Privacy Policy

Privacy Notice Wellance Medical AG

Below you will find information about what personal data we collect during your visit to our website and how it is used. Personal data is information by which you can be identified as the data subject, such as B. by name, address, e-mail address or user behavior. Affected persons are the visitors of our website and users of our entire online offer.

Name and address of the person responsible for data processing

Wellance Medical AG
Baarerstrasse 21
6300 Zug
Switzerland

Internet: https://www.ellance.ch/en
Email: info@ellance.ch

Represented by the management: Hakan Celebi

The data protection officer of the person responsible is

Datavise GmbH & Co. KG
Luegallee 114
40545 Düsseldorf

Email: datenschutz@datavise.de

To protect your personal data and other confidential content, our website uses SSL encryption.

Scope of processing of personal data

Your personal data will only be processed as part of the use of our website, its content and the range of services. The prerequisite for this processing is the basic consent of the person concerned. Exceptions apply in cases in which prior consent is not possible for actual reasons and legal regulations allow processing.

Legal basis for processing personal data

If the processing of personal data is based on the user's consent, the legal basis is Article 6(1)(a) of the GDPR. Article 6(1)(b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. If legal obligations require the processing of personal data, Art. 6 para. 1 lit. c is the legal basis for this. If the vital interests of the person concerned or another natural person require the processing of personal data, the legal basis for this is Art. 6 para. 1 lit. d GDPR. If the processing is carried out to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Article 6 Paragraph 1 lit. f GDPR serves as the legal basis.

Duration of storage of data / deletion of data

Your personal data will be routinely deleted at the latest after the respective statutory retention periods (e.g. commercial and tax retention periods) have expired, provided that this data is no longer required to fulfill the contract and / or we have no legitimate interest in further storage.

Use of the website and creation of log files

Description and scope of data processing When you visit our website, the following information is automatically transmitted from your browser to our provider's server:

  • IP address of your end device
  • Date and time of access
  • Name and URL of retrieved files
  • Website from which you accessed or from which you were directed to our site (referrer URL)
  • The browser used and, if applicable, the operating system of your device
  • Name of the access provider.

The data mentioned will be processed by us for the purpose of smooth connection establishment and system security. This data is not merged with other data sources. The IP address is anonymized.The resulting connection data will be automatically deleted after a while. If the website is misused, the relevant data, the further storage of which is necessary for evidence purposes, will be retained until the process is clarified.

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR.

Purpose of data processing

The storage in log files takes place to ensure the proper use of the website. In addition, the data is used to optimize the website and to ensure the security of our IT systems. Our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f of the GDPR also lies in these aforementioned purposes.

Hosted by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the case of the transmission of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision. Further information on Shopify's data protection is available on the following website: https://www.shopify.de/legal/datenschutz Further processing on servers other than those of Shopify mentioned above only takes place within the framework communicated below .

Use of cookies

Description and scope of data processing

This website uses cookies. These are small text files that are stored in the internet browser or by the internet browser on the user's end device. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the browser to be clearly identified when the website is called up again. We use cookies to make the use of our offer more pleasant for you, to optimize user-friendliness and to statistically record the use of the website. These cookies are automatically deleted after a defined period of time. We use cookies that enable an analysis of the surfing behavior of the user.

The following data is stored and transmitted in the cookies:

  • Frequency of page views
  • Use of website functions

When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration. We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). This also includes providers from unsafe third countries. The data is e.g. B. passed on to partner companies from the USA.

Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 lit. f GDPR.The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 Paragraph 1 lit

Duration of storage, possibility of objection and deletion

Cookies are stored on the user's end device and transmitted to our site. As a user, you also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This deletion can also be automated. Each browser manages these cookie settings differently. This setting is described in the help menu of each browser, which explains how you can change your cookie settings. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Use of your data for direct marketing

Subscription to our e-mail newsletter & forms

Description and scope of data processing

The newsletter is sent on the basis of the user's registration on the website. When registering for the newsletter, the data from the input mask is transmitted to us:

  • email address

The following data is also collected during registration:

  • IP address of the calling computer
  • Date and time of registration
  • browser and device

We use the HubSpot service to provide the following online forms. To do this, we forward your data to HubSpot, which processes the data exclusively on our behalf. See the “HubSpot” privacy notice.

