Privacy Notice

Privacy and data protection

PRIVACY POLICY

Privacy policy TLC Trading GmbH

Table of contents
A.    Cross-channel information 2
1 Responsible and content of this privacy policy 2
2 Contact person for data protection 2
3 Your rights 2
4 Data security 3
5 Contacting us 3
6 Use of your data for marketing purposes 4
6.1 Central data storage and analysis in the CRM system 4
6.2 E-mail marketing and newsletters 4
7 Disclosure to third parties and access by third parties 5
8 Transfer of personal data abroad 6
9 Retention periods 6
B. Special notes for our website 6
10 Log file data 6
11 Cookies 7
12 Google SiteSearch / Google Custom Search Engine 8
13 Tracking and web analysis tools 8
13.1 General information on tracking 8
13.2 Google Analytics 9
14. social media 9
14.1 Social media profiles 9
14.2 Social media plugins 10
15 Online advertising and targeting 11
15.1 In general 11
15.2 Google Ads 12
16 Registering for a customer account 12
17 Ordering products 13
18 Online payment processing 14
19. submission of reviews 14


A.    Cross-sales channel information
1. controller and content of this privacy policy
We, TLC Trading GmbH, Grindelstrasse 12, 8303 Bassersdorf, Switzerland, are the operator of the website www.Teleshop.ch (hereinafter ‘website’) and, unless otherwise stated, are responsible for the data processing listed in this privacy policy.
So that you know which personal data we collect from you and for which purposes Please take note of the following information for the purposes for which we use them. Our data protection policy is primarily based on the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP), as well as the EU GDPR, the provisions of which may be applicable in individual cases.

Please note that the following information is reviewed and amended from time to time. We therefore recommend that you consult this privacy policy regularly. Furthermore, other companies are responsible or jointly responsible with us under data protection law for individual data processing operations listed below, so that in these cases the information provided by these providers is also authoritative.

2. contact person for data protection
If you have any questions about data protection or wish to exercise your rights, please get in touch with our contact person for data protection by sending an e-mail to the following address:
Info(at)tlc-trading.ch

You can reach our EU data protection representative at:
TLC Trading GmbH, Grindelstrasse 12, 8303 Bassersdorf, Switzerland
info(at)tlc-trading.ch

3. your rights
If the legal requirements are met, you have the following rights as a person affected by data processing:

Right to information: You have the right to request access to your personal data stored by us at any time free of charge if we are processing it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, particularly in the case of statutory retention obligations, the right to erasure may be excluded. In this case, the data may be blocked instead of erased if the conditions are met.

Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.

Right to data portability: You have the right to receive from us, free of charge, the personal data that you have provided to us in a readable format.

Right to object: You can object to data processing at any time, in particular for data processing in connection with direct advertising (e.g. advertising e-mails).

Right of withdrawal: In principle, you have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.
To exercise these rights, please send us an e-mail to the following address:
info(at)tlc-trading.ch

Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way in which your personal data is processed.

4. data security
We use suitable technical and organizational security measures to protect your personal data stored by us against loss and unlawful processing, in particular unauthorized access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and data protection. In addition, these persons are only granted access to personal data to the extent necessary to fulfill their tasks.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot provide an absolute guarantee for the security of information transmitted in this way.

5. contacting us
If you contact us via our contact addresses and channels (e.g. by e-mail, telephone or contact form), your personal data will be processed. The data that you have made available to us will be processed, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request. In addition, the time of receipt of the request is documented. Mandatory information is marked with an asterisk (*) in contact forms.

We process this data exclusively in order to implement your request (e.g. providing information about a product, support in contract processing such as returning products, incorporating your feedback into the improvement of our service, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in the implementation of your request or, if your request is aimed at the conclusion or execution of a contract, the necessity for the implementation of the necessary measures within the meaning of Art. 6 para. 1 lit. b EU GDPR.

6 Use of your data for marketing purposes
6.1 Central data storage and analysis in the CRM system
If a clear assignment to your person is possible, we will store and link the data described in this privacy policy, i.e. in particular your personal data, your contacts, your contract data and your surfing behavior on our websites in a central database. This serves the efficient management of customer data and allows us to respond to your requests appropriately and enables the efficient provision of the services you require and the processing of the associated contracts. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the efficient management of user data.
We evaluate this data in order to further develop our offers in line with your needs and to display and suggest the most relevant information and offers to you. We also use methods that predict potential, interests and future orders based on your use of the website. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the implementation of marketing measures.

