Data protection
1. Data protection
Saphire AG is the operator of the websites resonanz.store and store.resonanz.store and the services offered on them and is therefore responsible for the collection, processing and use of your personal data and the compatibility of data processing with the applicable data protection law.
Your trust is important to us, which is why we take data protection seriously and ensure appropriate security. Of course, we observe the statutory provisions of the Federal Data Protection Act (DSG), the Ordinance on the Federal Data Protection Act (VDSG), the Telecommunications Act (FMG) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR). .
So that you know what personal data we collect from you and for what purposes we use them, please take note of the information below.
2. Calling up our website
When you visit our website, our servers temporarily save each access in a log file. As with every connection to a web server, the following technical data is recorded without any action on your part and stored by us until it is automatically deleted after 1 month at the latest:
the IP address of the requesting computer,
the name of the owner of the IP address range (usually your Internet access provider),
the date and time of access,
the website from which the access was made (referrer URL), possibly with the search term used,
the name and URL of the file called up,
the status code (e.g. error message),
the operating system of your computer,
the browser you are using (type, version and language),
the transmission protocol used (e.g. HTTP / 1.1) and
possibly your username from a registration / authentication
This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability over the long term, and enabling the optimization of our website, as well as for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 Para. 1 lit.f GDPR.
3. Opening a customer account
In order to place orders in the online shop, you can order as a guest or open a customer account. When registering for a customer account, we collect the following data:
First and Last Name
Postal address
birth date
e-mail address
Phone number
password
The data is collected for the purpose of providing the customer with password-protected direct access to the basic data we have stored. The customer can view his completed and open orders or manage or change his personal data.
The legal basis for processing the data for this purpose is the consent you have given in accordance with Article 6 (1) (a) of the EU GDPR.
4. Purchasing in the online shop
If you would like to place orders in our online shop, we need the following data to process the contract:
First and Last Name
Billing address (and delivery address if different)
Details as part of the payment (depending on the selected payment method)
E-mail address and additional password (for registered customers)
Unless otherwise stated in this data protection declaration or you have not given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the products you have ordered, ensure correct payment and ensure subsequent customer correspondence .
The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Article 6 (1) (b) EU GDPR.
5. Passing on the data to third parties
We only pass on your personal data if you have given your express consent, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims from the contractual relationship.
In addition, we pass on your data to third parties, insofar as this is necessary in the context of the use of the website and the processing of the contract (also outside the website), namely the processing of your bookings. This includes the respective transport service provider who has been entrusted with the dispatch of the ordered goods. A service provider to whom the personal data collected via the website is passed on or who has or can have access to it is our web host OVH. The website is hosted on servers in the EU. The data is passed on for the purpose of providing and maintaining the functionality of our website. This is our legitimate interest within the meaning of Article 6 (1) (f) EU GDPR.
For credit card payments on the website, forward the rt information to your credit card issuer and the credit card acquirer. If you decide to pay by credit card, you will be asked to enter all the necessary information. The legal basis for the transfer of the data lies in the fulfillment of a contract in accordance with Article 6 (1) (b) EU GDPR. With regard to the processing of your credit card information by these third parties, we ask you to also read the general terms and conditions and the data protection declaration of your credit card issuer.
6. Transfer of data abroad
We are entitled to transfer your personal data to third companies (commissioned service providers) abroad for the purpose of the data processing described in this data protection declaration. They are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to the Swiss or European level, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.
7. Cookies
Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically saves on your computer's hard drive when you visit our website.
We use cookies, for example, to offer you the shopping cart function across several pages and to temporarily save your entries when filling out a form on the website so that you do not have to repeat the entry when calling up another subpage. Cookies may also be used to identify you as a registered user after registering on the website without having to log in again when you access another subpage.
Most internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. Cookies do not cause any damage to your device and do not contain viruses.
However, if you make the appropriate settings in your browser, this may mean that you can no longer fully use all the functions of our website.
8. Tracking tools
9. General
We use the web analysis service of Google Analytics for the purpose of the needs-based design and continuous optimization of our website. In this context, pseudonymised usage profiles are created and small text files that are stored on your computer ("cookies") are used. The information generated by the cookie about your use of this website is transmitted to the server of the provider of these services, stored there and processed for us. In addition to the data listed under No. 1, we may receive the following information:
Navigation path taken by a visitor on the site,
Length of stay on the website or subpage,
the subpage on which the website is left,
the country, region or city from which access is made,
End device (type, version, color depth, resolution, width and height of the browser window) and
Returning or new visitor.
The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us.
10. Google Analytics
Google Analytics is provided by Google Inc., a company of the Alphabet Inc holding company, based in the USA. Before the data is transmitted to the provider, the IP address is shortened by activating IP anonymization ("anonymizeIP") on this website within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. In these cases, we use contractual guarantees to ensure that Google Inc. maintains an adequate level of data protection. According to Google Inc., under no circumstances will the IP address be associated with other data relating to the user.