Please note: If you contact us via contact forms, personal data may be transmitted to service providers in third countries. These third countries do not have an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly being entitled to any legal remedies. The security of the transmission is regularly secured via so-called standard contractual clauses and, in the case of HubSpot, via Binding Corporate Rules, which ensure that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses or binding corporate rules are not sufficient to establish an adequate level of security, your acknowledgment of the data protection declaration in the context of the contact forms is considered consent within the meaning of Art. 49 Para. 1 lit.a DSGVO, which involves data transfer to unsafe third countries justified.

Legal basis for data processing

The legal basis for the processing of the data after the user has registered for the newsletter is Article 6(1)(a) GDPR.

Purpose of data processing

The processing of the user's e-mail address serves to be able to deliver the newsletter correctly. The processing of other personal data during the registration process serves to prevent misuse of this service or the email address used.

Opt-out and deletion option

The affected user can cancel the newsletter subscription at any time. Each newsletter contains a corresponding link for this purpose. An e-mail can also be sent to info@ellance.ch to delete the newsletter subscription.

Contact form and email contact

Description and scope of data processing

There is a contact form on our website for electronic contact. If this option is used, the data entered in the input mask will be transmitted to us and saved. These personal data are optional:

  • first name
  • last name
  • email
  • phone

In addition, the following data is stored at the time the message is sent:

  • The IP address of the user
  • Date and time of registration browser and device

Alternatively, it is also possible to contact us via the email address provided. The user's personal data transmitted with the e-mail will then be saved.

Legal basis for data processing

The legal basis for processing the data is Article 6(1)(a) GDPR if the user has given their consent. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 Paragraph 1 Letter f of the GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

Purpose of data processing

The processing of the personal data from the input mask serves exclusively to process the contact. If contact is made by e-mail, this is the necessary legitimate interest in the processing of the data. The personal data processed during the sending process is used exclusively to prevent misuse of the contact form and to ensure the security of our IT systems.

Opt-out and deletion option

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us via e-mail, he can object to the storage of his personal data at any time. In this case, the conversation cannot be continued. All personal data that was stored in the course of making contact will be deleted in such a case.

Avoiding abuse and spam using Google's reCAPTCHA tool

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an entry is made by a natural person or whether it is misused by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in determining individual responsibility in the Internet and avoiding abuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. come in the US.

Further information about Google reCAPTCHA and Google's data protection declaration can be found at: https://www.google.com/intl/de/policies/privacy/

Analysis Tools

Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Article 6 (1) sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.These interests are to be regarded as justified within the meaning of the aforementioned regulation. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of server request, is sent to a server transmitted by Google in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of these websites. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; we would like to point out to you however that in this case not all functions of this website can be used in full. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

Google Tag Manager

We also use the Google Tag Manager. Website tags can be managed with this service. The Google Tag Manager only sets up "tags" - "tags" are a code that is used to measure visitor volume and visitor behavior. The "tags" come from other services - in our case from Google Analytics (see above). These tags are only managed via the Google Tag Manager, no cookies are set and no personal data is collected. If tracking has been deactivated, this also applies to all tracking tags managed with the Google Tag Manager.

Google Search Console

For the purpose of continuously optimizing the Google ranking of our websites, we use Google Search Console, a web analysis service provided by Google. Through Google Search Console we can carry out search analyzes which give us information about how often our website appears in Google search results.This is how we can monitor and manage our websites in the search index When using Google Search Console, no personal user or tracking data is processed or transmitted to Google. Google My Business We operate a so-called

Google My Business

Profile of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you are based in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for your data collected in these procedures.

