Legal Information – CHREP.me GmbH

Company Information

CHREP.me GmbH

Bahnhofstrasse 21

6300 Zug

Switzerland

Email: info@chrep.me

Website: www.chrep.me

Commercial Register: Canton of Zug, Switzerland

UID (Company Registration): CHE-475.499.565 

Privacy & Cookie Policy

Last updated: August 2026

CHREP.me GmbH takes the protection of personal data seriously. This Privacy & Cookie Policy explains how we collect, use and protect personal data when you visit our website, contact us or use our online forms.

This policy is based on the Swiss Federal Act on Data Protection (FADP). Where applicable, we also take into account the requirements of the European Union General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for processing personal data in connection with this website is:

CHREP.me GmbH

Bahnhofstrasse 21

6300 Zug

Switzerland

Email: info@chrep.me

Website: www.chrep.me

You may contact us at any time if you have questions regarding the processing of your personal data.

2. Personal Data We Process

Depending on how you use our website and services, we may process the following categories of personal data:

• Name

• Company name

• Business contact details

• Email address

• Telephone number

• Information submitted through contact or enquiry forms

• Information relating to your products or regulatory requirements

• Correspondence with CHREP.me

• Website usage and technical connection data

• Browser and device information

• Approximate geographic information

• Cookie identifiers and analytics data

We only process personal data that is necessary for the relevant purpose.

3. Purposes of Processing

We process personal data for purposes including:

• Responding to enquiries

• Providing information about CH-REP and Swiss Importer services

• Preparing offers and agreements

• Establishing and managing business relationships

• Providing regulatory services

• Processing contact and callback requests

• Operating and securing our website

• Measuring and improving website performance

• Understanding how visitors use our website

• Meeting regulatory and legal obligations

• Protecting our legitimate business interests

Where the GDPR applies, processing may be based on consent, contractual or pre-contractual measures, legal obligations or legitimate interests, depending on the relevant processing activity.

4. Website Hosting and Google Sites

Our website is created and hosted using Google Sites, a service provided by Google.

When you access the website, technical information required to deliver and secure the website may be processed by Google. This may include information such as:

• IP address

• Requested page or URL

• Browser type

• Device information

• Date and time of access

• Technical request and security information

This processing is necessary for the technical operation, security and delivery of the website.

Google may process information on servers located in different countries.

5. Google Analytics

We use Google Analytics to understand how visitors use our website and to improve the performance and usability of CHREP.me.

Google Analytics may process information including:

• Pages visited

• Visit duration

• Session information

• Referring website or source

• Browser type

• Device type

• Approximate geographic location

• Interaction with website content

• Pseudonymous identifiers

Google Analytics uses first-party cookies to distinguish users and sessions.

Typical Google Analytics cookies include:

_ga

Used to distinguish users.

Default duration: up to 2 years.

ga [ID]

Used to maintain session information.

Default duration: up to 2 years.

Google Analytics does not provide CHREP.me with information that directly identifies individual website visitors.

Analytics data is used for statistical and website optimisation purposes.

6. Analytics Consent

Google Analytics is integrated with our cookie consent mechanism.

When you visit our website, you can choose whether you consent to analytics cookies and related analytics processing.

Your consent choice can be:

• Accepted

• Rejected

Where consent is required, analytics storage is controlled according to your consent choice.

If you reject analytics cookies, Google Analytics does not store or read analytics cookies on your device. Depending on Google's Consent Mode configuration, limited cookieless measurement signals may still be transmitted to Google for statistical modelling.

You may withdraw or change your consent at any time through the available cookie settings.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

 7. Google Forms

We use Google Forms for selected contact, enquiry or service-related forms.

When you submit a Google Form, we process the information that you enter into the form. Depending on the relevant form, this may include:

• Name

• Company

• Email address

• Telephone number

• Product information

• Regulatory information

• Questions or comments

• Other information you voluntarily provide

Google Forms responses may be stored within Google Forms, Google Drive or an associated Google Sheet.

We use this information solely for the purposes indicated in the relevant form, such as responding to your enquiry, preparing an offer or providing requested services.

Google Forms may also process technical data required to operate and secure the form.

If a Google Form requires or allows collection of an email address, this will be apparent when completing the form.

8. Cloudflare

We use Cloudflare for the security, performance and delivery of our website.

When you access www.chrep.me, your connection is routed through Cloudflare's global network before being forwarded to our website infrastructure. Cloudflare may process technical information necessary to provide these services, including:

• IP address

• Requested domain and URL

• Browser and device information

• Date and time of access

• Traffic routing information

• Security-related information

• Information used to detect and prevent malicious traffic

Cloudflare is used to improve website security, availability and performance and to protect the website against malicious traffic and attacks.

Cloudflare may process data in different countries through its global network. Where required by applicable data protection law, appropriate safeguards for international data transfers apply.

Further information about Cloudflare's processing of personal data is available in Cloudflare's Privacy Policy.

9. Contact by Email, Telephone or Form

If you contact us by email, telephone or through an online form, we process the information you provide in order to respond to your enquiry.

This may include:

• Contact details

• Company information

• Details of your enquiry

• Information about medical devices or IVDs

• Regulatory or commercial requirements

• Previous correspondence

Where an enquiry relates to a potential or existing business relationship, the information may also be used to prepare an offer, agreement or service relationship.

10. Cookies

Cookies are small files or information stored on a user's device or browser.

Our website may use different categories of cookies.

Necessary Cookies

Necessary cookies support the technical operation, security and functionality of the website.

These cookies may be required for the website to function correctly and cannot always be disabled through our website.

Analytics Cookies

Analytics cookies are used to measure how visitors interact with our website.