You can find more information about the web analysis service used on the Google Analytics website. Instructions on how to prevent the processing of your data by the web analysis service can be found at http://tools.google.com/dlpage/gaoptout?hl=de.
11. Facebook and Instagram plugins
Plugins from the social network Facebook and Instagram, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our website. You can recognize these plugins by the Facebook or Instagram logo or the “Like” button on our website.
When you visit our website, the plug-in establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our website to your Facebook profile. This enables Facebook to assign your visit to our website to your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or of how it is used by Facebook.
If you do not want Facebook to be able to assign your visit to our website to your Facebook user account, please log out of your Facebook user account.
12. Newsletter:
Saphire AG automatically enters new customers in the newsletter recipient list. You have the option of unsubscribing from the newsletter either in the shop under "Newsletter" or in any newsletter that has been sent and thereby unsubscribing from the mailing list.
13. Customer ratings
If you write a customer review, product review or similar in the online shop or on other publicly accessible pages, you grant us the exclusive and unrestricted license for their further use. We reserve the right to shorten or change customer reviews or to omit them entirely after checking them without comment, not or only for a period selected by Saphire AG. Customer ratings or product reviews only reflect the opinion of the customer and do not necessarily agree with the opinion of Saphire AG.
14. Note on data transfers to the USA
For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that there are surveillance measures in place by US authorities in the USA, which generally require the storage of all personal data of all persons whose data has been transmitted from Switzerland to the USA. enables. This is done without differentiation, restriction or exception based on the pursued goal and without an objective criterion that makes it possible to restrict the access of the US authorities to the data and their subsequent use to very specific, strictly limited purposes, which are both with the Be able to justify access to this data and any interference associated with its use. We would also like to point out that in the USA there are no legal remedies for the data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain their correction or deletion, or there is no effective judicial protection against general US authorities have access rights. We explicitly point out this legal and factual situation to those affected in order to make an appropriately informed decision to consent to the use of their data.
We would like to point out to users residing in a member state of the EU that the USA does not have an adequate level of data protection from the point of view of the European Union - due to the issues mentioned in this section, among other things. Insofar as we have explained in this data protection declaration that recipients of data (such as Google) are based in the USA, we will either through contractual provisions with these companies or by ensuring that these companies are certified under the EU or Swiss-US -Privacy shield ensure that your data is protected with our partners to an adequate level.
15. Right to information, correction, deletion and restriction of processing; Right to data portability
You have the right to request information about the personal data that we store about you. In addition, you have the right to correct inaccurate data and the right to delete your personal data, as long as there is no statutory retention obligation or a permit that allows us to process the data.
You also have the right to demand that we return the data that you have given us (right to data portability). On request, we will also pass the data on to a third party of your choice. You have the right to receive the data in a common file format.
You can contact us for the aforementioned purposes via the email address kontakt@natuerell.ch. In order to process your requests, we can, at our own discretion, request proof of identity.
16. Data security
We use suitable technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.
We also take internal data protection very seriously. Our employees and the service companies commissioned by us have been bound by us to secrecy and to comply with data protection regulations.
17. Retention of data
We only store personal data for as long as it is necessary to use the tracking and analysis services mentioned above as well as further processing within the scope of our legitimate interest. We keep contract data longer, as this is required by statutory retention requirements. Retention obligations that oblige us to retain data arise from accounting regulations and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be kept for up to 10 years. If we no longer need this data to carry out the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.
18. Subject to change
We reserve the right to adapt the above declaration on data protection at any time, taking into account current legal requirements.
Status: November 2021
Cookies
Cookies are small text pieces, which are saved by our browser. Persistent cookies are available on following visits even if you close your browser in between. We use cookies to be able to connect a shopping cart to your browser session and to set your language, currency, shipping country and more based on your once chosen preference. In most browsers you find dedicated cookie settings where you can view and delete cookies.
- PEPPERSESS: Session cookie, which identifies your current session in this shop. This cookie will be deleted if you close your browser (all open browser windows).
Retention time: Session - PPS_LOCALE_INFOS: Permanent cookie, which contains your chosen language, country, currency, the last session-id, the domain binding of the cookie and the version of the cookie structure. With this cookie we can immediately set your preferences for a better experience when you choose to visit us again.
Retention time: 2 years - jsCookieCheck: Stores the consent of the cookie data storage (Consent Management).
Retention time: 1 year - google-analytics-opt-out: Used to tell Google Tag Manager whether Google Analytics may be used.
Retention time: 1 year - Google reCAPTCHA: This website uses Google reCAPTCHA, a form protection against robots of the company Google Inc. ("Google"). Google reCAPTCHA uses "cookies", which are text files placed on your computer, to help the website analyze whether a person or machine is sending form data. The information generated by the cookie about your use of the website will generally be analazyed, transmitted to and stored by Google on servers in the United States.