We have the opportunity to introduce our company to you via Google My Business. You also have the option of contacting us and rating our company, as well as uploading photos relating to our company. We would like to point out that you use our My Business profile and its functions at your own risk. This applies in particular to the use of social and interactive functions (e.g. commenting, sharing, rating, direct messages). When you visit and interact with our Google My Business profile, Google also collects your IP address and other information that is available on your device in the form of so-called cookies. The data collected about you in this context will be processed by Google and may be transferred to countries outside the European Union. Google describes what information Google receives and how it is used in general in the data protection declaration: https://policies.google.com/privacy?hl=de If you contact us via our Google My Business profile If you want to contact us, we would like to refer you to our relevant note "Contact form / contact by e-mail". We use your data to answer your inquiry via My Business or to respond to your review. The legal basis for this is Art. 6 (1) sentence 1 lit. f) GDPR. Beyond that, we do not process any other data from your use of My Business.

HubSpot

On this website we use the HubSpot service for various purposes. HubSpot is a US based software company with offices in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500. Hubspot is an integrated software solution that we use to cover various aspects of our online marketing. These include: email marketing, social media publishing & reporting, reporting, contact management (e.g. user segmentation & CRM), landing pages and contact forms.

Description and scope of data processing

Our subscription service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information and the content of our website are stored on the servers of our software partner HubSpot. They can be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this Privacy Policy.

We use all information collected exclusively to optimize our marketing measures.

More information about HubSpot's privacy policy »

More information from HubSpot regarding EU data protection regulations »

You can find more information about the cookies used by HubSpot here & here »

As part of the optimization of our marketing measures, the following data can be collected and processed via Hubspot:

  • Geographical position
  • Browser type
  • Navigation information
  • Referral URL
  • Performance data
  • Information about how often the application is used
  • Mobile Apps Data
  • HubSpot subscription service credentials
  • Files displayed on site
  • Domain names
  • Pages viewed
  • Aggregate usage
  • Operating system version
  • Internet Service Provider
  • IP address
  • Device ID
  • Duration of the visit
  • Where the application was downloaded from
  • operating system
  • Events that occur within the application
  • Access times
  • Clickstream data
  • Device model and version

In addition, we also use Hubspot to provide contact forms. You can find further information on this under "Subscription to the newsletter & forms" in this data protection declaration.

Legal basis

The legal basis for processing is your consent in accordance with Article 6(1)(a) GDPR. If you do not want Hubspot to collect and process the data mentioned, you can refuse your consent or revoke it at any time with effect for the future. The personal data are kept for as long as they are necessary to fulfill the processing purpose.

Duration of storage of data / deletion of data

The data will be deleted as soon as they are no longer required to achieve the purpose. Data can be transmitted to the USA as part of processing via HubSpot. The security of the transmission is secured by so-called standard contractual clauses, which ensure that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent can serve as the legal basis for transmission to third countries in accordance with Article 49 (1) (a) GDPR.

Social media plugin

Facebook

Social media plugins from Facebook are used on our website to make their use more personal. This is an offer from Facebook. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website.

By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.Facebook can use this information for the purposes of advertising, market research and needs-based design of the Facebook pages. B. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook. If you do not want Facebook to associate the data collected through our website with your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection information (https://www.facebook.com/about/privacy/) from Facebook.

Instagram

So-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"), are also used on our website. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. For more information, see Instagram's privacy policy (https://help.instagram.com/155833707900388).

