Privacy Policy

Privacy Policy

BOXLY Kriens GmbH is the operator of the website boxly.ch and, unless otherwise stated in this privacy policy, is responsible for the data processing activities described in this privacy policy.

General

Based on Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Data Protection Act, DPA), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as well as possible against unauthorized access, loss, misuse, or falsification.

We point out that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

By using this website and/or visiting our locations or other premises, you agree to the collection, processing, and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or the names of files accessed, date and time, are stored on the server for statistical purposes without this data being directly linked to your person. Insofar as personal data (for example, name, address, or email addresses) is collected on our pages, this is done, wherever possible, always on a voluntary basis. This data will not be passed on to third parties without your explicit consent.

Processing of personal data

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, retention, alteration, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Insofar and to the extent that the EU GDPR is applicable, we also process personal data on the following legal bases in connection with Art. 6 (1) GDPR:

• lit. a) Processing of personal data with the consent of the data subject.
• lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
• lit. c) Processing of personal data to fulfill a legal obligation to which we are subject under applicable EU law or under the applicable law of a country in which the GDPR is applicable in whole or in part.
• lit. d) Processing of personal data to protect the vital interests of the data subject or of another natural person.
• lit. f) Processing of personal data to safeguard our legitimate interests or those of third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations arising from statutory or other obligations to which we are subject, we restrict processing accordingly.

Cookies

This website uses cookies. These are small text files that make it possible to store specific, user-related information on the user's end device while the user is using the website. Cookies make it possible, in particular, to determine the frequency of use and the number of users of the pages, to analyze usage patterns, but also to make our offering more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved again when the page is revisited. If you do not want this, you should set your internet browser to refuse the acceptance of cookies.

A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, particularly in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. In addition, the storage of cookies can be prevented by deactivating them in your browser settings. Please note that in this case not all functions of this online offering may be usable.

Contact form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

Newsletter

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

After you have given your consent to the storage of the data, the email address, and their use for sending the newsletter, you can revoke this at any time, for example via the unsubscribe link in the newsletter.

Rights of the data subject

Right of confirmation: Every data subject has the right to request confirmation from the operator of the website as to whether personal data concerning them is being processed. If you wish to exercise this right of confirmation, you can contact the data protection officer at any time.

Right to information: Every person affected by the processing of personal data has the right to receive, free of charge, information about the data stored about them and a copy of this information from the operator of this website at any time. In addition, information may be provided on the following, as applicable: purposes of the processing; categories of personal data processed; recipients to whom the personal data has been or will be disclosed; if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria used to determine that duration; the existence of a right to rectification or erasure of the personal data concerning them or restriction of processing by the controller, or a right to object to such processing; the existence of a right to lodge a complaint with a supervisory authority; if the personal data is not collected from the data subject: all available information about the origin of the data. In addition, the data subject has the right to be informed as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information on the appropriate safeguards relating to the transfer. If you wish to exercise this right to information, you can contact our data protection officer at any time.

Right to rectification: Every person affected by the processing of personal data has the right to demand the immediate correction of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to demand the completion of incomplete personal data — including by means of a supplementary statement. If you wish to exercise this right to rectification, you can contact our data protection officer at any time.

Right to erasure (right to be forgotten): Every person affected by the processing of personal data has the right to demand that the controller of this website immediately erase the personal data concerning them, provided one of the following reasons applies and processing is no longer necessary:

• The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
• The data subject withdraws the consent on which the processing was based, and there is no other legal basis for the processing.
• The data subject objects to the processing for reasons arising from their particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and associated profiling.
• The personal data has been processed unlawfully.
• The erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the member states to which the controller is subject.
• The personal data was collected in relation to information society services offered directly to a child.

If one of the above reasons applies and you wish to request the erasure of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will ensure that the request for erasure is complied with immediately.

