”). Shopify is generally the contractual partner for merchants in Switzerland and the European Economic Area. Shopify generally processes and stores store, order, and customer data in Europe. Processing by Shopify companies and subcontractors abroad, particularly in Canada and the United States, remains possible.
When you place an order, we process the data entered during checkout as well as the order and payment information. This processing is necessary to accept, confirm, fulfill, and document your order, and to be able to assign it in the event of questions, returns, or warranty claims.
You can create a customer account. In doing so, we process, in particular, your personal, contact, login, and order data to set up the account and display previous orders. We do not offer a wish list or chat feature. In our online stores, reviews can be published and product recommendations can be displayed. To the extent that recommendations are personalized based on your usage or purchasing behavior, this is done only within the scope of the consent and marketing settings described.
We send order confirmations, shipping information, and other contract-related messages regardless of whether you have subscribed to a newsletter. Automated emails are sent via Mailchimp and Klaviyo. Required fields are marked on the respective form. Without this information, we cannot process the order or provide the requested service.
The payment methods displayed at checkout are available. Invoice and PayPal are not offered as payment methods. For payment processing, the necessary order, contact, and transaction data are transmitted to the selected payment service provider. The payment service provider may also process personal data on its own behalf, for example, to authorize payments, prevent fraud, or fulfill legal obligations. Information on possible automated decision-making—such as for fraud prevention and risk assessments—can be found in the privacy policies of the respective payment service providers.
Order processing, shipping, and returns handling are carried out by Planzer Transport AG, Lerzenstrasse 14, 8953 Dietikon, Switzerland. To this end, we provide Planzer with the necessary contact, order, delivery, and product data. Planzer processes, in particular, the recipient’s address, contact information, the contents and volume of the shipment, tracking information, delivery status, and details regarding returns. The Planzer Online Return Portal is used for authorized returns or complaints.
If you have questions regarding orders, delivery, returns, or complaints, we will process your contact information, order details, and the content you provide. You can reach the respective online store at support@ricare.ch, support@ceylor.ch, or support@vitahealthcare.ch.
Please direct medical inquiries and reports of adverse effects to medinfo@doetschgrether.ch. We process the contact, product, case, and health data necessary for investigation and compliance with legal reporting obligations. Where necessary, this information may be shared with Swissmedic, other competent authorities, or relevant marketing authorization and distribution partners. We do not use such information for advertising purposes.
Our online stores are operated on Shopify’s e-commerce platform. Shopify processes technical, account, order, and communication data on our behalf (e.g., IP address, device data, and log files) to the extent necessary for the operation, security, and fulfillment of orders in the online store. For more information about Shopify and potential transfers of data abroad, please see Shopify’s privacy policy.
Onlineshop Experts GmbH, Niderhölzli 27, 6026 Rain, Switzerland (“Onlineshop Experts”), develops and provides technical support for our online stores on our behalf and may have access to customer data when troubleshooting issues or providing support. Access is strictly governed by instructions and limited to the data and permissions necessary for development, maintenance, troubleshooting, and support.
Our online stores use technically necessary cookies and similar technologies to ensure that basic functions such as the shopping cart, login, security, language settings, and consent management work properly. We use additional technologies for statistics, personalization, or marketing only if this is permitted under applicable law and the necessary consent has been obtained.
You can change your selections via the cookie settings or revoke your consent with future effect. Rejecting non-essential cookies generally should not prevent you from making a purchase; however, certain optional features may be limited.
For audience measurement and advertising, we use Google Analytics 4 and Google Ads from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as well as technologies from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. In particular, cookie identifiers, IP addresses, device and browser data, viewed content, interactions, and information about orders may be processed and synchronized with our advertising accounts. Google and Meta may also process data in the United States.
These analytics and advertising technologies are used only in accordance with your cookie preferences. You can change your preferences at any time via the cookie settings. Additionally, you can adjust settings in your Google or Meta account and use the advertising and opt-out options available there.
If you subscribe to a newsletter, we process your email address and the information from the sign-up form for the purpose of sending the newsletter. For newsletters and marketing communications, we use Mailchimp, a service provided by The Rocket Science Group LLC d/b/a Mailchimp, USA (“Mailchimp”), as well as Klaviyo, a service provided by Klaviyo, Inc., USA (“Klaviyo”).
In particular, your email address, name, registration details, interests, order and interaction data, as well as technical usage data may be transmitted to Mailchimp and Klaviyo. If enabled, we analyze delivery rates, open rates, and click-through rates and create recipient groups for more relevant content. Health data and information regarding adverse effects are not used for newsletters or marketing profiles.
