Privacy Policy
Privacy policy
This privacy policy provides information about the processing of personal data in connection with our stallprofi.ch website and our other online services.
For individual or additional offers and services, there may be special, supplementary, or further privacy policies and other legal documents such as general terms and conditions (GTC), terms of use, or conditions of participation.
1. Contact addresses
Responsibility for the online offering
dpro Hänni GmbH
"STALLPROFI"
Rosswiesstrasse 29
8608 Bubikon
Switzerland
2. Processing of personal data
2.1 Definitions
Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, collection, deletion, saving, modification, destruction, and use of personal data.
2.2 Legal basis
We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (OFPD).
2.3 Type, scope, and purpose
We process the personal data that is necessary to provide our online offering in a permanent, user-friendly, secure, and reliable manner. Such personal data may fall into the categories of inventory and contact data, content data, usage data, and marginal data, as well as contract data and payment data.
We process personal data for the duration required for the respective purpose or purposes or as required by law. Personal data that no longer needs to be processed is anonymized or deleted.
We only process personal data with the consent of the data subject, unless processing is permissible for other legal reasons, for example to conclude a contract with the data subject and for corresponding pre-contractual measures to safeguard our overriding legitimate interests, because processing is necessary for the performance of a contract with the data subject and for corresponding pre-contractual measures to safeguard our overriding legitimate interestsfulfillment of a contract with the data subject and for corresponding pre-contractual measures, to safeguard our overriding legitimate interests, because the processing is apparent from the circumstances, or after prior information.
In this context, we process in particular information that a data subject voluntarily and personally provides to us when contacting us—for example, by letter, email, contact form, social media, or telephone—or when registering for a user account. We may store such information in an address book, in a customer relationship management system (CRM system), or using similar tools. If you transfer personal data from third parties to us, you are obliged to guarantee data protection vis-à-vis such third parties and to ensure the accuracy of such personal data.
We also process personal data that we receive from third parties, obtain from publicly available sources, or collect when providing our online services, provided that such processing is permissible for legal reasons.
Personal data based on job applications is only processed if it relates to suitability for employment or is necessary for the subsequent execution of an employment contract. The personal data required for an application is determined by the information requested or provided, for example in the job description. Applicants have the option of voluntarily providing additional information for their respective applications.
2.4 Processing of personal data by third parties, including abroad
We may have personal data processed by third parties, such as, in particular, contract processors, or process it jointly with third parties or with the help of third parties, or transfer it to third parties. Such third parties are, in particular, suppliers and other service providers. We also ensure adequate data protection with such third parties.
Such third parties are generally located in Switzerland and in the European Union (EU) or the European Economic Area (EEA). However, such third parties may also be located in other countries around the world and elsewhere in the universe, provided that their data protection laws, in the opinion of the Federal Data Protection and Information Commissioner (FDPIC), or if adequate data protection is guaranteed for other reasons, such as through a corresponding contractual agreement, in particular based on standard contractual clauses, or a corresponding certification. For third parties in the United States of America (USA), certification under the Privacy Shield may ensure adequate data protection. In exceptional cases, such a third party may be located in a country without adequate data protection, provided that the data protection requirements, such as the express consent of the data subject, are met.
3. Rights of data subjects
Data subjects whose personal data we process have the rights under Swiss data protection law. These include the right to information and the right to correction, deletion, or blocking of the processed personal data.
Data subjects whose personal data we process have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
4. Data security
We take appropriate and suitable technical and organizational measures to ensure data protection and, in particular, data security. However, despite such measures, the processing of personal data on the Internet can always have security gaps. We therefore cannot guarantee absolute data security.
Access to our online offering is provided via transport encryption (SSL/TLS with HTTPS).
Access to our online offering is subject—as is all Internet use—to unjustified and suspicion-independent mass surveillance and other surveillance by security authorities in Switzerland, the European Union (EU), the United States of America (USA), and other countries. We cannot directly influence the processing of personal data by secret services, police agencies, and other security authorities.
5. Use of the website
5.1 Cookies
We may use cookies for our website. Cookies—including those from third parties whose services we use (third-party cookies)—are data, often in the form of text files, that are stored in your browser. Cookies cannot execute programs or transmit malware such as Trojans and viruses.
When you visit our website, cookies may be stored in your browser temporarily as "session cookies" or for a specific period of time as "permanent cookies." Session cookies are automatically deleted when you close your browser. Persistent cookies enable us to recognize your browser the next time you visit our website and thus measure the reach of our website, for example. Persistent cookies can also be used for online marketing, for example.
