Privacy Policy

Privacy Policy 

In the following, we inform you about the collection and processing of personal data when you use the www.nutriswiss.ch website, including any country-specific versions and subdomains (e.g. www.nutriswiss.de / www.nutriswiss.fr / www.nutriswiss.uk / www.nutriswiss.it) and about the collection and processing of personal data in connection with business relations.

In this privacy policy, we, Nutriswiss AG, explain how we collect and otherwise process your personal data. This is not an exhaustive description; other data protection statements or general terms and conditions, conditions of participation and similar documents may govern specific circumstances. Personal data is defined as all information relating to a specific or specifiable natural person.

If you provide us with personal data of other persons (e.g. family members, data of work colleagues), please ensure that these persons are aware of this privacy policy and only share their personal data with us if you are authorised to do so and if this personal data is correct.

This privacy policy is based on the EU General Data Protection Regulation (GDPR).

1. Representative and responsible person  

The data processing operations described here are represented by Nutriswiss AG, Industriering 30, 3250 Lyss (Tel +41 32 387 48 48). Contact:

Rüdiger Wendt
Tel: +41 (0)32 387 48 48
Email: ruediger.wendt@nutriswiss.ch

Our representative in the EEA pursuant to article 27 GDPR is:

ePrivacy GmbH
Grosse Bleichen 24
20354 Hamburg - Germany
www.eprivacy.eu/en/legal

2. Collection and processing of personal data

We primarily process personal data that we receive from our customers and other business partners as part of our business relations with them and other parties involved with them or that we collect from users during the operation of our website and other applications. In particular, this is personal data that you disclose in connection with the following actions:

  • completing a contact form;
  • ordering a product;
  • in the purchase or acquisition of a fee-based offer (provision of payment information, purchase and transaction data);
  • when contacting customer service;
  • subscription to the newsletter;
  • participation in contests or competitions;
  • user surveys and market research;
  • marketing and analysis purposes.

Insofar as this is permitted, we also obtain certain data from publicly accessible sources or receive such data from authorities and other third parties. In addition to the data that you provide to us, the categories of personal data that we receive about you from third parties include in particular

  • information from public registers (e.g. debt collection and commercial registers, land registers);
  • information that we obtain in connection with official and court proceedings;
  • information in connection with your professional functions and activities (e.g. so that we can conclude and process transactions with your employer with your help);
  • information about you in correspondence and meetings with third parties;
  • credit information (insofar as we conduct business with you personally);
  • information about you that people close to you (family, advisors, legal representatives, etc.) provide to us so that we can conclude or process contracts with you or with your involvement (e.g. references, your address for deliveries, powers of attorney, information on compliance with legal requirements such as anti-money laundering and export restrictions;
  • information from banks, insurance companies, sales and other contractual partners of ours regarding the utilisation or provision of services by you (e.g. payments made, purchases made);
  • information from the media and the Internet about your person (insofar as this is appropriate in the specific case, e.g. as part of an application, press review, marketing/sales, etc.);
  • your addresses and, if applicable, interests and other socio-demographic data (for marketing).
  • when you use our website, we process the data that is generated or data that you provide (e.g. when you subscribe to newsletters). In particular, this includes the following personal data:

When you use the website for purely informational purposes, i.e. we do not collect any personal data if you do not log in to use the website, click on social media plugins or otherwise send us information, with the exception of the data transmitted by your browser to enable you to visit the website, such as IP address, MAC address of your smartphone or computer, details of your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location information. For further information on data processing in connection with the use of our website, see fig. 4.

When you use our website, we process the data that is generated or data that you provide (e.g. when you subscribe to newsletters). In particular, this includes the following personal data:

  • First name
  • Name
  • Company
  • Email address
  • Gender
  • Address
  • Telephone number
  • Fax
  • Message

3. Purpose of data processing and legal bases

We process your personal data primarily for the execution of contracts with our customers and business partners or the implementation of pre-contractual measures (Art. 6 para. 1 let. b GDPR), in particular in connection with the production and sale of food, as well as for the fulfilment of legal obligations (Art. 6 para. 1 let. c GDPR).In addition, where permitted and deemed appropriate to us, we also process the personal data of customers and business partners, for the following purposes in which we (and sometimes also third parties) have a corresponding legitimate interest:

In addition, we also process personal data of customers and business partners for the following purposes, to the extent permitted and deemed appropriate, in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose (Art. 6 para. 1 let. f GDPR):

