Privacy Policy

The responsible entity in terms of data protection laws, especially the EU General Data Protection Regulation (GDPR), is:

Alchymia GmbH

Mariam Moratti

Goffersbergweg 1

5603 Staufen

Website: http://www.alchymia.ch/

Jurisdiction and Applicable Law

For all claims arising from purchase contracts in which Alchymia GmbH is a party, the place of jurisdiction is Lenzburg AG. Swiss law exclusively applies.

General Note

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Federal Government (Data Protection Act, DSG), every person is entitled to protection of their privacy and protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

In collaboration with our hosting providers, we strive to protect the databases as best as possible against unauthorized access, loss, misuse, or falsification.

We would like to point out that data transmission over the Internet (e.g., communication by e-mail) may have security vulnerabilities. A complete protection of the data against access by third parties is not possible.

By using this website, you agree to the collection, processing, and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or the name of the retrieved file, date, and time are stored on the server for statistical purposes, without directly being related to your person. Personal data, especially name, address, or e-mail address, are collected on a voluntary basis whenever possible. The data will not be passed on to third parties without your consent.

Processing of Personal Data

Personal data is any information that relates to a specific or identifiable person. A data subject is a person over whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular, storing, disclosing, obtaining, deleting, storing, changing, destroying, and using personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, we process personal data in accordance with the following legal bases relating to Art. 6 (1) GDPR, to the extent and insofar as the GDPR is applicable:

• Consent (Art. 6 (1) sentence 1 lit. a GDPR) - The data subject has given consent to the processing of personal data concerning him or her for a specific purpose or purposes.

• Contract performance and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b GDPR) - Processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures requested by the data subject.

• Legal obligation (Art. 6 (1) sentence 1 lit. c GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.

• Protection of vital interests (Art. 6 (1) sentence 1 lit. d GDPR) - Processing is necessary to protect the vital interests of the data subject or another natural person.

• Legitimate interests (Art. 6 (1) sentence 1 lit. f GDPR) - Processing is necessary to protect the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data.

• Application procedure as a pre-contractual or contractual relationship (Art. 9 (2) lit. b GDPR) - Where special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data, such as severe disability status or ethnic origin) are requested from applicants as part of the application process, so that the controller or the data subject can exercise the rights arising for him or her from labor law and social security and social protection law, the processing is carried out in accordance with Art. 9 (2) lit. b GDPR, in the case of protecting the vital interests of the applicants or other persons in accordance with Art. 9 (2) lit. c GDPR or for purposes of preventive healthcare or occupational medicine, for the assessment of the employee's ability to work, for medical diagnosis, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector in accordance with Art. 9 (2) lit. h GDPR. In the case of voluntary consent-based provision of special categories of data, the processing is based on Art. 9 (2) lit. a GDPR.

We process personal data for the duration necessary for the respective purpose or purposes. In the case of longer-term retention obligations based on legal and other obligations to which we are subject, we restrict the processing accordingly.

Relevant Legal Bases

In accordance with Art. 13 GDPR, we inform you about the legal bases of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art. 7 GDPR, the legal basis for processing to fulfill our services and perform contractual measures and respond to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.

Security Measures

In accordance with legal requirements and taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing as well as the different likelihoods and the extent of the threat to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as the access, input, transmission, securing of availability, and separation of the data concerning them. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data, and responses to data breaches. We also consider the protection of personal data in the development or selection of hardware, software, and procedures, in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

Transfer of Personal Data

In the course of our processing of personal data, it may happen that the data is transmitted to other bodies, companies, legally independent organizational units, or individuals or disclosed to them. Recipients of this data may include, for example, IT service providers or providers of services and content involved in a website. In such cases, we comply with legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

Data Processing in Third Countries

In the event that we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if processing occurs within the use of third-party services or the disclosure or transmission of data to other individuals, entities, or companies, this is done in compliance with legal requirements.

Subject to explicit consent or a contractually or legally required transfer, we only process data in third countries with a recognized level of data protection, contractual obligation through the so-called standard contractual clauses of the EU Commission, with certifications, or binding internal data protection regulations (Articles 44 to 49 GDPR, information from the EU Commission: [link to the EU Commission's information page](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de)).

