Privacy policy

Your personal data is processed by us as we are responsible for the data processing when being used on our websites and then stored for the period required to complete the purpose determined and our statutory obligations. The following informs you on which data is involved and in what way it is processed as well as your respective rights in this regard. Personal data means any information relating to an identified or identifiable natural person pursuant to Art. 4 Nr. 1 General Data Protection Regulation (GDPR).

A visit to our website is possible without providing any information about yourself. The browser used on you terminal device only sends automated information to our website server (e.g. browser type and version, data and time of access) to enable the website to set up a connection. The IP address of your enquiring terminal device is part of this process. This information is temporarily stored in a log file and after 52 weeksautomatically deleted. The processing of the IP address is for technical and administrative purposes related to the connection setup and stability to ensure the security and operational functionality of our website and to track any unlawful hacking attacks if required. The basis of legitimate processing of the IP address is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest arises from the previously stated security aspects and the requirement of ensuring the operative availability of our websites without disruption. We are not able to establish any reference as to your identity when processing the IP address and other information in the logfile.

Your personal data is transmitted to third parties should this be permissible by law and required pursuant to Art. 6 para. 1 p. 1 lit. b GDPR for the processing of the contractual relationship. This includes especially the transmission to forwarding companies to ensure the delivery of the goods you ordered and transmission of payment details to payment service companies or credit institutions in order to complete the payment procedure. The transmitted data is only to be used by the third party exclusively for the purposes stated.
We only transmit your personal data to third parties, when
• you expressly consent to the transmission pursuant to Art. 6 para. 1 p. 1 lit. a GDPR,
• when there is a statutory obligation to do so under Art. 6 para. 1 p. 1 lit. c GDPR.

Our website uses cookies. Cookies are small text files automatically set up on your browser and stored on your device (laptop, tablet, smartphone or similar) when visiting our website. Cookies do not cause any damage to your device, contain no viruses, trojan or other malware.
Information related to the specific device used is stored in the cookie. This does not mean however that we receive any information directly related to your identity. The use of cookies serves primarily to make your use of our services more convenient. We therefore use session cookies to recognize that you have previously visited specific pages on our website. This information is automatically deleted after leaving our site.
We use cookies to collect statistics on the use of our website and for the purpose of evaluation to optimize our services (see section5). These cookies ensure that your subsequent visit to our site is automatically recognized as a repeat visit. These cookies are automatically deleted after a specifically defined period. The data processed by cookies are required for the purposes specified and to protect our legitimate interests and those of others in accordance with Art. 6 para. 1 lit. f GDPR.
Most browsers automatically accept cookies. It is possible however to configure your browser not to store cookies on your computer or to always notify you before adding a new cookie. Should you completely block cookies it is possible that not all the functions of our website are available.

The lawful basis for the tracking measures we employ is Art. 6 para. 1 p. 1 lit. f GDPR. and are listed below.
The tracking measures used ensure that we provide a needs-orientated design and optimize our websites on an ongoing basis. Tracking measures are also applied to compile the statistical assessment of our websites. The data is then used to optimize the presentation of our website content. These interests are to be considered legitimate in the meaning of the provisions stated above.
The respective purpose for data processing and categorizing is stated in the description relating to the relevant tracking tool.

a) Google Analytics

• browser type/version,
This website uses Google Analytics, a web analysis service of Google LLC (www.google.com; as follows: ‘Google’). A pseudonymous usage profile is set up and cookies (see section4) used. The information on your use of this website generated by the cookie, such as
• operating system used,
• referrer URL (the previous website visited),
• host name of the accessing computer (IP address),
• time of the server enquiry,
is transmitted to a Google server in the USA and stored there. Google complies with the US Privacy Shield data protection provisions and is registered with the US Privacy Shield program of the US trade ministry. Furthermore we have concluded an order processing agreement with Google for the use of Google Analytics. This agreement ensures Google processes data in compliance with the general data protection regulations and guarantees to protect the rights of the data subject involved. The information is used to analyze the use of our websites, generate reports on website activities and to provide additional services related to website and internet use for market research purposes and to design the website to meet the needs of users.
This information may also be transmitted to third parties where required by law or should third parties be commissioned to process the data. Your IP address is never merged with other Google data. The IP addresses are anonymized ensuring that no match to an individual is possible (IP masking).
It is possible to configure your browser software to prevent cookies from being installed. Please note that by doing so not all the functions of the websites may be fully available.
It is possible to further prevent data generated by the cookie from being collected on your use of this website (incl. your IP address) and the data being processed by Google by downloading and installing a browser add-on.
Besides the browser add-on, particularly with browsers on mobile terminal devices, collection of your data by Google Analytics is also prevented by clicking on this link. An opt-out cookie is then set up in your browser preventing future collection of your data when you visit this website. The opt-out cookie only applies to that browser and only for our website, and is installed on your device. After deleting cookies in this browser you need to reinstall the opt-out cookie.
More information on data protection in connection with Google Analytics is available in the help page of Google Analytics.

You have the right:
• pursuant to Art. 15 GDPR to request information on your personal data processed by us. You are particularly entitled to request information on the purpose of processing, the category of the personal data, the category of recipient your data is disclosed to, the planned storage period, the right to correction, deletion, limitation of processing or objection, the right of complaint, the source of your data should it not be collected by us, as well as information on automated decision-making including profiling and if required material information relating to their details;
• pursuant to Art. 16 GDPR to request the correction of incorrect personal data stored with us or its completion without undue delay;
• pursuant to Art. 17 GDPR to request the deletion of your personal data stored with us, provided the processing is not required to comply with the right to free speech and information, to satisfy statutory obligations, for purposes of public interest or the assertion, enforcement or defense of legal claims;
• pursuant to Art. 18 GDPR to request the limitation of the processing of your personal data, provided the correctness of the data is disputed by you, the processing is unlawful, you however reject its deletion and we no longer need the data, you however require it for the assertion, exercise or defense of legal claims or you register an objection to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR to request your personal data provided to us to be maintained in a structured, standard and machine readable format or the transmission to another responsible party;
• pursuant to Art. 7 para. 3 GDPR to revoke your consent provided to us at any time. The consequence is that the processing of data based on your consent is no longer to be continued in the future and
• pursuant to Art. 77 GDPR permits a complaint to the regulatory authority. As a rule contact is with the supervisory authority of your normal place of residence or of our registered office for this purpose.

Right of revocation
Should your personal data be processed based on legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to your personal data being processed on the basis of your particular situation or the revocation is related to direct advertising. In the latter case you are entitled to a general right of revocation which we implement without indication of a specific situation. Should you wish to exercise your right of revocation, please email us at service@swisssana.com

All the personal data transmitted by you is transferred encrypted by the commonly accepted and secure Standard TLS (Transport Layer Security). TLS is a secure and proven standard, also used for example in online banking. A secure TLS connection is recognizable by the additional s after http (i.e. https://...) in the address bar of your browser or by the lock symbol in the lower area of your browser.
We apply suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously enhanced to correspond with the technological developments.

This data privacy notice is the latest version dated May 2018.
This data privacy notice is subject to change due to improvements to our website and related offers or due to changes in statutory or regulatory requirements. The latest version of the data privacy notice is available at any time under https://www.penisplus.com/privacy-policy.php and is printable.