6.2 Email marketing and newsletter
If you register for our email newsletter (e.g. when opening or within your customer account), the following data will be collected. Mandatory information is marked with an asterisk (*) in the registration form:
    E-mail address
    Salutation
    First name and surname
To prevent misuse and to ensure that the owner of an e-mail address has actually given their consent, we use the so-called double opt-in for registration. After sending the registration, you will receive an e-mail from us containing a confirmation link. To definitively register for the newsletter, you must click on this link. If you do not click on the confirmation link within the specified period, your data will be deleted and our newsletter will not be sent to this address.

By registering, you consent to the processing of this data in order to receive news from us about our company, our offers in the household/leisure sector and related products and services. This may also include requests to evaluate one of the aforementioned products and services. The collection of the salutation and name allows us to verify the assignment of the registration to a possibly already existing customer account and to personalize the content of the mails. The link to a customer account helps us to make the offers and content contained in the newsletter more relevant to you and better tailored to your potential needs.

We will use your data for sending e-mails until you withdraw your consent. You can withdraw your consent at any time, in particular via the unsubscribe link in all our marketing emails.

Our marketing emails may contain a so-called web beacon or 1x1 pixel (tracking pixel) or similar technical aids. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information about which addresses have not yet received the email, which addresses it was sent to and which addresses failed to receive it. We also see which addresses have opened the email, for how long and which links they have clicked on. Finally, we also receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimize the advertising emails in terms of frequency, timing, structure and content of the emails. This enables us to better tailor the information and offers in our e-mails to the individual interests of the recipients.
The web beacon will be deleted when you delete the email. To prevent the use of the web beacon in our marketing emails, please configure your email program settings so that HTML is not displayed in messages, if this is not already the default setting. You can find information on how to configure this setting in the help sections of your email software, for example here: Read email messages in plain text format for Microsoft Outlook.
By subscribing to the newsletter, you also consent to the statistical evaluation of user behavior for the purpose of optimizing and adapting the newsletter. This consent constitutes our legal basis for processing the data in accordance with Article 6(1)(a) of the EU GDPR.
We use the email marketing software from Brevo Sendinblue GmbH, Köpenicker Straße 126, DE-10179 Berlin, for marketing emails. Therefore, your data will be stored in a database of Brevo Sendinblue GmbH, allowing Brevo Sendinblue GmbH to access your data if necessary for providing the software and supporting its use. The legal basis for this processing is our legitimate interest in accordance with Article 6(1)(f) of the EU GDPR in using third-party services.
7.    Transfer to Third Parties and Access by Third Parties
Without the support of other companies, we could not provide our services in the desired form. To use the services of these companies, it is also necessary to transfer your personal data to some extent. Such transfer occurs in particular to the extent necessary to fulfill the contract you desire, i.e., for example, to logistics or transport companies that deliver the desired products, or to a manufacturer who must fulfill your warranty claim. For these transfers, the necessity to fulfill the contract in accordance with Article 6(1)(b) of the EU GDPR constitutes the legal basis.
A transfer also occurs to selected service providers and only to the extent necessary for providing the service. Various third-party service providers are also explicitly mentioned in this privacy policy, such as in the sections on marketing. These include IT service providers (such as software solution providers), advertising agencies, consulting firms. For these data transfers, our legitimate interest in accordance with Article 6(1)(f) of the EU GDPR in receiving third-party services constitutes the legal basis.
Furthermore, your data may be transferred, in particular to authorities, legal advisors, or collection agencies, if we are legally obliged to do so or if it is necessary to protect our rights, in particular to enforce claims arising from the relationship with you. Data may also be transferred if another company intends to acquire our company or parts of it, and such transfer is necessary to conduct due diligence or to execute the transaction. For these data transfers, our legitimate interest in accordance with Article 6(1)(f) of the EU GDPR in protecting our rights and fulfilling our obligations or selling our company constitutes the legal basis.
8. Transfer of Personal Data Abroad
We are entitled to transfer your personal data to third parties abroad if this is necessary for the data processing described in this privacy policy (see in particular sections 12-15). In doing so, the legal provisions for disclosing personal data to third parties are, of course, complied with. If the respective country does not have an adequate level of data protection, we ensure through contractual arrangements that your data is adequately protected by these companies.
9. Retention Periods
