Data Protection

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.
The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under “My data”, “Personal data”.
The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that on this website Google Analytics has been extended by the code “”_anonymizeIp();”” in order to ensure an anonymized collection of IP addresses. This means that IP addresses are processed in abbreviated form so that they cannot be linked to a specific person. If the data collected about you can be assigned to a person, this will be excluded immediately and the personal data will be deleted immediately.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: Deactivate Google Analytics.
You can also prevent the use of Google Analytics by clicking on this link: Deactivate Google Analytics. This will store an opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your end device, these opt-out cookies will also be deleted, i.e. you must set the opt-out cookies again if you wish to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.

Facebook

This website uses functions of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA . When you visit our pages with Facebook plugins, a connection is established between your browser and the Facebook servers. Data is already being transmitted to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be linked to your Facebook account, please log out of Facebook before visiting our site. Interactions, in particular the use of a comment function or clicking on a “Like” or “Share” button, are also forwarded to Facebook. You can find out more at https://de-de.facebook.com/about/privacy.

Instagram

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

External payment service providers

This website uses external payment service providers through whose platforms users and we can carry out payment transactions. For example about
Stripe (https://stripe.com/ch/privacy)
As part of the fulfillment of the contract, we use the payment service providers on the basis of the Swiss Data Protection Ordinance and, if necessary, Art. 6 para. 1 lit. b. EU GDPR. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with the Swiss Data Protection Ordinance and, where necessary, Art. 6 para. 1 lit. f. EU GDPR in order to offer our users effective and secure payment options.
The data processed by the payment service providers includes inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, sum and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed by the payment service providers and stored by them. As the operator, we do not receive any information about the (bank) account or credit card, but only information to confirm (accept) or reject the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. In this regard, we refer to the terms and conditions and data protection notices of the payment service providers.
Payment transactions are subject to the terms and conditions and privacy policy of the respective payment service providers, which can be accessed within the respective website or transaction applications. We also refer to these for the purpose of further information and assertion of rights of revocation, information and other data subject rights.

Sending newsletters – Mailchimp
The newsletter is sent via the mailing service provider ‘MailChimp’, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European level of data protection (Privacy Shield). The use of the mailing service provider is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and an order processing agreement pursuant to Art. 28 para. 3 P. 1 GDPR.

The mailing service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of the mailing and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or pass it on to third parties.

YouTube

Functions of the “YouTube” service are integrated on this website. “YouTube” is the property of Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.
Your legal agreement with “YouTube” consists of the Terms, which you can find at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These Terms constitute a legally binding agreement between you and “YouTube” regarding your use of the Services. Google’s privacy policy explains how “YouTube” handles and protects your personal data when you use the service.

Online store / Webshop
We process the data of our customers in accordance with the data protection regulations of the Federal Government (Data Protection Act, DSG) and the EU GDPR as part of the ordering processes in our online store in order to enable them to select and order the selected products and services as well as their payment and delivery or processing.
The processed data includes master data (inventory data), communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer service. In this context, we use session cookies, e.g. to store the contents of the shopping cart, and permanent cookies, e.g. to store the login status.
The processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The data marked as required are necessary for the establishment and fulfillment of the contract. We only pass on the data to third parties within the scope of delivery, payment or within the scope of legal permissions and obligations. The data will only be processed in third countries if this is necessary to fulfill the contract (e.g. at the customer’s request for delivery or payment).
Users can optionally create a user account in which they can view their orders in particular. As part of the registration process, users are provided with the required mandatory information. User accounts are not public and cannot be indexed by search engines, e.g. Google. If users have terminated their user account, their data relating to the user account will be deleted, provided that their retention is required for commercial or tax law reasons in accordance with the provisions of the GDPR. Art. 6 para. 1 lit. c GDPR. Information in the customer account is retained until it is deleted and subsequently archived in the event of a legal obligation. It is the responsibility of users to save their data in the event of termination before the end of the contract.
As part of registration and new registration as well as the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests and those of the users in protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. a GDPR. 1 lit. c GDPR.
The deletion takes place after the expiry of statutory warranty and comparable obligations; the necessity of storing the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion takes place after their expiry.