Cookie Privacy Policy

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie primarily serves to store information about a user during or after their visit within an online offering. The stored information may include, for example, language settings on a website, login status, a shopping cart, or the point at which a video was viewed. The term "cookies" also includes other technologies that fulfill the same functions as cookies (e.g., when user information is stored based on pseudonymous online identifiers, also referred to as "user IDs").

The following cookie types and functions are distinguished:

- Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offering and closed their browser.

- Permanent cookies: Permanent cookies remain stored even after closing the browser. For example, the login status can be stored, or preferred content can be displayed directly when the user revisits a website. Likewise, the interests of users, which are used for reach measurement or marketing purposes, can be stored in such a cookie.

- First-party cookies: First-party cookies are set by us.

- Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.

- Necessary (also: essential or strictly necessary) cookies: Cookies may be strictly necessary for the operation of a website (e.g., to save logins or other user inputs or for security reasons).

- Statistics, marketing, and personalization cookies: Furthermore, cookies are usually used in the context of reach measurement and when the interests of a user or their behavior (e.g., viewing certain content, using functions, etc.) are stored on individual websites in a user profile. Such profiles are used to display content to users that corresponds to their potential interests. This process is also referred to as "tracking," i.e., tracking the potential interests of users. If we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or as part of obtaining consent.

Information on legal bases: The legal basis for processing your personal data using cookies depends on whether we ask for your consent. If this applies and you consent to the use of cookies, the legal basis for processing your data is the declared consent. Otherwise, the data processed using cookies is based on our legitimate interests (e.g., in the efficient operation and improvement of our online offering) or, if the use of cookies is necessary, to fulfill our contractual obligations.

Storage duration: If we do not provide explicit information about the storage duration of permanent cookies (e.g., as part of a so-called cookie opt-in), please assume that the storage duration can be up to two years.

General information on revocation and objection (opt-out): Depending on whether processing is based on consent or legal permission, you have the option at any time to revoke consent given or to object to the processing of your data through cookie technologies (referred to collectively as "opt-out"). You can initially declare your objection using the settings in your browser, for example, by disabling the use of cookies (which may also restrict the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be declared through a variety of services, especially in the case of tracking, via the websites [optout.aboutads.info](https://optout.aboutads.info) and [youronlinechoices.com](https://www.youronlinechoices.com/). In addition, you can obtain further information about objections in the context of the information about the service providers and cookies used.

Processing of cookie data based on consent: We use a cookie consent management process in which users' consents to the use of cookies or the processing and providers mentioned within the framework of the cookie consent management process are obtained, managed, and revoked. The consent declaration is stored to avoid having to repeat the request for consent and to be able to prove consent in accordance with legal obligations. Storage can be done server-side and/or in a cookie (so-called opt-in cookie, or using comparable technologies) to associate the consent with a user or their device. Subject to individual information about cookie management service providers, the following information applies: The storage duration of the consent can be up to two years. In this process, a pseudonymous user identifier is created and stored with the time of consent, information about the scope of the consent (e.g., which categories of cookies and/or service providers), and the browser, system, and device used.

Processed data types: Usage data (e.g., visited websites, interest in content, access times), meta/communication data (e.g., device information, IP addresses).

Data subjects: Users (e.g., website visitors, users of online services).

Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Privacy Policy for SSL/TLS Encryption

For reasons of security and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data Transmission Security (without SSL)

Please note that data transmitted over an open network such as the internet or an email service without SSL encryption are visible to everyone. You can recognize an unencrypted connection by the fact that the address line of the browser shows "http://" and no lock symbol is displayed in your browser line. Information transmitted over the internet and content received online may be transmitted over third-party networks. We cannot guarantee the confidentiality of messages or documents transmitted over such open networks or third-party networks.

If you disclose personal information over an open network or third-party networks, you should be aware that your data may be lost or that third parties may potentially access and collect this information without your consent. In many cases, individual data packets are encrypted during transmission, but not the names of the sender and recipient. Even if the sender and recipient are in the same country, data transmission often occurs via such networks without controls, including to third countries, i.e., also to countries that do not offer the same level of data protection as your domicile. We assume no responsibility for the security of your data during transmission over the internet and disclaim any liability for indirect and direct losses. We recommend using other means of communication if you deem it necessary or reasonable for security reasons.