You can deactivate and delete cookies in your browser settings at any time, either completely or partially. Without cookies, our online offering may no longer be available in its entirety. We ask for your consent to the use of cookies, if and to the extent necessary.
For cookies used for analytics or advertising, a general objection ("opt-out") is possible for numerous services via the Networking Advertising Initiative, YourAdChoices (Digital Advertising Alliance), and/or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
5.2 Log files
We may collect the following information for each access to our website, provided that it is transmitted by your browser to our server infrastructure or can be determined by our web server: Date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual page accessed and amount of data transferred, last accessed website (referrer).
We store such information, which may also constitute personal data, in log files. The information is necessary to ensure that our online offering is permanently available, user-friendly, and reliable, and to ensure data security and, in particular, the protection of personal data—including by third parties or with the help of third parties.
5.3 Tracking pixels
We may use tracking pixels on our website. Tracking pixels are also known as web beacons. Tracking pixels—including those from third parties whose services we use—are small images that are retrieved when you visit our website. Tracking pixels can be used to collect the same information as server log files.
6. Social media
We are present on social media platforms and other online platforms in order to communicate with interested parties and provide information about our online offerings. The general terms and conditions (GTC), privacy policies, and other provisions of the individual operators of such online platforms also apply in each case.
7. Third-party services
We may use third-party services to provide our online offering in a permanent, user-friendly, secure, and reliable manner. Such services also serve to embed content in our online offering. Such services—for example, hosting and storage services, video services, and payment services—require your Internet Protocol (IP) address, as otherwise such services cannot transmit the relevant content. Such services may be located outside Switzerland and the European Union (EU) or the European Economic Area (EEA), provided that adequate data protection is guaranteed.
For their own security-related, statistical, and technical purposes, third-party services may also process data in connection with our online offering and from other sources in aggregated, anonymized, or pseudonymized form, including cookies, log files, and tracking pixels. Such data is not used to directly contact data subjects in connection with our online offering.
7.1 Social media functions and social media content
We use social plugins from Facebook to embed Facebook functions and Facebook content in our website. Such functions include, for example, "Like" or "Share." Cookies are also used for this purpose. The social plugins are provided by Facebook Ireland Ltd. in Ireland or the American company Facebook Inc. If you are logged in to Facebook as a user, Facebook can assign the use of our online offering to your profile. Further information on the type, scope, and purpose of data processing can be found in Facebook's data policy.
7.2 Map material
We use Google Maps to embed maps in our website. Cookies are also used for this purpose. Google Maps is a service provided by Google LLC in the USA. Further information on the type, scope, and purpose of data processing can be found in the Google Privacy and Security Policy and in Google's privacy policy, in the guide to data protection in Google products (including Google Maps), in the information on how Google uses data from websites that use Google services, and in the information on cookies at Google. It is also possible to object to personalized advertising.
We use map.search.ch to embed maps in our website. search.ch is a service provided by Swisscom Directories AG. Information about the type, scope, and purpose of data processing can be found in the search.ch privacy policy.
7.3 Music and/or videos
We use Vimeo to embed videos in our website. Cookies are also used for this purpose. Vimeo is a service provided by the American company Vimeo Inc. Further information on the type, scope, and purpose of data processing can be found in the questions and answers on data protection at Vimeo and in Vimeo's privacy policy.
We use YouTube to embed videos in our website. Cookies are also used for this purpose. YouTube is a service provided by the American company Google LLC. Further information on the type, Scope, and purpose of data processing can be found in Google's privacy and security principles and privacy policy, in the guide to privacy in Google products (including YouTube), in the information on how Google uses data from websites that use Google services, and in the information about cookies at Google. It is also possible to object to personalized advertising.
7.4 Documents and/or presentations
We use Issuu to embed digital documents and electronic publications in our website. Cookies are also used for this purpose. The publication platform is provided by the American company Issuu Inc. Further information on the type, scope, and purpose of data processing can be found in Issuu's privacy policy.
We use SlideShare to embed presentations in our website. Cookies are also used for this purpose. This is a service provided by LinkedIn Ireland Unlimited Company in Ireland and the American company LinkedIn Corporation. If you are registered as a user with SlideShare or another LinkedIn service, LinkedIn can assign your use of our online offering to your profile. Further information on the type, scope, and purpose of data processing can be found in LinkedIn's privacy policy, which also applies to SlideShare.
