Privacy policy

Privacy policy

With this privacy policy, we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data is all data that has a personal reference to you, e.g. name, address, email address or user behaviour.

Who is responsible for data processing at our company

Responsible for data processing is:

La Gazza AG
Birmensdorferstrasse 15
8966 Oberwil-Lieli
Switzerland
+41 56 500 08 35
info@lagazza.ch

Processing your data as part of the core activities of our company

We process your personal data transferred to us as part of the contractual and pre-contractual relationships existing between us. The scope, type, purpose and necessity of the processing depends on the respective underlying contractual relationship. For this purpose, we store and process your data in the computer systems we use. The data processed by us includes all data provided by you for the purpose of utilising the contractual or pre-contractual services and which is required to process your enquiry or the contract concluded between us.

This may include the following data in particular:

  • Name and address
  • E-mail address and telephone number
  • Contract data
  • Payment data.

The processing is limited to those data that are necessary and expedient for answering enquiries and/or for the fulfilment of a contract concluded between you and us. Personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or as part of the organisation of our business for the processing of financial accounting and compliance with legal obligations. In this case, only those data are transferred to external service providers that are necessary and expedient for the fulfilment of the contract or for the processing of financial accounting and compliance with legal obligations. Processing by us is carried out in accordance with your instructions or the statutory provisions. Legal basis: The processing of your personal data and the transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) GDPR and serves to fulfil the contract between you and us. Otherwise, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) GDPR or if there is a legitimate interest in doing so, Art. 6 para. 1 lit. f. GDPR. This is the case, for example, if this is necessary to pursue our claims. Cancellation: Your data will be deleted as soon as it is no longer required for the fulfilment of contractual or statutory duties of care and for dealing with any warranty and comparable obligations. The statutory retention obligations remain unaffected by this.

Webhosting

To maintain our online presence, we use an internet service provider on whose server the website is stored (hosting) and who makes our website available on the internet. The internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. name and address of the internet service provider: Weblink GmbH Riedhofstrasse 354, 8049 Zurich Switzerland You can view their data protection provisions here: https://www.weblink.ch/de/ueber-uns/datenschutz.html Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. Data processing is carried out on the basis of our legitimate interest in the efficient and secure provision of our website, Art. 6 para. 1 lit. f) GDPR.

If you only use our website for information purposes, our internet service provider only collects the personal data that the browser you use transmits to its server. This is the following data:

  • IP address
  • the date and time of access to our website
  • Time zone difference to Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • the amount of data transferred
  • the Internet service provider of the accessing system
  • the type of browser you are using and its version
  • the operating system you are using
  • the website from which you may have reached our website
  • the pages or sub-pages that you visit on our website.

The aforementioned data is stored as log files on the servers of our internet service provider. This is necessary in order to display the website on the device you are using and to ensure stability and security. Our legitimate interest in data processing lies in the aforementioned purposes. Legal basis: Data processing is carried out on the basis of our legitimate interest in the efficient and secure provision of our website, Art. 6 para. 1 lit. f) GDPR. Duration: The above data for the provision of our website is stored for a period of 7 days and then deleted.

Information on the contact options provided by us

If you contact us via e-mail, social media, telephone, fax, post, our contact form or in any other way and provide us with personal data such as your name, telephone number or e-mail address or provide further information about yourself or your request, this data will be stored and processed by us in order to process your enquiry. Legal basisIf you have submitted your enquiry via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. If you submit your enquiry as part of a contractual or pre-contractual relationship with us, the legal basis for the processing of your data is Art. 6 para. 1 lit. b. GDPR. GDPR. If your enquiry does not fall under one of the aforementioned categories, our legitimate interest in processing your data is to answer your enquiry properly and in your interest, Art. 6 para. 1 lit. f GDPR. Cancellation: The personal data collected by us will be deleted if it is no longer required. We review the necessity every 2 years. You can also revoke your consent to data processing at any time.

Online shop

If you use our online shop to place orders, we require certain data in order to process your order. This includes, in particular, your name, address and electronic contact details, information on the payment process and the services used. This data is stored by us. The information you provide in the mandatory fields of the order form is absolutely necessary for the establishment and fulfilment of the contract. In particular, we use the data you transmit to us to

  • Identify you as our customer,
  • process, fulfil and process your order,
  • to get in touch with you,
  • to invoice you,
  • to be able to settle any liability claims,
  • to be able to assert contractual claims against you.