WhatsApp

You can use WhatsApp to contact us and start a conversation. We are responsible within the meaning of Art. 4 No. 7 GDPR for subsequent data processing in connection with WhatsApp. To offer and use WhatsApp, we use the software solution from Charles GmbH, Gartensstr. 86-87, 10115 Berlin, as part of an order processing contract. Charles stores all personal data in the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API with the result that no other third parties or WhatsApp have access to your communication content within the scope of our responsibility. The use of WhatsApp is solely subject to the agreements you have made with WhatsApp. In accordance with the WhatsApp terms of use, we have your telephone number and username when you contact us. We use this and other information you provide to recognize you and your preferences and to reply to your WhatsApp messages. The legal basis here is your consent to being contacted in accordance with Art. 6 (1) (a) GDPR. We will also send you newsletters via WhatsApp if you have given us your consent to do so.You also have the option of using WhatsApp to put together your shopping cart. In this case, data processing is based on Art. 6 (1) (b) GDPR. You can revoke any consent you have already given at any time with effect for the future. According to the GDPR, you also have the right to information, correction, transferability and deletion of your personal data as well as the right to restrict or object to certain processing. You also have the option of complaining to the supervisory authority responsible for you. For more information, please see the following privacy policy: Charles GmbH: www.hello-charles.com/privacy-policy WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/ legal/privacy-policy-eea

YouTube

Please carefully consider what personal information you share with us via YouTube. We expressly point out that YouTube stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes. We have no influence on data collection and further processing by YouTube. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent YouTube fulfills existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. If you wish to prevent YouTube from processing personal data that you have submitted to us, please contact us by other means. Our complete contact details can be found at the beginning of this data protection declaration or in our imprint. Wellance Medical AG GmbH is responsible for data processing within the meaning of the GDPR, insofar as we exclusively process the data transmitted to us via YouTube ourselves. If the data you transmit to us via YouTube is also or exclusively processed by YouTube, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is also responsible for data processing within the meaning of the GDPR. You can find more information on data processing by Google Ireland Limited in the data protection declaration of Google Ireland Limited at https://policies.google.com/privacy?hl=de&gl=de. This privacy policy applies to all services offered by Google Ireland Limited and its affiliated companies - including YouTube. When using YouTube, personal data may also be transmitted to the servers of Google LLC. come in the US. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

Vimeo

We use videos from Vimeo on our site. For technical reasons, the integration of Vimeo videos calls up the Vimeo servers. Data from your browser or your end device is transmitted to the Vimeo server. It is also transmitted which of our Internet pages you have visited.

Use of payment service providers (payment services)

Klarna

On our website we use the Klarna Checkout online payment system from the Swedish company Klarna Bank AB. Klarna Bank has its main office at Sveavägen 46, 111 34 Stockholm, Sweden. If you decide to use this service, personal data, among other things, will be sent to Klarna, stored and processed. In this data protection declaration we would like to give you an overview of data processing by Klarna.

Klarna Checkout is a payment system for orders in an online shop. The user selects the payment method and Klarna Checkout takes over the entire payment process. Once a user has made a payment via the checkout system and entered the relevant data, future online purchases can be made even faster and easier. The Klarna system then recognizes the existing customer after entering the e-mail address and postal code.

Description and scope of data processing

As soon as you decide to use the Klarna payment service and pay using the Klarna Checkout payment method, you also transmit personal data to the company. Technical data such as browser type, operating system, our Internet address, date and time, language settings, time zone settings and IP address are collected from you on the Klarna checkout page and transmitted to the Klarna servers and stored there. This data is also saved if you have not yet completed an order. If you order a product or service through our shop, you must enter your personal data in the fields provided. This data is processed by Klarna for payment processing. The following personal data (as well as general product information) can be stored and processed by Klarna for credit and identity checks:

  • Contact information: name, date of birth, national ID number, title, billing and shipping address, email address, phone number, nationality or salary.
  • Payment information such as credit card details or your bank account number.
  • Product information such as tracking number, type of item and price of the product.

Klarna can also collect data about the goods or services that you buy or order, itself or through third parties (e.g. through us or through public databases) in addition to the data mentioned above. This can be, for example, the tracking number or the type of item ordered, but also information about your creditworthiness, your income or the granting of credit. Klarna may also share your personal information with service providers such as software providers, data storage providers or us as a retailer. When data is automatically entered into a form, cookies are always involved. If you do not want to use this function, you can deactivate these cookies at any time. Further down in the text you will find instructions on how to delete, deactivate or manage cookies in your browser. Our tests have shown that Klarna does not set any cookies directly. If you choose the "Klarna Sofort" payment method and click on "Order", you will be redirected to the Sofort website.

