Data protection is a matter of trust and your trust is very important to us. We respect your privacy and personal sphere. The protection and lawful collection, processing and use of your personal data is therefore an important concern for us. To ensure that you feel safe when visiting our website, we strictly observe the legal provisions when processing your personal data and would like to inform you here about our data collection and use.
You can print out or save this document using the usual functionality of your Internet service program (= browser: mostly "File" -> "Save As"). You can also download and archive this document in PDF form. To open the PDF file you need the free program Adobe Reader (at www.adobe.de) or comparable programs that execute the PDF format. The following data protection declaration explains which data is collected on our website and which data we process and use.
- RESPONSIBLE BODY
The responsible body for the collection, processing and use of your personal data within the meaning of the Federal Data Protection Act is CBD MED Switzerland Handels GmbH, Buchwiesenweg 4, 8355 Aadorf, Switzerland (hereinafter: CBD MED).
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data, as well as revocation of consent or objection to a particular use of data, please contact ::directly
Data protection officer: Andrin Dünner
CBD MED Schweiz Handels GmbH, Buchwiesenweg 4, 8355 Aadorf, Switzerland
- COLLECTION, PROCESSING AND USE OF PERSONAL DATA
2.1 PERSONAL DATA
Personal data is information about the factual or personal circumstances of a specific or identifiable natural person. This includes, for example, your name, your telephone number, your address, and all inventory data that you provide to us when you register and create your customer account. Statistical data that we collect when you visit our web shop, for example, and that cannot be directly linked to your person, is not included here. For example, these are statistics about which pages of our shop are particularly popular or how many users certain pages of swiss-hempoil.com
2.2 CUSTOMER ACCOUNT
For every customer who registers accordingly, we set up a password-protected direct access to his inventory data (customer account) stored with us. Here you can view data about your completed, open and recently sent orders and manage your data and the newsletter. You undertake to treat the personal access data confidentially and not to make it accessible to unauthorized third parties. We cannot accept liability for misused passwords unless we are responsible for the misuse. If you do not log out, you will automatically be logged in. This function enables you to use some of our services without having to log in again each time. For security reasons, however, you will be asked to enter your password again, for example if your personal data is to be changed or you would like to place an order.
2.3 COLLECTION, PROCESSING AND USE OF YOUR PERSONAL DATA
Data protection is very important to us. Therefore, we strictly adhere to the legal provisions of the Federal Data Protection Act and the Telemedia Act when collecting, processing and using your personal data. We collect, save and process your data for the entire processing of your purchase, including any subsequent warranties, for our services, technical administration and our own marketing purposes. Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract execution or billing or if you have given your prior consent. As part of the order processing, for example, the service providers we use (such as transporters, logisticians, banks) receive the necessary data for order and order processing. The data passed on in this way may only be used by our service providers to fulfill their task. Any other use of the information is not permitted and is not carried out by any of the service providers we entrust with. For your order we need your correct name, address and payment details. We need your email address so that we can confirm your order and communicate with you. We also use this for your identification (customer login). You will also receive your order and shipping confirmation via your email address. Your personal data will be deleted if there are no legal storage obligations to the contrary and if you have made a claim for deletion, if the data is no longer required to fulfill the purpose for which it was stored or if your storage is inadmissible for other legal reasons. p>
2.4 USE OF YOUR DATA FOR PROMOTIONAL PURPOSES
In addition to processing your data to process your purchase at CBD MED Switzerland, we also use your data to communicate with you about your orders, certain products or marketing campaigns and to recommend products or services that may interest you. You can object to the use of your personal data for advertising purposes at any time as a whole or for individual measures. A message in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this.
With the following information, we will clarify the content of our newsletter as well as the registration, shipping and statistical evaluation procedures as well as your right to object. By subscribing to our newsletter, you agree to the receipt and the procedures described.
Content of the newsletter
We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or a legal permission. Insofar as the content of a newsletter is specifically described, it is decisive for the consent of the user. In addition, our newsletters contain information on new products and offers
The registrations for the newsletter are logged in order to be able to demonstrate the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored with ActiveCampaign are also logged.
