Privacy Policy – Switzerland

Last updated: 1 June 2026

1) Introduction and Contact Details of the Controller

1.1 Thank you for visiting our website and for your interest. Below, we provide information about how we process your personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person (Art. 5(a) revFADP).

1.2 The controller responsible for processing personal data on this website within the meaning of the revFADP is:

Ceres Heilmittel AG
Bachtobelstrasse 6
CH-8593 Kesswil
Switzerland
Tel.: +41 71 466 82 82
Email: shop@ceresheilmittel.ch

1.3 The controller has appointed a Data Protection Officer, who can be contacted as follows:

Riccardo Loffreda
Bachtobelstrasse 6
8593 Kesswil
Switzerland
Tel.: +41 71 466 82 82
Email: datenschutz@ceresheilmittel.ch

2) Data Collection When Visiting Our Website

2.1 If you use our website for informational purposes only, we collect only the data that your browser transmits to our server (so-called server log files). When you access our website, we collect the following technically necessary data:

/ Website visited
/ Date and time of access
/ Amount of data transmitted in bytes
/ Source/referrer from which you accessed the page
/ Browser used
/ Operating system used
/ IP address used (where applicable, in anonymised form)

Processing is carried out on the basis of Art. 6(1) revFADP (legitimate interests of the controller) for the purpose of improving the stability and functionality of our website. The data is not disclosed or otherwise used.

2.2 For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

Shopify

We use the services of Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, to host our website.

All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorised disclosure to third parties.

As part of the aforementioned services, data may also be transferred to Shopify Inc. in the USA. For data transfers to the USA, the provider has appropriate safeguards in place in accordance with Art. 16 revFADP (European Commission Standard Contractual Clauses or transfer to a country with an adequate level of data protection as assessed by the Swiss Federal Data Protection and Information Commissioner, FDPIC).

4) Cookies

To make your visit to our website more attractive and to enable certain functions, we use cookies – small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (session cookies), while others remain on your device for a longer period (persistent cookies).

Where individual cookies involve the processing of personal data, such processing is carried out on the basis of Art. 6(1) revFADP (performance of a contract, legitimate interests or consent).

You can configure your browser to notify you when cookies are being set and decide individually whether to accept them. Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When you contact us (e.g. via a contact form or email), personal data is processed exclusively for the purpose of handling and responding to your enquiry.

The legal basis for processing is Art. 6(1) revFADP (legitimate interests or performance of a contract). Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

6) Use of Customer Data for Direct Marketing

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required is your email address. Providing any additional data is voluntary. We use the double opt-in procedure for newsletter subscriptions.

The legal basis is your consent pursuant to Art. 6(1) revFADP. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by contacting the controller.

6.2 Email Newsletters to Existing Customers

If you have provided us with your email address when purchasing goods, we reserve the right to regularly send you offers for similar goods by email. The processing of data is based on our legitimate interests pursuant to Art. 6(1) revFADP. You may object to the use of your email address for advertising purposes at any time.

6.3 Brevo

Our email newsletters are sent via Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

On the basis of our legitimate interests pursuant to Art. 6(1) revFADP, we transfer the data you provided when subscribing to the newsletter to this provider. Subject to your express consent, the provider carries out statistical performance analyses using web beacons. We have entered into a data processing agreement with the provider.

7) Data Processing for Order Fulfilment

7.1 To the extent necessary for the performance of the contract, your personal data will be disclosed to the commissioned transport company and financial institution pursuant to Art. 6(1) revFADP (performance of a contract).

7.2 Use of Payment Service Providers

Apple Pay

If you choose Apple Pay, payment processing is carried out via Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Further information on data protection is available at: https://support.apple.com/de-ch/HT203027

PayPal

PayPal is available as a payment method on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. If you select PayPal, your payment data will be disclosed to PayPal pursuant to Art. 6(1) revFADP exclusively for the purpose of processing the payment.

8) Website Features

8.1 Instagram Plugins

Our website uses plugins from the social network operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Data may also be transferred to Meta Platforms Inc. in the USA.

The plugins are initially deactivated (two-click solution). Only when you activate the plugins and thereby provide your consent pursuant to Art. 6(1) revFADP will your browser establish a connection to the provider's servers. You may withdraw your consent at any time. The provider has appropriate safeguards in place for data transfers to the USA in accordance with Art. 16 revFADP.

