Online Shop Privacy Policy

General information
The following information provides a simple overview of what happens to your personal data when you visit our online shop. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy below.

Data collection on our website
Who is responsible for data collection on this website?
Data on this website is processed by the shop operator. The operator’s contact details can be found in this website’s legal notice.

How do we collect your data?
Some data is collected when you provide it to us. This may, for example, include data you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time you access a page. This data is collected automatically as soon as you enter our online shop.

What do we use your data for?
Some data is collected to ensure that the website operates without errors. Other data may be used to analyse your usage behaviour.

What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected, blocked or deleted. You can contact us at any time at the address given in the legal notice regarding this or any other data protection questions. You also have the right to lodge a complaint with the competent supervisory authority.

In addition, under certain circumstances, you have the right to request restriction of the processing of your personal data. Details can be found under ‘Right to restriction of processing’ in this privacy policy.

Analytics tools and third-party tools
When you visit our website, your browsing behaviour may be statistically analysed. This is primarily done using cookies and analytics programs. Your browsing behaviour is generally analysed anonymously and cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy. You can object to this analysis. This privacy policy explains how to exercise that right.

This data is collected to give customers direct, password-protected access to their basic data stored with us. Customers can view their completed and outstanding orders or manage and change their personal data.

The legal basis for processing data for this purpose is the consent you have given under Article 6(1)(a) of the EU General Data Protection Regulation (GDPR).

Unless otherwise stated in this privacy policy or separately agreed to by you, we will use the above data only to perform the contract, in particular to process your orders, deliver the products ordered and ensure correct payment.

The legal basis for processing data for this purpose is the performance of a contract under Article 6(1)(b) GDPR.

We disclose your personal data only if you have expressly consented, if we are legally required to do so, or if disclosure is necessary to enforce our rights, in particular claims arising from the contractual relationship.

We also disclose your data to third parties where necessary for use of the website and performance of the contract, including outside the website, particularly to process your order. This includes the transport service provider commissioned to ship ordered goods. The website is hosted on servers in Switzerland. Data is disclosed to provide and maintain the functionality of our website. This constitutes our legitimate interest within the meaning of Article 6(1)(f) GDPR.

When you pay by credit card on the website, we forward your credit card information via the payment service provider to your credit card issuer and the credit card acquirer. If you choose to pay by credit card, you will be asked to enter all mandatory information. The legal basis for disclosure is the performance of a contract under Article 6(1)(b) GDPR. Regarding the processing of your credit card information by these third parties, please also read your credit card issuer’s terms and conditions and privacy policy.

Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

Various personal data is collected when you use this website. Personal data means data by which you can be personally identified. This privacy policy explains which data we collect, what we use it for, and how and for what purpose this takes place.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the controller
The controller responsible for data processing on this website is:

Interessengemeinschaft Zentrum Glatt AG
Neue Winterthurerstrasse 99
CH – 8304 Wallisellen
Email: info@glatt.ch

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Withdrawal of your consent to data processing
Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time.

An informal notification by email is sufficient. Withdrawal does not affect the lawfulness of data processing carried out before withdrawal.

Right to object to data collection in specific cases and to direct marketing (Article 21 GDPR)
Where data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on those provisions. The applicable legal basis for processing is set out in this privacy policy.

If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims (objection under Article 21(1) GDPR).

Where your personal data is processed for direct marketing, you have the right at any time to object to processing of your personal data for such marketing. This also applies to profiling insofar as it is related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority
In the event of GDPR infringements, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract provided to you or a third party in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will be done only where technically feasible.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address changing from ‘http://’ to ‘https://’ and by the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is enabled, data you transmit to us cannot be read by third parties.

Access, blocking, deletion and correction
Within the scope of applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, a right to correction, blocking or deletion. You can contact us at any time at the address given in the legal notice regarding this or other questions about personal data.

Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You can contact us at any time at the address given in the legal notice. This right applies in the following cases:

• If you contest the accuracy of your personal data stored by us, we generally need time to verify it. During verification, you have the right to request restriction of processing.
• If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of deletion.
• If we no longer need your personal data but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing instead of deletion.
• If you have objected under Article 21(1) GDPR, your interests and ours must be weighed. Until it has been determined whose interests prevail, you have the right to request restriction of processing.
• Where you have restricted the processing of your personal data, this data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Objection to promotional emails
We hereby object to the use of contact details published as part of the legal notice requirement to send advertising and information material that has not been expressly requested. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

Cookies
Some of our web pages use cookies. Cookies do not harm your computer and do not contain viruses. They help make our services more user-friendly, effective and secure. Cookies are small text files stored on your computer by your browser. Most cookies we use are ‘session cookies’, which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These enable us to recognise your browser on your next visit. You can configure your browser to notify you when cookies are set, permit cookies only in individual cases, reject cookies in specific cases or generally, and automatically delete cookies when the browser is closed. Disabling cookies may limit this website’s functionality. Cookies required for electronic communications or to provide certain functions you request, such as a shopping cart, are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to provide technically error-free and optimised services. Other cookies, such as cookies analysing your browsing behaviour, are addressed separately in this privacy policy.

Server log files
The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This includes:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with data from other sources. It is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in technically error-free presentation and optimisation of the website, which requires server log files to be collected.

Contact form
If you send us enquiries using the contact form, we store the information in the enquiry form, including the contact details you provide, to process your enquiry and any follow-up questions. We do not disclose this data without your consent. Data entered in the contact form is therefore processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw this consent at any time by sending us an informal email. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Data entered in the contact form remains with us until you request deletion, withdraw your consent to storage, or the purpose of storage no longer applies, for example once your enquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.

Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, we store and process your enquiry, including all personal data arising from it, such as your name and enquiry, to handle your request. We do not disclose this data without your consent. Processing is based on Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on your consent (Article 6(1)(a) GDPR) and/or our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in handling enquiries effectively. Data sent to us in contact enquiries remains with us until you request deletion, withdraw your consent to storage, or the purpose of storage no longer applies, for example once your request has been fully handled. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Facebook plugins (Like and Share buttons)
Our pages integrate plugins from the Facebook social network, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise these plugins by the Facebook logo or the Like button on our website. An overview of Facebook plugins can be found here. When you visit our pages, the plugin establishes a direct connection between your browser and Facebook’s server. Facebook thereby receives information that you have visited our website with your IP address. If you click the Facebook Like button while logged in to your Facebook account, you can link content from our pages to your Facebook profile. This enables Facebook to associate your visit with your user account. Please note that, as the website provider, we have no knowledge of the content of the transmitted data or how Facebook uses it. Further information is available in Facebook’s privacy policy. If you do not want Facebook to associate your visit with your Facebook account, please log out of your account. Facebook plugins are used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media.

Instagram plugin
Our pages include functions of the Instagram service, provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged in to your Instagram account, you can link content from our pages to your Instagram profile by clicking the Instagram button. This enables Instagram to associate your visit with your user account. Please note that, as the website provider, we have no knowledge of the content of the transmitted data or how Instagram uses it. Instagram plugins are used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. Further information is available in Instagram’s privacy policy.

Google Analytics
This website uses functions of the Google Analytics web analytics service, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies: text files stored on your computer that enable your use of the website to be analysed. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

Browser plugin
You can prevent cookies from being stored by adjusting your browser settings. However, you may then be unable to use all this website’s functions in full. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website, including your IP address, and from processing this data by downloading and installing the browser plugin available via this link.

Objection to data collection
You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics. Further information on how Google Analytics handles user data can be found in Google’s privacy policy.

Processing on our behalf
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic features in Google Analytics
This website uses the demographic features of Google Analytics. This allows reports to be produced containing information about the age, gender and interests of website visitors. This data comes from interest-based advertising by Google and visitor data from third-party providers. It cannot be attributed to a specific person. You can disable this function at any time in your Google account’s advertising settings, or generally prohibit Google Analytics from collecting your data as described under ‘Objection to data collection’.

Google Maps
This website uses the Google Maps mapping service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use Google Maps functions, your IP address must be stored. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer. Google Maps is used to present our online services attractively and to make the places shown on our website easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Further information on the handling of user data is available in Google’s privacy policy.