Protection des données

DATA PROTECTION

DATA PROTECTION DECLARATION (DSE) Siroscope, Route de la Sauge 6J, 2019 Chambrelien (CH) is the operator of the website www.siroscope.ch and the services offered there and is therefore responsible for the collection, processing and the use of your personal data as well as the compliance of the data processing with the applicable data protection legislation.

Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate security. It goes without saying that we observe the legal provisions of the Federal Data Protection Act (LPD), the Ordinance on the Federal Data Protection Act (OLPD), the Telecommunications Act (TCA) and any other applicable data protection provisions of Swiss or European law, in particular the General Data Protection Regulation (GDPR).

In order for you to know what personal data we collect from you and for what purposes we use it, please take note of the information below.

1. by visiting our website

When you visit our website, our servers temporarily record each access in a log file. The following technical data is collected without your intervention, as is generally the case with any connection to a web server, and is stored by us until automatic deletion after 26 months at the latest:

the IP address of the requesting computer, the name of the owner of the IP address range (usually your Internet service provider), the date and time of access, the website from which the access was made (referrer URL), if applicable with the search word used, name and URL of the file accessed, status code (e.g. error message), system operation of your computer the browser you use (type, version and language), the transmission protocol used (for example HTTP/1.1) and, if applicable, your user name from registration/authentication.

The collection and processing of this data is carried out for the purpose of enabling the use of our website (establishing the connection), ensuring the permanent security and stability of the system and enabling the optimization of our offer. Internet as well as for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f DSGVO.

2. opening a customer account

To place orders in the online store, you can order as a guest or open a customer account. When creating a customer account, we collect the following data:

Surname and first name Postal address e-mail address Password

The collection of personal data is protected by direct access to its master data stored by us. The customer can consult his finished and current orders or manage or modify his personal data.

The legal basis for data processing for this purpose is the consent you have given pursuant to Art. 6(1)(a) EU-DSGVO.

3. purchase in the online store

If you wish to place orders in our online shop, we require the following data for contract processing:

Surname and first name Billing address (and if different, delivery address) Information in the context of payment (depending on the option chosen payment method) Login data, i.e. e-mail address and the password (for registered customers).

Unless otherwise stated in this privacy policy, or if you have separately consented to it, we will only use the aforementioned data to perform the contract, namely to process your orders, to deliver the ordered products and to ensure correct payment. The legal basis for data processing for this purpose is the performance of a contract in accordance with Article 6(1)(b) EU-DSGVO.

4. transmission of data to third parties

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to assert our rights, in particular to assert claims arising from the contractual relationship.

In addition, we pass on your data to third parties if this is necessary in the context of the use of the website and the processing of contracts (also outside the website), i.e. the processing of your reservations. This includes the respective transport service provider who has been commissioned with the shipment of the ordered goods. The service provider to whom the personal data collected via the website is transmitted or who has or may have access to it is our web host Shopify.com The data is transferred for the purpose of providing and maintaining the functionality of our website. This is our legitimate interest within the meaning of Art. 6(1)(f) EU-DSGVO.

Insofar as we provide advance services, for example in the case of purchase on account, we may use the following data for this purpose.

Insofar as we make advance payments, for example in the case of a purchase on account, we can, if necessary, obtain credit information from a credit information agency on the basis of procedures mathematics-statistics in order to protect our legitimate interests. For this purpose, we transmit the personal data necessary for the credit check to Intrum AG, Eschenstrasse 12, 8603 Schwerzenbach, and use the information received on the statistical probability of default in payment to make a balanced decision on the establishment , the implementation or termination of the contractual relationship. Creditworthiness information may include probability values ​​(score values), which are calculated on the basis of scientifically recognized mathematical-statistical procedures and in the calculation of which, among other things, address data is included. Your interests worthy of protection are taken into account in accordance with the legal provisions. Our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f DSGVO lies in the purposes described above.

Finally, when you pay by credit card on the website, we transmit the information relating to your credit card to the issuer of the latter and to the acquirer of the credit card. If you decide to pay by credit card, you will be asked to enter all the required information. The legal basis for the transfer of data is the fulfillment of a contract in accordance with Art. 6 (1) (b) EU-DSGVO. With regard to the processing of your credit card information by these third parties, we ask that you also read the terms and conditions and the privacy policy of your credit card issuer.

