Privacy Policy

Scope of application of the privacy policy

This privacy policy applies exclusively to the use of this online shop and to our newsletter.

Contact details of the controller and the company data protection officer

This privacy policy applies to data processing by:

Controller

Swiss Paraplegic Centre
Guido A. Zäch-Strasse 1
6207 Nottwil
Switzerland

spz@paraplegie.ch
+41 41 939 54 54
www.spz.ch

Data Protection Officer

Dr Christian Peter
Data Protection Officer

+41 41 939 63 15
christian.peter@paraplegie.ch
www.paraplegie.ch

Processing of personal data (nature, purpose and use)

When you visit the website When you visit this website, information is temporarily stored in log files on the server. This information is automatically sent by the browser on your device. Namely:

IP address of the contacting device
Date and time
URL of the page accessed
Referrer URL
Browser and other device information

The aforementioned data is processed by us for the following purposes:

Connection establishment of the website
Use of our website
System security and stability

The data processing is carried out at your request and is necessary for the fulfilment of the contract and pre-contractual measures in accordance with Art. 31 para. 2 lit. a FADP for the purposes stated.

Order processing

The following data is also collected to process an order:

Salutation
First and last name
Address
Phone
E-mail address
Credit card details, if applicable

The data processing is carried out at your request and is necessary for the purposes mentioned for the fulfilment of the contract and pre-contractual measures in accordance with Art. 31 para. 2 lit. a FADP.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Forwarding of data to third parties (including joint controllers and data processors)

For the fulfilment of contracts Insofar as this is legally permissible in accordance with Art. 31 para. 2 lit. a FADP and is necessary for the processing of contractual relationships with you, your personal data will be passed on to third parties.

The data passed on may only be used by third parties for the stated purposes.
e-guma voucher and ticket system
The above-mentioned personal data is stored and processed by the software provider e-guma® (Idea Creation GmbH, Walchestrasse 15, CH-8006 Zurich) of our online shop as part of contract processing.

Digital infrastructure
This website uses services from Amazon Web Services (AWS) Inc. based at 410 Terry Avenue North Seattle WA 98109, USA. The data is processed and stored in the EU. Information on data protection: Privacy Policy, "Privacy Policy", "Frequently asked questions about data protection", "General Data Protection Regulation (GDPR) Centre"

Datatrans
Your payment data will be processed by the following service provider as part of payment processing Datatrans AG, Kreuzbühlstrasse 26, CH-8008 Zurich.

Error monitoring

This website uses Raygun, a monitoring tool. The service provider is the New Zealand company Raygun Limited, Wellington, L7/59 Courtenay Pl, Te Aro, New Zealand. More about the data processed through the processed through the use of Raygun can be found in the privacy policy at https://raygun.com/privacy

Website statistics with Plausible

Our website uses the open source web analysis service from Plausible, based in Estonia. The web analysis is based on anonymised data. It is not possible to draw conclusions about individuals. The following web statistics are analysed: URL, HTTP referrer, browser, operating system, end device, country. The processing is based on our legitimate interest in measuring the reach of our website (Art. 31 para. 1 FADP). You can find more information about Plausible at https://plausible.io/data-policy

Shipping company
Your personal data will also be passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods.

Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. A cookie does not always mean that we can identify you.
Cookies are used on the one hand to record the frequency of use, number of users and behaviour on our website, to increase the security of website use and to make our information offering more user-friendly.
In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again. Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 31(1) GDPR.
You can configure your browser settings so that no cookies are stored on your computer. The complete deactivation of cookies may mean that you cannot use all the functions of our website.

Analysis tools

Google Analytics

This website uses the "Google Analytics" service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse website usage by users. The service uses "cookies" - text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there. IP anonymisation is used on this website. The IP address of users is truncated within the member states of the EU and the European Economic Area. This truncation eliminates the personal reference of your IP address. As part of the contract data agreement that the website operators have concluded with Google Inc., Google Inc. uses the information collected to analyse website usage and website activity and provides services related to Internet usage. You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
https://tools.google.com/dlpage/gaoptout?hl=de
Here you will find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/600424...

Your rights

You have the right:

to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details (Art. 25 FADP). In the event of disproportionate effort, we reserve the right to request proof of your identity and the assumption of the actual costs in advance.
to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (Art. 32 para. 4 FADP)
to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing (Art. 32 DSG).
to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller (Art. 28 FADP).
to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future (Art. 6 FADP)

Right to object

If your personal data are processed on the basis of legitimate interests in accordance with Art. 31 para. 1 FADP you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

Data security

Your personal data is transmitted to us from this website using SSL encryption. We use technical and organisational measures to protect our website from unauthorised access.

Retention period

We will retain your personal data for as long as we deem necessary or appropriate to comply with applicable laws or as long as it is necessary for the purposes for which it was collected. We delete your personal data as soon as it is no longer required and in any case after the maximum statutory retention period of five or ten years has expired. Data that is no longer required and for which there is no legal obligation to retain it will be destroyed once the purpose and justification no longer apply.

Updating and amendment of this privacy policy

We reserve the right to change this privacy policy at any time or to adapt it to new processing methods.

Status: 31 August 2023