Draft for review. The structure and standard content of this document are complete. Fields marked in gold (company name, registered address, register and VAT number) must be completed with your registered company data, and the document must be reviewed by a Swiss legal professional before launch. Remove this notice afterwards.

Legal

Privacy Policy

How we process personal data, in accordance with the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the EU GDPR.

1. Controller

The controller responsible for data processing on this website is:
Alpenix Swiss Peptides, Placeholder Address
Address number, Switzerland
E-mail for data protection matters: info@alpenix.ch

2. What data we process and why

2.1 Visiting the website

When you access this website, our hosting provider automatically records server log data (IP address, date and time, requested page, referrer, browser and operating system). This is necessary to operate the website securely and to detect and remedy faults and attacks. Legal basis: legitimate interest in secure and stable operation (Art. 31 nDSG; Art. 6(1)(f) GDPR).

2.2 Orders and customer account

When you place an order we process the data necessary to fulfil the contract: name, delivery and billing address, e-mail address, order and payment data, and the content of your order. This is necessary to conclude and perform the contract (Art. 6(1)(b) GDPR; contract performance under Swiss law). Payment data is processed by the payment service provider you select; we do not store complete card numbers.

2.3 Contact form and e-mail

If you contact us, we process your details and the content of your message in order to deal with your request. Legal basis: contract performance or our legitimate interest in responding to enquiries.

2.4 Cookies and consent

We use strictly necessary technologies (for example to maintain the shopping cart and your session) that are required for the website to function. These are set without consent. Analytics and marketing technologies are only activated with your prior consent, which you can give, refuse or withdraw at any time via Cookie Settings in the footer.

3. Recipients of data

We share personal data only where necessary, in particular with:

  • Hosting provider — provision and operation of the website;
  • Payment service providers — processing of payments;
  • Shipping and logistics providers — delivery of your order;
  • E-mail and IT service providers — order and enquiry communication;
  • Authorities — where we are legally obliged to disclose data.

These providers process data on our behalf or as independent controllers and are bound to comply with data protection law.

4. Transfer abroad

We process data primarily in Switzerland and in the European Economic Area. Where data is transferred to countries without an adequate level of data protection (for example the United States), we ensure appropriate safeguards, in particular the standard contractual clauses, or rely on the exceptions permitted by law (such as the performance of a contract).

5. Storage period

We keep personal data only for as long as is necessary for the purpose concerned, and thereafter as long as statutory retention obligations require. Accounting records are generally retained for ten years under Swiss law. Server log data is kept for a short period and then deleted.

6. Your rights

Within the framework of applicable law you have the right to:

  • Access to the personal data we hold about you;
  • Rectification of inaccurate data;
  • Deletion of your data, where no statutory retention duty applies;
  • Restriction of processing;
  • Data portability, where processing is based on consent or a contract;
  • Objection to processing based on legitimate interests;
  • Withdrawal of consent at any time with future effect.

To exercise these rights, contact info@alpenix.ch. You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the supervisory authority of your place of residence or work is competent.

7. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Data transmission over the internet is encrypted (TLS). No transmission over the internet can be guaranteed to be completely secure.

8. Minors

Our products are intended exclusively for adults. We do not knowingly collect personal data from persons under the age of 18.

9. Changes to this policy

We may amend this privacy policy to reflect changes in legal or factual circumstances. The version published on this website at the time of your visit applies.

10. Contact

For any question about data protection: info@alpenix.ch.