We store personal data only as long as it is necessary to carry out the processing described in this privacy policy within the scope of our legitimate interest. For contract data, storage is prescribed by statutory retention obligations. Requirements that oblige us to retain data arise from accounting regulations and tax law provisions. According to these regulations, business communications, concluded contracts, and booking receipts must be retained for up to 10 years. As far as we no longer need this data to provide services to you, the data will be blocked. This means that the data may then only be used to fulfill retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no retention obligation and no legitimate interest in retaining it.
B. Special Notes for Our Website
10. Logfile Data
When visiting our website, the servers of our hosting provider Nine Internet Solutions AG, Badenerstrasse 47, 8004 Zurich, Switzerland, temporarily store each access in a log file (so-called logfile). The following data is collected without your intervention and stored by us until automated deletion:
•    the IP address of the requesting computer,
•    the date and time of access,
•    the name and URL of the retrieved file,
•    the website from which the access was made, possibly with the used search word,
•    the operating system of your computer and the browser you use (including type, version, and language settings),
•    device type in the case of access via mobile phones,
•    the city or region from where the access was made,
•    the name of your internet access provider.
The collection and processing of this data are carried out for the purpose of enabling the use of our website (connection setup), ensuring system security and stability permanently, as well as for error and performance analysis, and enabling us to optimize our website (see also section 13 for the latter points). In the event of an attack on the network infrastructure of the website or in case of suspicion of another unauthorized or abusive website use, the IP address and other data will be evaluated for clarification and defense and, if necessary, used within the framework of a criminal procedure to identify and take civil and criminal action against the relevant users.
Our legitimate interest in data processing within the meaning of Article 6(1)(f) of the EU GDPR lies in the purposes described above.
Finally, when visiting our website, we use cookies as well as applications and tools that are based on the use of cookies. In this context, the data described here may also be processed. You can find more details in the following sections of this privacy policy, especially section 11.
11. Cookies
Cookies are information files that your web browser stores on your computer’s hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.
Cookies help make your visit to our website easier, more pleasant, and more meaningful. We use cookies for various purposes that are necessary for the use of the website you desire, i.e., “technically necessary.” For example, we use cookies to identify you as a registered user after logging in, so you do not have to log in again each time you navigate to different sub-pages. The provision of the shopping cart and order function is also based on the use of cookies. Furthermore, cookies perform other technical functions necessary for the operation of the website, such as load balancing, which distributes the performance load of the site across different web servers to relieve the servers. Cookies are also used for security purposes, such as preventing unauthorized posting of content. Finally, we also use cookies in the design and programming of our website, for example, to enable the uploading of scripts or codes.
The legal basis for this data processing is our legitimate interest in providing a user-friendly and modern website in accordance with Article 6(1)(f) of the EU GDPR.
Most internet browsers automatically accept cookies. However, when accessing our website, we ask for your consent to the technically unnecessary cookies we use, especially when using third-party cookies for marketing purposes. You can make the desired settings via the corresponding buttons in the cookie banner. Details of the services and data processing associated with each cookie can be found within the cookie banner and in the following sections of this privacy policy.
You can also configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. You can find explanations on how to configure the processing of cookies for selected browsers on the following pages:
•    Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
•    Apple Safari: https://support.apple.com/kb/PH17191?locale=en_US&viewlocale=de_DE
Disabling cookies may result in you not being able to use all the functions of our website.
12. Google SiteSearch / Google Custom Search Engine
This website uses Google SiteSearch/Google Custom Search Engine from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This allows us to provide you with an efficient search function on our website.
When using our search fields, your browser may transmit the logfile data listed in section 10 (including IP address) as well as the search term you entered to Google, provided you have JavaScript installed in your browser. If you wish to prevent data transmission, you can disable JavaScript in your browser settings (usually in the “Privacy” menu). Please note that the search function and other functions of the website may be impaired in this case.
The legal basis for this data processing is our legitimate interest in providing an efficient website search function in accordance with Article 6(1)(f) of the EU GDPR.
For further processing of the data by Google, please refer to Google’s privacy policy: www.google.com/intl/en/policies/privacy.
13. Tracking and Web Analysis Tools
13.1 General Information on Tracking
