Privacy Policy
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Petalane.ch
Alicia Wyss
Heligeichstrasse 32d
8632 Tann
Schweiz
Tel.: 043 843 02 65
E-Mail: info@petalane.ch
Website: https://petalane.ch
General information
Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Data Protection Act, DSG), every person is entitled to protection of their privacy and protection against misuse of their personal data. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
We have outsourced the hosting of our website to Metanet AG, 8005 Zurich. In cooperation with our hosting provider, we endeavor to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
By using this website (https://petalane.ch), you consent to the collection, processing and use of data in accordance with the following description. This website can be visited without registration. Data such as pages called up or the name of the file called up, date and time are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address, e-mail address or telephone number are collected on a voluntary basis as far as possible. No data will be passed on to third parties without your consent.
Processing of personal data
Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, deletion, storage, modification, destruction and use of personal data.
We process personal data in accordance with Swiss data protection law. In addition, we process personal data in accordance with the following legal bases in connection with Art. 6 para. 1 GDPR, insofar as the EU GDPR is applicable:
it. a) Processing of personal data with the consent of the data subject.
lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
lit. c) Processing of personal data to fulfill a legal obligation to which we are subject under any applicable EU law or under any applicable law of a country in which the GDPR is fully or partially applicable.
lit. d) Processing of personal data in order to protect the vital interests of the data subject or another natural person.
lit. f) Processing of personal data in order to protect the legitimate interests of us or third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests are, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.
When you place an order with us, we require the following personal data to process the contract:
First name and last name
Billing address (and delivery address if different)
E-mail address
Phone number
Password (only when opening a customer account at the same time)
We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.
Cookies
This website uses cookies. These are small text files that make it possible to store specific information relating to the user on the user’s device while they are using the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze the behavior of page use, but also to make our offer more customer-friendly. Cookies remain stored at the end of a browser session and can be called up again when you visit the site again. If you do not wish this to happen, you should set your Internet browser to refuse to accept cookies.
A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that you may then not be able to use all the functions of this website.
SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Server-Log-Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
Third party services
For order processing, we pass on the necessary address data to the respective transport service provider.
This website may use Google Maps for embedding maps and YouTube for embedding videos from the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
These services of the American Google LLC use cookies, among other things, and as a result, data is transferred to Google in the USA, whereby we assume that no personal tracking takes place in this context solely through the use of our website. Google has undertaken to guarantee appropriate data protection in accordance with the US-European and US-Swiss Privacy Shield. Further information on the respective data protection declarations and so-called opt-out options can be found at Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/.
Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
External payment service providers
As part of the fulfillment of contracts, we use payment service providers on the basis of the Swiss Data Protection Ordinance and, if necessary, Art. 6 para. 1 lit. b. EU-DSGVO. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with the Swiss Data Protection Ordinance and, if necessary, in accordance with Art. 6 para. 1 lit. f. EU GDPR in order to offer our users effective and secure payment options.
This website uses the external payment service provider Stripe Payments Europe Limited, Dublin, D02 H210, Ireland. When you pay by credit card, we forward your credit card information to your credit card issuer via the payment service provider. Processing also takes place outside Switzerland, namely in Ireland and the USA. Stripe, Inc. complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework, as set forth by the U.S. Department of Commerce and as applicable (see link “Stripe Data Privacy Framework Policy”).
As the operator of the website, we do not receive any information about the (bank) account or credit card, but only information to confirm (accept) or reject the payment. Please refer to the terms and conditions and data protection information of the payment service providers at https://stripe.com/en-ch/privacy.
Payment transactions are subject to the terms and conditions and data protection information of the respective payment service provider, which can be accessed on the respective website or transaction applications. We also refer to these for further information and the assertion of rights of revocation, information and other rights of data subjects.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To deactivate Google Analytics, Google provides a browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=de. Google Analytics uses cookies. These are small text files that make it possible to store specific user-related information on the user’s device. These enable Google to analyze the use of our website. The information collected by the cookie about the use of our pages (including your IP address) is usually transferred to a Google server in the USA and stored there. We would like to point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure an anonymized collection of IP addresses (so-called IP masking). If anonymization is active, Google shortens IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which is why no conclusions can be drawn about your identity. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google complies with the data protection provisions of the “Privacy Shield” agreement and is registered with the “Privacy Shield” program of the US Department of Commerce and uses the information collected to evaluate the use of our websites, to compile reports for us in this regard and to provide us with other related services. You can find out more at https://support.google.com/analytics/answer/6004245?hl=de
MailPoet
Newsletter data
If you would like to obtain the newsletter offered on this website, we need an email address from you and information that allows us to check that you are the owner of the specified email address and agree to the receipt of the newsletter . Further data will not be collected. We use this data exclusively to send the requested information using the shipping service provider «Mailpoet».
You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
Use of the e-mail delivery service provider “Mailpoet”
We use mailpoet on our website, a WordPress plugin for our newsletter. The service provider is the Irish company Aut O’Mattic A8c Ireland Ltd, Grand Canal Dock, 25 Herbert Pi, Dublin, D02 AY86, Ireland. You can find out more about the data processed by the use of MailPoet Privacy Policy.
The shipping service provider is used on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR. The newsletter is sent via our web host in Switzerland – the mail server from MailPoet is not used.
The shipping service provider may use the data of the recipient in pseudonym form, i.e. without assignment to a user, to optimize or improve your own services, e.g. to technical optimization of the shipping and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write them down or pass them on to third parties.
After you have given your consent to storing the data, the email address and its use to send the newsletter, you can revoke it at any time, for example via the “unsupscribe link” in the newsletter.
Login data
To subscribe to the newsletter, simply enter your e-mail address. Optionally, we ask you to enter your first and last name. This information is only used to personalize the newsletter.
Statistical survey and analyses
The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the MailPoet server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times.
The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of MailPoet to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Cancellation/revocation
You can cancel the reception of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter.
Legal basis of the General Data Protection Regulation
In accordance with the requirements of the General Data Protection Regulation (GDPR) applicable from May 25, 2018 No. 3, or paragraph 3 UWG. The use of the shipping service provider Mailpoet, implementation of the statistical surveys and analyzes as well as logging of the registration procedure are based on our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR. Our interest is aimed at the use of a user -friendly and safe newsletter system, which serves both our business interests and meets the expectations of the users.
We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements pursuant to Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes.
Profiling and automated decision-making
We do not process personal data in a partially automated manner with the aim of evaluating certain personal aspects (profiling). In principle, we do not use fully automated decision-making (as regulated in Art. 22 GDPR) for the establishment and implementation of the business relationship or otherwise.
Right to information, deletion, blocking and revocation of consent
You have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing as well as a right to rectification, blocking or erasure of this data at any time. You can also revoke your consent to this privacy policy at any time. You can contact the person responsible for data protection in our organization listed at the beginning of the data protection declaration directly at any time for this and other questions on the subject of personal data.
Changes to the privacy policy
We can adjust this data protection declaration at any time without notice. The current version published on our website applies.
Questions in the context of the privacy policy
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization listed at the beginning of this privacy policy.
Tann, 10.10.2024
Source: SwissAnwalt