The protection of your personal data is an important concern for us. With this privacy policy, we inform you pursuant to Art. 19 revDSG about which personal data we collect in connection with the use of our website, for what purposes we use this data, and what rights you are entitled to.
We have designed our website to collect as little data as possible. In principle, visiting our website is possible without providing personal data. Only when you use certain services (e.g. contact form, newsletter subscription, registration in the professional area) does the processing of personal data become necessary. We adhere to the principle of proportionality.
The processing of personal data is carried out exclusively in accordance with the revised Federal Act on Data Protection (revDSG, SR 235.1, in force since 1 September 2023) and the associated Data Protection Ordinance (DSV).
The terms used in this privacy policy have the following meanings:
– Personal data: All information relating to an identified or identifiable natural person (e.g. name, e-mail address, IP address).
– Processing: Any operation concerning personal data, e.g. collection, storage, use, transmission or deletion.
– Controller: The natural or legal person who alone or jointly with others determines the purposes and means of the processing.
– Processor: A person or entity that processes personal data on behalf of the controller.
– Consent: Any freely given, specific, informed and unambiguous indication of the data subject's wishes.
Controller pursuant to the revDSG is:
Ceres Heilmittel AG
Bachtobelstrasse 6
8593 Kesswil
Switzerland
Telephone: +41 71 466 82 82
E-mail: info@ceresheilmittel.ch
Website: www.ceresheilmittel.ch
Commercial Register: CH-440.3.000.334-6
VAT Number: CHE-108.789.627
Managing Director: Christoph Kalbermatten
Ceres Heilmittel AG has voluntarily appointed a data protection advisor pursuant to Art. 10 revDSG. You can contact him as follows:
Riccardo Loffreda
Bachtobelstrasse 6
8593 Kesswil
Switzerland
E-mail: datenschutz@ceresheilmittel.ch
4.1 Lawfulness of Processing
Processing of personal data is generally permitted under the revDSG, provided that the data processing principles are observed (Art. 6 revDSG). If processing violates the personality of the data subject, it is only permissible if a justification according to Art. 31 revDSG exists:
– Consent of the data subject
– Overriding private or public interest - this includes in particular processing of personal data for contract fulfilment (Art. 31 para. 2 revDSG)
– Law - processing is expressly provided for or required by federal law.
Some of the services we use transfer personal data abroad. If the recipient country does not provide a level of data protection recognised as adequate by the Swiss Federal Data Protection and Information Commissioner (FDPIC), we rely on appropriate safeguards pursuant to Art. 16 revDSG, especially standard data protection clauses. If a provider is certified under the EU-US Data Privacy Framework (DPF), the transfer to the USA is considered legally protected.
4.3 Retention Period
Personal data is deleted or anonymised as soon as the purpose for retention ceases. Further retention only takes place if statutory retention obligations exist.
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The technical delivery is carried out via the Vercel platform and the Vercel Edge Network. Depending on the location of the user, content may be delivered via different Edge locations; for access from Switzerland and Europe, delivery usually takes place via European Edge locations (e.g. Frankfurt).
A data processing agreement in the form of the Vercel Data Processing Addendum exists with Vercel. If Vercel Inc. or sub-processors it uses process personal data in third countries, especially in the USA, the transfer is based on the EU-US Data Privacy Framework and/or the standard data protection clauses pursuant to Art. 16 revDSG.
Whenever our website is accessed, our system automatically collects the following data:
– IP address of the accessing device
– Date and time of the access
– Name and URL of the requested file
– Website from which the access comes (referrer URL)
– Browser and operating system used
– Amount of data transmitted and HTTP status code
These data are not merged with other data sources.
Purpose of Processing: Server logs - security and availability of the website
Legal basis: Overriding interest (Art. 31 para. 1 revDSG)
Retention period: Max. 14 days
When you contact us via contact form or e-mail, the data you provide will be used to process your enquiry.
Purpose of Processing: Contact form / e-mail enquiries
Legal basis: Overriding interest, in particular contract initiation or fulfilment (Art. 31 para. 1 and 2 revDSG)
Retention period: 6 months after final processing; statutory retention periods remain unaffected
Your data will not be passed on to third parties without your consent.
7.1 Double opt-in and consent
Subscription to the newsletter takes place via the double opt-in procedure: After subscribing, you will receive a confirmation e-mail in which you must confirm your registration by clicking on a link.
