To us at Louis Widmer, the protection of your personal data (hereinafter referred to as data) is paramount. In the cases described below, we process your data on the basis of the General Data Protection Regulation (GDPR). Personal data is information referring to a natural person.
Content of this Data Protection Declaration
- Data controller within the meaning of data protection law
- Overview of key facts
- Visiting our website
- Using our contact form
- Subscribing to our newsletter
- Prize draw for product evaluations
- Data processing within the scope if business relationships
- Inside (only for depositaries, business partners and representatives of the press)
- Job applications
- Use of e-learning platform (“e-learning”)
- Applying to visit our premises
- Data recipients
- Information on your rights
1. Data controller within the meaning of data protection law
Louis Widmer SA, Rietbachstrasse 5, 8952 Schlieren, Switzerland; phone: +43 433 77 00; e-mail: firstname.lastname@example.org
Your data is also processed in Switzerland. In its adequacy decision 2000/518/EC of 26 July 2000, the European Commission resolved that Switzerland implements an adequate level of data protection.
You can contact our data protection officer with questions regarding data protection via email (email@example.com).
2. Overview of key facts
a) What is the purpose for processing your data?
We process any data that you enter in our contact form for dealing with your enquiry. Additional information
We process the data entered by you when subscribing to our newsletter to send you regular product advertising. Additional information
We process the data entered by you when evaluating our products so that you are able to participate in the prize draw. Apart from that, your data is only used for anonymised marketing purposes. Additional information
If you are one of our business partners, use “Inside”, our learning platform, or if you apply for a job with us, we process your data to fulfil our obligations arising from an agreement or for preparing the conclusion of an agreement. In some cases, we also process your data for sending advertising. Additional information
If you apply to visit our premises, we process your data to send you a confirmation e-mail. Additional information
b) What are your rights regarding your data?
You have the right to request information on your data as well as its correction, deletion and blocking. You may also have the right to data transferability. You can revoke your consent with future effect. You can object to some types of processing. You can also lodge a complaint with a data protection authority. Additional information
3. Visiting our website
a) General information
Your IP address, country from where you access the website, date, time and duration of access to our website and its sub-pages, information on your browser and operating system, including display resolution and language settings, are processed when accessing our website. This data is sent to us automatically by your browser and/or internet provider. This data is stored in log file for 14 days.
This data is processed on the basis of Art. 6 lit. f GDPR exclusively for facilitating your visit to our website, to implement measures against any potential misuse of our website and for statistical purposes in accordance with Section 3. c). It is in our interest that our website is displayed to you correctly. The collection of this data is not mandatory. However, it is impossible to use the website without collecting it for technical reasons.
We also use session and permanent cookies. Cookies are small files containing an identification number issued by us. Cookies are stored on your computer or mobile device when you access our website. If you access our website again in the future, your computer or mobile device can be recognised thanks to this identification number. Cookies make it easier for you to navigate our website and help us to adjust the design and contents of our website to meet your expectations. Permanent cookies that are created when using the website originate from Google Analytics (see 3. c below).
We may install session cookies in accordance with Art. 6 (1) lit. f GDPR. Session cookies are installed so that you do not have to repeatedly enter data on our website (e.g. website login and language selection) even if you access other internet pages in the meantime. Session cookies are deleted when closing the browser. Permanent cookies are installed on the basis of Art. 6 (1) lit. f GDPR and also Art. 6 (1) lit. a GDPR if you have given your consent.
c) Google Analytics
Google processes this data by our order for analysing the use of our website, compiling reports on the activities on our website and providing us with further services related to the use of our website. Google Analytics uses the data contained in the log files for preparing statistics on the access to and use of our website, for example. Pseudonymous usage profiles may be prepared for visitors to our website from the processed data.
We only use Google Analytics with IP anonymisation. This means that Google abbreviates your IP address within the member states of the European Union or European Economic Area. The full IP address is only transferred to Google in the USA and abbreviated there in exceptional circumstances.
You can block cookies by adjusting your browser settings accordingly (see above). You can also block the data created by the cookie from being processed by installing the plugin available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Alternatively, or within mobile browsers, you can click on the following link:
This installs an opt-out cookie in your current browser which is effective on our website. You need to click on the link again if you delete the cookies in this browser. If you use several devices or browsers, you need to click on this link for each device and browser.
For those exceptional circumstance where Google transfers data to the USA, Google has agreed to comply with the “EU-US-Privacy-Shield”. In its adequacy decision (EU) 2016/1250 of 12 July 2016, the European Commission resolved that this creates an adequate level of data protection.
