Privacy Policy
Personal data is any information that relates to an identified or identifiable person. A data
subject is a person about whom personal data is processed. Processing includes any handling of
personal data, regardless of the means and procedures used, in particular the storage,
disclosure, procurement, collection, deletion, storage, modification, destruction and use of
personal data. The European Economic Area (EEA) comprises the European Union (EU) as well as the
Principality of Liechtenstein, Iceland and Norway. The General Data Protection Regulation (GDPR)
refers to the processing of personal data as processing of personal data.
Legal basis
We process personal data in accordance with Swiss data
protection law such as, in particular, the Federal Data Protection Act (FADP) and the Ordinance
to the Federal Data Protection Act (FADP). We process - if and to the extent that the General
Data Protection Regulation (GDPR) is applicable - personal data in accordance with at least one
of the following legal bases: Art. 6 para. 1 lit. b GDPR for the necessary processing of
personal data for the performance of a contract with the data subject as well as for the
implementation of pre-contractual measures. Art. 6 para. 1 lit. f GDPR for the necessary
processing of personal data to protect the legitimate interests of us or of third parties,
unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate
interests are, in particular, our interest in being able to provide our offer permanently, in a
user-friendly, secure and reliable manner, as well as to be able to advertise for it if
necessary, information security as well as protection against misuse and unauthorized use, the
enforcement of our own legal claims and compliance with Swiss law. Art. 6 para. 1 lit. c GDPR
for the necessary processing of personal data to comply with a legal obligation to which we are
subject under any applicable law of member states in the European Economic Area (EEA). Art. 6
para. 1 lit. e GDPR for the necessary processing of personal data for the performance of a task
which is in the public interest. Art. 6 para. 1 lit. a GDPR for the processing of personal data
with the consent of the data subject. Art. 6 (1) (d) GDPR for the necessary processing of
personal data to protect the vital interests of the data subject or another natural person.
Type, scope and purpose
We process personal data that is necessary to
provide our offer permanently, and in a way that is user-friendly, secure and reliable. Such
personal data can fall into the categories of inventory and contact data, browser and device
data, content data, meta or marginal data and usage data, location data, sales, contract and
payment data. We process personal data for the period of time required for the respective
purpose(s) or as required by law. Personal data whose processing is no longer required will be
anonymized or deleted. Persons whose data we process generally have the right to have their data
deleted. As a matter of principle, we only process personal data with the consent of the data
subject, unless the processing is permitted for other legal reasons, for example, to fulfill a
contract with the data subject and for corresponding pre-contractual measures, to protect our
overriding legitimate interests, because the processing is evident from the circumstances or
after prior information. In this context, we process in particular information that a data
subject voluntarily and self-submits to us when contacting us - for example, by mail, email,
contact form, social media or telephone - or when registering for a user account. We may store
such information, for example, in an address book or with comparable tools. If you transmit
personal data to us via third parties, you are obliged to ensure data protection vis-à-vis such
third parties as well as to ensure the accuracy of such personal data.
Processing of personal data by third parties, also abroadWe may have
personal data processed by commissioned third parties or process it jointly with third parties
or with the help of third parties or transmit it to third parties. Such third parties are in
particular providers whose services we use. We also ensure appropriate data protection for such
third parties. Such third parties are generally located in Switzerland and in the European
Economic Area (EEA). However, such third parties may also be located in other states and
territories on earth as well as elsewhere in the universe, provided that their data protection
laws are applicable in accordance with GDPR.