We use Google Analytics for this purpose.

Where consent is required, analytics cookies are only used in accordance with your cookie preference.

 Managing Cookies

You can:

• Accept or reject analytics cookies through our cookie banner

• Change your browser settings

• Delete existing cookies from your browser

• Block cookies through your browser settings

Blocking certain cookies may affect the functionality of some website features.

11. Google as a Service Provider

We use Google services including:

• Google Sites

• Google Analytics

• Google Forms

• Google Drive and related Google Workspace services where applicable

When these services are used, personal data may be processed by Google and its affiliated companies.

Google may process data in Switzerland, the European Economic Area, the United States and other countries in which Google or its service providers operate.

Where required by applicable data protection law, appropriate safeguards for international data transfers are used.

12. International Data Transfers

Some service providers used by CHREP.me operate internationally.

Personal data may therefore be processed outside Switzerland.

Where personal data is transferred to a country that does not provide an adequate level of data protection under applicable law, appropriate safeguards are used where required. These may include contractual safeguards such as recognised standard contractual clauses or other legally permitted transfer mechanisms.

13. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable legal, contractual or regulatory obligations.

Retention periods depend on the type of information.

For example:

• General enquiries are retained as long as necessary to process and follow up the enquiry.

• Business and customer information may be retained for the duration of the business relationship and applicable statutory retention periods.

• Regulatory records may be retained for periods required under applicable medical device regulations.

• Analytics data is retained according to the configuration of our Google Analytics account and applicable data protection requirements.

Information that is no longer required is deleted or anonymised where appropriate.

14. Disclosure of Personal Data

We do not sell personal data.

Personal data may be disclosed where necessary to:

• IT and cloud service providers

• Website and analytics service providers

• Professional advisers

• Regulatory authorities

• Public authorities where legally required

• Service providers supporting our business operations

Service providers receive personal data only to the extent necessary for their respective services.

15. Data Security

We use appropriate technical and organisational measures to protect personal data against:

• Unauthorised access

• Unlawful processing

• Accidental loss

• Alteration

• Disclosure

• Destruction

Our website uses encrypted HTTPS connections.

However, no internet-based transmission or storage system can guarantee absolute security.

16. Your Data Protection Rights

Depending on the applicable law and circumstances, you may have the right to:

• Request information about whether we process your personal data

• Request access to your personal data

• Request correction of inaccurate personal data

• Request deletion of personal data

• Request restriction of processing

• Object to certain processing

• Request data portability where applicable

• Withdraw consent at any time where processing is based on consent

The exercise of these rights may be subject to statutory limitations.

To exercise your rights, contact:

info@chrep.me

We may request appropriate information to verify your identity before responding to a request.

17. Right to Complain

If you believe that your personal data is being processed unlawfully, you may contact us directly.

You may also contact the competent data protection authority.

For Switzerland, the competent authority is the:

Federal Data Protection and Information Commissioner (FDPIC)

Where the GDPR applies, you may also have the right to lodge a complaint with the competent supervisory authority in the relevant EU or EEA country.

18. External Links

Our website may contain links to third-party websites.

CHREP.me is not responsible for the content, security or privacy practices of third-party websites.

When you follow an external link, the privacy policy of the relevant third party applies.

19. Embedded and Third-Party Services

Individual pages may contain content or services provided by third parties.

When such content is accessed, technical information may be transmitted to the relevant provider where necessary for the service to function.

Where consent is legally required for a third-party service, the relevant service will be subject to the user's consent choice.

20. Automated Decision-Making

CHREP.me does not use personal data collected through this website to make automated individual decisions that produce legal or similarly significant effects on website visitors.

21. Changes to this Privacy Policy

We may update this Privacy & Cookie Policy when:

• Our website or services change

• New technologies or service providers are introduced

• Legal or regulatory requirements change

• Our data processing activities change

The latest version published on this website applies.

Last updated: August 2026

Contact

For questions concerning privacy or the processing of personal data:

CHREP.me GmbH

Bahnhofstrasse 21

6300 Zug

Switzerland

Email: info@chrep.me

Website: www.chrep.me

Regulatory Disclaimer

CHREP.me provides operational Swiss Authorised Representative (CH-REP) and Swiss Importer (CH-Importer) services for medical devices and IVDs.

The scope of our services depends on the applicable Swiss regulatory requirements, the product concerned, the role of the economic operator and the agreed mandate.

CHREP.me does not act as a Notified Body, conformity assessment body, certification body, testing laboratory or legal adviser. Our services do not replace the manufacturer’s own regulatory responsibilities or the obligation to ensure that products comply with the applicable Swiss requirements.

Swissmedic remains the competent Swiss authority for medical devices and IVDs. Information provided by CHREP.me does not constitute an official decision or interpretation by Swissmedic.

Copyright and Intellectual Property

Unless otherwise stated, the content of this website, including texts, graphics, logos, images and other materials, is owned by or licensed to CHREP.me GmbH and is protected by applicable copyright and intellectual property laws.

Content may not be reproduced, distributed, modified or used for commercial purposes without prior written permission from CHREP.me GmbH, except where such use is permitted by applicable law.

Third-party trademarks, company names and other protected designations remain the property of their respective owners.

Limitation of Liability

CHREP.me makes reasonable efforts to ensure that the information provided on this website is accurate and current. However, no guarantee is given regarding the completeness, accuracy or continued availability of the information.

Regulatory requirements may change without notice and may differ depending on the specific medical device, IVD, manufacturer, economic operator or distribution model.

To the extent permitted by applicable law, CHREP.me GmbH accepts no liability for direct or indirect loss arising solely from reliance on general information published on this website.

This limitation does not apply where liability cannot legally be excluded or limited.