Despite extensive technical and organizational security precautions, data may be lost or intercepted and/or manipulated by unauthorized parties. We take appropriate technical and organizational security measures to prevent this within our system as far as possible. However, your computer is outside the security area that we can control. It is your responsibility as a user to inform yourself about the necessary security precautions and to take appropriate measures in this regard. As a website operator, we are in no way liable for damages that may arise from data loss or manipulation.

Data that you provide in online forms may be passed on to commissioned third parties for order processing and may be viewed and, if necessary, processed by them.

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in so-called server log files that your browser automatically transmits to us. These are:

- Browser type and browser version

- Operating system used

- Referrer URL

- Hostname of the accessing computer

- Time of the server request

These data cannot be attributed to specific individuals. We do not merge this data with other data sources. We reserve the right to retrospectively check this data if we become aware of specific indications of unlawful use.

Third-party Services

This website may use Google Maps to embed maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube to embed videos.

These services provided by the American Google LLC use cookies, and as a result, data is transmitted to Google in the United States. We assume that personal tracking does not solely take place through the use of our website within this context.

Google has committed to ensuring adequate privacy according to the American-European and American-Swiss Privacy Shield.

Further information can be found in Google's privacy policy.

Privacy Policy for Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

Privacy Policy for Newsletter Data

If you would like to receive the newsletter offered on this website, we require an email address from you, as well as information that allows us to verify that you are the owner of the provided email address and consent to receiving the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not share it with third parties.

You can revoke your consent to the storage of the data, the email address, and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Privacy Policy for Comment Function on this Website

For the comment function on this website, in addition to your comment, information about the time the comment was created, your email address, and, if you do not post anonymously, the username you chose will be stored.

Storage of the IP address

Our comment function stores the IP addresses of users who write comments. Since we do not check comments on our site before they are activated, we need this data to be able to take action against the author in case of legal violations such as insults or propaganda.

Subscription to Comments

As a user of the site, you can subscribe to comments after signing up. You will receive a confirmation email to verify that you are the owner of the provided email address. You can unsubscribe from this function at any time via a link in the info emails.

Rights of Data Subjects

Right to Confirmation

Every data subject has the right to request confirmation from the operator of the website as to whether personal data concerning them is being processed. If you wish to exercise this right of confirmation, you can contact the data protection officer at any time.

Right to Information

Every data subject affected by the processing of personal data has the right to obtain from the operator of this website free information about the personal data stored about them and a copy of this information at any time. Furthermore, the following information can be provided if applicable:

- The purposes of the processing

- The categories of personal data being processed

- The recipients to whom the personal data have been or will be disclosed

- Where possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration

- The existence of the right to rectification or erasure of personal data concerning them or to restriction of processing by the data controller or a right to object to such processing

- The right to lodge a complaint with a supervisory authority

- If the personal data is not collected from the data subject: all available information about the origin of the data

Furthermore, the data subject has the right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate guarantees in connection with the transfer.

If you wish to exercise this right to information, you can contact our data protection officer at any time.

Right to Rectification

Every data subject affected by the processing of personal data has the right to request immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary statement.

If you wish to exercise this right of rectification, you can contact our data protection officer at any time.

Right to Erasure (Right to be Forgotten)

Every data subject affected by the processing of personal data has the right to request the data controller of this website to immediately delete the personal data concerning them if one of the following reasons applies and to the extent that processing is not necessary:

- The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.

- The data subject withdraws their consent on which the processing is based, and there is no other legal basis for the processing.

- The data subject objects to the processing for reasons arising from their particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to processing for direct marketing purposes, including profiling.

- The personal data has been processed unlawfully.

- The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.

- The personal data was collected in relation to information society services offered directly to a child.

If one of the above reasons applies, and you want to request the deletion of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will ensure that the deletion request is complied with immediately.

Right to Restriction of Processing

Every data subject affected by the processing of personal data has the right to request the data controller of this website to restrict processing if one of the following conditions is met:

- The accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data.

- The processing is unlawful, and the data subject opposes the erasure of the personal data and requests instead the restriction of its use.

- The data controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise, or defence of legal claims.

- The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the data controller override those of the data subject.

If one of the above conditions is met and you wish to request the restriction of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will initiate the restriction of processing.

Right to Data Portability

Every data subject affected by the processing of personal data has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another data controller, where technically feasible and provided it does not adversely affect the rights and freedoms of others.