  • offering and developing our offers, services and websites, apps and other platforms on which we are present;
  • communication with third parties and processing of their enquiries (e.g. applications, media enquiries);
  • review and optimisation of requirements analysis procedures for the purpose of direct customer contact and collection of personal data from publicly accessible sources for the purpose of customer acquisition;
  • advertising and marketing (including the organisation of events), unless you have objected to the use of your data (if we send you advertising from us as an existing customer, you can object to this at any time, and we will stop contacting you for the purposes of advertising);
  • analysing the internet traffic on our website to ensure and improve the functionality of our website;
  • market and opinion research, media monitoring;
  • assertion of legal claims and defence in relation to legal disputes and administrative proceedings;
  • for the prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, analysing data to combat fraud);
  • the safeguarding of our operations, in particular IT, our websites, apps and other platforms;
  • video surveillance to safeguard domiciliary rights and other measures for IT, building and system safety and to protect our employees and other persons and assets belonging to or entrusted to us (such as access controls, visitor lists, network and mail scanners, telephone recordings);
  • the purchase and sale of business divisions, companies or parts of companies and other transactions under company law and the associated transfer of personal data as well as business management measures and, where necessary, compliance with statutory and regulatory obligations and the internal regulations of Nutriswiss AG.

If you have consented to the processing of your personal data for specific purposes (e.g. when subscribing to newsletters or in the context of the use of our website, see. fig. 4), we will process your personal data within the framework of and based on this consent, unless we have another legal basis and require such consent. Consent that has been granted can be revoked at any time, although this has no effect on data processing that has already taken place.

4. Cookies, tracking and other technologies associated with the use of our website

We use various technologies on our website to recognise you when you visit our website and, if necessary, to track you over several visits. Our aim is to distinguish your visits from those of other visitors. This enables us both to ensure the functionality of the website and to carry out analyses in order to improve our website and products as well as personalisation for targeted advertising. Our aim is not to determine your identity, although this is possible by combining this with any registration data you may have provided. Even without registration data, the technologies used are designed in such a way that you are recognised as an individual visitor each time you visit the site, for example by our server or the servers of third parties assigning your browser a unique identification number (so-called "cookies").In our newsletters and other marketing emails, we partly and insofar as permitted also incorporate visible and invisible image elements, which can be retrieved from our servers to determine if and when you opened the email, so that we can also measure and better understand how you use our services and tailor them to your requirements. You can block this in your email program (most of are preset to do so).

The following types of cookies or comparable technologies (e.g. fingerprinting) may be used on our website:
Necessary cookies: Cookies that are required for the smooth functioning of the website (e.g. to ensure that you can switch back and forth between several pages without losing information entered in a form). These cookies are only used for the duration of your visit to the website (so-called "session cookies"). If you block such cookies, the website may not function properly. Other cookies are necessary so that the server can save decisions or entries made by you beyond a session if you use this function (e.g. selected language, consent given, automatic log-in, etc.). Such cookies have an expiry date of up to 12 months.

Performance cookies: Cookies that record and analyse the use of our website so that we can improve our website and offers and tailor them to the needs of visitors. We may use third-party analytics services for this purpose (see Google Analytics below). We only use such cookies with your prior consent, which you can revoke at the footer at any time for the future. Such cookies also have an expiry date of up to 12 months.

Marketing cookies: Cookies that record and analyse the content you have viewed or contracts you have concluded so that we and our advertising partners only show you advertising that may be of interest to you based on your usage behaviour. We only use such cookies with your prior consent, which you can revoke at the footer at any time for the future. Such cookies have an expiry date of a few days to 6 months.

We only use performance and marketing cookies with your prior consent. You can access your current settings here at the footer. You can also set your browser to block or bypass certain cookies or delete existing cookies. You can also add software to your browser that prevents tracking by certain third parties. Further information can be found in the data protection information of your browser or on the websites of the third parties listed below.
In addition to the marketing cookies mentioned above, we use other technologies - with your consent - to control online advertising on other websites and thereby reduce wastage. For example, we may transmit the email addresses of our users, customers and other persons to whom we wish to display adverts to operators of advertising platforms (e.g. social media). If these people are registered there with the same email address (which the advertising platforms determine through a comparison), the operators display the adverts we have placed in a targeted manner. The operators do not receive personal email addresses of people who are not already known. In the case of known e-mail addresses, however, they learn that these people are in contact with us and what content they have accessed on our website.
We may embed third-party offers on our website, in particular from social media providers (so-called "plugins"). These are deactivated by default. As soon as you activate the offers (e.g. by clicking on a button or a social media symbol), the respective providers can recognise that you are on our website. If you have an account with the relevant provider, they can assign this visit to you and thus track your use of online services. The provider processes the data on its own responsibility.

We currently use offers from the following service providers and advertising contract partners:
Google Analytics: Google Ireland (based in Ireland) is the provider of the "Google Analytics" service and acts as our processor. Google Ireland uses Google LLC (based in the USA) as its processor (both "Google"). Google uses performance cookies to track the behaviour of visitors to our website (duration, frequency of pages accessed, geographical origin of access, etc.) and compiles reports for us on the use of our website on this basis. We have configured the service so that the IP addresses of visitors are truncated by Google in Europe before being forwarded to the USA and therefore cannot be traced. We have switched off the "Data sharing" and "Signals" settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles and link this data to the Google accounts of these persons. - If you agree to the use of Google Analytics, you explicitly consent to such processing, which also includes the transfer of personal data (in particular website usage data, device information and individual IDs) to the USA and other countries. You can find information on Google Analytics data protection here and if you have a Google account, you can find further information on processing by Google here.

