With this privacy policy, we inform you about what personal data we process in connection with our activities and operations, including our store.swiss-ski.ch website. In particular, we inform you about the purpose, manner, and location of our personal data processing. We also inform you about the rights of individuals whose data we process.
For individual or additional activities and operations, further privacy policies and other legal documents such as General Terms and Conditions (GTC), terms of use, or participation conditions may apply.
Responsibility for the processing of personal data:
Swiss-Ski Store GmbH
Arastrasse 6
3048 Worblaufen
store@swiss-ski.ch
We will point out where there are other parties responsible for the processing of personal data in individual cases.
Data protection representative in the European Economic Area (EEA)
We have the following data protection representative pursuant to Art. 27 GDPR. The data protection representative serves supervisory authorities and data subjects in the European Union (EU) and the rest of the European Economic Area (EEA) as an additional point of contact for inquiries related to the General Data Protection Regulation (GDPR):
VGS Datenschutzpartner UG
Am Kaiserkai 69
20457 Hamburg
Germany
info@datenschutzpartner.eu
Personal data refers to all information relating to an identified or identifiable natural person. A data subject is a natural person about whom personal data is processed.
Processing encompasses any handling of personal data, regardless of the means and methods applied, in particular the storing, disclosing, acquiring, collecting, deleting, saving, modifying, destroying, or using of personal data.
The European Economic Area (EEA) comprises the member states of the European Union (EU) as well as the Principality of Liechtenstein, Iceland, and Norway. The General Data Protection Regulation (GDPR) refers to the regulation of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
We process personal data in accordance with applicable law, in particular the Swiss Federal Act on Data Protection (FADP) and the Ordinance on Data Protection (ODP), and where applicable the GDPR.
We process personal data in particular for the following purposes:
in connection with the conclusion and performance of contracts and to fulfil pre-contractual obligations.
to safeguard legitimate interests of ours or of third parties, provided the interests of the data subject do not prevail. Legitimate interests include in particular our interest in continuously optimising our services, products, activities, and operations in a user-friendly, secure, and reliable manner, for direct marketing, usage behaviour and analysis purposes, ensuring system and information security, protection against misuse, and enforcement of our own legal claims.
to fulfil legal or regulatory obligations.
where applicable, to the extent of the data subject's consent.
We process those personal data that are necessary to carry out our activities and operations permanently, in a user-friendly, secure, and reliable manner. Such personal data may fall in particular into the categories of master and contact data, browser and device data, content data, meta or peripheral data and usage data, location data, sales data, and contract and payment data.
We process personal data for the duration required for the respective purpose or purposes, or as required by law. Personal data that no longer needs to be processed will be anonymised or deleted.
Master data refers to data that is necessary in particular for the conclusion of a contract, such as name, address, age/date of birth, bank account details, etc.
When using our website or app, the location services of your device may be used to collect location data. This is done for the purpose of targeted marketing. No movement or other profiles are created from this data.
This refers to device information such as browser information, operating system, IP address, login data, session duration, date and time of visit, etc.
Usage data refers to data about services and products that you use or purchase, such as order information, order frequency, sales data, time of order, etc.
For the provision of our services and products, as well as for maintenance and marketing purposes, we may have personal data processed by third parties, or process it jointly with third parties, or transmit it to third parties. Such third parties are in particular specialised providers whose services we use. We may also share data with our partners or companies that are jointly managed. We require third parties to comply with data protection policies in line with the present policy. Due to legal or regulatory requirements, we may be obliged to disclose data to competent courts, authorities, or other government bodies.
In this context, we process in particular information that a data subject voluntarily transmits to us when making contact – for example by post, email, instant messaging, contact form, social media, or telephone – or when registering for a user account. We may store such information, for example, in an address book or using comparable tools.
We process personal data primarily in Switzerland and in the EEA. However, we may also export or transfer personal data to other countries, in particular in order to process it or have it processed there.
Should the processing of your personal data take place in countries that do not guarantee adequate data protection, the conclusion of standard contractual clauses or other guarantees will ensure that appropriate technical and organisational measures are implemented to offer adequate protection of your data.
Data subjects whose personal data we process have the rights provided under Swiss data protection law. These include the right to information as well as the right to rectification, deletion, or transfer of the personal data processed. The deletion of data only covers data on the production system – due to legitimate interests, to comply with legal and/or regulatory retention and other obligations, and for technical reasons, we draw your attention to the fact that data deletion does not include backup copies (so-called back-ups). Data subjects whose personal data we process may request information free of charge, at most once per year, as to whether and which personal data we process.
If personal data is processed on the basis of consent that has been granted, such consent may be revoked at any time with effect for the future.
Data subjects whose personal data we process have the right to lodge a complaint with the competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
We take appropriate technical and organizational measures to ensure a level of data security appropriate to the respective risk. Unfortunately, however, we cannot guarantee absolute data security.
Access to our website is carried out using transport encryption (SSL / TLS, in particular using the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers indicate transport encryption with a padlock in the address bar.