To exercise the right to data portability, you can contact the data protection officer appointed by the operator of this website at any time.

Right to Object

Every data subject affected by the processing of personal data has the right to object at any time, for reasons arising from their particular situation, to the processing of personal data concerning them. The operator of this website will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.

To exercise the right to object, you can directly contact the data protection officer of this website.

Right to Withdraw Consent for Data Processing

Every data subject affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time. If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.

Privacy Policy for Objection to Promotional Emails

The use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and information materials is hereby rejected. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.

Paid Services

To provide paid services, we may request additional data from you, such as payment information, to process your order or request. We store this data in our systems until the statutory retention periods have expired.

Use of Google Maps

This website uses the services of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. By visiting the website, Google receives information that you have accessed the respective subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want this assignment to your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research, and/or the design of its website to meet needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. For more information about the purpose and scope of data collection and its processing by Google, as well as further information about your rights and settings options to protect your privacy, please visit: www.google.com/intl/en/policies/privacy.

Google Ads

This website uses Google Conversion Tracking. If you arrived at our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked through the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can refuse to accept the setting of a cookie required for this purpose – for example, by configuring your browser to block cookies from the domain "googleleadservices.com."

Please note that you must not delete the opt-out cookies if you wish to prevent measurement data from being recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. The function is used to present website visitors within the Google advertising network with interest-based advertisements. A so-called "cookie" is stored in the visitor's browser, which enables the visitor to be recognized when they call up websites that belong to the Google advertising network. On these pages, visitors may be presented with advertisements that relate to content the visitor has previously called up on websites that use Google's remarketing function.

According to Google, no personal data is collected in this process. If you still do not want the Google remarketing function, you can generally deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising through the Network Advertising Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Use of Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google." reCAPTCHA is intended to check whether the data entry on our websites (e.g., in a contact form) is done by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, length of stay of the website visitor on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting their web offerings from abusive automated spying and from spam. For more information about Google reCAPTCHA and Google's privacy policy, please follow these links: https://www.google.com/intl/en/policies/privacy/ and https://policies.google.com/terms?hl=en.

Privacy Policy for Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for processing on this website is located outside the European Economic Area or Switzerland, then Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google."

The statistics obtained allow us to improve our offering and make it more interesting for you as a user. This website also uses Google Analytics for cross-device analysis of visitor traffic, carried out via a User ID. If you have a Google user account, you can disable cross-device usage analysis in the settings there under "My data," "personal data."

The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. We would like to point out that on this website, Google Analytics has been extended to include the code "anonymizeIp();" to ensure anonymous collection of IP addresses. As a result, IP addresses are abbreviated before further processing, and personal references can be excluded. If the data collected about you contains a personal reference, this is immediately excluded, and the personal data is immediately deleted.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet usage to the website operator.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Google Analytics opt-out.

You can also prevent the use of Google Analytics by clicking on this link: Google Analytics opt-out. This will place an opt-out cookie on your hard drive that prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted, meaning you will need to set the opt-out cookies again if you wish to continue preventing this form of data collection. The opt-out cookies are set per browser and device, and therefore must be activated separately for each browser, computer, or other device.

Privacy Policy for Google AdSense

We use Google AdSense on this website. This is an advertising program provided by Google Inc. In Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google AdSense, we can display advertisements on this website that match our topic.

Google AdSense uses cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser and can prevent them from being displayed multiple times. In addition, Google AdSense can use cookie IDs to capture so-called conversions related to ad requests. This is the case, for example, when a user sees a Google Ads ad and later uses the same browser to visit the advertiser's website and make a purchase there. According to Google, Google Ads cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will obtain and store your IP address.

You can prevent participation in this tracking process in various ways:

a. by adjusting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive ads from third-party providers;

b. by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com," https://adssettings.google.com, with this setting being deleted when you delete your cookies;

c. by deactivating interest-based ads from providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, with this setting being deleted when you delete your cookies;

d. by permanently deactivating them in your Firefox, Internet Explorer, or Google Chrome browsers using the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case, you may not be able to use all functions of this offer to their full extent.

The legal basis for the processing of your data is a balancing of interests, whereby the processing of your personal data described above does not conflict with any overriding interests on your part (Art. 6 para. 1 sentence 1 lit. f GDPR). You can find more information about Google Ads from Google at https://ads.google.com/intl/en/home/, as well as general information about privacy at Google: https://www.google.com/intl/en/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.