5 Transfer of data abroad

We are also entitled to transfer your personal data to third-party companies (contract service providers) abroad for the purposes of the data processing described in this data protection declaration. They are bound by data protection to the same extent as ourselves. If the level of data protection in a country does not correspond to that of Switzerland or the EU, we will ensure by contract that the protection of your personal data corresponds at all times to that of Switzerland or the EU. .

6 Cookies

Cookies help in several ways to make your visit to our website easier, more pleasant and more useful. Cookies are information files that your web browser automatically saves to your computer's hard drive when you visit our website.

For example, we use cookies to offer you the multi-page shopping basket function and to temporarily store your entries when you fill out a form on the website so that you do not have to repeat the entry when accessing a another subpage. Cookies can also be used to identify you as a registered user after you register on the website, without you having to log in again when you access another sub-page.

Most Internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message appears systematically when you receive a new cookie. The following pages explain how you can configure the handling of cookies by the most popular browsers:

Microsoft Windows Internet Explorer Microsoft Windows Internet Explorer Mobile Mozilla Firefox Google Chrome for desktop Google Chrome for mobile Apple Safari for desktop Apple Safari for mobile

Disabling cookies may prevent you from using all the features of our website.

7. tracking tools

To. General

In order to design our website according to demand and to continuously optimize it, we use the web analysis service Google Analytics. In this context, pseudonymised usage profiles are created and small text files stored on your computer ("cookies") are used. The information generated by the cookie about your use of this website is transmitted to the servers of the providers of these services, stored there and processed for us. In addition to the data listed in point 1, we may also receive the following information:

Navigation path a visitor takes on the site, time spent on the site or sub-page, sub-page the site is left on, country, region or city from which access is carried out, the terminal device (type, version, color depth, resolution, width and height of the browser window) and passing visitor or new visitor

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to the use of the website and the Internet for the purpose of research. market and design of this website according to the needs. This information may also be transferred to third parties where required to do so by law or where such third parties process the information on our behalf. b. Google Analytics

The provider of Google Analytics is Google Inc, an Alphabet Inc holding company based in the USA. Before the data is transmitted to the provider, the IP address is truncated by activating IP anonymization ("anonymizeIP") on this website within member states of the European Union or in other contracting states of the EU. agreement on the European Economic Area. The anonymous IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these cases, we provide contractual guarantees to ensure that Google Inc. respects an adequate level of data protection. According to Google Inc, under no circumstances will the IP address be associated with other data concerning the user.

For more information on the web analytics service used, please visit the Google Analytics website. Instructions on how to prevent the processing of your data by the web analysis service can be found at http://tools.google.com/dlpage/gaoptout?hl=de.

8. Note on data transfers to the United States

For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that there are surveillance measures in the United States put in place by the American authorities which generally allow the personal data of all persons whose the data was transferred from Switzerland to the United States. This is done without any differentiation, limitation or exception based on the objective pursued and without any objective criteria that would limit the access of the American authorities to the data and their subsequent use for very specific purposes, strictly limited and capable of justifying the intrusion associated with both access to these data and their use. In addition, we would like to point out that in the United States there are no legal remedies allowing data subjects from Switzerland to access the data concerning them and to obtain their rectification or deletion, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw the data subject's attention to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.

We would like to point out to users residing in an EU member state that, from the point of view of the European Union, the USA does not offer a sufficient level of data protection - among other things, due to the problems mentioned In this section. To the extent that we have explained in this privacy policy that the recipients of the data (such as Google) are based in the United States, we will ensure, either through contractual agreements with these companies, or by ensuring that these companies are certified under the EU or Swiss and US Privacy Shield, that your data is protected with our partners to an appropriate level.

9. right to information, correction, erasure and restriction of processing; right to data portability

You have the right to obtain information on request about the personal data we hold about you. Furthermore, you have the right to have incorrect data corrected and to have your personal data deleted, insofar as this does not conflict with a legal obligation to retain the data or with a qualifying circumstance which enables us to process the data.

You also have the right to demand that we return the data you have provided to us (right to data portability). On request, we also transfer the data to a third party of your choice. You have the right to receive the data in a common file format.

You can contact us for the aforementioned purposes at the email address contact@siroscope.ch. We may, at our discretion, require proof of identity to process your requests.