Use of the shipping service provider "ActiveCampaign"
The newsletter is sent using "ActiveCampaign", a newsletter distribution platform with headquarters in Chicago, 1N Dearborn St. 5th Floor, IL 60602, USA.
The email addresses of our newsletter recipients, as well as their other data described in the context of this information, are stored on ActiveCampaign's servers in the USA. ActiveCampaign uses this information to send and evaluate the newsletter on our behalf. Furthermore, ActiveCampaign can use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes to determine from which countries the recipients come. However, ActiveCampaign does not use the data of our newsletter recipients to write to them themselves or to pass them on to third parties.
We trust the reliability and IT and data security of ActiveCampaign. Furthermore, we have concluded a " Data Processing Agreement " with ActiveCampaign. This is a contract in which ActiveCampaign undertakes to protect the data of our users, to process them on our behalf in accordance with their data protection regulations and, in particular, not to pass them on to third parties.
To register for the newsletter, it is sufficient to provide your email address, first and last name.
Statistical survey and analysis
The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the Active Campaign server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are initially collected. This information is used to technically improve the services based on the technical data or the target groups and your reading behavior based on their access locations (which can be determined using the IP address) or the access times.
The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor that of Active Campaign to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Online access and data management
There are cases in which we direct newsletter recipients to the Active Campaign website. E.g. our newsletters contain a link with which the newsletter recipients can access the newsletters online (e.g. if there are display problems in the email program). Newsletter recipients can also save their data, e.g. correct the email address later.
Termination / revocation
You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. At the same time, your consent to its dispatch via Active Campaign and the statistical analyzes expire. A separate revocation of the dispatch via Active Campaign or the statistical evaluation is unfortunately not possible.
You will find a link to cancel the newsletter at the end of each newsletter. You can also unsubscribe at any time by notifying us of this request by email, chat or on the phone. After unsubscribing, we will delete your email address, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is permitted by law and about which we inform you in this declaration.
Legal basis for the General Data Protection Regulation
In accordance with the requirements of the General Data Protection Regulation (GDPR) that will apply from May 25, 2018, we inform you that the consent to the sending of email addresses is based on Art. 6 para. 1 lit. a, 7 GDPR and § 7 Section 2 No. 3 or Section 3 UWG. The use of the shipping service provider Active Campaign, the implementation of statistical surveys and analyzes and the logging of the registration process are based on our legitimate interests in accordance with Art. 6 Abs. 1 lit. f GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of the users.
2.4.2 PRODUCT RECOMMENDATIONS BY EMAIL
E-mail advertising without signing up for the newsletter and your right to object
If we receive your email address in connection with the sale of a product or service and you have not objected to it, we reserve the right to regularly send you offers on similar products such as those based on Section 7 (3) UWG send those already purchased from our range by email. This serves to protect our legitimate interests, which predominate in the context of weighing up interests, in addressing our customers in advertising. You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided in the advertising email, without incurring any costs other than the transmission costs according to the basic tariffs.
2.4.3 INDIVIDUAL ADVERTISING FOR YOU
Information we receive from you helps us to permanently improve your shopping experience and to make it customer-friendly and individual for you. The information you provide and automatically generated is used to design advertising tailored to you and your interests. For this we use existing information, such as confirmation of receipt and reading of e-mails, information about the computer and connection to the Internet, operating system and platform, your order history, your service history, date and time of your visit to the homepage, products you have viewed. We only use this information in pseudonymized form. By analyzing and evaluating this information, it is possible for us to improve our websites and our website, as well as to send you individual advertising. This means advertising that recommends products that you might actually be interested in. Our goal is to make our advertising more useful and interesting for you. Therefore, the evaluation and analysis of the pseudonymized data you collect helps us to ensure that we do not send you random advertising. Rather, we send you advertising, such as newsletters, product recommendations, by email or letter advertising that correspond to your areas of interest. In this respect, for example, we also compare which of our advertising emails you open in order to avoid unnecessary emails being sent to you. CBD MED Switzerland uses the data I have provided and other information stored on my customer account, as well as pseudonymized usage data, to present me with personalized advertising and / or special offers and services. If you do not want to receive personalized advertising, you can object to it at any time in total or for certain measures. A message in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this.