Our digital communication is subject – as is fundamentally any digital communication – to mass surveillance without cause or suspicion, as well as other surveillance by security authorities in Switzerland, the rest of Europe, the United States of America (USA) and other countries. We cannot directly influence the corresponding processing of personal data by intelligence services, police authorities and other security authorities.
We may use cookies. Cookies – both our own cookies (first-party cookies) and cookies from third parties whose services we use (third-party cookies) – are data stored in your browser. Such stored data does not have to be limited to traditional cookies in text form. Cookies cannot execute programs or transmit malware such as Trojans and viruses.
Cookies may be stored in your browser temporarily during a visit as "session cookies" or for a certain period of time as so-called permanent cookies. "Session cookies" are automatically deleted when you close your browser. Permanent cookies have a specific storage period but can be manually deleted at any time in the browser history. Cookies make it possible in particular to recognize your browser on your next visit to our website and thereby, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing, for example.
Necessary cookies are automatically activated as they are technically necessary and serve the purpose of providing and optimizing our website as well as system security. When using necessary cookies, your browser automatically sends information to our servers. This includes the IP address, language settings, session duration, referral URL, information about the web browser and operating system, as well as the date and time of the visit. In addition to the necessary cookies, we also use optional cookies, provided you consent to their use. You can disable or delete optional cookies in your browser settings at any time, in whole or in part. Without optional cookies, our website may no longer be fully available.
We store such information, which may also constitute personal data, in server log files. The information is required to provide our website on a permanent, user-friendly and reliable basis and to ensure data security and, in particular, the protection of personal data – including through third parties or with the assistance of third parties.
We may use tracking pixels on our website. Tracking pixels are also referred to as web beacons. Tracking pixels – including those from third parties whose services we use – are small, usually invisible images that are automatically retrieved when you visit our website. Tracking pixels can record the same information as server log files.
We send notifications and communications by email and through other communication channels such as instant messaging or SMS.
Notifications and communications may contain web links or tracking pixels that record whether an individual communication was opened and which web links were clicked on. Such web links and tracking pixels may also record the use of notifications and communications on a personal basis. We require this statistical recording of usage for success and reach measurement in order to be able to send notifications and communications effectively, in a user-friendly manner, and on a permanent, secure and reliable basis, based on the needs and reading habits of the recipients.
If your data is processed on the basis of consent, you may object to the processing at any time.
We send notifications and communications with the help of specialized service providers.
In particular, we use:
Salesforce Marketing Cloud: Marketing automation platform; Provider: Salesforce, Inc. (USA)
We are present on social media platforms and other online platforms in order to communicate with interested individuals and to provide information about our activities. In connection with such platforms, personal data may also be processed outside of Switzerland and the EEA. For this purpose, we use plug-ins for social media and other platforms. By clicking on the respective icon or logo, you are automatically linked to the Swiss-Ski account on the corresponding platform. The General Terms and Conditions (GTC) and terms of use as well as privacy policies and other provisions of the individual operators of such platforms also apply.
We are jointly responsible with Meta Platforms Ireland Limited (Ireland) for our social media presence on Facebook, including the so-called Page Insights. Meta Platforms Ireland Limited is part of the Meta group of companies (including in the USA). Page Insights provide information about how visitors interact with our Facebook presence. We use Page Insights in order to be able to provide our social media presence on Facebook effectively and in a user-friendly manner.
Further information about the nature, scope and purpose of data processing, information about the rights of data subjects, and the contact details of Facebook as well as Facebook's data protection officer can be found in Facebook's privacy policy. We have concluded the so-called "Controller Addendum" with Facebook and have thereby agreed in particular that Facebook is responsible for ensuring the rights of data subjects. For the so-called Page Insights, the corresponding information can be found on the "Page Insights Information" page, including "Page Insights Data Information".
We use third-party services in order to be able to carry out our activities on a permanent, user-friendly, secure and reliable basis. Such services may also be used to embed content on our website. Such services require your IP address, as the corresponding content cannot otherwise be transmitted.
For their own security-related, statistical and technical purposes, third parties whose services we use may process data related to our activities and operations in aggregated, anonymized or pseudonymized form. This includes, for example, performance or usage data.
In particular, we use:
Services from Google: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) for users in the EEA and in Switzerland (Privacy Policy).
We use third-party services to enable the direct playback of audiovisual media such as music or videos on our website.
In particular, we use:
Vimeo: Videos; Provider: Vimeo Inc. (USA) (Privacy Policy).
YouTube: Videos; Provider: Google (including in the USA) (Privacy Policy).
We operate e-commerce and use third-party services to successfully offer services, content or goods.
We use payment service providers to process payments from our customers securely and reliably. The terms of the respective payment service providers apply to the processing, such as general terms and conditions (GTC) or privacy policies.
We may adjust and supplement this privacy policy at any time. We therefore recommend that you visit our website to check for any updates.
August 2024