Right to restriction of processing: Every person affected by the processing of personal data has the right to demand that the controller of this website restrict processing if one of the following conditions is met:

• The accuracy of the personal data is disputed by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject opposes the erasure of the personal data and requests instead the restriction of the use of the personal data.
• The controller no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims.
• The data subject has objected to the processing for reasons arising from their particular situation, and it has not yet been established whether the legitimate interests of the controller override those of the data subject.

If one of the aforementioned conditions is met, you can contact our data protection officer at any time to request restriction of the processing of personal data by the operator of this website. The data protection officer of this website will arrange for the restriction of processing.

Right to data portability: Every person affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format. Furthermore, the data subject has the right to have the personal data transmitted directly from one controller to another controller, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not thereby affected. To exercise the right to data portability, you can contact the data protection officer designated by the operator of this website at any time.

Right to object: Every person affected by the processing of personal data has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them. The operator of this website will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims. To exercise your right to object, you can contact the data protection officer of this website directly.

Right to withdraw a data protection consent: Every person affected by the processing of personal data has the right to withdraw a consent given for the processing of personal data at any time. If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.

Fee-based services

For the provision of fee-based services, we request further data, such as payment data, in order to be able to carry out your order. We store this data in our systems until the statutory retention periods have expired.

Copyright

The copyright and all other rights to the content, images, photos, or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. Prior written consent from the copyright holders must be obtained for the reproduction of any files.

Anyone who commits a copyright infringement without the consent of the respective copyright holders may be liable to prosecution and, under certain circumstances, may face claims for damages.

Disclaimer

All information on our website has been carefully checked. We endeavor to ensure that the information we provide is up to date, correct, and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, so we cannot guarantee the completeness, accuracy, and timeliness of the information, including of a journalistic-editorial nature. Liability claims relating to material or immaterial damage caused by the use or non-use of the information provided, or by the use of incorrect and incomplete information, are generally excluded.

The publisher may change or delete texts at its own discretion and without prior notice and is not obliged to update the content of this website. Use of this website or access to it is at the visitor's own risk. The publisher, its customers, or partners are not responsible for damages, such as direct, indirect, incidental, or consequential damages, allegedly caused by visiting this website, and consequently assume no liability for such damages.

The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links from this website. The operators of the linked pages are solely responsible for their content. The publisher therefore expressly distances itself from all third-party content that may be relevant under criminal or liability law or that violates accepted standards of decency.

Google Maps

This website uses Google Maps. This enables us to display interactive maps directly on the website and to allow you to conveniently use the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research, and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. Further information on the purpose and scope of the collection and processing of data by Google, as well as further information on your related rights and setting options for protecting your privacy, can be found at: www.google.de/intl/de/policies/privacy.

Google Ads

This website uses Google Conversion Tracking. If you reached our website via an advertisement placed by Google, a cookie will be set on your computer by Google Ads. The cookie for conversion tracking is set when a user clicks on an advertisement placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the advertisement and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Ads customers who have opted in to conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this — for example, through a browser setting that generally disables the automatic setting of cookies, or by setting your browser to block cookies from the domain googleadservices.com. Please note that you should not delete the opt-out cookies as long as you do not want measurement data to be collected. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Google Remarketing

This website uses the remarketing function of Google Inc. This function serves to present interest-based advertising to website visitors within the Google advertising network. A so-called cookie is stored in the browser of the website visitor, which makes it possible to recognize the visitor again when they visit websites that belong to the Google advertising network. On these websites, the visitor may be shown advertising related to content that the visitor previously viewed on websites that use Google's remarketing function.

According to Google's own statements, Google does not collect any personal data during this process. However, if you do not wish to use Google's remarketing function, you can generally deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the Network Advertising Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Video surveillance (CCTV)

For the safety of persons, buildings, and stored property, we operate video surveillance (CCTV) at selected locations.

Responsible party:

BOXLY Kriens GmbH

Ringstrasse 23, 6010 Kriens, Switzerland

Email: info@boxly.ch

Phone: +41 (0)41 525 32 31

Purpose of video surveillance: Video surveillance serves exclusively the following purposes:

• Protection of persons (customers, employees, visitors)
• Protection of buildings, storage rooms, and infrastructure
• Theft prevention, vandalism prevention
• Investigation of security-related incidents

The recordings are not used for performance or behavioral monitoring of employees.