The data is processed on the basis of Art. 6 (1) lit. f GDPR. We have a justified interest in adjusting our website to meet the requirements of the website visitors on the basis of the analysis of the above-mentioned statistics and to use these statistics for internal market research.
For further information on Google Analytics, please go to: https://support.google.com/analytics/answer/6004245?hl=en. For information on the cookies installed by Google Analytics, please go to: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
d) Google Maps
Our website contains Google Maps contents provided by Google. Together with Google, we are jointly responsible for processing your data when using Google Maps on our website. We have concluded an agreement with Google for this purpose. You can read it here: https://privacy.google.com/intl/en/businesses/mapscontrollerterms/
When visiting our website with integrated Google Maps, data on your behaviour when using Google Maps is transferred and processed by Google. Google is notified, for example, that you have accessed the corresponding sub-page on our website. Your IP address is also transferred. Google processes this data in the form of usage profiles, which it uses for market research and/or creating a requirements-based design for Google Maps. If Google customers are logged into their Google accounts, this data is directly linked. If you wish to prevent this, you need to log out from your Google account before visiting our website. For further information on the Google data protection policy, please go to: https://www.google.com/intl/de/policies/privacy/.
4. Using our contact form
Section 7 applies to data that you enter in our contact form, which is required for fulfilling an agreement between your company and us or for implementing pre-contractual measures. We may also process the data you have entered in our contact form in accordance with Art. 6 (1) lit. a GDPR outside contractual relationships if you have consented to such processing by clicking on the “SEND” button.
The data is processed for dealing with your enquiry sent through the contact form. The data is deleted after two years from receipt of your enquiry at the latest. The provision of this data is not mandatory and not required for concluding an agreement. However, you need to provide an e-mail address when using the contact form as we are otherwise unable to respond to your enquiry. Any other data is provided by you on a voluntary basis. However, if you do not enter your name, we are unable to address you in person.
5. Subscribing to our newsletter
If you have subscribed to a newsletter, we process the data that you have entered when subscribing. We process your e-mail address for the purpose of sending our skin care product newsletters up to 12 times per year. After subscribing to our newsletter, we send you an email containing a link to verify your e-mail address. Your consent, which you give us by subscribing to the newsletter, forms the legal basis in accordance with Art. 6 (1) lit. a GDPR.
If you no longer wish to receive the newsletter in the future, you can revoke your consent to receiving the newsletter at any time and without stating any reasons by sending an e-mail to firstname.lastname@example.org (for further information on the right to revoke your consent, see Section 13.). Alternatively, you can unsubscribe from the newsletter by clicking on www.louis-widmer.ch/de_CH/info-center/kundendienst/abmeldung-newsletter or the unsubscribe link in the e-mail newsletter.
Your data, which you have entered when subscribing to the newsletter, will be deleted as quickly as possible after you have revoked your consent or unsubscribed from the newsletter. If you are also one of our customers, business partners or employees, this data may be stored for longer periods and for other purposes, such as fulfilling contractual and employment relationships or mandatory retention periods.
Our newsletter is a voluntary offer. However, you need to provide your e-mail address so that we can send the e-mail newsletter. No other information is required for sending the newsletter. The provision of your name is voluntary and serves the purpose of us addressing you in person.
6. Prize draw for product evaluations
If you have evaluated one of our products on our website, your data is processed so that you can participate in the prize draw. We require your e-mail to notify you should you have won. We require your name so that we can address you in person. If you participate in a product evaluation, we also process your anonymised information for marketing purposes. The legal basis for this is Art. 6 (1) lit. b and f GDPR. We have an interest in continuously improving our products and creating customer surveys for this purpose.
Your data is usually deleted after the prize draw, in other words no later than two months afterwards. If you have won a prize, your data is also stored until the prize has been sent to you. If and insofar as we are obliged by law to store some of your data, Section7. of this Data Protection Declaration applies with regard to the duration of the storage. Product evaluations are voluntary and not required for concluding an agreement with us.
7. Data processing within the scope if business relationships
We may process data on the basis of Art. 6 (1) Lit. b GDPR if this is required for fulfilling an agreement between you and us or for implementing pre-contractual measures in response to your enquiry. We therefore process your data, in particular, for contractual management purposes and communicating with you. This data contains your name, invoice and delivery address, e-mail address and sometimes also your phone and fax number and payment details such as account details (customer data).
