Privacy Statement

This Advent calendar are provided by Bayer (Schweiz) AG | 0201 | Switzerland (hereinafter “Bayer”, “us” or “we”). For further information regarding Bayer, please refer to our imprint Nutzungsbedingungen | Bepanthen® Bayer (Schweiz) AG 

Handling of personal data

In the following, we provide information on how we handle your personal data when you participate in the Advent Calendar, access the WhatsApp channel by scanning the QR code, receive messages, enter the prize draw or win a prize. We process personal data in accordance with applicable data protection law, including the Swiss Federal Act on Data Protection and, where applicable, the General Data Protection Regulation (“GDPR”). 

Participation in the Advent Calendar

After scanning the QR code, you will be directed to a WhatsApp channel used for the Advent Calendar. Participation is limited to Swiss telephone numbers. To register and participate, we ask you to provide or confirm the following information:

  • your separate consent to receive communications relating to the Advent Calendar through the WhatsApp API-based communication service;
  • your Swiss telephone number, name; and
  • your postal code.

We use this information to register and administer your participation, verify the participation requirements, operate the Advent Calendar, communicate with you through the WhatsApp API-based communication service, prevent misuse, and determine and contact winners. Processing that is necessary to administer your participation and the prize draw is based on the performance of the participation arrangement (Art. 6(1)(b) GDPR, where applicable). The sending of Advent Calendar communications through the WhatsApp API-based communication service is based on your separate consent (Art. 6(1)(a) GDPR, where applicable). You may withdraw this consent at any time with future effect; however, after withdrawal, you will no longer receive communications required to participate through this channel.

Winners and delivery of prizes

If you win, we will contact you and request the additional personal data necessary to verify your identity and deliver the prize, in particular your name, delivery address and any other information strictly required for shipment. We use these data only to administer the win, arrange delivery and handle related enquiries or legal obligations. 

Use of external applications

The Advent Calendar communications are delivered through a WhatsApp API-based solution operated on behalf of Bayer using Twilio and the technical services provided by dreifive Group AG. Bayer does not use the WhatsApp mobile application to manage or send these communications. Participants receive the communications through the WhatsApp application installed on their own device. 
The service is configured exclusively for one-way communications from Bayer to participants. Participants cannot reply through the service and cannot view, contact or exchange messages with other participants. For questions concerning the Advent Calendar, participation, prizes or these communications, participants should contact dreifive Group AG using the contact details or communication channel provided for the Advent Calendar.

dreifive Group AG processes personal data on behalf of Bayer as a data processor to manage and support the Advent Calendar. Twilio is the technical service provider engaged for the WhatsApp API-based delivery of communications. WhatsApp and its affiliated companies may separately process certain technical, account and communication data as independent controllers under their own terms and privacy information when participants use the WhatsApp application. Such separate processing by WhatsApp is not controlled by Bayer. 

Communication after the Advent Calendar

Bayer would like to continue using the WhatsApp API-based communication service after the Advent Calendar to send participants information about Bayer products, services, campaigns, activities or other relevant content. 
These subsequent communications constitute a separate purpose and will only be sent to participants who have provided a separate, voluntary and specific consent to receive communications from Bayer via WhatsApp. Consent to receive such communications is not required to participate in the Advent Calendar or to be eligible to win a prize. 

Participants may withdraw their consent and stop receiving future communications at any time, without affecting the lawfulness of communications sent before withdrawal, by using the unsubscribe mechanism indicated in the messages or by contacting dreifive Group AG using the contact details provided for the Advent Calendar. 

External services or content

The Advent Calendar uses third-party communication and technical services. When you access or use these services, personal data and communication data may be processed by the relevant providers for technical operation and, where applicable, for their own purposes. For further information, please consult the providers’ privacy statements:

  • WhatsApp messaging services [insert link to the applicable WhatsApp privacy statement].
  • API and communications services operated by Twilio.