IMMEDIATELY

If you select the "SOFORT" payment method, the payment will be processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will send the information you provided during the ordering process along with the information about your order in accordance with Article 6 (1) (b) GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only to the extent that it is necessary for this. You can find more information about SOFORT's data protection regulations at the following Internet address: https://www.klarna.com/sofort/datenschutz.

Duration of storage of data / deletion of data

Klarna endeavors to store your data only within the EU or the European Economic Area (EEA).However, it can also happen that data is transferred outside the EU/EEA. If that happens, Klarna ensures that data protection is in line with the GDPR and that the third country is subject to an adequacy decision by the European Union. The data is always stored as long as Klarna needs it for the processing purpose.

Opt-out and deletion option

You can revoke your consent to Klarna processing personal data at any time. You always have the right to information, correction and deletion of your personal data. All you have to do is contact the company or the company's data protection team by email to datenschutz@klarna.de.

You can also contact Klarna directly via the Klarna website "My data protection request".

Cookies that Klarna may use for its functions can be deleted, deactivated or managed in your browser. Depending on which browser you use, this works in different ways.

Legal basis

In addition to the conventional bank/credit institutions, we also offer the payment service provider Klarna Checkout for the processing of contractual or legal relationships (Art. 6 Para.1 lit. b GDPR).

We hope to have given you a good overview of data processing by Klarna. If you want to find out more about how your data is handled, we recommend the Klarna data protection declaration at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy for data subjects based in Austria: https://cdn.klarna.com/1.0/shared/content/legal/terms/O/de_at/privacy. for data subjects based in Switzerland: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_ch/privacy_bp.

Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), further. The transfer takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR and only to the extent that this is necessary for payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values. Further data protection information, including information on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

Shipping service provider

Description and scope of data processing

If you order products or services on our website for which a shipping service provider is used, you will receive your order and shipping confirmation via your e-mail address and, depending on the respective shipping service provider, notification that your shipment has arrived and/or the notification of the package announcement as well as possible delivery options. The data is transmitted to the following service providers:

  • DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

The transmitted data is regularly:

  • Name
  • address
  • email address
  • phone number

Purpose of data processing

The purpose of processing personal data is to give shipping service providers the opportunity to inform recipients about the progress of the shipment by email and thus increase the probability of successful delivery.

Legal basis for data processing

The legal basis for the transmission of the name and address is Art. 6 (1) (b) GDPR.

The legal basis for the transmission of the email address and telephone number to the respective shipping service provider and their use is our legitimate interest in accordance with Article 6 Paragraph 1 lit. f GDPR.

Duration of storage

The transmitted data will be deleted from the respective shipping service provider if the package could be delivered.

Objection and removal option

The notification service provided by the shipping service provider can be terminated by the user concerned at any time. For this purpose, there is a corresponding opt-out link in every e-mail.

Rights

You have the following rights

according to Art. 15 DS-GVO to request information about your personal data processed by us. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right of appeal, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details;

according to Art. 16 DS-GVO, to immediately request the correction of incorrect or incomplete personal data stored by us;

according to Art. 17 DS-GVO to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert exercise or defense of legal claims is required;

according to Art. 18 DS-GVO to request the restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful, but you reject its deletion and we no longer need the data, but you do you need them to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 DS-GVO;

according to Art. 20 DS-GVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;

according to Art. 7 para.3 DS-GVO to revoke your consent to us at any time. This means that we are no longer allowed to continue the data processing that was based on this consent for the future and

according to Art. 77 DS-GVO to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR to file an objection if there are reasons for this that arise from your particular situation or the objection is directed against direct advertising.

In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you would like to exercise your right of revocation or objection, an e-mail to info@ellance.ch.

is sufficient

Data Security

When you visit our website, we use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

Of course, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Currency and changes to this data protection declaration

This data protection declaration is currently valid and has the status of 07/26/2022

Created and checked by Datavise - data security by experts

.