7.5 E-commerce and payment services
We use Getback to improve targeted communication with our customers. This is a "conversion optimization technology" from the Swiss company adfocus GmbH. We use it to track online shop usage and, for example, remind our customers of forgotten orders and point out special offers when they visit our online shop, or our customers can have their shopping cart sent to them by email. Cookies are also used for this purpose. adfocus may only process our customers' data in the same way that we ourselves are permitted to do so. Further information on the type, scope, and purpose of data processing can be found in Getback's privacy policy.
We use Nosto to provide our customers with a personalized shopping experience through targeted recommendations. Cookies are also used for this purpose. Nosto is a service provided by the Finnish company Nosto Solutions Oy. Further information on the type, scope, and purpose of data processing can be found on Nosto's "Privacy" page.
We use PayPal to process payments. PayPal is a service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. in Luxembourg. Information on the type, scope, and purpose of data processing can be found in PayPal's privacy policy.
We use Stripe to process payments. Stripe is a service provided by Stripe Payments Europe Ltd. in Ireland and Stripe Inc. in the United States. Information on the type, scope, and purpose of data processing can be found in Stripe's privacy policy.
7.6 Success and reach measurement
We use Google Analytics to analyze how our website is used, which also allows us to measure the reach of our website and the success of third-party links to our website, for example. This is a service provided by Google LLC in the US.
Google also attempts to track individual visitors to our website when they use different browsers or devices (cross-device tracking). Cookies are also used for this purpose. Google Analytics requires your Internet Protocol (IP) address, but this is not merged with other Google data.
In any case, we anonymize your Internet Protocol (IP) address before Google analyzes it. As a result, your full IP address is never transmitted to Google in the USA.
Further information on the type, scope, and purpose of data processing can be found in the Privacy and Security Policy and in Google's Privacy Policy, in the guide to data protection in Google products (including Google Analytics), in the information on how Google uses data from websites that use Google services, and in the information on cookies at Google. It is also possible to use the "Browser add-on to deactivate Google Analytics" and to object to personalized advertising.
We use Google Tag Manager to integrate and manage analytics and advertising services from Google and third parties on our website. This service from the American company Google LLC does not use cookies, but cookies may be used in the context of the services integrated and managed with it. We provide information about the processing of personal data by such services in this privacy policy.
7.7 Advertising
We use Facebook Ads to advertise our online offering on Facebook in a targeted manner. Facebook Ads is a service provided by Facebook Ireland Ltd. in Ireland and Facebook Inc. in the US. Facebook Ads also uses cookies.
With this type of advertising, we want to reach people who are interested in our online offering or who already use our online offering. To this end, we transmit relevant information—including personal data—to Facebook (custom audiences, including lookalike audiences), in particular using the Facebook pixel. We can also determine whether our advertising is successful, i.e., whether it leads to visits to our website (conversion tracking).
Further information on the type, scope, and purpose of data processing can be found in Facebook's data policy. In addition, Facebook users can use advertising preferences to influence which advertisements they see on Facebook and which advertisements will be displayed to them on Facebook in the future.
We use Google Ads (formerly Adwords) to advertise our online offering in a targeted manner on the Google search engine and elsewhere on the internet, for example on other websites, based on search queries, among other things. Google Ads is a service provided by the American company Google LLC. Google Ads also uses cookies. Google uses various domain names—in particular doublelick.net, googleadservices.com, and googlesyndication.com—for Google Ads.
We want to use such advertising to reach people who are interested in our online offering or who already use our online offering. To do this, we transmit corresponding information—which may also be personal—to Google (remarketing). We can also determine whether our advertising is successful, i.e., whether it leads to visits to our website (conversion tracking).
Further information on the type, scope, and purpose of data processing can be found in Google's privacy and security principles and privacy policy, in the information on how Google uses data from websites that use Google services, and in the information on cookies at Google. It is also possible to object to personalized advertising.
7.8 Provider
We use the services of the website provider Inware AG, Räffelstrasse 28, 8045 Zurich. Hereinafter referred to as "Inware". Inware AG is based in Zurich, Switzerland. We are therefore users of Inware AG; when you use our website, you are a "user of users" in the sense of Inware AG. Below, we have summarized the most important information from Inware AG's privacy policy. The full version can be found at https://www.inware.ch/de/datenschutz
Disclosure of personal data to third parties
We may share the data of our visitors, users, and their users of users with various third parties, including certain service providers, law enforcement agencies, and application developers. The data may only be disclosed in accordance with this policy.
8. Final provisions
We have created this privacy policy using the privacy policy generator from Datenschutzpartner, a service provided by the Swiss company Papiertiger GmbH.
We may amend and supplement this privacy policy at any time. We will provide information about such amendments and supplements in an appropriate form, in particular by publishing the current privacy policy on our website.