PRIVACY NOTICE
Transparent Processing. Defined Purpose. Controlled Access.
This Privacy Notice explains how Pharmact Holding AG processes personal data when you visit pharmact-health.com, use the professional contact form or otherwise communicate with us through the website.
Effective: 6 September 2026 · This notice is designed for the Swiss FADP and, where applicable to the relevant processing, the EU/EEA GDPR.
CONTROLLER & SCOPE
Pharmact determines the purposes and means of the personal-data processing described in this notice, unless another party is expressly identified as an independent controller.
This notice applies to the public Pharmact corporate website and its professional contact functionality. It does not replace separate privacy information that may apply to a clinical study, employment process, contractual data room, partner portal or another specifically governed activity.
Zugerstrasse 76B
6340 Baar
Switzerland
Privacy-related requests may be submitted using the corporate contact details in the Imprint or by writing to the postal address above.
WHAT WE PROCESS
The categories below describe the principal personal-data processing currently associated with the public website.
When the website is accessed, hosting infrastructure may process IP address, date and time, requested resource, response status, browser or device information, referrer information and related technical data required to deliver and protect the service.
PURPOSE: availability, security, troubleshooting and abuse preventionThe contact form processes inquiry scope, name, organization, professional email address, optional country or region, message content and acknowledgement of the Privacy Notice.
PURPOSE: review and respond to professional enquiries and potential business relationshipsThe custom contact handler uses a keyed hash derived from the connection IP address for a short-lived rate-limit counter. The custom handler does not store the raw IP address in a contact-form database record.
PURPOSE: protect the form and website against automated or excessive submissionsWhere necessary, correspondence and related business records may be processed to meet legal obligations, establish or defend rights, document transactions or comply with competent authorities.
PURPOSE: legal compliance, governance and legitimate corporate recordkeepingPURPOSE & LEGAL BASIS
Under Swiss data-protection law, Pharmact processes personal data in accordance with the applicable principles of transparency, proportionality, purpose limitation and data security.
Where the GDPR applies to a particular processing activity, the legal basis depends on the context and may include steps requested before entering into a contract, Pharmact’s legitimate interests in secure website operation and professional communication, or compliance with legal obligations.
Pre-contractual / contractual contextProcessing an inquiry where you request steps relating to a potential agreement or existing contractual relationship.
Legitimate interestsOperating a secure corporate website, preventing abuse and responding to appropriate professional or corporate enquiries.
Legal obligationsProcessing required to comply with applicable legal, regulatory, accounting or authority requirements.
CONTACT FORM · PRIVACY BY DESIGN
The public form is intended to establish the scope of a professional discussion. It is not a secure data room, clinical intake system or channel for confidential technical submissions.
The Pharmact frontend contact handler sends validated submissions by email and does not create a separate contact-form submission record in the WordPress database.
The required checkbox confirms that the Privacy Notice has been presented. It does not convert every processing activity into consent-based processing.
Please do not submit patient-identifiable health information, passwords, unpublished sequences, proprietary process details or other sensitive/confidential information through the public form.
HOSTING & RECIPIENTS
Pharmact uses external infrastructure providers to operate the website and communication services. These providers may process personal data on Pharmact’s behalf under applicable contractual and data-protection arrangements.
Personal data may also be disclosed to Pharmact personnel, affiliated entities, professional advisers, contractual partners or competent authorities where access is necessary for the stated purpose, an applicable agreement or a legal obligation.
Carlsgatan 3 · 211 20 Malmö · Sweden
Company no. 559205-2400
Hosting, website infrastructure and related contracted services. The provider may use approved subprocessors in accordance with its current contractual and data-processing terms.
Access is limited according to operational need, contractual role and applicable law.
COOKIES · WEB ANALYTICS · EXTERNAL RESOURCES
Pharmact uses Google Analytics 4 (GA4) to measure reach and use of the public corporate website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The implementation follows Google Basic Consent Mode: before you consent, no Google Analytics tag is loaded and no analytics or consent signal is transmitted to Google.
If you decline, Google Analytics remains completely blocked. Where the GDPR applies to the relevant processing, web analytics is based on your consent (Art. 6(1)(a) GDPR). Access to or storage of information on your device for analytics occurs only after your consent.
After consent, processing may include page views, session and referrer information, approximate location data, and browser and device information. Our implementation removes query strings and URL fragments from page and referrer URLs sent to GA4 and does not send contact-form content, names, email addresses, organisations or message text as Analytics parameters.
Google Signals and ad-personalisation signals are disabled in the theme implementation. Advertising and ad-personalisation consent types remain denied. This implementation does not require a Google Ads link or Google Tag Manager.
_ga and _ga_*. Pharmact uses the shortest standard retention option of two months for user- and event-level data. Consent can be withdrawn at any time through “Privacy settings” with effect for the future. Google states that individual IP addresses of users in the EU, Switzerland and the United Kingdom are not logged or stored in Google Analytics; further processing within Google’s global infrastructure, including outside Switzerland or the EEA, nevertheless cannot be excluded.INTERNATIONAL DATA FLOWS
Pharmact is established in Switzerland and may receive enquiries from individuals or organizations in other jurisdictions. Service providers and project participants may also be located in different countries.
Where personal data is transferred across borders, Pharmact applies the requirements of the Swiss FADP and, where applicable, the GDPR. Transfers may rely on a recognised adequate level of protection, contractual safeguards or another legally permitted transfer mechanism.
Switzerland is currently recognised by the European Commission as providing an adequate level of data protection for GDPR data transfers.
Where a recipient is outside a recognised adequate jurisdiction, any required safeguards are assessed for the relevant transfer and processing context.
RETENTION
Retention depends on the type of data, the purpose of processing and applicable legal, contractual, security and recordkeeping requirements.
Technical logs are retained according to hosting, security and troubleshooting requirements and the provider’s applicable operational settings.
The custom contact-form rate-limit counter is configured to expire after approximately ten minutes.
Professional correspondence is retained for as long as needed to address the enquiry, manage any resulting relationship, meet recordkeeping duties or establish and defend legal claims.
YOUR DATA-PROTECTION RIGHTS
Subject to applicable requirements and exceptions, you may request information about personal data processed about you and ask for inaccurate data to be corrected. Depending on the applicable law, additional rights may include deletion, restriction, objection or data portability.
Where processing is specifically based on consent, consent may be withdrawn for future processing without affecting processing that was lawful before withdrawal.
Access / InformationAsk whether and how Pharmact processes personal data concerning you.
CorrectionRequest correction of inaccurate or incomplete personal data.
Deletion / RestrictionRequest deletion or restriction where the applicable legal conditions are met.
Objection / PortabilityExercise these rights where provided by the applicable data-protection law and processing basis.
ComplaintYou may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) and, where the GDPR applies, the competent EU/EEA supervisory authority.
SECURITY & SENSITIVE INFORMATION
Pharmact applies technical and organisational measures appropriate to the relevant website processing. No internet transmission or electronic storage system can, however, be guaranteed to be absolutely secure.
Where a project requires controlled scientific, regulatory, legal or technical disclosure, the appropriate qualified and confidential channel should be established before information is transferred.
CHANGES TO THIS NOTICE
Pharmact may update this notice when website functionality, service providers, legal requirements or processing activities change. The current version published on this page applies to the website processing described here.
Effective: 6 September 2026
PRIVACY & CORPORATE INFORMATION
Use the corporate contact details identified in the Imprint or write directly to Pharmact Holding AG at its registered postal address. Please provide enough information to identify the relevant processing without sending unnecessary sensitive data.