PRIVACY & DATA PROTECTION POLICY

Suisse MediCare Sagl

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The entity responsible for the processing of your personal data is:

Suisse MediCare Sagl
Corso Elvezia 23
6900 Lugano – Switzerland
Email: hello@suissemedicare.ch
Phone: +41 76 402 18 87

Suisse MediCare Sagl (hereinafter “SMC”) manages this website and the related B2B purchasing processes for medical professionals, clinics, and aesthetic centres.

SMC does not process data of private consumers (no B2C activity).

2. WHAT PERSONAL DATA DO WE COLLECT?

We only collect data strictly necessary for B2B operations:

Identification & Contact Data

First and last name
Professional title and clinic/company name
Business address
Business email
Business telephone number
VAT number (when applicable)

Account Data (B2B registration)

Username
Password (encrypted, never visible to us)

Order & Transaction Data

Products purchased
Billing and shipping data
Payment status and transaction ID
Payment method
Important: Payments are managed exclusively through Stripe.
SMC does not store or access your card details.

Data Provided Voluntarily

Messages sent to hello@suissemedicare.ch
Information entered through contact forms or request forms
Any material voluntarily shared with SMC for professional purposes

Newsletter & Mailing List Data (B2B Only)

Email address
Professional profile (e.g., doctor, clinic, aesthetic centre)
Collected for the purpose of sending professional updates, promotions, scientific material and product information.

Automatically Collected Technical Data (Cookies)

Information necessary for the functioning of the website (WooCommerce cookies, login cookies, session cookies).
No profiling cookies are used unless explicitly accepted.

3. HOW DO WE OBTAIN YOUR DATA?

We collect your data through:

B2B account creation
Order placement
Contact forms or direct email communication
Newsletter subscription
Cookies necessary for website functionality
Technical logs generated automatically by the hosting provider (one.com)

We do not purchase or acquire external databases.

4. DO WE PROCESS DATA OF MINORS?

No.
SMC works exclusively with professionals and clinics.
No data of minors is collected, stored, or processed.

5. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

SMC may process your personal data for the following professional purposes:

Operational Purposes

Managing B2B registrations and professional accounts
Processing and delivering orders
Handling invoices, payments, and transaction confirmations
Providing customer service and professional support

Legal and Compliance Purposes

Compliance with Swiss and EU regulations (GDPR, nLPD, commercial obligations)
Tax and accounting requirements
Prevention of fraud and misuse

Communication Purposes

Responding to professional inquiries
Sending important service updates (order status, logistics, product availability)

Marketing Purposes (B2B Only)

With explicit consent:

Professional newsletters (Mailchimp)
Educational materials, scientific updates
Information about promotions and product launches
Invitations to webinars and training sessions

You may withdraw consent at any time via the unsubscribe link or by writing to hello@suissemedicare.ch.

6. LEGAL BASIS FOR PROCESSING

SMC processes data based on:

Contract performance (order processing, account creation)
Legal obligations (invoicing, tax regulations)
Legitimate interest (security, fraud prevention, professional communications)
Consent (newsletter subscription, optional forms)

7. WHO HAS ACCESS TO YOUR DATA?

Access is limited to what is strictly necessary.

Your data may be shared with:

Stripe (payment processing)
WooCommerce (order management framework)
Mailchimp (newsletter campaigns, if subscribed)
One.com (website hosting and technical logs)
Swiss or EU authorities only if legally required

We do not sell, trade, or transfer your data to third parties for marketing purposes.

8. INTERNATIONAL DATA TRANSFERS

SMC operates in Switzerland and Germany.

Data may be stored or processed in:

Switzerland (adequate under GDPR)
EU/EEA (when using Stripe, Mailchimp servers in the EU if applicable)

If transfers occur outside Switzerland/EU, they are protected through:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Equivalent safeguards required by GDPR/nLPD

9. HOW LONG DO WE KEEP YOUR DATA?

Account data: active until the client requests deletion
Order and invoicing data: 10 years (Swiss legal requirement)
Professional communications: until consent is withdrawn
Technical logs: as required by the hosting provider (typically 30–180 days)

After the retention period, data is securely deleted or anonymized.

10. SECURITY MEASURES

SMC applies strict technical and organisational security measures:

SSL encryption
Encrypted passwords
Secure payment processing via Stripe
Access restriction to authorised personnel only
Regular system updates and backups
Hosting at a professional infrastructure (one.com)

11. YOUR RIGHTS

You may exercise the following rights under GDPR and Swiss nLPD:

Access your personal data
Request correction of inaccurate data
Request deletion (when legally possible)
Restrict processing
Object to certain types of processing
Data portability
Withdraw consent at any time (newsletter, non-essential communications)

Requests should be sent to:
hello@suissemedicare.ch

12. COMPLAINTS

If you believe that your data has been processed improperly, you may lodge a complaint with:

FDPIC – Swiss Federal Data Protection and Information Commissioner
Or the competent EU authority, depending on your location

13. CHANGES TO THIS PRIVACY POLICY

SMC may update this policy to remain compliant with legal obligations and business needs.
Any changes will be published on this website with the updated revision date.