10 Data security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are constantly improved according to technological developments.

You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share a computer with other people.

We also take the protection of internal company data very seriously. The service companies commissioned by us are bound by us to observe confidentiality and the provisions of data protection law.

11. data storage

We only keep personal data for as long as it is necessary to use the tracking and analysis services mentioned above as well as further processing in the context of our legitimate interest. The contract data will be stored by us for a longer period, as this is required by legal retention obligations. Retention obligations that require us to retain data result from accounting and tax regulations. According to this regulation, commercial communications, concluded contracts and accounting records must be kept for up to 10 years. As soon as we no longer need this data to provide you with services, the data is blocked. This means that the data can then only be used for accounting and tax purposes.

12. right to complain to a data protection supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority at any time.

13 Newsletter/Emails

Type and scope of data processing On our websites you have the option of subscribing to a free newsletter. In order to be able to send you the newsletter regularly, we need the following data from you: Email address First and last name (optional) Salutation (optional) Title (optional)

In order to be able to subscribe to our e-mail newsletter service, we need, in addition to your consent, at least your e-mail address to which the newsletter should be sent. Any other information is voluntary and will be used to address you personally and to personalize the content of the newsletter as well as to clarify any questions regarding the email address. It is up to you to decide freely whether you provide us with this data.

If you explicitly wish to stop receiving emails from us, we will keep your email address on file to ensure that we do not send you any more. A newsletter can also be sent, among other things, if a partner legally provides us with e-mail addresses for the purpose of sending our newsletter. This list allows us to ensure that they no longer receive a newsletter from us, even if they are legally provided by a third party for our newsletter.

Likewise, our newsletters and similar emails contain tracking pixels. With your consent, we use tracking pixels in the newsletter. This allows us to track your behavior in relation to our newsletter after you have been redirected to our websites by clicking on a photo or a link. This procedure is used to evaluate the effectiveness of our newsletter for statistical and market research purposes and can help to optimize future advertising measures.

Legal basis

The processing of your e-mail address and your name for the sending of the newsletter is based on the declaration of consent which you voluntarily give in the following, in accordance with Article 6, paragraph 1, letter a, of the GDPR.

By clicking on the "Send" button, I agree that Siroscope will store and process my personal data (surname and first name, e-mail address) for the newsletter(s) checked above for the purpose of send this newsletter. I can informally revoke the aforementioned consent(s) at any time with effect for the future without adverse consequences for me. I can send my declaration of revocation by post to Siroscope, Route de la Sauge 6J, 2019 Chambrelien (CH), or by e-mail to contact@siroscope.ch. I can find further information on the processing of personal data in the data protection declaration.

A "tracking pixel" is sent with the newsletter, which allows Siroscope to determine whether the newsletter has been opened by the recipient. The use of this tracking pixel is used by Siroscope to be able to respond, from a technical point of view, to requests and requests from recipients concerning the receipt of the newsletter. This is also the legitimate interest according to Art. 6 para. 1 lit. f DSGVO.

Storage period

Your e-mail address as well as your first and last name will be kept as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your e-mail address as well as your first and last name will be deleted. Additional storage may take place in individual cases if required by law.

The tracking pixel data is stored as long as a newsletter is subscribed and the consent to the newsletter has not been revoked. Additional storage may take place in individual cases if required by law.

Type and scope of data processing

On our websites, we offer you the possibility to contact us via an e-mail address provided. If you use the contact address, the following personal data about you will be processed:

E-mail address Surname and first name Individual message

By using the contact address, your personal data will not be passed on to third parties. It is up to you to decide freely whether you provide us with this data. However, we cannot respond to your contact request without this information. The data processing described for the purpose of contacting you is carried out in accordance with Art. 6 Abs 1 lit f DSGVO.

Storage period

As soon as your request has been processed and the relevant facts have been conclusively clarified, your processed personal data will be deleted. Additional storage may take place in individual cases if this is required by law.

Legal basis

For the processing of your personal data (cf. § 4 3. a.), which is necessary for the performance of a test subscription contract concluded with us, Article 6, paragraph 1, letter b, of the DSGVO serves as the legal basis. This also applies to processing necessary for the execution of pre-contractual measures.

Status: March 2023