Datenschutzrichtlinie
Nachname : 27.09.2026
This policy explains which personal data we process when you use this website, why, with whom we share it and what your rights are. It is based on the Swiss Federal Act on Data Protection (FADP) and, for customers living in the European Union, on the General Data Protection Regulation (GDPR).
1. Controller
Droguerie Mélina Perusset Sàrl, Rue du Lac 10, 1400 Yverdon-les-Bains, Switzerland.
Contact for any question about your data:
droguerie@droguerie-perusset.shop — +41 24 425 27 35.
2. Data we process
- Customer account: title, first and last name, e-mail address, password (encrypted), phone, addresses and, where applicable, company name and UID.
- Orders: ordered products, amounts, delivery and billing addresses, pickup or shipping method, pickup day and time slot, invoices and payments.
- Training courses: participant data required for registration.
- Contact form: name, e-mail, optional phone and the content of your message.
- Newsletter: e-mail address, optional name, subscription and confirmation dates.
- Comments and reviews: published text, rating and displayed name.
- Technical data: IP address, browser type, visited pages and time stamps, recorded in the server logs for security and troubleshooting.
We do not ask for any health data. When ordering, you may however ask us a question or add a detail in an optional field (for example about using a product with a child). This message, like those you send us on your own initiative, may contain health data: we only use it to answer and advise you. It is kept with the order, including in our management software, to ensure the traceability of the products supplied, and may be shown to the cantonal pharmacist during an inspection.
3. Purposes and legal bases
- Processing your orders: preparing, shipping or handing them over in store, invoicing and after-sales service — performance of the contract.
- Managing your customer account — performance of the contract.
- Keeping accounting records — legal obligation.
- Answering your requests sent through the contact form or by e-mail — legitimate interest or pre-contractual measures.
- Sending the newsletter — your consent, given by double opt-in and withdrawable at any time.
- Protecting the website against abuse, automated sign-ups and fraud — legitimate interest.
We do not sell your data and do not use it for targeted advertising. The website uses no audience measurement or advertising tools. Should audience measurement be enabled in the future, it would only run with your consent and this policy would be updated.
4. Recipients and processors
Your data is only shared with the service providers needed to run the website and process orders:
- Hosting: server located in Switzerland.
- Business software (ERP): Groupe-GemA SA, Switzerland — customers, orders and invoicing.
- E-mail delivery: mail server of Altius Group, Switzerland.
- Shipping: Swiss Post or another carrier, for shipped parcels.
- Bot protection: Cloudflare Turnstile (Cloudflare, Inc., USA), on the sign-up, contact and comment forms. Cloudflare receives your IP address and technical browser information.
- Technical libraries: some files (layout, icons, scripts) are loaded from the jsDelivr and cdnjs networks, which receive your IP address.
- Payment: invoices are paid with a Swiss QR-bill through your bank. We neither receive nor store any card data.
We also disclose data to authorities where required by law.
5. Transfers abroad
Most data stays in Switzerland. Cloudflare and the file delivery networks may process your IP address in the United States or other countries. Cloudflare, Inc. is certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework; otherwise, transfers rely on the European Commission's standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC).
6. Retention periods
- Customer account: until you delete it or ask us to.
- Orders and invoices: 10 years, under art. 958f of the Swiss Code of Obligations.
- Contact messages: as long as needed to handle your request and its follow-up.
- Newsletter: until you unsubscribe.
- Server logs: limited period, the files being rotated automatically.
7. Cookies and local storage
The website only uses cookies needed for it to work (session, security, language, basket and your cookie choice), plus the browser's local storage to remember the light or dark theme. Details are in our cookie policy.
8. Security
Traffic with the website is encrypted (HTTPS). Passwords are stored encrypted. Access to data is limited to the people who need it for their work.
9. Your rights
At any time you can:
- request access to your data and a copy of it;
- have inaccurate data corrected (directly from your account);
- have your data erased: use the "Delete my account" button in your profile, or write to us; accounting records are kept for the legal period;
- object to processing or ask for it to be restricted;
- receive your data in a common format (portability);
- withdraw your newsletter consent through the link in every mailing.
Write to droguerie@droguerie-perusset.shop. We answer within 30 days and may ask you to prove your identity. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, the data protection authority of your country.
10. Changes
We may update this policy, in particular if our service providers or the law change. The version published on this page, with its update date, applies.
General Terms and Conditions of Sale · Datenschutzrichtlinie · Cookie -Richtlinie · Nutzungsbedingungen · Legal mentions