Privacy Policy

Last updated: May 2026 · Applies to hycannhealth.com and the protected HCP area

1. Data controller

Hycann Health SA
Route de la Corniche 4, 1066 Epalinges (VD)
info@hycannhealth.com

Hycann Health SA processes personal data in accordance with the revised Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. What data we collect

When visiting the website: IP address (anonymised), referrer URL, browser type, access time. This data is processed exclusively for technical and security purposes.

When registering for the HCP area: Name, professional title, institution, address, email address. This information is used to verify membership of the healthcare professions in accordance with Art. 31 TPA.

When placing orders: Delivery and billing address, order details. Processed on the basis of Art. 6(1)(b) GDPR (performance of a contract).

3. Purposes of processing

We process personal data exclusively for the following purposes: operation of the HCP area, order processing, statutory reporting obligations (Swissmedic, narcotics control), website security.

4. Disclosure to third parties

We do not disclose personal data to third parties for commercial purposes. Disclosure takes place only where required by law (e.g. Swissmedic reporting obligations) or necessary for order fulfilment (e.g. delivery services).

5. Data security

This website is transmitted via HTTPS. Passwords are stored in encrypted form. The HCP area is protected by username and password. We use technical and organisational measures to protect your data.

6. Cookies

We use exclusively technically necessary session cookies for the operation of the HCP area (login status). No marketing or tracking cookies are used.

7. Your rights

You have the right to information, rectification, erasure and restriction of the processing of your data, as well as the right to data portability. Please address requests to: info@hycannhealth.com

8. Retention period

Order data and associated personal data are retained for the statutory minimum retention period of 10 years. HCP area accounts can be deleted at any time on request, provided no statutory retention obligations preclude this.

9. Right to lodge a complaint

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch