Privacy Policy

This Privacy Policy explains how personal data is processed in connection with the ordering platform www.dascoli.ch and the pharmacy services provided through it.

Dascoli Pharma AG is the controller under data protection law. Stauffacher Apotheke is a business of Dascoli Pharma AG and carries out the pharmaceutical review, processing, dispensing and dispatch of medicinal products ordered through the platform.

Dascoli Pharma AG Münchhaldenstrasse 10 8008 Zurich Switzerland Telephone: +41 44 422 66 88 Email: hallo@dascoli-pharma.ch

Additional provisions may be set out in the Terms and Conditions, consent notices, information displayed during checkout and the cookie settings.

Identity and contact data. Name, address, date of birth, gender, telephone number, email address, preferred language, account and authentication data, and information about legal or authorised representatives.

Verification data. Information and documents required to verify identity, age or authority.

Health and prescription data. Patient records, health information, allergies and intolerances, medicinal products used previously or at the same time, medical prescriptions, issue date, prescribing medical professional, medicinal product, dosage, quantity, directions for use, supply and dispensing history, and information required for dispensing controlled substances.

Insurance and billing data. Health insurer, insured-person number, insurance-card data, social-security number, insurance model, coverage and cost-approval information, deductible, co-payment, invoices and payment history.

Order and transaction data. Products and services ordered, prices, payment method, delivery address, delivery status, queries, complaints and refunds.

Communication data. The content and metadata of communications with patients, representatives, prescribing medical professionals, insurers and other parties involved.

Technical data. IP address, device and browser details, access time, log data, security events, and technically necessary cookie and session data.

We receive personal data primarily from you or a person authorised by you. Further data may come from prescribing doctors or other medical professionals, health insurers and billing offices, payment and logistics providers, authorities or legally accessible registers. Technical data is generated when the platform is used.

If you provide data about another person, you must be authorised to do so and must ensure that the information is accurate and that the person concerned has been informed about this Privacy Policy.

We process personal data where necessary to:

provide ordering and pharmacy services, including account administration, identity verification, receipt and validation of prescriptions, pharmaceutical review, advice, preparation, dispensing, dispatch and follow-up care;

ensure medicinal-product and patient safety, including interaction and plausibility checks, queries to prescribing medical professionals, misuse prevention, recalls and pharmacovigilance;

perform and bill contracts, including price calculation, insurance-coverage checks, cost approvals, billing to health insurers or patients, payment, reminders and collection;

communicate with you and other parties involved, provide customer support and send order, delivery, safety and billing messages;

comply with legal and professional duties, including documentation, retention, reporting, accountability and disclosure requirements under health, therapeutic-products, controlled-substances, insurance, tax and data protection law;

operate and protect the platform and our systems, resolve errors, log access, maintain data quality, and detect fraud, misuse and security incidents;

establish, exercise or defend legal claims and conduct administrative or judicial proceedings; and

improve our services, in particular using fully anonymised or aggregated statistics. Health and prescription data is not used for personalised advertising or profiling.

We send marketing communications only where permitted by law or with your consent. You may object to such communications at any time.

Processing is carried out under the Swiss Data Protection Act and applicable sector-specific law. It is based in particular on steps taken before entering into a contract and performance of a contract, legal and professional duties, legitimate interests in operating a safe and orderly pharmacy and platform, and consent where required.

We process health data and other sensitive personal data only where permitted and necessary for pharmaceutical care, billing, compliance with legal or professional duties, the establishment, exercise or defence of legal claims, or on the basis of valid consent.

Within Dascoli Pharma AG, access is limited to employees and professionals who require the data for their work. Pharmacy secrecy, other duties of professional confidentiality and strict access controls apply.

Where necessary for the purposes described above and legally permitted, we may disclose data to:

treating and prescribing professionals, where pharmaceutical or medical clarification is required;

health insurers, billing offices and cost-approval bodies, where required for coverage checks and billing;

payment, collection and credit-reference providers, where required by the selected payment method or to enforce due claims;

logistics and delivery providers, limited to the information required for secure delivery;

IT, hosting, maintenance and security providers in Switzerland, which process data on our behalf and in accordance with our instructions;

authorities, courts, supervisory bodies, experts, insurers and legal advisers, where required by law or necessary to protect legal claims.

We do not sell personal data. Service providers are contractually bound to confidentiality, data protection and appropriate data security.

Patient, prescription, health, order, billing and account data from the platform is stored and processed on servers in Switzerland. There is no routine access to or disclosure of this personal data abroad.

A disclosure abroad may exceptionally be required where necessary for foreign judicial or administrative proceedings, a binding order, the establishment, exercise or defence of legal claims, or another exception provided by law. Any such disclosure is limited to what is necessary and is made in accordance with Swiss data protection law and applicable duties of professional confidentiality.

Fully anonymised and aggregated usage statistics that do not permit identification of any individual may be analysed in Switzerland or the European Economic Area. Such information is not personal data. Re-identifiable patient, prescription or health data is not made available for this purpose.

The platform uses technically necessary cookies and comparable technologies to enable sessions, login, language settings, the shopping basket, checkout and security. Essential functions cannot be provided without these technologies.

Optional analytics or marketing technologies are used only if they are described in the cookie settings and the required consent has been obtained. Patient, prescription and health data is not used for third-party tracking or personalised advertising.

Technical log data is processed to provide the platform, analyse errors, defend against attacks and ensure system stability, and is generally retained only for as long as required for these purposes.

We retain personal data for as long as required for the purposes described above, contract performance, medicinal-product and patient safety, statutory documentation and retention duties, or the establishment, exercise or defence of claims.

Patient, prescription, dispensing and billing records are retained in accordance with applicable health, therapeutic-products, controlled-substances, insurance and tax requirements. Data is then deleted or anonymised unless a legal duty or overriding legitimate interest requires continued retention.

We take appropriate technical and organisational measures to protect personal data. These include encryption in transit and at rest, role-based access rights, multi-factor authentication, logging, backups, system monitoring, security testing, contractual requirements for service providers and staff training.

No system is entirely free of risk. Unencrypted emails may be accessed, altered or misdirected. Please transmit prescriptions, health data and other confidential information only through the secure channels designated by us.

Under applicable data protection law, you may in particular request access to personal data processed about you, correction of inaccurate data, deletion or restriction of processing and, where provided by law, release or transfer of certain data. You may object to processing and may withdraw consent at any time with effect for the future.

These rights may be restricted, in particular by statutory retention duties, pharmacy secrecy, overriding interests of third parties or the need to establish, exercise or defend legal claims. We may require proof of identity to prevent unauthorised disclosure.

Requests should be sent to hallo@dascoli-pharma.ch or to the postal address in section 1. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Swiss data protection law applies primarily. Where the European Union General Data Protection Regulation applies to specific processing of general website or communication data, we also comply with its requirements. This does not change the fact that patient, prescription and health data from the platform is stored and processed in Switzerland.

We may amend this Privacy Policy if our processing activities or legal requirements change. The current version published on www.dascoli.ch applies.