Skip to content
Viale Carlo Cattaneo 11, 6900 Lugano, Switzerland (opens in a new tab)Free pickup & home delivery091 922 80 30

Privacy Policy

1. Data controller

2. Data collected

The following personal data may be collected when using our online shop:

  • Name, email address, phone number (when placing orders)
  • Delivery address (for shipped orders)
  • Order data (products, quantities, prices)
  • Payment information (processed by Payrexx AG; we do not store credit card, TWINT or other payment data)
  • Technical data (browser type, access time) via the web server — IP addresses are only processed temporarily for abuse protection (rate-limiting) and are not permanently stored

3. Purpose of data processing

We process your data exclusively for the following purposes:

  • Processing your order and payment
  • Communication regarding your order (status updates, enquiries)
  • Compliance with legal retention obligations
  • Improving our services (in anonymised form)

4. Disclosure to third parties

Your data is only shared with the following third parties to the extent necessary for contract fulfilment, web analytics (with your consent) or legal obligations:

  • Payrexx AG (Thun, Switzerland) — payment processing
  • Swiss Post — order shipping
  • Google LLC (Mountain View, USA) — web analytics via Google Analytics 4, only with your explicit consent. IP addresses are transmitted in anonymised form. Legal basis for data transfer to the USA: EU-U.S. Data Privacy Framework. More information: Google Privacy Policy (opens in a new tab)

No data is shared with third parties for advertising purposes.

5. Data security

We take appropriate technical and organisational measures to protect your data, including encrypted transmission (TLS/SSL), secure server systems and cryptographically hashed passwords (bcrypt). Sensitive tokens are hashed before storage.

6. Retention period

Personal data is stored in accordance with legal retention periods (typically 10 years for business records pursuant to Art. 958f CO). As a pharmacy, we are subject to additional health-related retention obligations.

7. Cookies, web analytics & local storage

Technically necessary storage: We use the browser's localStorage for shopping cart, language settings, customer account and your cookie preferences. This data remains on your device and is not transmitted to third parties.

Google Analytics 4: With your explicit consent, we use Google Analytics 4 (Measurement ID: G-QV3LM1T1TK) to analyse website usage. Cookies are set (_ga, _gid) that transmit anonymised usage data to Google LLC (USA). IP anonymisation is enabled. You can revoke your consent at any time:

Change cookie settings

8. Your rights

Under the Swiss Federal Act on Data Protection (nFADP), you have the following rights:

  • Right of access: You may request information about your stored data.
  • Right to rectification: You may request correction of inaccurate data.
  • Right to erasure: You may request deletion of your data, unless a legal retention obligation applies.
  • Right to object: You may object to data processing at any time.
  • Right to data portability: You may request that your personal data be provided to you in a commonly used electronic format or transferred to another data controller (Art. 28 nFADP).

Please direct requests to: farmaciadelparco@ovan.ch
We will respond to your request within 30 days (Art. 25 para. 6 nFADP).

9. Supervisory authority

The competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.
www.edoeb.admin.ch (opens in a new tab)