Purpose of Processing: Newsletter dispatch and recipient management
Legal basis: Consent (Art. 31 para. 1 revDSG)
Retention period: Until withdrawal of consent (unsubscription)
Purpose of Processing: Double opt-in log (proof of consent)
Legal basis: Legal obligation (Art. 31 para. 1 revDSG)$
Retention period: 3 years after unsubscription
7.2 Brevo
We use Brevo GmbH, Köpenicker Strasse 126, 10179 Berlin, Germany, for sending our newsletters.
We have concluded a data processing agreement with Brevo. Brevo processes your data solely on our behalf and according to our instructions.
Our newsletters contain a tracking pixel that records if and when an e-mail was opened and which links were clicked. We use this data exclusively to analyse and optimise our newsletter communication. Legal basis: Consent (Art. 31 para. 1 revDSG).
You can unsubscribe from the newsletter at any time — via the unsubscribe link in the newsletter or by e-mail to info@ceresheilmittel.ch
Brevo Privacy Policy: https://www.brevo.com/de/legal/privacypolicy/
Our website has a password-protected professional area exclusively accessible for healthcare professionals. Access is via a dedicated CERES account or through the DocCheck service.
8.1 Registration and Own Account
During registration, we collect personal data such as name, professional title and e-mail address to verify healthcare professional status and manage access.
Purpose of Processing: Registration and management of professional area account
Legal basis: Overriding interest, contract fulfilment (Art. 31 para. 1 and 2 revDSG)
Retention period: Until account deletion upon request; thereafter max. 3 years for evidential reasons
8.2 DocCheck
Alternatively, you can verify and log in via DocCheck. Provider: DocCheck AG, Im Mediapark 8, 50670 Cologne, Germany.
When using DocCheck, the following cookies are set:
Cookie: doccheck_user_id
Purpose / retention period: Single sign-on for all DocCheck logins / 1 session
Cookie: doccheck_scu_data
Purpose / retention period: Provision of tailored content based on pseudonymised characteristics (profession, country, language) / 1 year
The information generated by the DocCheck cookies is transmitted exclusively to DocCheck servers. No passing on to third parties or data transfer outside the EU takes place.
DocCheck Privacy Policy: https://more.doccheck.com/de/privacy
Our website uses cookies. Cookies are small text files that are stored in your browser’s cache and enable the recognition of your browser.
9.1 Technically Necessary Cookies
Technically necessary cookies are required for the operation of the website. They are set on the basis of overriding interest (Art. 31 para. 1 revDSG) and do not require prior consent.
9.2 Cookies Requiring Consent
Cookies that are not technically necessary are only set with your explicit consent (Art. 31 para. 1 revDSG). You give your consent via our cookie banner on your first visit to the website.
You can revoke your consent at any time with effect for the future by accessing the cookie settings on our website.
Below we document the cookies and similar services used on the website: Cookie Table
9.3 Cookie Management in the Browser
You can set your browser to accept cookies only on request or to reject them entirely. Disabling cookies may limit the functionality of this website.
Videos provided by YouTube are embedded on our website. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you access a page with an embedded YouTube video, your browser establishes a connection to YouTube servers. YouTube is informed which page you visited. Assignment to your Google account is possible if you are logged in.
Purpose of Processing: Embedding YouTube videos
Legal basis: Consent (Art. 31 para. 1 revDSG)
Retention period: According to Google privacy policy; until withdrawal
YouTube videos are only loaded once you have consented to the use of consent-required services in the cookie banner.
Google is certified under the EU-US Data Privacy Framework (DPF). Additionally, standard data protection clauses under Art. 16 revDSG are applied.
Google/YouTube Privacy Policy: https://policies.google.com/privacy
Content from the social network Instagram is embedded on our website. Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When loading Instagram content, a connection is established to Meta servers. Data may be transmitted to Meta, even without an Instagram account.
Purpose of Processing: Instagram feed on the website
Legal basis: Consent (Art. 31 para. 1 revDSG)
Retention period: According to Meta privacy policy; until withdrawal
Instagram content is only loaded once you have consented to the use of consent-required services in the cookie banner.
Meta is certified under the EU-US Data Privacy Framework (DPF). Additionally, standard data protection clauses under Art. 16 revDSG are applied.
Meta/Instagram Privacy Policy: https://privacycenter.instagram.com/policy/
Our website features a therapist directory with an interactive map. The map is displayed using the Leaflet library (open source, no external data transmission). The map service used is OpenStreetMap.
12.1 OpenStreetMap
The map service provider is the OpenStreetMap Foundation (OSMF), St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
When loading the map, your browser establishes a connection to OpenStreetMap Foundation servers. Your IP address is transmitted.