Monitored areas: Video surveillance is limited exclusively to security-relevant communal and access areas, in particular:

• Entrance and exit areas of the property
• Access and control areas (e.g. main entrance, access barriers)
• Elevator access points and elevator lobbies
• Stairwells
• Corridors and traffic areas within the facility
• Driveways and parking areas on the property itself

In particular, the following are not monitored:

• Individual storage rooms (rental boxes)
• Sanitary facilities
• Changing areas
• Office spaces or other private areas

Public roads, sidewalks, or neighboring properties are not monitored. Camera angles are correspondingly limited or technically masked.

Type of data: Only image data (video) is recorded. No audio recordings are made.

Storage duration: Video recordings are generally stored for a short, proportionate period and then automatically deleted. Longer retention only occurs if a security-relevant incident has been identified or the data is required to enforce or defend legal claims.

Access to recordings: Access to video recordings is strictly limited to authorized persons, permitted exclusively for the stated purposes, and technically and organizationally secured. There is no routine or permanent live monitoring.

Disclosure to third parties: Video recordings are only disclosed to third parties within the framework of legal obligations (e.g. to law enforcement authorities) or to enforce legitimate legal claims. No transfer abroad takes place.

Your rights: Under applicable data protection law, data subjects have, in particular, the right to information about whether and which video recordings concern them, erasure of unlawfully processed data, and restriction of processing insofar as legally provided for. Please send inquiries to: info@boxly.ch. Please note that rights to information can only be granted within the framework of statutory requirements and while safeguarding the rights of third parties.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the party responsible for data processing on this website is located outside the European Economic Area or Switzerland, data processing for Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as Google.

The statistics obtained enable us to improve our offering and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate cross-device analysis of your usage in the settings there under "My Data," "Personal Data."

The legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. We would like to point out that on this website, Google Analytics has been extended by the code `_anonymizeIp();` to ensure anonymized collection of IP addresses. This means that IP addresses are processed in a shortened form so that they cannot be linked to a specific person. Should the data collected about you be attributable to a person, this will be immediately excluded and the personal data will be deleted without delay.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website usage and internet usage. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the available browser plugin. This will store a so-called opt-out cookie on your device, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted, i.e. you must set the opt-out cookies again if you want to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/device and must therefore be activated separately for each browser, computer, or other device.

Facebook

This website uses functions of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you access our pages with Facebook plugins, a connection is established between your browser and Facebook's servers. Data is already transmitted to Facebook in the process. If you have a Facebook account, this data can be linked to it. If you do not want this data to be linked to your Facebook account, please log out of Facebook before visiting our page. Interactions, in particular the use of a comment function or clicking on a "Like" or "Share" button, are also forwarded to Facebook. You can find out more at https://de-de.facebook.com/about/privacy.

Instagram

Functions of the Instagram service are integrated into our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information can be found in Instagram's privacy policy: http://instagram.com/about/legal/privacy/.

External payment service providers

This website uses external payment service providers, via whose platforms users and we can carry out payment transactions. For example, via Stripe (https://stripe.com/ch/privacy).

As part of contract fulfillment, we use the payment service providers on the basis of the Swiss Data Protection Ordinance and, where necessary, Art. 6 (1) lit. b EU GDPR. In addition, we use external payment service providers on the basis of our legitimate interests under the Swiss Data Protection Ordinance and, where necessary, under Art. 6 (1) lit. f EU GDPR, in order to offer our users effective and secure payment options.

The data processed by the payment service providers includes, among other things, master data such as name and address, bank details such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract-, sum-, and recipient-related information. This information is required to carry out the transactions. However, the data entered is only processed and stored by the payment service providers. As the operator, we do not receive any information about (bank) account or credit card, only information confirming (acceptance) or rejecting the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit reporting agencies. The purpose of this transmission is to verify identity and creditworthiness. In this regard, we refer to the terms and conditions and privacy notices of the payment service providers.