It is not mandatory to provide the data. However, we need to process your name or company name, e-mail address and address for concluding an agreement. Without this data, it would be impossible to send e-mails to you, so as to send contractual documents or offers, invoices and potential assertions of justified claims.
We may process this data until the final processing of the respective agreement and if necessary also within the legal statutes of limitation and/or warranty periods for the above purposes. If the data must be stored for fulfilling our legal obligations in accordance with Art. 6 (1) lit. c GDPR in conjunction with trade and tax laws (e.g. Section 257 of the German commercial Code (Handelsgesetzbuch – HGB) or Section 147 of the German Tax Code (Abgabenordung – AO), we may store it until such retention periods have expired. These retention periods can last up to 10 years.
8. Inside (only for depositaries, business partners and representatives of the press)
If your register for Inside, we process your data that you have entered during the registration process as well as your login data for each login.
The purpose of this processing is to provide you with information, product images and press photos intended particularly and exclusively for depositaries, business partners and representatives of the press. We also process your data to ensure that only registered users can access Inside. We also process your e-mail address and address for the purpose of contacting you should you have forgotten your password. We require information on the country of your registered address or head office to display those products licensed and available in your country. We exclusively process the information on your gender for addressing you correctly. The legal basis for this is Art. 6 (1) lit. b and f GDPR.
We store the information you have provided when registering for as long as you remain registered for Inside. Your registration is deleted if you have not logged in for three years.
It is not mandatory to provide the data in Inside. However, your (company) name, e-mail address and password are crucial for registering with inside as we would otherwise be unable to identify you as a registered user when logging in.
9. Job applications
If you apply for a job with us, your data is processed for the purpose of making a decision about employing you on the basis of Art. 6 (1) lit. b GDPR. We store this data for the purpose of processing the application process for no longer than six months from receipt of your application, after which it is deleted. Any other processing is permissible for purposes of concluding an employment contract on the above legal bases if you are employed by us following the application process.
It is not mandatory to provide your data. However, the provision of your master data as well as professional qualifications and proof thereof in accordance with the respective job description is required if you wish to enter into an employment contract with us. Otherwise, we are unable to check your application and contact you. The provision of further data for a potential conclusion of an employment contract with us is not a requirement and therefore voluntary.
10. Use of e-learning platform (“e-learning”)
If you use our learning platform, we may process your data if this is required for fulfilling the contract concluded between you and us on the use of the learning platform (Art. 6 (1) lit. b GDPR). We therefore process your data for confirming your registration on the learning platform and to enable you to log in to the learning platform. On this learning platform, you can check which learning modules you have started or completed. We require information on the country of your registered address or head office to display the learning platform in your own language. The learning platform is an exclusive offer for customers of Louis Widmer, its employees and Louis Widmer International. We therefore also require the customer number and post code of your pharmacy to check your entitlement to use the learning platform.
We also use your data for sending e-mail advertising and for notifying you should you have won a prize. The legal basis for this is Art. 6 (1) lit. f GDPR. We have an interest in direct marketing measures (see Section 13 for your right to object).
If you enter data in non-mandatory fields, the legal basis is your consent (Art. 6 (1) lit. a GDPR). We exclusively process the information on your gender for addressing you correctly. We process your details on the pharmacy where you work and your position for statistical purposes.
It is not mandatory to provide the data. However, you need to provide us with your name, e-mail address, post code and customer number of your pharmacy to conclude an agreement. Without this data, we are unable to send confirmation e-mails to you and address you correctly in e-mails and on the learning portal. We would also be unable to check if you are entitled to use our learning portal. All other information is voluntary.
Section 7. applies correspondingly for as long as your data is being stored. Your registration is deleted no later than the following calendar month if you have not logged in for 10 years. If you have provided us with your data on a voluntary basis, we delete or anonymise it as soon as we receive your revocation of consent.
11. Applying to visit our premises
If you apply to visit our premises, we process the data that you have entered during your registration.
We process your data for fulfilling the agreement or implementing pre-contractual measures. In particular, we process your e-mail address so that we can send you a registration confirmation or notify you of possible changes to the date of your visit. We process your name for the accurate allocation of your registration and to enable us to address you in person. The legal basis for data you have entered in mandatory fields is Art. 6 (1) lit. b GDPR and your consent with regard to data that you have provided on a voluntary basis (Art. 6 (1) lit. a GDPR).
Section 7. applies correspondingly for as long as your data is being stored.
