General information and responsible person
Data protection and data security are important issues when using online services, which is why it goes without saying that we treat your personal data confidentially and in accordance with the data processing principles of the Swiss Data Protection Act. This privacy policy is intended to inform users of our website about how, to what extent and for what purpose we collect, process and use data, as well as the rights of users in connection with the data collected.
As the controller, we have taken a number of measures and have appropriate technical and organisational security procedures in place to protect your data against unauthorised and unlawful access, processing or loss. However, due to the nature of data transmission on the Internet, absolutely complete security cannot be guaranteed. As an alternative, you can therefore also transmit your data by telephone or post.
Responsible for this website and its data processing:
H. Schwarzenbach AG
Münstergasse 17/19
8001 Zürich
Tel. +41 44 261 13 15
info@schwarzenbach.ch
By using our services, you consent to the collection and processing of your personal data in accordance with this privacy policy.
We are entitled to amend this data protection declaration at any time without prior notice. The current version published on our website shall apply.
If there are any contradictions between this data protection declaration and the otherwise applicable contractual or business conditions of H. Schwarzenbach AG, the provisions of this data protection declaration shall take precedence.
If you click on links in our shop, they may take you away from our site. We are not responsible for the data protection practices of other websites and recommend that you read their data protection statements.
1. Personal data
Personal data is any information that can be used to identify you and that can be traced back to you – for example, your name, email address and telephone number.
We collect this data primarily from you directly when you create a user account, in the course of the ordering process, when you subscribe to our newsletter and when you contact us in any other way. Under certain circumstances, we also receive personal data from third parties (e.g. gift delivery, credit assessment). We only collect, use and disclose your personal data if this is permitted by law or if you consent to the collection of the data.
User account
In order to place orders via our website, every customer must set up a password-protected customer account. The input screen provides information about the personal data collected. The customer account contains an overview of orders placed and current orders.
We accept no liability for password misuse by third parties.
Order process
All data entered by the customer in the input mask as part of order processing is stored.
Data that is absolutely necessary for delivery or order processing (e.g. delivery address) is also passed on to third-party service providers.
These service providers are
Swiss Post AG, Wankdorfallee 4, 3030 Bern
Veloblitz Zurich, Hohlstrasse 418, 8048 Zurich
For shipments abroad, these are also the customs office responsible for processing and the relevant delivery services abroad.
When paying via Twint, Postfinance e-finance, credit and debit cards, the data is transmitted in encrypted form and processed via the secure platform of PostFinance AG, Mingerstrasse 20, 3030 Bern. We have no access to your credit card and account information.
Our company is certified in accordance with the globally applicable PCI DSS security standards. (Payment options)
Credit check
In order to guarantee your and our security, we carry out a credit check before concluding a contract when you pay by invoice. In addition to a check of past transactions with us and any changes to your personal data, we also make use of third party service providers. This is Intrum AG, Eschenstrasse 12, 8603 Schwerzenbach, which provides us with creditworthiness information via its secure website.
Newsletter subscription
We offer you a newsletter in which you will be informed about interesting facts, news and useful information about our speciality shop and our products. If you would like to subscribe to the newsletter, you must enter a valid e-mail address. For legal reasons, this is checked by means of a confirmation e-mail using the double opt-in procedure to ensure that the owner of the e-mail address agrees to the newsletter being sent. When registering for the newsletter, the e-mail address, the IP address assigned by the Internet service provider (ISP) and the time stamp are recorded. This data is collected in order to be able to trace any possible misuse of an e-mail address.
The newsletter is registered for and sent via the following third-party provider, which stores and processes the personal data for this purpose: Intuit Mailchimp, 405 N Angier Ave. NE, Atlanta, GA 30308 USA.
The newsletters contain so-called tracking pixels for a statistical evaluation of the success or failure of the newsletter dispatch. The tracking pixels enable us to recognise whether and when the email was opened by you and which links from the newsletter were accessed. This collected personal data is stored and evaluated by us or Intuit Mailchimp in order to optimise the newsletter dispatch and adapt it to the interests of the recipients. We do not pass this data on to other persons or organisations.
The newsletter can be cancelled at any time using the corresponding link in the newsletter or via our general contact options and the personal data will be deleted on request.