This is a provider from the USA.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States . Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Google opt-out browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en. Further information: https://policies.google.com/privacy
Facebook (Website) Custom Audiences / Conversion – Facebook Pixel
This website uses the Facebook Pixel and the Facebook Conversions API of the social network "Facebook" of Facebook Inc. / Meta:A. Facebook (Website) Custom Audiences
To offer remarketing, Facebook Pixel and the Conversions API are used so that you can be appropriately retargeted by us within %s days. This allows users of this system to be shown interest-based advertisements (Facebook ads) when visiting the Facebook social network or through other websites that also use the method. In this way, we pursue the interest of showing you advertising that is of interest to you in order to make our website or offers more interesting for you.
B. Facebook Conversion
With the help of the Facebook Pixel and the Conversions API, we ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. These technologies allow us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (conversion detection).
Due to the aforementioned technical marketing tools, your browser automatically establishes a direct connection with Facebook servers as soon as users have agreed to the use of marketing cookies via Consent Manager. Through the integration of Facebook Pixel and the Conversions API, Facebook receives the information that the user has accessed this website or clicked on an ad from this system. If the user is registered with a Facebook service, Facebook can assign the visit to a specific account.
The processing of the data by Facebook takes place within the framework of Facebook's data usage policy. Specific information and details about the Facebook Pixel and the Conversions API and how it works can also be found in the help section of Facebook itself.
Cookies used:
- fr: Used to deliver ads and measure and improve their relevance. It has a storage time of 90 days.
- _fbp: Identifies browsers to provide analytics services for advertising and websites. It has a storage time of 90 days.
- dpr: Same as wd: it has a storage time of 7 days, among other things for the purpose of providing an optimal experience for the screen of the browser device used.
- wd: Same as dpr: it has a storage time of 7 days, among other things for the purpose of providing an optimal experience for the screen of the browser device used.
- xs: As well as c_user: Have a retention period of 365 days to stay logged into Facebook and make it easier to log in through third-party websites and apps.
- c_user: Like xs: Have a one-year retention period so you can stay logged into Facebook and log in more easily through third-party websites and apps.
- sb / dbln: Secure browser identification, including for password recovery and Facebook authorization checks.
- usida: Session runtime cookie from Facebook to implement their functionality.
- spin: Term of one year, is required for Facebook functionality.
- locale: Duration of one week: This cookie contains the localization settings (language,..) of the last user logged in to the browser used on the user device.
- presence: Duration of one week: chat status of the user
- datr: Facebook Fraud Prevention (identification of browser without logged in user), term of 2 years.
Shared accountability:
We are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook Ireland) for the collection and transfer of data as part of this process. This applies for the following purposes:
- The creation of individualized or appropriate ads, as well as for their optimization.
- Delivery of commercial and transactional messages (e.g. via Messenger)
- The processing that takes place after collection and transmission is the sole responsibility of Facebook.
- The preparation of reports and analyses in aggregated and anonymized form is carried out within the framework of commissioned processing and is therefore our responsibility.
Additional recipient:
We also pass on the collected data to the respective internal departments for processing or to external service providers, order processors (e.g. platform, hosting, support and analysis service providers) in accordance with the required purposes (to perform ad playout and analysis).
Deletion/ Opposition:
Für in Facebook eingeloggte Nutzer ist die Deaktivierung unter https://www.facebook.com/settings/?tab=ads# möglich. Die Deaktivierung in diesem System kann via Consent Manager durchgeführt werden, wenn Marketing deaktiviert wird.
ShareThis
With the integration of the ShareThis "Share Button" service, visitors of this website share content with a few clicks on popular social media platforms.- Data processing company: Sharethis Inc, 3000 El Camino Real, 5 Palo Alto Square Suite 150, Palo Alto, CA 94306 USA, represented in the EU by Verasafe, representative@sharethis.com
- Data processing category: Marketing (advertising / analytics / targeting / market research)
- Legal basis according to EU-DSGVO: Art. 6 para. 1 lit. f EU-DSGVO
- Data processing location: USA
- Data recipient: ShareThis Inc.
- Data Protection Officer (DPO): dpo@sharethis.com
- Privacy policy: https://sharethis.com/privacy/
- _stid: _stid, 1 year, Cookie, sharethis.com, ShareThis cookie ID
- stidv: stidv, 10 years, Cookie, ShareThis cookie ID version
- _unam: _unam, 1 year, Cookie, Analytics, date of last visit
- _uset: _uset, 1 day, Cookie, used for ShareThis Analytics
- st_optout: st_optout, 1 year, cookie, indication that user wishes to opt-out
- _vwo_uuid_v2: _vwo_uuid_v2, 1 year, cookie, Analytics: used for calculation of unique traffic of a website
- pubconsent: pubconsent, 13 months, Cookie, ShareThis cookie is set to indicate that the user has made a declaration on EU-DSGVO data collection for the IAB TCF v1 format.
- _ga: _ga, 2 years, cookie, Google Analytics cookie used by ShareThis to distinguish users.
- _gat: _gat, 1 day, cookie, Google Analytics cookie used by ShareThis to distinguish users.
- _gid: _gid, 1 day, cookie, Google Analytics cookie used by ShareThis to distinguish users.