Our site visits are a voluntary offer. However, we require your e-mail address and name for registering your visit as we would otherwise be unable to send you a confirmation of your registration. No other details are required for participating in an event. The provision of your phone number is voluntary and serves the purpose of us contacting you more quickly
12. Data recipients
We may transfer some of your data to order processors or other data recipients. Order processors process your data according to our instructions and not for their own purposes. We use the following order processors:
- Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics)
- Louis Widmer GmbH, Grossmattstr. 11, 79618 Rheinfelden, Germany (e-learning platform administration and customer service)
- Louis Widmer GmbH, Samergasse 288, A-5020 Salzburg, Austria (e-learning platform administration and customer service)
- Louis Widmer NV Dutch branch, Haerheidelaan 9, B-9140 Temse, Belgium (e-learning platform administration and customer service in Belgium and the Netherlands)
- Detail Net AG, Forchstr. 86, 8032 Zurich, Switzerland (Inside operator)
- Frei, Partner Werbeagentur AG, Badische Bahnhofstr. 17, 8212 Neuhausen am Rheinfall, Switzerland (marketing)
- Fortrabbit GmbH, Görlitzer Str. 52, 10997 Berlin, Germany (hosting)
- Webgate AG, Riedstr. 3, 8953 Dietikon, Switzerland (remote maintenance)
- information multimedia communication AG (“imc”), Industriestr. 50b, 8304 Wallisellen, Switzerland (e-learning platform provider)
- IMC Information Multimedia Communication AG, Scheer Towder, Uni-Campus Nord, 66123 Saarbrücken, Germany (subcontractor of imc)
- IMC Information Multimedia Communication SRL, Str. Nicolaus Olahus, No. 5, Corp A, Etaj 15, 550370 Sibiu, Romania (subcontractor of imc)
- Microsoft Ireland Operation Ltd., Atrium Building Block B, Carmanhall Road, Sandyford Industrial Estate, Dublin 18, Ireland (subcontractor of imc)
- Possibly also other service providers in the data carrier destruction, print and IT service industries.
We also may transfer some of your data to the following recipients for the following purposes and for processing agreements (Art. 6 (1) lit. b GDPR) or maintaining legitimate interests (Art. 6 (1) lit. f GDPR).
- Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Google Maps)
- Telecommunication and transport service providers for communicating with you
- Law enforcement agencies and courts for enforcing or defending potential claims
- Insurance companies, auditors, lawyers or tax advisors
The data which is transferred to Google may be transferred to other Google companies in the USA. These companies have agreed to comply with the “EU-US-Privacy-Shield”. In its adequacy decision (EU) 2016/1250 of 12 July 2016, the European Commission resolved that this creates an adequate level of data protection in the USA.
Your data may be transferred to Switzerland if our order processors or other data recipients are domiciled in Switzerland. In its adequacy decision 2000/518/EC of 26 July 2000, the European Commission resolved that Switzerland implements an adequate level of data protection.
13. Information on your rights
You may request information from us if and which of your data we process. The scope and format of the information is stated in Art. 15 GDPR:
You have the right to receive your data transferred to us in a structured, standard and machine-readable format and transfer it to third parties if the processing is based on consent or an agreement and is an automatic process. By your request, and if is technically possible, we can also transfer such data directly to third parties.
You may request for incorrect data to be corrected. If required for the purpose of processing, you may request for us to complete incomplete data.
You may request for us to delete your data if the requirements in accordance with Art. 17 GDPR have been met in this respect. You may request for us to block your data under the terms and conditions of Art. 18 GDPR.
You can revoke your consent for us to process data at any time. We shall refrain from processing the data any further once we have received your revocation. Your revocation does not affect the legitimacy of the data processing activities conducted until the receipt of your revocation. We may still process your data despite your revocation if we are entitled or obliged to do so by law.
If we process data exclusively on the basis of Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your data on grounds arising from your specific personal situation. If you raise an objection, we shall no longer process the affected data, unless we are able to provide valid reasons for such processing which outweigh your interests, rights and freedoms or the processing serves to enforce legal claims.
You may further object to us processing your data for advertising purposes at any time without incurring any costs other than the transfer costs according to the basic tariffs.
You can assert your rights such as revocation and objection by sending us an e-mail to email@example.com.
You have the right to lodge a complaint under data protection law with authorities such as the Federal Data Protection and Information Commissioner, Feldweg 1, 3003 Bern, Switzerland.
Version: January 2019