Privacy Policy for the use of Google Web Fonts

This website uses so-called web fonts provided by Google for consistent font display. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a default font will be used by your computer.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

Privacy Policy for Google Tag Manager

Google Tag Manager is a solution that allows us to manage website tags, such as Google Analytics and other Google marketing services, through an interface and integrate them into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data of the users. With regard to the processing of users' personal data, reference is made to the following information about Google services. Usage policies: https://www.google.com/intl/en/tagmanager/use-policy.html.

Privacy Policy for Facebook

This website uses features of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages with Facebook plugins, a connection is established between your browser and Facebook's servers. Data is already being transmitted to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our site. Interactions, especially using a comment function or clicking a "Like" or "Share" button, are also transmitted to Facebook. Learn more at https://de-de.facebook.com/about/privacy.

Privacy Policy for Instagram

Our website incorporates features of the Instagram service. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by Instagram. For more information, please see Instagram's Privacy Policy: http://instagram.com/about/legal/privacy/

External Payment Service Providers

This website uses external payment service providers through whose platforms users and we can make payment transactions. For example, via

• PostFinance (https://www.postfinance.ch/en/detail/legal-accessibility.html)

• Visa (https://www.visa.de/terms-of-use/visa-privacy-center.html)

• Mastercard (https://www.mastercard.ch/en-ch/privacy.html)

• American Express (https://www.americanexpress.com/en/legal/online-privacy-statement.html)

• Paypal (https://www.paypal.com/en/webapps/mpp/ua/privacy-full)

• Bexio AG (https://www.bexio.com/en-CH/privacy)

• Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)

• Apple Pay (https://support.apple.com/en-ch/ht203027)

• Stripe (https://stripe.com/ch/privacy)

• Klarna (https://www.klarna.com/de/datenschutz/)

• Skrill (https://www.skrill.com/en/footer/privacy-policy/)

• Giropay (https://www.giropay.de/legal/privacy-policy) etc.

In the context of fulfilling contracts, we use payment service providers based on the Swiss Data Protection Act and, if necessary, Art. 6 para. 1 lit. b. EU-GDPR. Otherwise, we use external payment service providers based on our legitimate interests pursuant to the Swiss Data Protection Act and, if necessary, based on Art. 6 para. 1 lit. f. EU-GDPR, to offer our users effective and secure payment options.

The data processed by the payment service providers includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, sum, and recipient-related information. This information is required to complete the transactions. However, the data entered is only processed and stored by the payment service providers. We, as the operator, do not receive any information about (bank) accounts or credit cards, but only receive information for confirmation (acceptance) or rejection of the payment. Under certain circumstances, the data may be transmitted to credit agencies by the payment service providers. This transmission serves identity and credit checks. For this purpose, we refer to the terms and conditions and privacy policy of the payment service providers.

For payment transactions, the terms and conditions and the privacy policy of the respective payment service providers apply, which can be accessed within the respective website or transaction applications. We also refer to these for further information and for the assertion of revocation, information, and other data subject rights.

Newsletter via WhatsApp

You can also subscribe to our free newsletter via the instant messaging service WhatsApp. WhatsApp is a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as "WhatsApp". The processing of user data partially takes place on WhatsApp servers in the USA. However, WhatsApp guarantees compliance with EU data protection regulations when processing data in the USA through certification under the "EU-US Privacy Shield." WhatsApp also provides additional privacy information.

To receive our newsletter via WhatsApp, you need a WhatsApp user account. Details about the data collected by WhatsApp during registration can be found in the aforementioned privacy information provided by WhatsApp.

If you sign up for our newsletter via WhatsApp, the phone number you entered during the registration process will be processed by WhatsApp. In addition, your IP address and the date and time of your registration will be stored. As part of the further registration process, your consent to receive the newsletter will be obtained, the content will be described in detail, and reference will be made to this privacy policy.

The legal basis for sending the newsletter and analysis is Art. 6(1)(a) GDPR. You can revoke your consent to receive the newsletter with immediate effect at any time in accordance with Art. 7(3) GDPR. To do this, you simply need to inform us of your revocation. You can also block receipt of the newsletter through a setting in the WhatsApp software on your device.