2.4.4 COMPETITIONS, MARKET AND OPINION RESEARCH
In competitions, we use your data for the purpose of notifying you of the prize and advertising our offers. You can find detailed information in our terms and conditions for the respective competition. We also use your data for market and opinion research. Of course, we only use this anonymously for statistical purposes and only for the CBD MED Schweiz Handels GmbH / and the respective websites. Your answers to surveys will not be passed on to third parties or published. CBD MED Switzerland
uses and processes my personal data for market and opinion research for its own purposes. You can object to the use of data for market and opinion research at any time in full or for certain measures. A message in text form to the contact details mentioned under number 1 (e.g. email, fax, letter) is sufficient for this. Of course you will also find an unsubscribe link in every survey email.
- CREDIT CHECK
Accepting cookies is not a prerequisite for visiting our website. However, we would like to point out that our website and service only have limited functionality if you do not allow us to set cookies.
What are cookies? Cookies are small files that are stored on your data carrier and that store certain settings and data for exchange with our system via your browser. A basic distinction is made between 2 different types of cookies, so-called session cookies, which are deleted as soon as you close your browser and temporary / permanent cookies, which are stored on your data carrier for a longer period or indefinitely. This storage helps us to design our websites and our offers for you accordingly and makes it easier for you to use them, for example by saving certain entries so that you do not have to repeat them all the time.
What data is stored in the cookies? The cookies used by CBD MED Switzerland only store pseudonymous data. When the cookie is activated, it is assigned an identification number and your personal data is not assigned to this identification number. Your name, your IP address or similar data that would enable the cookie to be assigned to you are not placed in the cookie. Based on the cookie technology, we only receive pseudonymized information, for example about which pages of our shop were visited, which products were viewed, etc.
What is onsite targeting? On the CBD MED Switzerland website, data is collected based on a cookie technology to optimize our advertising and the entire online offer. This data is not used to personally identify you, but is only used for a pseudonymous evaluation of the use of the homepage. At no time will your data be merged with the personal data stored by us. With this technology, we can present you with advertising and / or special offers and services, the content of which is based on the information obtained from the clickstream analysis (for example, advertising that aims to ensure that only sports shoes have been viewed in the past few days). Our goal is to make our online offer as attractive as possible for you and to present you advertising that corresponds to your areas of interest.
Are there also third-party cookies (so-called third-party cookies)? CBD MED Switzerland uses a number of advertising partners who help make the website and the website more interesting for you. Therefore, cookies from partner companies are stored on your hard drive when you visit the website. These are temporary / permanent cookies that are automatically deleted after the specified time. These temporary or permanent cookies (lifespan 14 days to 10 years) are stored on your hard drive and delete themselves after the specified time. The cookies from our partner companies also only contain pseudonymous, usually even anonymous, data. This includes, for example, data about which products you viewed, whether something was bought, which products were searched for, etc. Some of our advertising partners also collect information about which pages you have previously visited or for which websites Products you were interested in, for example, in order to show you the advertising that best suits your interests. This pseudonymous data is never combined with your personal data. The sole purpose of you is to enable our advertising partners to address you with advertising that could actually interest you.
Re-targeting Our websites use so-called re-targeting technologies. We use these technologies to make the internet offer more interesting for you. This technology enables internet users who have already shown an interest in our shop and our products to be addressed with advertising on our partners' websites. We are convinced that the display of personalized, interest-based advertising is generally more interesting for Internet users than advertising that has no such personal reference. The display of these advertising materials on our partners' sites is based on cookie technology and an analysis of previous usage behavior. This form of advertising is completely pseudonymous. No user profiles are merged with your personal data. By using our site, you consent to the use of so-called cookies and thus usage data collected, stored and used by you. Furthermore, your data is stored in cookies beyond the end of the browser session and can be called up again the next time you visit the website, for example. You can revoke this consent at any time with future effect by refusing to accept cookies in your browser settings.