Agency services

We process our customers’ data in accordance with the data protection provisions of the Swiss Confederation (Data Protection Act, DSG) and the EU GDPR as part of our contractual services, e-mail, telephone numbers), content data (e.g. text entries, etc.), contract data (e.g. subject matter of the contract, term), payment data (e.g. bank details, payment history), usage data and metadata (e.g. as part of the evaluation and performance measurement of marketing measures). The data subjects include our customers, interested parties and their customers, users, website visitors or employees as well as third parties. The purpose of the processing is the provision of contractual services, billing and our customer service. The legal basis for the processing results from Art. 6 para. 1 lit. b GDPR (contractual services), Art. 6 para. 1 lit. f GDPR (analysis, statistics, optimization, security measures). We process data that is necessary for the establishment and fulfillment of contractual services and point out the necessity of their disclosure. Data is only passed on to external parties if this is necessary in the context of an order. When processing the data provided to us as part of an order, we act in accordance with the instructions of the client and the legal requirements of order processing in accordance with Art. 28 GDPR and do not process the data for purposes other than those specified in the order.
We delete the data after expiry of the statutory warranty and comparable obligations. The necessity of storing the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion takes place after their expiry. In the case of data that the client has provided to us as part of an order, we delete the data in accordance with the specifications of the order, usually after completion of the order.

Contractual services
We process the data of our contractual partners and interested parties as well as other clients, customers, clients or contractual partners (uniformly referred to as “contractual partners”) in accordance with the data protection provisions of the Federal Data Protection Act (DSG) and the EU GDPR pursuant to Art. 6 para. 1 lit. b. GDPR in order to provide you with our contractual or pre-contractual services. The data processed in this context, the type, scope and purpose as well as the necessity of their processing result from the underlying contractual relationship. the processed data include the master data of our contractual partners (e.g. names and addresses), contact data (e.g. e-mail addresses and telephone numbers) as well as contract data (e.g. services used, contract contents, contract communication, names of contact persons) and payment data (e.g. e-mail addresses and telephone numbers). In principle, we do not process any special categories of personal data unless these are part of order or contract processing.
We process data that is necessary for the justification and fulfillment of the contractual services and point out the necessity of their disclosure, unless this is obvious to the contractual partners. Data will only be passed on to external persons or companies if this is necessary within the framework of a contract. When processing the data provided to us as part of an order, we act in accordance with the client’s instructions and the statutory provisions.
As part of the use of our online services, we may store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests and the interests of users in protection against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary for the pursuit of our claims in accordance with Art. 6 para. 1 lit. f. GDPR or if there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c. GDPR.
The data is deleted when it is no longer required to fulfill contractual or statutory duties of care or to meet any warranty or comparable obligations, whereby the necessity of storing the data is reviewed at irregular intervals. Otherwise, the statutory retention obligations apply.

Benefits according to statutes

We process the data of our members, sponsors, interested parties, customers or other persons in accordance with the data protection provisions of the Federal Data Protection Act (DSG) and the EU-DSGVO pursuant to Art. 6 para. 1 lit. b. GDPR, insofar as we offer them contractual services or act in the context of existing business relationships, e.g. with members, or are ourselves recipients of benefits and services. Otherwise, we process the data of the data subjects in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interests, e.g. when it comes to administrative tasks or public relations work. The data processed in this context, the type, scope and purpose as well as the necessity of their processing result from the underlying contractual relationship. This generally includes inventory and master data of persons (e.g. name, address, etc.) as well as contact data (e.g. e-mail address, telephone, etc.), contract data (e.g. services used, content and information provided, names of contact persons) and, if we offer fee-based services or products, payment data (e.g. bank details, payment history, etc.).

We delete data that is no longer required to achieve the statutory purposes. This depends on the respective tasks and contractual relationships. In the case of business transactions, we retain the data for as long as it may be relevant for the business transaction and with regard to any warranty or liability obligations. The necessity of storing the data is reviewed at irregular intervals. Otherwise, the statutory retention obligations apply.

Data transfer to the USA
Tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing operations.

Changes
We may change this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

Disclaimer
The author assumes no liability for the correctness, accuracy, up-to-dateness, reliability and completeness of the information.
Liability claims against the author for damages of a material or immaterial nature arising from access to or use or non-use of the published information, through misuse of the connection or through technical faults are excluded.

All offers are subject to change. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without prior notice or to cease publication temporarily or permanently.

Holder

The owner of the data is: BOXLY Gmbh, Obergrundstrasse 61, 6003 Lucerne.
Email: info@boxly.ch

May 2023