You can subscribe to our newsletter here.
Contacting us
If you contact us using the contact options provided, your information will be stored so that it can be used to process and respond to your inquiry. These personal data will not be shared with any third parties.
Profiling
Profiling describes the automated processing of personal data to create a personality profile in order to analyse interests and preferences, among other things. We do not use profiling except to analyse the newsletter dispatch.
Privacy by design and privacy by default
Due to our collaboration with the following companies, which provide us with administrative infrastructure, they may also have access to your personal data under certain circumstances:
Comatic AG, Software Factory, Rathausplatz 9, CH-6210 Sursee
HL Informatik, Blegistrasse 3, CH-6340 Baar
ProIT Informatik AG, Freidorf 151, CH-4132 Muttenz
Openstream Internet Solutions, Trust Square, Rennweg 57, CH-8001 Zurich
Intronet GmbH c/o Trendhosting, Bälliz 64, 3600 Thun (Cloud hosting)
They assist us in ensuring that all software, hardware, and services are configured to protect your data and maintain your privacy.
The principles of “Privacy by Design” (data protection through technical design) and “Privacy by Default” (data protection by default settings) are ensured by the data protection policies of these companies and data processing agreements.
Due to legal regulations, we are obliged to store contract data as part of our accounting (e.g. invoices, receipts) for 10 years. After this period, they are routinely deleted.
Other personal data is stored for as long as it is needed for the purpose for which it was collected (e.g. e-mail address, access data to the online shop).
As a user, you can request information free of charge about whether and what personal data has been stored about you. You also have the right to have incorrect data corrected and to have your personal data blocked or deleted. In these cases, please use the contact address given above. Our employees will deal with your concerns in accordance with the law.
2. Access data
When you access our website, data is automatically collected and stored as “server log files”.
The following data is logged in this way:
- Visited website
- Date and time of access
- Volume of data transferred
- Message about successful retrieval
- Referrer URL (website from which you came to the current website)
- Browser and version used
- Operating system used and its interface
- IP address used
- Requesting provider
This anonymously collected data cannot be assigned to a specific person and is stored separately from personal data. The access data is used to ensure the permanent functionality of our website. It is also used for statistical analyses and to increase data security in our company, which ultimately also serves to protect personal data.
If there are concrete indications of illegal use, we reserve the right to subsequently check the server log files and make them available to the law enforcement authorities.
3. Cookies
Cookies are small text files that are stored on your terminal device when you visit our website. The use of cookies increases the user-friendliness and security of our website.
Every time you visit our website, text files are stored in the internet browser of your device. Your browser accesses these files when you call up our website again and so certain settings such as language settings, shopping basket content are available without having to enter them again.
As the cookies are stored on your end device, you have full control over this and can use the setting options to manage your individual use of cookies and delete cookies that have already been set. Please note that, depending on your settings, not all functions of the website can be used to their full extent.
4. Google Analytics
Google Analytics is a useful analysis tool for the statistical evaluation of the use of our website.
Our website uses the “Google Analytics” service, which is offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA), to analyse website usage by you as a user. The service uses “cookies” – text files that are stored on your terminal device. The information collected by the cookies, such as browser type, operating system used, referrer URL, is usually sent to a Google server in the USA and stored there.
IP anonymisation is used on our website. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. As part of the data sharing agreement we have concluded with Google Inc., the latter uses the information collected to evaluate website use and website activity and provides services related to internet use.
You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
Furthermore, you can prevent the collection as well as the processing of this data by Google by downloading and installing the browser plug-in available here. You can find more information on the use of data by Google Inc. here.
5. Google reCAPTCHA
Google reCAPTCHA is a spam protection tool that attempts to distinguish whether an action on the Internet, e.g. registering for a newsletter, is performed by a human or a computer programme. (□”I am not a robot”)
Our website uses the Google reCAPTCHA service, which is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to ensure that actual persons are behind a newsletter registration. The service uses “cookies” – text files that are stored on your device. Information collected by the cookies, such as IP address, browser type, operating system used, and referrer URL, is typically sent to a Google server in the USA and stored there.
You have the option to prevent the storage of cookies on your device by adjusting the settings in your browser, as described under “Cookies”.