Legal basis: The legal basis for the processing of your data is, as far as the processing of your order is concerned, Art. 6 para. 1 lit. b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures.

We only pass on your personal data to third parties if:

  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • there is a legal obligation to do so pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR,
  • this is necessary in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of the contract concluded with you (e.g. transfer of the data to the logistics company commissioned with the delivery or for the purpose of payment processing).

Furthermore, your personal data will not be passed on to third parties without your express consent. If we pass on your personal data to third parties, we limit the scope of the data transmitted to the necessary minimum.

When you place an order, register for a user account or log in again, we store your IP address and the time of the respective user action. The purpose of the storage is our legitimate interests, but also your legitimate interests in protection against misuse and other unauthorised use. Legal basis: The legal basis for this is Art. 6 para. 1 lit. f GDPR. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.

Cancellation: Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of 10 years. However, after expiry of the statutory warranty rights (2 years), we will restrict processing to the effect that your data will only be used to fulfil legal obligations.

Your rights under the GDPR

According to the GDPR, you are entitled to the rights listed below, which you can assert at any time with the controller named in section 1 of this privacy policy:

  • Right to information: In accordance with Art. 15 GDPR, you can request confirmation as to whether and which of your personal data we process. In addition, you can request information from us free of charge about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint and the origin of your data if it was not collected by us. You also have the right to obtain information as to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to receive information about the appropriate guarantees in connection with the transfer.
  • Right to rectification: In accordance with Art. 16 GDPR, you can request the correction of incorrect or incomplete personal data stored by us and concerning you.
  • Right to cancellation: In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us if we do not need to process it for the following purposes:
    • to fulfil a legal obligation,
    • for the assertion, exercise or defence of legal claims,
    • to exercise the right to freedom of expression and information or
    • for reasons of public interest referred to in Art. 17 (3) (c) and (d) GDPR.
  • Right to restriction: In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if
    • the accuracy of the data is contested by you, for a period enabling us to verify the accuracy of the personal data,
    • the processing of your data is unlawful, but you oppose the erasure of the data and request the restriction of its use instead,
    • we no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims
    • you have objected to the processing of your data in accordance with Art. 21 GDPR, but it is not yet certain whether the legitimate reasons that authorise us to continue processing outweigh your rights despite your objection.
  • Right to information: If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of the rectification or erasure of the data or the restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
  • Right to data portability: In accordance with Art. 20 GDPR, you may request that we receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or request that it be transmitted to another controller.
  • Right of appealPursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. To do so, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Right of cancellation

In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent to the processing of your data at any time. The revocation declared by you does not change the legality of the processing of your personal data carried out until the revocation.

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on a weighing of interests (Art. 6 para. 1 lit. f GDPR). This is particularly the case if the data processing is not necessary for the fulfilment of a contract. If you make use of your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that there are compelling legitimate grounds for data processing that outweigh your interests and rights.

Irrespective of the above, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.

Please address your objection to the contact address of the controller given above.

Google Maps

We use components of "Google Maps" on our website, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google").

Google Maps is used to visualise geographical information. Google collects and processes the IP address of the visitor. This is transmitted to Google regardless of whether Google Maps is actually used or whether you are logged into your Google account. Your IP address will be assigned to your Google account if you are logged into it when you visit our website. This data is transferred to external Google servers in the USA. Google is a participant in the Privacy Shield Agreement and is certified for data processing in accordance with European standards. Google may pass on this data collected via the technical process to third parties. Purpose: The integration of Google Maps serves to simplify visualisation and navigation during a visit to our site. Google processes data for the purposes of advertising, market research, website design and the provision of customised advertising. Legal basis: We use Google Maps on the basis of our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f GDPR. Prevention: You can prevent the allocation of data by not using Google Maps on our website and logging out of your Google account before your visit. You can also deactivate JavaScript in your browser to prevent the map display. We also refer you to Google's privacy policy at the following link http://www.google.com/intl/de_de/help/terms_maps.html

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google (Invisible) reCAPTCHA