For the purpose of designing our website to meet needs and continuously optimizing it, we use the web analysis services listed below. In this context, pseudonymized usage profiles are created and cookies are used (see also section 11). The information generated by the cookie about your use of this website is usually transmitted to a server of the service provider, stored, and processed together with the logfile data listed in section 10. This may also involve transmission to servers abroad, e.g., in the USA (see section 8, especially regarding the guarantees taken).
By processing the data, we obtain the following information, among others:
•    Navigation path taken by a visitor on the site (including viewed content and selected or purchased products),
•    Duration of stay on the website or subpage,
•    The subpage from which the website is exited,
•    The country, region, or city from which access is made,
•    Device (type, version, color depth, resolution, width, and height of the browser window), and
•    Returning or new visitor.
On our behalf, the provider will use this information to evaluate the use of the website, compile reports on website activities for us, and provide other services related to website and internet use for market research and needs-based design of these internet pages. For these processes, we and the providers can be considered joint controllers to a certain extent under data protection law.
The legal basis for this data processing with the following tools is your consent in accordance with Article 6(1)(a) of the EU GDPR. You can revoke your consent at any time or object to the processing by rejecting or disabling the relevant cookies in your web browser settings (see section 11) or by using the service-specific options described below.
For the further processing of data by the respective provider as the data protection (sole) controller, particularly any potential transfer of this information to third parties such as authorities due to national legal regulations, please refer to the respective provider’s privacy notices.
13.2 Google Analytics
We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (“Google”).
The described data about the use of the website may be transmitted to the servers of Google LLC. in the USA for the explained processing purposes (see section 13.1). The IP address is anonymized (“anonymizeIP”) on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
Users can prevent the collection of data generated by the cookie and related to their use of the website (including the IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection at Google can be found here.
14. Social Media
14.1 Social Media Profiles
On our website, we have integrated links to our profiles on the social networks of the following providers:
•    Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA;
•    Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA;
•    Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
•    Linkedin Unlimited Company, Wilton Place, Dublin 2, Ireland.
When you click on the social network icons, you are automatically redirected to our profile on the respective network. A direct connection is then established between your browser and the server of the respective social network. The network thus receives the information that you have visited our website with your IP address and clicked on the link.
If you click on a link to a network while logged into your user account on that network, the content of our website can be linked to your profile, so the network can directly associate your visit to our website with your account. If you want to prevent this, you should log out before clicking on the corresponding links. A connection between your access to our website and your user account occurs in any case if you log in to the respective network after clicking on the link. The respective provider is responsible for data protection for this data processing. Please refer to the information on the network’s website.
The legal basis for any data processing that may be attributed to us is our legitimate interest in accordance with Article 6(1)(f) of the EU GDPR in the use and promotion of our social media profiles.
14.2 Social Media Plugins
On our website, you can use social plugins from the following providers:
•    Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA, Privacy Policy: https://www.facebook.com/about/privacy/update
•    Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Privacy Policy: https://twitter.com/de/privacy
•    Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, Privacy Policy: https://twitter.com/de/privacy
•    Linkedin Unlimited Company, Wilton Place, Dublin 2, Ireland, Privacy Policy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
We use social plugins to make it easier for you to share content from our website. The social plugins help us increase the visibility of our content on social networks and thus contribute to better marketing.
The plugins are deactivated by default on our websites and therefore do not send any data to the social networks when you simply visit our website. To increase data protection, we have integrated the plugins in such a way that a connection to the servers of the networks is not automatically established. Only when you activate the plugins and thus give your consent to data transmission and further processing by the social network providers does your browser establish a direct connection to the servers of the respective social network.
The content of the plugin is transmitted directly from the social network to your browser and integrated into the website. This gives the respective provider the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the provider (usually in the USA) and stored there. We have no influence on the scope of the data that the provider collects with the plugin, although we can be considered joint controllers with the providers to a certain extent from a data protection perspective.