We use Adobe Fonts for the visual design of our website. Adobe Fonts is a service of Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe), which provides us with access to a font library. To integrate the fonts we use, your browser must establish a connection to a server of Adobe in the USA and download the font required for our website. Adobe receives information that our website was accessed from your IP address. Further information about Adobe Fonts can be found in Adobe's privacy policy, which you can access here: Adobe Fonts.

Use of Fonts.com

This website uses Fonts.com, a service provided by Monotype Imaging Holdings Inc. for visualizing fonts, enabling this website to integrate corresponding content on its pages. Data collected: usage data and various types of data, as described in the service's privacy policy. Location of processing: United States of America (USA); Privacy Policy.

Privacy Policy for YouTube

This website incorporates features of the service "YouTube." "YouTube" is owned by Google Ireland Limited, a company registered and operating under Irish law, with registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with "YouTube" is based on the terms and conditions that can be found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms constitute a legally binding agreement between you and "YouTube" regarding the use of the services. Google's privacy policy explains how "YouTube" handles your personal data and protects your data when you use the service.

Order processing in the online shop with a customer account

We process our customers' data in accordance with the data protection regulations of the Federal Government (Data Protection Act, DSG) and the EU GDPR, as part of the ordering processes in our online shop, to enable them to select and order the chosen products and services, as well as to pay for and deliver or execute them.

The processed data includes master data (inventory data), communication data, contract data, payment data, and the individuals affected by the processing are our customers, interested parties, and other business partners. The processing is carried out for the purpose of providing contract services in the operation of an online shop, invoicing, delivery, and customer services. We use session cookies, for example, to store the contents of the shopping cart, and permanent cookies, for example, to store the login status.

The processing is based on Art. 6(1)(b) (execution of order processes) and (c) (legally required archiving) GDPR. The information marked as necessary is required for establishing and fulfilling the contract. We disclose the data to third parties only in the context of delivery, payment, or within the scope of legal permits and obligations. The data is only processed in third countries if this is necessary for the performance of the contract (e.g., upon customer request for delivery or payment).

Users can optionally create a user account, which allows them to view their orders, for example. During registration, users are provided with the necessary mandatory information. The user accounts are not public and cannot be indexed by search engines, such as Google. If users have terminated their user account, their data with respect to the user account will be deleted, subject to retention being necessary for commercial or tax law reasons pursuant to Art. 6(1)(c) GDPR. Information in the customer account will remain until its deletion with subsequent archiving in the event of a legal obligation. It is the users' responsibility to secure their data before the end of the contract when terminating their account.

As part of registration and subsequent logins, as well as the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the users' interest in protection against misuse and other unauthorized use. These data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation pursuant to Art. 6(1)(c) GDPR.

Deletion takes place after the expiry of legal warranty and comparable obligations; the necessity of retaining the data is reviewed at irregular intervals. In the case of legal archiving obligations, deletion takes place after their expiry.

Notice regarding data transfer to the USA

On our website, tools from companies based in the USA are integrated. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are required to disclose personal data to security authorities without you as the data subject being able to take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

Copyright

The copyright and all other rights to content, images, photos, or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. The written consent of the copyright holder must be obtained in advance for the reproduction of all files.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and, if necessary, liable for damages.

General disclaimer

All information on our website has been carefully checked. We strive to offer our information in a current, correct, and complete manner. Nevertheless, the occurrence of errors cannot be completely ruled out, so we cannot guarantee the completeness, correctness, and timeliness of information, including journalistic-editorial content. Liability claims for material or immaterial damage caused by the use of the offered information are excluded, unless there is proven intentional or grossly negligent fault.

The publisher may change or delete texts at his own discretion and without notice and is not obligated to update the content of this website. The use or access to this website is at the visitor's own risk. The publisher, its clients, or partners are not responsible for damages such as direct, indirect, accidental, specific, or consequential damages allegedly caused by visiting this website and therefore assume no liability for this.

The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher expressly distances himself from all third-party content that may be criminally or legally relevant or that violates good morals.

Changes

We reserve the right to amend this privacy policy at any time without prior notice. The current version published on our website shall apply. If the privacy policy is part of an agreement with you, we will inform you about the changes via email or by other suitable means in the event of an update.

Questions to the data protection officer

If you have any questions about data protection, please write us an email or contact the responsible person for data protection listed at the beginning of the privacy policy in our organization.

Source: SwissAnwalt