Purpose of Processing: Loading map material (OpenStreetMap)
Legal basis: Overriding interest (Art. 31 para. 1 revDSG)
Retention period: According to OpenStreetMap privacy policy; no permanent storage by us
OpenStreetMap Privacy Policy: https://osmfoundation.org/wiki/Privacy_Policy
12.2 Data in the Therapist Directory
The therapist directory contains personal data of therapists (name, professional title, location). These data are only published with the explicit consent of the individual concerned.
Purpose of Processing: Publication of therapist data in the directory
Legal basis: Consent of the registered person (Art. 31 para. 1 revDSG)
Retention period: Until withdrawal by the registered person
This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by "https://" in the address bar and the padlock symbol in the browser.
Disclosure of your personal data to third parties only occurs if:
– You have given your explicit consent,
– An overriding interest exists - in particular for contract fulfilment (Art. 31 para. 1 and 2 revDSG),
– A legal obligation exists, or
– Another justification reason according to Art. 31 revDSG applies.
If we use service providers within the scope of a data processing agreement, we have concluded corresponding data processing agreements with them.
a) Right of access (Art. 25 revDSG)
You have the right to request information about whether and which personal data we process about you.
b) Right to Rectification (Art. 32 revDSG)
You have the right to request the correction of incorrect personal data.
c) Right to Destruction and Cessation of Processing (Art. 32 revDSG)
You have the right to demand that unlawfully processed personal data be destroyed or that processing be discontinued. The revDSG recognises this claim as a civil law right of action; it requires that no statutory retention obligation applies.
d) Right to a Dispute Note (Art. 32 revDSG)
If neither the accuracy nor the inaccuracy of your personal data can be determined, you can request that a dispute note be added.
e) Right to Data Portability (Art. 28 revDSG)
You have the right to request the transfer of your personal data in a common electronic format, provided the data are processed automatically and processed based on your consent or for contract fulfilment.
f) Right to Object (Art. 30 in conjunction with Art. 31 revDSG)
YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA IF IT VIOLATES YOUR PERSONALITY AND NO JUSTIFICATION GROUND UNDER ART. 31 REVDSG APPLIES. AFTER A REASONED OBJECTION, WE WILL CEASE PROCESSING UNLESS WE CAN DEMONSTRATE AN OVERRIDING JUSTIFICATION GROUND.
g) Right of Withdrawal of Consent
If processing is based on your consent, you have the right to revoke it at any time with effect for the future. The legality of processing carried out until the withdrawal remains unaffected.
h) Right to Complain to the FDPIC (Art. 49 revDSG)
You have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) if you believe that the processing of your personal data violates the revDSG:
Swiss Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
CH-3003 Bern
Telephone: +41 58 462 43 95
E-mail: info@edoeb.admin.ch
Website: www.edoeb.admin.ch
To exercise your rights, please contact us by e-mail at datenschutz@ceresheilmittel.ch or in writing at our address.
As a manufacturer of authorised and registered medicinal products, Ceres Heilmittel AG is legally obliged to record, process and, if necessary, forward reports of adverse drug reactions to the competent authorities (pharmacovigilance).
If you inform us about adverse effects of a CERES medicinal product — via contact form, e-mail or otherwise — we process the personal data required exclusively for this purpose.
Purpose of Processing: Recording and processing of reports on adverse drug reactions (pharmacovigilance)
Legal basis: Legal obligation under Art. 59 HMG in conjunction with Art. 61 ff. VAM and Art. 37 ff. AMBV as well as Swissmedic pharmacovigilance guidelines
Retention period: At least 10 years after the expiry of the last batch of the relevant medicinal product placed on the market
The following data categories may be processed as part of a report: name and contact details of the reporting person, information about the affected person (initials, age, gender), described symptoms and effects, medicinal product used, concomitant medication.
If a reporting obligation to the authorities arises from a report, the necessary data will be forwarded to Swissmedic in pseudonymised form. Personal data of the reporting person will not be passed on.
The processing of this data is subject to a legal obligation. An objection to this processing is therefore not possible if the legal requirements are met.
Our website contains links to external third-party websites. We have no influence on the content of these pages or their handling of personal data. This privacy policy only applies to our website ceresheilmittel.ch. We recommend reading the respective privacy policy before entering personal data on third-party sites.
This privacy policy is current as of June 2026. Updates may be necessary due to ongoing development of our website or changes in legal requirements.