If you are logged into the social network, it can directly associate your visit to our website with your user account. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g., that you like a product from us) may also be published on the social network and possibly displayed to other users of the social network. The social network provider may use this information for advertising purposes and to design the respective offer based on needs. Usage, interest, and relationship profiles may be created for this purpose, e.g., to analyze your use of our website with regard to the advertisements displayed to you on the social network.
To evaluate the displayed advertisements, inform other users about your activities on our website, and provide other services related to the use of the social network. Please refer directly to the privacy notices of the respective provider for the purpose and scope of data collection and further processing and use of the data by the providers of social networks, as well as your rights and settings options to protect your privacy.
If you do not want the social network provider to associate the data collected via our online presence with your user account, you must log out of the social network before activating the plugins. For the described data processing, your consent in accordance with Art. 6(1)(a) EU-GDPR forms the legal basis. You can revoke your consent at any time by declaring your revocation to the provider of the plugin according to the information in its privacy notices.
15. Online Advertising and Targeting
15.1 In General
We use the services of various companies to present you with interesting offers online. Your user behavior on our website and the websites of other providers is analyzed to display online advertising tailored to you.
Most technologies for tracking your user behavior (“tracking”) and for targeted advertising (“targeting”) work with cookies (see also section 11), which can recognize your browser across different websites. Depending on the service provider, it may also be possible for you to be recognized online even when using different devices (e.g., laptop and smartphone). This can be the case, for example, if you have registered for a service that you use with multiple devices.
In addition to the data already mentioned, which are collected when websites are accessed (“logfile data”, see section 10) and when cookies are used (section 11) and which can be transmitted to the companies involved in the advertising networks, the following data are particularly taken into account for the selection of potentially most relevant advertising for you:
•    Information about you that you provided when registering or using a service from advertising partners (e.g., your gender, your age group);
•    User behavior (e.g., search queries, interactions with advertisements, types of websites visited, viewed and purchased products, subscribed newsletters).
We and our service providers use this data to determine whether you belong to the target group we are addressing and take this into account when selecting advertisements. For example, after visiting our site, advertisements for the products you have viewed may be displayed to you when you visit other sites (“re-targeting”). Depending on the extent of the data, a user profile may also be created, which is evaluated automatically, and the advertisements are selected according to the information stored in the profile, such as belonging to certain demographic segments or potential interests or behaviors. Such advertisements can be presented to you on various channels, including our website or app (as part of onsite and in-app marketing), as well as advertisements delivered through the online advertising networks we use, such as Google.
The data can then be evaluated for the purpose of billing with the service provider and assessing the effectiveness of advertising measures, in order to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the performance of an action (e.g., visiting certain sections of our websites or submitting information) is attributable to a specific advertisement. Furthermore, we receive aggregated reports from the service providers on ad activities and information on how users interact with our website and ads.
The legal basis for this data processing is your consent in accordance with Art. 6(1)(a) EU-GDPR. You can revoke your consent at any time by rejecting or disabling the relevant cookies in your web browser settings (see section 11). Further options for blocking advertising can also be found in the information provided by the respective service provider, such as Google. https://support.google.com/accounts/answer/2662922
15.2 Google Ads
This website uses the online advertising services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google uses cookies, such as the so-called DoubleClick cookie, which allow your browser to be recognized when visiting other websites. The information generated by the cookies about your visit to these websites (including your IP address) is transmitted to a Google server in the USA and stored there (see also section 6). Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=de
The legal basis for this data processing is your consent in accordance with Art. 6(1)(a) EU-GDPR. You can revoke your consent at any time by rejecting or disabling the relevant cookies in your web browser settings (see section 11). Further options for blocking advertising can be found here: https://support.google.com/accounts/answer/2662922
16. Registration for a Customer Account
If you open a customer account on our website, we collect the following data, with mandatory fields marked with an asterisk (*) in the corresponding form:
•    Personal details:
o    Salutation
o    Last name
o    First name
o    Billing and delivery address
o    Date of birth
o    Company, company address, and VAT number for business customers
•    Login data:
o    Email address
o    Password
•    Additional information:
o    Languages
o    Gender
