Applimed SA attaches great importance to the protection of your personal data. This policy explains which data we process when you use the applimed.ch website or contact us, why we process it, how long we keep it and what your rights are.
1. Controller
Applimed SA
Route de Pra de Plan 1
1618 Châtel-Saint-Denis
Switzerland
UID: CHE-103.883.070
For any question about data protection: info@applimed.ch
2. Data processed
2.1 Visiting the website
When you visit the website, the server automatically records technical information: IP address, date and time, page viewed, referring page, browser and operating system type. This data is used to run the website, keep it secure (for example to detect intrusion attempts) and solve technical problems. It is not used to identify you.
Server logs are kept for about 30 days. The website’s security logs (login attempts, blocked IP addresses) are kept for 60 days, active blocks until they are lifted.
2.2 Visitor statistics
We measure website traffic with Plausible Analytics, a tool that sets no cookies and does not store your IP address. The statistics are aggregated only: pages viewed, referring page, country, device and browser type. They do not make it possible to identify you or to track you across websites. The tool is hosted by our IT service provider, Glur IT, in Switzerland.
2.3 Order form
When you place an order through the website form, we process the data entered: company name, contact person, delivery and billing addresses, phone, email, offer number, items and quantities ordered. This data is used to process, deliver and invoice your order and to communicate with you about it. A copy is sent to you by email.
2.4 Contact form and catalogue request
When you write to us through the contact form or request our catalogue, we process the data entered (name or company, email, postal address for the catalogue, subject and content of the message) to answer your request or send you the catalogue.
2.5 Newsletter
If you subscribe to our newsletter, we use your email address to send you information about our products, new releases and annual closures. Subscription is based on your consent. You receive a confirmation email, and the subscription only takes effect once you click the link it contains (double opt-in).
You can unsubscribe at any time with the link included in every newsletter, or by writing to us.
The newsletter is sent with the Mailchimp service (Intuit Inc., United States). Mailchimp records whether the newsletter was opened and which links were clicked, in order to provide us with sending statistics.
2.6 Contact by email or phone
If you contact us by email or phone, we process the data you provide to answer your request and manage the business relationship.
2.7 Links to Google Maps
The contact pages show an access map as an image (OpenStreetMap data) hosted on our server. No data is sent to Google when the page is displayed. If you click the map, you are redirected to Google Maps, which then processes your data under its own rules.
2.8 Social networks
The links to our pages on social networks are plain links. No content from these networks is loaded on our website, and no data is sent to them unless you click.
3. Cookies
The website uses no advertising or audience measurement cookies. Only technical cookies required for it to work are used:
| Cookie | Purpose | Duration |
|---|---|---|
quform_session_* |
security and proper operation of the forms | session (deleted when the browser is closed) |
wordpress_*, wp-settings-* |
login to the website administration (authorised staff only) | session, or 1 year for display preferences |
You can set your browser to refuse cookies. The forms may then no longer work properly.
4. Legal bases (GDPR)
For people located in the European Union or the EEA, our processing is based on the following legal bases:
- performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR): orders, catalogue requests, answers to requests from our customers and prospects;
- consent (Art. 6(1)(a) GDPR): newsletter. You can withdraw your consent at any time, without affecting the lawfulness of processing already carried out;
- legitimate interest (Art. 6(1)(f) GDPR): security and operation of the website, anonymous statistics, answers to general requests;
- legal obligation (Art. 6(1)(c) GDPR): retention of accounting and business records.
5. Recipients and processors
Your data is processed by the Applimed SA staff who need it to carry out their tasks. We use the following service providers, who process the data on our behalf and according to our instructions:
| Service provider | Role | Country |
|---|---|---|
| Infomaniak Network SA, Geneva | hosting of the website, form data and emails | Switzerland |
| Glur IT | website maintenance, visitor statistics | Switzerland |
| Intuit Inc. (Mailchimp) | newsletter sending | United States |
Order data may be passed on to the carriers responsible for delivery. We do not sell your data and do not pass it on to any third party for advertising purposes.
6. Transfers abroad
Newsletter data is processed in the United States by Mailchimp (The Rocket Science Group LLC, an Intuit Inc. company). Intuit and Mailchimp are certified under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework, recognised by Switzerland and the European Union as ensuring an adequate level of protection. The European Commission’s standard contractual clauses, included in Mailchimp’s data processing agreement, apply in addition.
All other data is processed in Switzerland.
7. Retention periods
| Data | Duration |
|---|---|
| Server logs | about 30 days |
| Website security logs | 60 days |
| Form submissions stored on the website (order, contact, catalogue, newsletter) | 24 months, then automatic deletion |
| Newsletter subscription (Mailchimp) | until you unsubscribe |
| Emails and business and accounting records relating to an order | 10 years (art. 958f of the Swiss Code of Obligations) |
| Other email correspondence | 10 years |
8. Security
The website is only accessible over an encrypted connection (HTTPS). We take appropriate technical and organisational measures to protect your data against loss, unauthorised access and alteration: regular updates, restricted and protected access, backups and automatic deletion of data that is no longer needed.
9. Your rights
You may at any time, within the limits set by law:
- ask which data concerning you we process (right of access);
- have inaccurate data corrected;
- request the deletion of your data or the restriction of its processing;
- object to processing based on our legitimate interest;
- withdraw your consent (newsletter);
- receive the data you provided to us in a common format (portability).
To exercise these rights, write to us at the address given in section 1. We may ask for proof of identity so that no one else gains access to your data. We reply within 30 days.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union or the EEA, with the data protection authority of your country.
10. Changes
We may adapt this policy as the website or the legislation evolves. The version published on this page is authoritative.
Last updated: 27 October 2026