PRIVACY

General remark

Based on Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Data Protection Act, DSG), everyone has the right to the protection of their privacy and protection against misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

In cooperation with our hosting providers, we strive to protect the databases as well as possible from unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data as described below. In principle, this website can be visited without registration. In doing so, data such as pages called up or the name of the file called up, date and time are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address or email address, are collected on a voluntary basis as far as possible. The data will not be passed on to third parties without your consent.

Processing of personal data

Personal data is all information that relates to a specific or identifiable person. A data subject is a person about whom personal data is processed. Processing includes all handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, deletion, storage, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. In addition, we process - to the extent and insofar as the EU GDPR is applicable - personal data in accordance with the following legal bases in connection with Art. 6 Para. 1 GDPR:

• lit. a) Processing of personal data with the consent of the data subject.

• lit.b) Processing of personal data to fulfill a contract with the data subject and to carry out corresponding pre-contractual measures.

• c) Processing of personal data to fulfill a legal obligation to which we are subject in accordance with any applicable law of the EU or in accordance with any applicable law of a country in which the GDPR is fully or partially applicable.

• lit.d) Processing of personal data in order to protect the vital interests of the data subject or another natural person.

• lit.f) Processing of personal data in order to safeguard the legitimate interests of us or of third parties, provided that the fundamental freedoms and rights and interests of the person concerned do not prevail. Legitimate interests are in particular our business interests in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration that is necessary for the respective purpose or purposes. In the case of longer storage obligations due to legal and other obligations to which we are subject, we limit the processing accordingly.

Data protection declaration for SSL encryption

This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http: //" to "https: //" and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy policy for contact form

If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Data protection declaration for newsletter data

If you would like to receive the newsletter offered on this website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter . Further data is not collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter.

Data protection declaration for the right to information, deletion, blocking

You have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing as well as the right to correct, block or delete this data at any time. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.

Privacy policy for Facebook

This website uses functions from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers. In doing so, data is already being transferred to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be assigned to your Facebook account, please log out of Facebook before visiting our page. Interactions, in particular the use of a comment function or clicking a “Like” or “Share” button, are also passed on to Facebook. You can find out more at https://de-de.facebook.com/about/privacy .

Data protection declaration for Instagram

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This enables Instagram to assign your visit to our website to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Instagram.

You can find more information on this in Instagram's privacy policy: http://instagram.com/about/legal/privacy/

External payment service providers

This website uses external payment service providers, through whose platforms the users and we can carry out payment transactions. For example about

• PostFinance (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)

• Visa (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)

• Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)

• American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html)

• PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)

• Bexio AG (https://www.bexio.com/de-CH/datenschutz)

• Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)

• Apple Pay (https://support.apple.com/de-ch/ht203027)

• Stripe (https://stripe.com/ch/privacy)

• Klarna (https://www.klarna.com/de/datenschutz/)

• Skrill (https://www.skrill.com/de/fusszeile/datenschutzpolitik/)

• Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/) etc.

As part of the fulfillment of contracts, we use the payment service providers on the basis of the Swiss data protection regulation and, if necessary, Article 6 (1) lit. b. EU GDPR. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with the Swiss Data Protection Regulation and, if necessary, in accordance with Article 6 (1) (f) of the EU GDPR, in order to offer our users effective and secure payment options.

The data processed by the payment service provider includes inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, sums and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. As the operator, we do not receive any information about your (bank) account or credit card, only information to confirm (accept) or reject the payment. The data may be transmitted to credit agencies by the payment service provider. The purpose of this transmission is to check your identity and creditworthiness. For this we refer to the terms and conditions and data protection information of the payment service providers.

For payment transactions, the terms and conditions and the data protection information of the respective payment service provider apply, which can be accessed on the respective website or transaction applications. We refer to this also for the purpose of further information and assertion of revocation, information and other rights of data subjects.

Newsletter - Mailchimp

The newsletter is sent using the mailing service provider 'MailChimp', a newsletter delivery platform operated by the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA. You can view the data protection regulations of the shipping service provider here. The Rocket Science Group LLC d / b / a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection ( PrivacyShield ). The shipping service provider is used on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR and an order processing contract in accordance with Article 28 (3) sentence 1 GDPR.

The shipping service provider can use the recipient's data in pseudonymous form, ie without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of the shipping and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Order processing in the online shop with a customer account

We process the data of our customers in accordance with the data protection regulations of the federal government (Data Protection Act, DSG) and the EU-DSGVO, as part of the order processes in our online shop, to enable them to select and order the selected products and services, as well as their payment and delivery , or to enable execution.

The processed data includes master data (inventory data), communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services in the context of the operation of an online shop, billing, delivery and customer services. We use session cookies, e.g. for storing the contents of the shopping cart, and permanent cookies, e.g. for storing the login status.

The processing takes place on the basis of Art. 6 Paragraph 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as necessary is required for the establishment and fulfillment of the contract. We only disclose the data to third parties within the framework of delivery, payment or within the framework of legal permits and obligations. The data will only be processed in third countries if this is necessary to fulfill the contract (e.g. at the customer's request for delivery or payment).

Users can optionally create a user account in which they can see their orders in particular. As part of the registration, the required mandatory information is communicated to the users. The user accounts are not public and cannot be indexed by search engines such as Google. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is necessary for commercial or tax reasons in accordance with Art. 6 Para. 1 lit. c GDPR. Information in the customer account remains until it is deleted with subsequent archiving in the event of a legal obligation. It is up to the users to save their data in the event of termination before the end of the contract.

As part of the registration and renewed logins as well as the use of our online services, we save the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as the user's protection against misuse and other unauthorized use. This data is generally not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) (c) GDPR.

The deletion takes place after the expiry of statutory warranty and comparable obligations, the need to store the data is checked at irregular intervals. In the case of the statutory archiving obligations, the deletion takes place after their expiry.

General disclaimer

All information on this website has been carefully checked. We strive to provide our information offering up-to-date, correct and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, which means that we cannot guarantee the completeness, correctness and topicality of information, including journalistic and editorial information. Liability claims from material or immaterial damage caused by the use of the information offered are excluded, unless it can be proven that there was willful intent or gross negligence.

The publisher can change or delete texts at his own discretion and without notice and is not obliged to update the content of this website. Use of or access to this website is at the visitor's own risk. The publisher, its clients or partners are not responsible for damage, such as direct, indirect, accidental, specifically to be determined in advance or consequential damage, which allegedly resulted from visiting this website and therefore assume no liability for this.

The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher thus expressly distances itself from all third-party content that may be relevant under criminal or liability law or that is contrary to common decency.

Changes

We can adapt this data protection declaration at any time without prior notice. The current version published on our website applies. If the data protection declaration is part of an agreement with you, we will inform you of the change in the event of an update by e-mail or in another suitable manner.

Questions to the data protection officer

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organizationdirectly: info@ambra.uv.ch  

The responsible body within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), can be found in the

Imprint .