The terms and conditions and privacy policy of the respective payment service providers apply to payment transactions and can be accessed within the respective website or transaction applications. We also refer to these for the purposes of further information and the exercise of withdrawal, information, and other rights of data subjects.

Sending newsletters – Mailchimp

The newsletter is sent via the dispatch service provider "MailChimp," a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with the European level of data protection. The use of the dispatch service provider is based on our legitimate interests pursuant to Art. 6 (1) lit. f GDPR and a data processing agreement pursuant to Art. 28 (3) sentence 1 GDPR.

The dispatch service provider may use the recipients' data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletters, or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

YouTube

Functions of the YouTube service are integrated on this website. YouTube is owned by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and in Switzerland.

Your legal agreement with YouTube consists of the terms you can find at https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms constitute a legally binding agreement between you and YouTube regarding your use of the services. Google's privacy policy explains how YouTube handles and protects your personal data when you use the service.

Online shop / webshop

We process the data of our customers in accordance with the data protection provisions of the federal government (Data Protection Act, DPA) and the EU GDPR as part of the ordering process in our online shop, in order to enable them to select and order the selected products and services as well as their payment and delivery or processing.

The processed data includes master data (inventory data), communication data, contract data, and payment data; the persons affected by the processing include our customers, prospective customers, and other business partners. Processing is carried out for the purpose of providing contractual services in the context of operating an online shop, billing, delivery, and customer service. In this context, we use session cookies, e.g. to store the contents of the shopping cart, and permanent cookies, e.g. to store login status.

Processing is carried out on the basis of Art. 6 (1) lit. b (execution of order processes) and lit. c (statutorily prescribed archiving) GDPR. The data marked as required is necessary for the establishment and fulfillment of the contract. We only pass on the data to third parties within the scope of delivery, payment, or within the scope of legal permissions and obligations. Data will only be processed in third countries if this is necessary for contract fulfillment (e.g. at the customer's request for delivery or payment).

Users can optionally create a user account in which they can view, in particular, their orders. As part of the registration process, users are informed of the necessary mandatory information. User accounts are not public and cannot be indexed by search engines, e.g. Google. If users have terminated their user account, their data relating to the user account will be deleted, unless their retention is necessary for commercial or tax law reasons (in accordance with Art. 6 (1) lit. c GDPR). Information in the customer account remains available until it is deleted, followed by archiving in the event of a legal obligation. It is the responsibility of users to save their data in the event of termination before the end of the contract.

As part of registration and re-registration and the use of our online services, we store the IP address and the time of the respective user action. This storage is carried out on the basis of our legitimate interests and those of users in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless this is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 (1) lit. c GDPR.

Deletion occurs after the expiry of statutory warranty and comparable obligations; the necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion takes place after their expiry.

Agency services

We process the data of our customers in accordance with the data protection provisions of the federal government (Data Protection Act, DPA) and the EU GDPR as part of our contractual services. In doing so, we process master data (e.g. customer master data such as names or addresses), contact data (e.g. email, telephone numbers), content data (e.g. text entries), contract data (e.g. subject matter of the contract, duration), payment data (e.g. bank details, payment behavior), usage data, and metadata (e.g. as part of the evaluation and success measurement of marketing measures). The persons affected include our customers, prospective customers, and their customers, users, website visitors, or employees, as well as third parties. The purpose of processing is the provision of contractual services, billing, and our customer service. The legal basis for the processing arises from Art. 6 (1) lit. b GDPR (contractual services) and Art. 6 (1) lit. f GDPR (analysis, statistics, optimization, security measures). We process data that is necessary for the establishment and fulfillment of contractual services and point out the necessity of its disclosure. Disclosure to external parties only occurs if this is necessary in connection with an order. When processing data provided to us as part of an order, we act according to the instructions of the client and the statutory requirements of data processing pursuant to Art. 28 GDPR and do not process the data for purposes other than those specified in the order.

