Version from 31.08.2023
1. general
By using our website and/or applications for mobile devices (apps) (hereinafter web presences), you consent to the processing of your personal data in accordance with the following provisions.
When you visit our website, we collect, use and store your personal data. Personal data is information about personal or factual circumstances. We do not do profiling. Your data is processed in Switzerland.
Consents that you have given for specific data processing operations can be revoked at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. If you object, we will no longer process your personal data concerned, unless the processing serves the assertion, exercise or defense of legal claims. If your personal data is processed for the purpose of direct marketing, you have the right to object to the processing at any time. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing.
This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DPA, SR 235.1).
2. nature and purpose of the data processed
We process various categories of data about you: technical data to ensure the functionality and security of our offers; registration data for user accounts; communication data from e-mail, telephone and chat; master data required for contract processing and for marketing and advertising purposes; contract data; behavioral and preference data and other data that do not fall under any of the aforementioned categories.
We process your data for the purposes of communicating with you; establishing, managing and administering contractual relationships; marketing and relationship management; market research; improving our services and operations and product development; security and access control purposes; compliance with laws, directives and recommendations of public authorities; and risk management and corporate governance purposes.
3. information, blocking, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data.
4. objection to advertising e-mails
If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data if there are grounds for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
5. right to restriction of processing
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time. The right to restriction of processing exists in the following cases:
If the processing of your personal data is unlawful, you may request the restriction of data processing instead of erasure. If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of erasure. If you have lodged an objection, a balancing of your interests and ours must be carried out. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
6. disclosure of data
In connection with our contracts, the website, our services and products, our legal obligations or to protect our legitimate interests, we also transfer your personal data to third parties, in particular to service providers such as shipping companies, contractual partners where back-to-back deliveries are made as well as authorities, insofar as we are legally obliged to do so.
7. cookies
We use cookies on our site. Cookies are used to store information locally, mostly settings of the respective website visited. This does not mean, however, that we gain immediate knowledge of your identity. We use pixel tags (also called tracking pixels or beacon trackers) for statistical purposes. The pixel tag itself does not store or change any information on your end device. The pixel tag sends your IP address, the referrer URL of the website visited, the time at which the pixel was viewed, the browser used, and previously set cookie information to a web server. The use of cookies and pixel tags serves on the one hand to make the use of our offer more pleasant and safer. For example, we use so-called session cookies to recognize which pages have already been visited, which banners have already been displayed, whether you have logged into your user account or for shopping cart display. These are automatically deleted after you leave our site.
In order to optimize user-friendliness, we also use temporary cookies that are stored on the end device for a certain fixed period of time. Their effect is that certain information does not have to be re-entered when the website is visited again. The data processed by these cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) lit. f DSGVO, which is why we may process them on the basis of your consent in accordance with Art. 6 (1) lit. a DSGVO as well as Art. 6 DSG.
8. analysis tools from Google
Our web presence uses the functions of the web analysis service Google Analytics, based in Ireland. Google uses performance cookies to track the behavior of visitors to our website (duration, frequency of pages viewed, geographical origin of access, etc.) and creates reports for us on the use of our website on this basis. IP anonymization is used on our website. The IP address of the user is shortened within the member states of the EU and the European Economic Area and in the other contracting states of the agreement. The information about your use of this website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f. DSGVO and Art. 6 DSG.
9. social networks
We also communicate on social networks and other platforms operated by third parties. In doing so, we may receive data from you and the platforms when you come into contact with us via our online presence. At the same time, the platforms evaluate your use of our online presences and link this data with other data about you known to the platforms.
10. web links
Our websites contain links to websites operated and/or controlled by third parties. This may be a co-branding agreement with the third party provider to display our logo or other branding on the website. The Uniform Record Locator (URL) will always tell you whether the page you are visiting is on one of our websites. We recommend that you review the privacy statements of these third-party websites, as they may differ from ours.
11. security and SSL- TLS- encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the operator, our web presences use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in the browser line.
12. data storage
We process your data for as long as our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes require or storage is technically necessary. Log files are generally stored for ten years. Depending on predefined intervals, the data (log files) are also deleted by the hoster after just one week. We take appropriate organizational and technical measures to protect personal data from manipulation, loss, destruction or unauthorized processing. We assume no liability for damages resulting from loss of data or knowledge and processing of personal data by unauthorized persons.
13. foreign language versions of this privacy policy
In case of differences between foreign language versions and this Privacy Policy, the German language text shall prevail.
14. website operator and data protection officer
The operator of the website is Karoxa GmbH, Konradstrasse 1a, CH-8280 Kreuzlingen, Switzerland, the data protection officer is Teyfik Karaboga, info@karoxa.ch.