Privacy policy

1. General

We, KleinMed AG, process personal data in accordance with the Swiss Data Protection Act (DSG) and, where applicable, the EU General Data Protection Regulation (GDPR). This policy applies to our website and our offerings.

2. Responsible

KleinMed AG

Hinterbergstraße 24, CH-6312 Steinhausen, Switzerland

Email: info@kleinmed.net

3. Processing within the framework of contracts

We process your details (e.g. name, address, email, payment details) for the purpose of processing orders and enquiries. Without this data, it is not possible to conclude a contract.

Recipients: Payment and shipping service providers, IT/hosting providers, suppliers if applicable.

Storage: According to Swiss law (OR 958f), generally 10 years for accounting-related data, otherwise until the purpose no longer applies.

Legal basis: Art. 31 para. 2 lit. a DSG / Art. 6 para. 1 lit. b GDPR.

4. Contact forms & communication

If you contact us via form or email, we process your details in order to handle your enquiry.

Legal basis: Art. 31 DSG / Art. 6 para. 1 lit. b GDPR.

5. Newsletter (Brevo)

We use Brevo (Sendinblue GmbH, Germany) to send newsletters. Your email address will only be used for this purpose. You can unsubscribe at any time.

Legal basis: consent (Art. 31 DSG / Art. 6(1)(a) GDPR).

6. Cookies & tracking

We use cookies to make our website functional.

• Necessary cookies: For basic functions (e.g. shopping basket).
• Analysis and marketing cookies: e.g. Google Analytics, Google Tag Manager, Meta Pixel. These are only set after consent (EU).

You can control the use of cookies in your browser settings.

7. Web analysis & marketing tools

• Google Analytics / Tag Manager: Provider Google Ireland Ltd. (transfer to the USA possible). IP anonymisation active. Basis: Contract for order processing & standard contractual clauses.
• Meta Pixel: Provider Meta Platforms Ireland Ltd. (transfer to the USA possible). Used for the evaluation and control of advertising. Basis: Contract for order processing & standard contractual clauses.

8. Data transfer to third countries

When using the aforementioned services, data may be transferred to the USA. We rely on standard contractual clauses of the EU Commission and implement additional protective measures (e.g. IP anonymisation, encryption).

9. Rights of data subjects

Under the DSG and GDPR, you have the following rights in particular:

• Information about whether and which data we process
• Correction of incorrect data
• Deletion, restriction or disclosure of your data
• Revocation of consent
• Objection to processing (in particular direct marketing)

Persons in the EU also have the option of contacting a data protection supervisory authority. In Switzerland, the Federal Data Protection and Information Commissioner (FDPIC) is responsible.

10. Data security

We protect your data through appropriate technical and organisational measures (e.g. encryption, access restrictions).