We use the personal details to verify your identity and check the conditions for registration. The email address and password together serve as login data to ensure that the correct person is using the website with your information. We also need your email address to verify and confirm the account opening and for future communication necessary for contract processing with you. Additionally, these data are stored in the customer account for future contract conclusions. For this purpose, we also allow you to store additional information in the account (e.g., your preferred payment method).
We also use the data to provide an overview of the ordered products and services received (see especially sections 18 and 23) and to offer an easy way to manage your personal data, to administer our website and contractual relationships, i.e., to establish, structure, process, and amend the contracts concluded with you via your customer account.
We process the information on language and gender to display the best possible offer suggestions tailored to your profile or personal needs on the website, to statistically record and evaluate the chosen offers, and thus to optimize our suggestions and offers.
The legal basis for processing your data for the aforementioned purpose is your consent in accordance with Art. 6(1)(a) EU-GDPR. You can revoke your consent at any time by removing the information from the customer account or deleting your customer account, or by notifying us to delete it.
To prevent misuse, you must always keep your login data confidential and should close the browser window when you have finished communicating with us, especially if you share the computer with others.
17. Ordering Products
If you want to order products or book services on the website, we need various data to process the contract. If you do not log in with your customer account (see section 17), we collect the following data depending on the product or service, with mandatory fields marked with an asterisk (*) in the corresponding form:
•    Salutation
•    Last name
•    First name
•    Billing and delivery address
•    Email address
•    Date of birth
•    Company, company address, and VAT number for business customers
•    Phone number
We use the data to verify your identity before concluding a contract. We also need your email address to confirm your order and for future communication necessary for contract processing with you. We store your data together with the order details (e.g., time, order number, etc.), the data of the ordered/booked services (e.g., description, price, and features of the product; “product data”), the payment data (e.g., chosen payment method, payment confirmation and time; see also section 19) as well as the information on the processing and fulfillment of the contract (e.g., return of products, use of service or warranty services, etc.) in our CRM database (see section 6.1) to ensure correct order processing and contract fulfillment.
To the extent necessary for the fulfillment of the contract, we will also pass on the required information to any third-party service providers (e.g., transport companies). The legal basis for this data processing is the fulfillment of the contract with you according to Art. 6(1)(b) EU-GDPR. Providing data that are not marked as mandatory is voluntary. We process this data to tailor our offer as closely as possible to your personal needs, to facilitate the processing of contracts, to contact you via an alternative communication channel if necessary for the fulfillment of the contract, or for statistical recording and evaluation to optimize our offers. The legal basis for this data processing is your consent in accordance with Art. 6(1)(a) EU-GDPR. You can revoke your consent at any time by notifying us.
18. Online Payment Processing
If you purchase services or products on our website for a fee, additional data may be required depending on the product or service and the desired payment method – in addition to the information mentioned in section 18 – such as your credit card information or login details for your payment service provider. This information, as well as the fact that you have purchased a service from us for the relevant amount and time, will be forwarded to the respective payment service providers (e.g., payment solution providers, credit card issuers, and credit card acquirers). Always refer to the information provided by the respective company, especially the privacy policy and terms and conditions. The legal basis for this transmission is the fulfillment of a contract according to Art. 6(1)(b) EU-GDPR.
To avoid payment defaults, the necessary data, especially your personal details, may also be transmitted to a credit agency for automated credit assessment. In this context, the credit agency may assign you a so-called score value. This is an estimate of the future risk of a payment default, e.g., based on a percentage. The value is determined using mathematical-statistical methods and includes data from the credit agency from other sources. We reserve the right, based on the information received, not to offer you the payment method “invoice”. The legal basis for this data processing is our legitimate interest in avoiding payment defaults according to Art. 6(1)(f) EU-GDPR.
19. Submitting Reviews
To help other users make purchasing decisions and to support our quality management (especially handling negative feedback), you have the opportunity to review ordered products on our website. The data you provide, i.e., your review and its timestamp, possibly a comment you added to your review, or the name you provided, will be processed and published on the website. The legal basis for this data processing is your consent in accordance with Art. 6(1)(a) EU-GDPR.
We reserve the right to delete unlawful reviews and to contact you in case of suspicion and request a statement. The legal basis for this processing is our legitimate interest in providing a of the comment and review function as well as the prevention of misuse in their use.

Bassersdorf, August 2024