8.2 YouTube

This website uses plugins from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to display and play videos. Data may also be transferred to Google LLC in the USA. All aforementioned processing takes place only with your express consent pursuant to Art. 6(1) revFADP. Appropriate safeguards pursuant to Art. 16 revFADP are in place for data transfers to the USA.

8.3 Google Maps

This website uses Google Maps (API) provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you use Google Maps, information, including your IP address, is transmitted to Google servers. Where legally required, we obtain your consent pursuant to Art. 6(1) revFADP. Appropriate safeguards pursuant to Art. 16 revFADP are in place for data transfers to the USA.

8.4 Adobe Fonts (Typekit)

This website uses web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA. When you access the website, a connection is established to the provider's servers. This takes place only with your consent pursuant to Art. 6(1) revFADP. Appropriate safeguards pursuant to Art. 16 revFADP are in place for data transfers to the USA.

8.5 Google reCAPTCHA

We use the CAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, on this website. Data may also be transferred to Google LLC in the USA. Processing is based on Art. 6(1) revFADP (legitimate interests or consent). We have entered into a data processing agreement with the provider. Appropriate safeguards pursuant to Art. 16 revFADP are in place for data transfers to the USA.

8.6 Microsoft Forms

We use the services of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, to conduct surveys or provide online forms. In addition to the data you enter, information concerning your browser, operating system, date, time and IP address is collected. Processing is based on Art. 6(1) revFADP (performance of a contract or consent). We have entered into a data processing agreement with the provider.

9) Tools and Other Services

9.1 Cookie Consent Tool

This website uses the integrated cookie consent tool provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, to obtain user consent for cookies requiring consent. The tool sets technically necessary cookies to store your cookie preferences. Processing is based on Art. 6(1) revFADP.

9.2 Datadog

This website uses a service provided by Datadog, Inc., 620 8th Ave, 45th Floor, New York, NY 10018, USA, for the automated transmission of error reports. In the event of technical issues, the system automatically sends error reports to the provider. Processing is carried out pursuant to Art. 6(1) revFADP on the basis of our legitimate interests. For transfers to the USA, the provider relies on Standard Contractual Clauses.

10) Rights of the Data Subject

10.1 The revFADP grants you the following rights vis-à-vis the controller with regard to the processing of your personal data:

/ Right of access pursuant to Art. 25 revFADP
/ Right to rectification pursuant to Art. 32 revFADP
/ Right to erasure pursuant to Art. 32 revFADP
/ Right to restriction of processing pursuant to Art. 32 revFADP
/ Right to data portability pursuant to Art. 28 revFADP
/ Right to object to processing for direct marketing purposes
/ Right to withdraw consent previously given
/ Right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern (www.edoeb.admin.ch)

10.2 To exercise your rights, please contact: kontakt@ceres-spezialpflege.com

10.3 RIGHT TO OBJECT

If we process your personal data on the basis of legitimate interests, you have the right to object to such processing at any time on grounds relating to your particular situation. If you exercise your right to object, we will cease processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing.

If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. Upon receipt of your objection, we will cease processing your personal data for direct marketing purposes.

11) Cross-Border Data Transfers

If your personal data is transferred to countries outside Switzerland that do not provide a level of data protection comparable to that under Swiss law, we ensure that appropriate safeguards are in place (e.g. Standard Contractual Clauses pursuant to Art. 16 revFADP or transfers to countries deemed to provide an adequate level of protection by the FDPIC).

12) Retention Period for Personal Data

The retention period depends on the purpose of the processing and the applicable statutory retention periods (e.g. under the Swiss Code of Obligations and Swiss tax law). Personal data will be deleted as soon as it is no longer required for the purposes for which it was collected and there are no statutory retention obligations preventing its deletion.

13) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version is published on our website.

14) Contact

If you have any questions about our data protection practices or wish to exercise your rights, please contact:

Ceres Heilmittel AG
Bachtobelstrasse 6
8593 Kesswil
Switzerland

Tel.: +41 71 466 82 82
Email: shop@ceresheilmittel.ch