We delete the data after the expiry of statutory warranty and comparable obligations. The necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion takes place after their expiry. For data that the client has provided to us as part of an order, we delete the data in accordance with the specifications of the order, generally after the order has been completed.

Contractual services

We process the data of our contractual partners and prospective customers, as well as other clients, customers, or contractual partners (collectively referred to as "contractual partners"), in accordance with the data protection provisions of the Federal Data Protection Act (DPA) and the EU GDPR, pursuant to Art. 6 (1) lit. b GDPR, in order to provide them with our contractual or pre-contractual services. The data processed in this context, its type, scope, and purpose, as well as the necessity of its processing, arise from the underlying contractual relationship. The processed data includes the master data of our contractual partners (e.g. names and addresses), contact data (e.g. email addresses and telephone numbers), as well as contract data (e.g. services used, contract contents, contract communication, names of contact persons), and payment data. We generally do not process special categories of personal data unless they are part of an order or contract processing.

We process data that is necessary for the establishment and fulfillment of the contractual services and point out the necessity of its disclosure, unless this is obvious to the contractual partners. Disclosure to external persons or companies only occurs if this is necessary in connection with a contract. When processing data provided to us as part of an order, we act according to the instructions of the client and statutory provisions.

As part of the use of our online services, we may store the IP address and the time of the respective user action. This storage is carried out on the basis of our legitimate interests and the interests of users in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless this is necessary to pursue our claims pursuant to Art. 6 (1) lit. f GDPR or there is a legal obligation to do so pursuant to Art. 6 (1) lit. c GDPR.

Data is deleted when it is no longer required to fulfill contractual or statutory duties of care, as well as to process any warranty and comparable obligations, whereby the necessity of retaining the data is reviewed at irregular intervals. The statutory retention obligations otherwise apply.

Services according to statutes

We process the data of our members, sponsors, prospective customers, customers, or other persons in accordance with the data protection provisions of the Federal Data Protection Act (DPA) and the EU GDPR pursuant to Art. 6 (1) lit. b GDPR, insofar as we offer them contractual services or act within the framework of existing business relationships, e.g. with regard to members, or are ourselves recipients of services and dienstleistungen. Otherwise, we process the data of data subjects pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interests, e.g. when it comes to administrative tasks or public relations. The data processed in this context, its type, scope, and purpose, as well as the necessity of its processing, arise from the underlying contractual relationship. This generally includes inventory and master data of persons (e.g. name, address, etc.) as well as contact data (e.g. email address, telephone, etc.), contract data (e.g. services used, content and information provided, names of contact persons), and, insofar as we offer fee-based services or products, payment data (e.g. bank details, payment behavior, etc.).

We delete data that is no longer necessary to achieve the purposes stipulated in the statutes. This depends on the respective tasks and contractual relationships. In the case of business transactions, we retain the data for as long as it may be relevant for the transaction of business as well as with regard to any warranty or liability obligations. The necessity of retaining the data is reviewed at irregular intervals. The statutory retention obligations otherwise apply.

Data transfer to the USA

Our website incorporates, among other things, tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. intelligence services) may process, evaluate, and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing operations.

Changes

We may amend this privacy policy at any time without prior notice. The version currently published on our website applies. Insofar as the privacy policy is part of an agreement with you, we will inform you of any update by email or in another appropriate manner.

Disclaimer

The author assumes no liability for the correctness, accuracy, timeliness, reliability, and completeness of the information. Liability claims against the author for material or immaterial damages arising from access to or use or non-use of the published information, from misuse of the connection, or from technical malfunctions are excluded.

All offers are subject to change. The author expressly reserves the right to change, supplement, or delete parts of the pages or the entire offering without prior notice, or to temporarily or permanently discontinue publication.

Owner

The owner of the data is: BOXLY Kriens GmbH, Ringstrasse 23, 6010 Kriens.

Email: info@boxly.ch

January 2026