We use "Google (Invisible) reCAPTCHA" on our website, a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The service enables us to check whether certain actions or entries are made by a human or abusively by a bot, i.e. by a computer in an automated process. For this purpose, Google (Invisible) reCAPTCHA processes information about your user behaviour on our website. In addition, your IP address is transmitted to a Google server. Among other things, Google (Invisible) reCAPTCHA uses cookies (see the term above under the heading Cookies), which are stored in the cache of your browser and which enable your use of our website to be analysed. You can find more information on the way in which data is collected and processed in Google's privacy policy, which you can access here: http://www.google.de/intl/de/policies/privacy. Purpose: The aforementioned interests are the purpose of our use of the service. Legal basis: We use Google (Invisible) reCAPTCHA on the basis of our legitimate interest in the secure and efficient provision and optimisation of our online offer, Art. 6 para. 1 lit. f GDPR. Prevention: For information on the use and prevention of cookies, please refer to the information provided above under the heading "Cookies". If you are not logged into your Google account when you visit our site, the IP address transmitted to Google via the service will not be merged with other Google data. You must therefore log out of Google before you visit our site if you want to prevent your IP address from being merged with other data. Google has submitted to the Privacy Shield Agreement concluded between the European Union and the USA and is certified. Google thereby undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Our online presence on social networks

We operate online presences within the social networks listed below. If you visit one of these presences, your usage data will be collected and processed by the respective provider. This is usually done using cookies, which are stored on the device you are using. For the term cookie, see above under the corresponding heading. Cookies are used to store your user behaviour and interests and to create corresponding user profiles. Data can also be stored in the user profiles independently of the device you are using. This is particularly the case if you are a member of the respective platform and are logged in to it.

The data collected is generally used by the provider for the purposes of advertising and market research by creating usage profiles from your usage behaviour. These in turn can be used by the providers to display interest-based advertising to you. You have the right to object to the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data may be linked to it. To prevent your data from being linked in this way, you can log out of the provider's service before visiting our site.

You can find out for what purpose and to what extent data is collected by the provider in the respective data protection declarations of the providers provided below. We ourselves have no influence on what data is collected and how this data is used by the provider. If you wish to request detailed information or make use of your rights as a data subject, the most effective way to do this is to contact the respective providers themselves, as only the respective providers have access to your data.

We would like to point out that your user data may be transferred and processed outside the European Union. In this case, there is a risk that it may be more difficult to enforce your rights as a data subject. Those US providers that are certified under the Privacy Shield have undertaken to comply with the data protection standards of the EU. Information on whether the respective provider has such a certificate can be found in the information on the providers listed below.

Legal basis: If you have been asked by one of the providers listed below for consent to data processing, the legal basis for processing is Art. 6 para. 1 lit. a GDPR. Otherwise, your data is processed on the basis of our legitimate interests in contacting you and communicating with you, Art. 6 para. 1 lit. f. GDPR. GDPR. Prevention: For the respective opt-out options, please refer to the information provided by the providers linked below.

We maintain online presences on the following social networks:

LinkedIn

LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 - USA

Based in the EU: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich - Germany

Facebook

Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 - USA.

Registered office in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 - Ireland

Google Analytics

We use "Google Analytics" on our website, a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to record and statistically analyse the flow of visitors to our website. Among other things, Google Analytics collects data on which website you came to our website from (so-called referrers), which subpages of the website you accessed or how often and for how long a subpage was viewed and what interactions you made. To collect and store this data, Google Analytics places a cookie on the device you are using (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymise your IP address so that it is shortened and can no longer be associated with your visit to our website. Other information transmitted is not assigned to or linked with the anonymised IP address by Google. The information generated in this way is transmitted to Google servers in the USA and stored there. Google may pass on this personal data collected via the technical process to third parties. We have concluded an order processing agreement with Google. According to this agreement, Google is authorised and obliged to analyse the information obtained for us and to compile statistical reports for us on the type and scope of website use. These statistics enable us to constantly improve our offer, to carry out a cost-benefit analysis of our Internet marketing and to make our Internet presence more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics on the basis of our legitimate interest in the analysis, optimisation and economic operation of our online offer, Art. 6 para. 1 lit. f GDPR. Cancellation: The data collected and transmitted by us in this way is automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all the functions of our website to their full extent. Alternatively, you can prevent the storage of cookies by setting an opt-out cookie, which will prevent your data from being collected on our website in the future. To do this, please click on the following . You also have the option of preventing the storage of cookies by making the appropriate settings in your browser. Cookies that have already been set can be deleted by you at any time.

Information on the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Security measures

We also take state-of-the-art technical and organisational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.

Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and was last updated in December 2019. Due to changes in legal or official requirements, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of SOS Law created. You can find the data protection declaration generator here. SOS Recht is an offer of the Mueller.legal Attorneys at Law Partnership based in Berlin.