Information on side effects and quality complaints

The Advent Calendar and WhatsApp channel are not intended or designed for communications regarding side effects, lack of therapeutic effect, medication errors, grey market products or counterfeit medicines, incorrect or off-label use, quality complaints, or other issues regarding the safety or quality of Bayer products. If you wish to report a side effect or make a quality complaint, please contact your healthcare professional, your local health authority, or use the Bayer website for reporting undesirable side effects: https://www.bayer.com/en/privacy-statement-pv.

If you nevertheless provide information concerning side effects or product quality, Bayer may be legally required to process the communication, contact you for clarification and report relevant information to competent authorities. Further information is available in the Bayer Privacy Statement for Pharmacovigilance Data at the link above. 

Recipients of personal data

Commissioned processing

For the operation of the Advent Calendar and related communications, we use specialized service providers that process personal data on our behalf and in accordance with our instructions. This includes in particular:

dreifive Group AG, Feldstrasse 42, 8004 Zürich, Switzerland.

The agency acts as a data processor and supports the management and technical operation of the Advent Calendar and the WhatsApp API-based communication service. It may access participant information only to the extent necessary to provide these services. Appropriate data processing arrangements are in place.

Bayer also engages Twilio as the technical service provider supporting the WhatsApp API-based delivery of communications. The internal documentation identifies Twilio as the API client used by Bayer for this purpose. WhatsApp processes data relating to the participant’s own use of the WhatsApp application under its own terms and privacy information.

Affiliates

We may share your personal data with Bayer Group companies where necessary for the purposes described in this Privacy Statement and where permitted by applicable law.

Authorities and state institutions

We may share your personal data with law enforcement agencies, courts, regulators or other authorities where legally required or necessary to establish, exercise or defend legal claims.

External lawyers

Where necessary to obtain legal advice or establish, exercise or defend legal claims, we may share personal data with external legal advisers.

Prospective buyers in the context of mergers and acquisitions

We may share personal data with a prospective buyer or relevant advisers if an acquisition, merger, reorganization or other corporate or asset transaction involves a change of ownership or control concerning us or the relevant services, subject to appropriate safeguards.

International data transfers

The technical providers involved in WhatsApp and API-based communications may process personal data outside Switzerland or the European Economic Area. Where required, Bayer uses appropriate safeguards for such transfers, such as an adequacy decision or approved standard contractual clauses, together with additional measures where appropriate. You may contact us for further information about the applicable safeguards.

Retention of personal data

We retain personal data collected for the Advent Calendar during the campaign and for 10 weeks after the Advent Calendar period ends. After that period, the data will be deleted or anonymized unless a longer retention period is required by law or necessary for the establishment, exercise or defense of legal claims. Personal data processed on the basis of a separate consent for communications after the Advent Calendar will be retained until you withdraw that consent or the data are no longer required for that purpose, subject to applicable legal retention requirements.

Information regarding your rights

Subject to the conditions provided by applicable data protection law, you may have the following rights:

  • the right to obtain information about your personal data processed by us;
  • the right to request correction of inaccurate personal data;
  • the right to request deletion or restriction of processing;
  • the right to object to processing based on legitimate interests;
  • the right to data portability, where applicable;
  • the right to lodge a complaint with a competent data protection authority; and
  • where processing is based on consent, the right to withdraw consent at any time with future effect. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Contact

For questions concerning data privacy or to exercise your rights, please use our contact form at https://www.bayer.com/en/contacting-data-privacy or contact our company Data Privacy Officer at:

Data Privacy Officer 
Bayer (Schweiz) AG 
Grubenstrasse 8 
CH-8045 Zürich 
Switzerland

Amendment of this Privacy Statement

We may update this Privacy Statement from time to time. Updates will be made available through the relevant Bayer or campaign communication channel. Any amendment becomes effective upon publication. We recommend reviewing this Privacy Statement regularly for updates.

Declaration as of: 30 October 2026