How can you prevent the storage of cookies?
In your browser you can set that cookies are only accepted if you consent to them. If you only want to accept the CBD MED Switzerland cookies but not the cookies of our service providers and partners, you can select the "Block third-party cookies" setting in your browser. As a rule, the help function in the menu bar of your web browser shows you how to reject new cookies and how to deactivate cookies that have already been received. You can find detailed information on how to make the settings in the browser you are using at the following link. We recommend that you always completely log out of shared computers that are set so that cookies and flash cookies are accepted.
- LOG FILES
Every time the CBD MED Switzerland website is accessed, usage data is transmitted through the respective internet browser and stored in log files, the so-called server log files. The data records stored contain the following data: date and time of access, name of the page accessed, IP address, referrer URL (source URL from which you came to the website), the amount of data transferred, as well as product and Version information of the browser used. The IP addresses of the users are deleted or anonymized after the end of use. In the case of anonymization, the IP addresses are changed in such a way that the individual details about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person, or only with a disproportionate amount of time, costs and labor. We evaluate these log file data in anonymous form in order to further improve our offer and the CBD MED shop and make it more user-friendly, to find and correct errors faster and to control server capacities. For example, it is possible to track the time at which the use of the CBD MED shop is particularly popular and provide the corresponding data volume in order to guarantee you the fastest possible purchase. In addition, by analyzing the log files, we can quickly identify and correct any errors in the Swiss Hempoil Shop.
- WEB ANALYTICS
6.1 GOOGLE ANALYTICS
Google Analytics is a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files that are stored on your computer and enable Google to analyze the use of our offer. The information about the use of our website (including your IP address) recorded by the cookie is usually transmitted to a Google server in the USA and stored there. We would like to point out that the code "gat._anonymizeIp () ;;" has been added to Google Analytics on our website in order to guarantee anonymous collection of IP addresses (so-called IP masking). At our instigation, Google will only record your IP address in abbreviated form, which guarantees anonymity and does not allow any conclusions to be drawn about your identity. If IP anonymization is activated on our website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use the information mentioned to evaluate your use of our website, to compile reports on website activity for us and to provide us with other services related to the use of websites and the Internet. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. A transfer of this data by Google to third parties only takes place on the basis of legal regulations or within the framework of order data processing. Under no circumstances will Google combine your data with other data collected by Google. By using this website, you consent to the processing of data about you by Google and the above-described manner of data processing as well as the specified purpose. You can prevent the storage of cookies by setting your browser software accordingly ;; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of this website (including your IP address) and from processing this data by Google by using the following Link Download and install the available browser plug-in. You can find more information on Google Analytics and data protection at http://tools.google.com/dlpage/gaoptout?hl= de .
6.6 GOOGLE ADWORDS CONVERSION TRACKING
This website also uses Google Conversion Tracking. Google Adwords places a cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Every Adwords customer receives a different cookie. Cookies can therefore not be tracked via the website of Adwords customers. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users. If you do not want to take part in the tracking process, you can also refuse the necessary setting of a cookie - for example via a browser setting that generally deactivates the automatic setting of cookies.
You can also deactivate cookies for conversion tracking by setting your browser so that cookies from the domain "www.googleadservices.com" are blocked. Google's data protection instruction on conversion tracking can be found at: https://support.google.com/adwords/answer/ 1722022? Hl = de
6.7 Lucky Orange Web Analytics Service
This website uses the Lucky Orange analysis system to analyze the Ease of use and improve the customer experience.
Lucky Orange can record mouse clicks, mouse movements and scrolling activities. Lucky Orange may record button information that you voluntarily enter on this website.
Lucky Orange does not track this activity on any website that does not use the Lucky Orange system.
Visit Our privacy management tool to view and manage data that Lucky Orange has collected about you on the LuckyOrange.com website or to disable future tracking.