Use of MATOMO (formerly PIWIK): We use the MATOMO analysis and tracking tool on our website. The tool allows us to analyse the data traffic on the website in anonymised form in order to improve our offer, whereby we operate MATOMO on our own server and therefore do not transmit any data to third parties. Furthermore, no personal data is logged by MATOMO (in particular no IP addresses) but only information about page visits is collected.

5. Data forwarding and data transfer abroad

Within the scope of our business activities and the purposes set out in fig. 4, to the extent permitted and deemed appropriate to us, we also disclose to third parties either because they process them on our behalf or because they wish to use them for their own purposes. This concerns the following in particular:

  • affiliates of Nutriswiss AG
  • service providers of ours (e.g. banks, insurance companies), including order handlers (e.g. IT providers);
  • dealers, suppliers, subcontractors and other business partners;
  • clients;
  • domestic and foreign authorities, official bodies or courts;
  • media;
  • the public sphere, including visitors to websites and social media;
  • competitors, industry organisations, associations, organisations and other bodies;
  • purchasers or parties interested in the acquisition of Nutriswiss AG;
  • other parties in possible or actual legal proceedings;

all common beneficiaries.
Some of these recipients are located in Switzerland, although they may be located anywhere around the globe. Specifically, you must expect your data to be transmitted to all countries. If we transfer data to a country without adequate statutory data protection, we ensure on a contractual basis that the protection of your personal data corresponds to that of Switzerland at all times. We ensure this by concluding EU Model Clauses or other contracts with the commissioned service providers approved by the Swiss Federal Data Protection and Information Commissioner, or we rely on the statutory exceptions of consent, contract processing, establishing, exercising or enforcing legal claims, overriding public interests, published personal data or because it is necessary to protect the integrity of data subjects. You can obtain a copy of the contractual guarantees mentioned above at any time from the contact person indicated in Fig. 2. However, we reserve the right to redact transcripts for reasons of data protection or confidentiality, or to provide only excerpts thereof.

6. Duration of storage of personal data

Unless otherwise stated, we store usage data or other personal data for as long as we deem it necessary or appropriate to comply with applicable laws or for as long as we deem it necessary for the purposes for which the date is processed. We delete your data as soon as it is no longer required or after expiry of the maximum retention period prescribed by law.

7. Data security

We take appropriate technical and organisational security precautions to protect your personal data from unauthorised access, loss and misuse. These are adapted in line with the current state of the art.You must also provide certain personal data or other information when using the website. The website cannot be used if certain information to secure data traffic (such as IP address) is not provided.

8. Obligation to provide personal data

As part of our business relationship, you must provide the personal data that is necessary for the establishment and implementation of a business relationship and the fulfilment of the associated contractual obligations (as a rule, you do not have a legal obligation to provide us with data). Without this data, we will generally not be able to enter into or fulfil a contract with you (or the entity or person you represent).

You must also provide certain personal data or other information when using the website. The website cannot be used if certain information to secure data traffic (e.g. IP address) is not disclosed.

9. Profiling and automated decision-making

We partially process your personal data automatically with the aim of evaluating certain personal aspects (profiling). We use profiling in particular to provide you with targeted information and advice about products. In doing so, we use evaluation tools that enable us to communicate and advertise in line with our requirements, including market and opinion research.

As a matter of principle, we do not use fully automated decision-making (as regulated, for example, in Art. 21 DPL and Art. 22 GDPR) to establish and implement business relations or otherwise. Should we use such procedures in individual cases, we will inform you separately insofar as this is required by law as well as inform you of the associated rights.

10. Rights of the data subject

Within the context of the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR), you have the right of access, correction, erasure, the right to limit data processing and otherwise to object to our data processing and to surrender certain personal data for the purpose of transferring this to another body (so-called data portability). Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, if we have an overriding interest in doing so (insofar as we are entitled to refer to this) or if we need this data in order to assert claims. If this means you incur costs, we shall inform you in advance. We informed you in Fig. 4 that you are entitled to withdraw your consent. Please note that exercising these rights may conflict with contractual agreements and may have consequences such as the early termination of the contract or cost implications. We will inform you in advance if this is not already contractually regulated.

The exercise of such rights usually requires that you clearly prove your identity (e.g. by producing a copy of your identity card where your identity is otherwise not clear or cannot be verified). To assert your rights, you may contact us under the address specified in fig. 1.

Data subjects can also assert their rights in court and have the right to file a complaint with the competent data protection authority. In Switzerland, the competent data protection authority is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

11. Changes

We may amend this privacy policy at any time without advance notice. The version currently published on our website shall apply.

 

Lyss, August 2024
 

Teilen