Mailchimp and Klaviyo also process data in the U.S. The applicable legal safeguards are used for data transfers, in particular the Swiss-U.S. Data Privacy Framework and, where necessary, standard data protection clauses. You can unsubscribe from the newsletter at any time by clicking the unsubscribe link or by notifying us.
Consent to receive advertising is not implied solely by placing an order or accepting the Terms and Conditions. To the extent that we inform existing customers about our own similar offers within the limits permitted by law, they may object to this use at any time.
When you use a contact form, we process the information you enter, the time of submission, and, if applicable, technical security data in order to respond to your inquiry and prevent misuse. Links to external websites lead to offerings from other data controllers; their privacy policies apply there.
For online store reviews and the display of trust elements, we use services provided by Trusted Shops SE, Subbelrather Strasse 15c, 50823 Cologne, Germany (“Trusted Shops”). When the Trustbadge or review widget is loaded, technical data such as IP address, date and time, referring websites, and browser and device data may be transmitted to Trusted Shops. When we send a review invitation after a purchase, the email address required for this purpose, as well as order and transaction data, may be transmitted to Trusted Shops. Trusted Shops processes this data on our behalf or under its own responsibility, depending on the service.
We disclose personal data to the extent necessary for the purposes stated here and where there is a corresponding legal basis for doing so. Recipients we use may include, in particular, Shopify, Onlineshop Experts, payment service providers, Planzer, Mailchimp, Klaviyo, Google, Meta, Trusted Shops, other IT and hosting providers, professional consultants, and government agencies. Other recipients of personal data may include those entities for which we have been granted consent to transfer data.We do not sell personal data.
Processors may process data only to the extent agreed upon. Recipients who pursue their own legal obligations or purposes may process data under their own responsibility, as applicable.
Some service providers or their subcontractors are located outside of Switzerland and the European Economic Area or may access data from there. This applies in particular to potential processing by Shopify in Canada and the U.S., as well as processing by Mailchimp, Klaviyo, Google, and Meta in the U.S. For transfers to Canada, an adequacy decision has been issued by the Federal Data Protection and Information Commissioner (FDPIC) or the European Commission. In the case of transfers to countries without adequate data protection, we use the safeguards provided by law—in particular, recognized standard data protection clauses—or rely on a legal exception. If a provider is certified under the Swiss-U.S. Data Privacy Framework, the transfer may additionally be based on that certification.
We retain personal data only for as long as is necessary to fulfill the respective purposes (in particular, to process orders and inquiries), to comply with legal obligations, or to enforce or defend against legal claims.
If the personal data is no longer necessary for the purposes of processing, or if we are otherwise legally obligated to delete personal data, we regularly delete or anonymize this data, provided there is no statutory retention obligation or compelling reason for further retention.
For business- and contract-related personal data (in particular, accounting records, invoices, and contractual correspondence), the statutory retention and documentation obligations under the Swiss Code of Obligations, as well as the applicable Liechtenstein provisions, which prescribe a retention period of ten years, apply.
Purely technical log data (log files), support requests unrelated to purchases, and declarations of consent are deleted upon expiration of the respective short security, processing, or statute of limitations periods defined for them.
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. These include, in particular, encrypted transmission, access restrictions, authorization policies, and the careful selection of service providers. However, data transmission over the Internet cannot be completely risk-free.
We do not make any decisions based solely on automated processing that result in legal consequences for you or significantly affect you. However, automated security or fraud checks may lead to a manual review of an order.
In certain cases, we may automatically process your personal data to evaluate specific personal aspects related to you (“profiling”). We use profiling, for example, in the following cases:
-To protect our customers, we must comply with our ongoing compliance requirements (e.g., anti-money laundering and anti-fraud measures), including by verifying how and from which geographic locations our online stores are used;
- Use of analysis and evaluation tools that enable targeted communication and advertising, including market and opinion research.
Under applicable data protection law, you may, in particular, request access to your personal data, correction of inaccurate data, erasure, restriction of processing, or objection. To the extent provided for by law, you may request the disclosure or transfer of certain data and may revoke your consent at any time with future effect. Legal requirements and restrictions apply.
To process a request, we may need to ask for additional identification information. Please direct requests to datenschutz@doetschgrether.ch or to the address of the data controller (see Section 1). If you believe that your personal data is being processed unlawfully, you may contact the Federal Data Protection and Information Commissioner.
To the extent that the EU GDPR applies, you also have the right to lodge a complaint with a competent data protection supervisory authority, in particular with the Liechtenstein Data Protection Authority.
We may amend this Privacy Policy at any time to comply with our obligations regarding information and transparency. The most current version is available in electronic form on the website of the respective online store.