- SOCIAL PLUGINS
8.1 SOCIAL PLUGINS
Our website uses social plugins (“plugins”) from various social networks. With the help of these plugins you can, for example, share content or recommend products. The plugins are deactivated by default on CBD MED Switzerland and therefore do not send any data. You can activate the plugins by clicking on the "Activate Social Media" button. The plugins can of course be deactivated with a click. If these plugins are activated, your browser will establish a direct connection with the servers of the respective social network as soon as they call up a website on our website. The content of the plugin is transmitted directly from the social network to your browser, which integrates it into the website. By integrating the plugins, the social network receives the information that you have accessed the corresponding page of our website. If you are logged in to the social network, this can assign the visit to your account. If you interact with the plugins, for example by pressing the Facebook "Like" button or leaving a comment, the corresponding information will be transmitted from your browser directly to the social network and saved there. For the purpose and scope of the data collection and the further processing and use of the data by social networks, as well as your rights and settings options to protect your privacy, please refer to the data protection notices of the respective networks or websites. You can find the links below. Even if you are not logged in to social networks, websites with active social plugins can send data to the networks. An active plug-in sets a cookie with an identifier each time the website is accessed. Since your browser sends this cookie every time you connect to a network server, the network could, in principle, create a profile of which websites the user belonging to the identifier accessed. And it would then also be entirely possible to assign this identifier to a person later - for example when logging on to the social network later. We use the following plugins on our websites: Facebook, Twitter and Pinterest If you do not want social networks to collect data about you via active plugins, you can either deactivate the social plugins with a click on our website or in your browser settings Function "Block third-party cookies" . Then the browser does not send cookies to the server for embedded content from other providers. With this setting, however, other cross-page functions may no longer work in addition to the plugins.
- SOCIAL SIGN IN
- E-MAIL & FORMS
We process the ticket system Zendesk, a customer service platform of Zendesk Inc., 989 Market Street # 300, San Francisco, CA 94102 to process customer inquiries. Name, first name, postal address, telephone number, e-mail address recorded on our website in order to be able to answer your need for information. Zendesk is a certified participant in the so-called "Privacy Shield Framework" and thus fulfills the minimum requirements for legally compliant order data processing.
You can find more information on data processing by Zendesk in Zendesk's data protection declaration at http://www.zendesk.com/company/privacy . If you have any questions, you can also contact Zendesk's data protection officer directly: email@example.com
If you contact us by email or using the form on the website, we will only use the personal data you have provided to process your specific request. The given data will be treated confidentially. The specified data and the message history with our service desk will be saved for follow-up questions and later contacts. The data entered in the contact form is processed on the basis of your consent (Art. 6 Para. 1 lit. a GDPR).
We have concluded a contract for order data processing with Zendesk and fully implement the strict requirements of the data protection authorities when using Zendesk.
- PAYMENT SERVICE PROVIDER
- INFORMATION RIGHTS OF THE PARTICIPANT
According to the Federal Data Protection Act, our customers have a right to free information about your stored data, as well as a right to correction, blocking or deletion of data. We take the protection of your data very seriously. In order to ensure that personal data is not passed on to third parties, please send your request to us by email or post with clear identification:
CBD MED Schweiz Handels GmbH, Buchwiesenweg 4, 8355 Aadorf, Switzerland
As a data subject, you have the following rights:
- according to Art. 15 GDPR the right to request information about your personal data processed by us to the extent specified there.
- the right under Article 16 GDPR to immediately request the correction of incorrect or incomplete personal data stored by us;
- according to Art. 17 GDPR the right to request the deletion of your personal data stored by us, unless further processing - to exercise the right to freedom of expression and information; - to fulfill a legal obligation; - for reasons of public interest or - is necessary to assert, exercise or defend legal claims;
- the right to request the restriction of the processing of your personal data according to Art. 18 GDPR, as far as
- the accuracy of the data is contested by you; - the processing is unlawful, but you refuse to delete it;
- we no longer need the data, but you need it to assert, exercise or defend legal claims, or
- you have objected to processing in accordance with Art. 21 GDPR;
- according to Art. 20 GDPR the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request the transmission to another responsible person;
- the right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.