Privacy policy of Limonedesign, version of 14.03.2020
This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) in the context of the provision of our services as well as within our online information and the websites, functions and contents connected with it as well as external online presences, such as our social media profile (hereinafter referred to collectively as “online information”). With regard to the terms used, such as “processing” or “responsible party”, we refer to the definitions in Art. 4 of the Basic Data Protection Regulation (PDF Link) (or comparable provisions in other applicable data protection laws).
Responsible
LIMONE DESIGN KIG
Patrizia Crespi
Bahnhofstrasse 108a
8803 Rüschlikon
Schweiz
Kontakt:
E-Mail: [email protected]
Mobil: +41 76 5422377
Arten der verarbeiteten Daten
– Inventory data (e.g., personal data, names or addresses).
– Contact data (e.g., e-mail, telephone numbers).
– Content data (e.g., text entries, photographs, videos).
– Meta/communication data (e.g., device information, IP addresses).
Categories of Data subjects
Visitors and users of the online information (in the following we will refer to the persons concerned collectively as “users”).
Purpose of processing and legal basis
Limonedesign may process the user data – as far as permitted by applicable law – in particular, but not exclusively, for the following purposes:
– Provision of the online information, its functions and contents.
– Provision of the online information, its functions and contents.
– Security measures.
– Reach measuring/marketing.
Limonedesign uses the user data for the processing purpose based on the following legal principles:
Security Measures
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
Such measures shall include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to data, as well as access, input, disclosure, safeguarding of availability and segregation of data relating to them. Furthermore, we take the protection of personal data into account as early as the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings.
Cooperation with contract processors, jointly responsible and third parties
If, in the course of our processing, we disclose data to other persons and companies (processors, jointly responsible parties or third parties), transfer it to them or otherwise grant them access to the data, this is only done on the basis of a legal authorization (e.g. if the data must be transferred to third parties, such as payment service providers, in order to fulfill a contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosters, etc.).
Transfers to third countries
Subject to legal or contractual permissions, we process or leave the data in a third country only if the legal requirements are met. This means, for example, that the processing is carried out on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of Switzerland and/or the European Union (EU) (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations.
Rights of the data subjects
You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information on such data, as well as further information and a copy of the data in accordance with legal requirements.
You have the right to request the completion of data concerning you or the correction of inaccurate data concerning you, in accordance with the law.
You have the right to request that data concerning you be deleted immediately in accordance with the law, or alternatively, in accordance with the law, that the processing of the data be restricted.
You have the right to obtain, in accordance with the law, the data concerning you which you have provided us with and to request that it be communicated to other persons responsible.
Inquiries relating to these rights should be addressed to the contact person responsible (see above). Limonedesign reserves the right to limit the rights of the person concerned within the scope of the applicable law and, for example, not to provide complete information or not to delete data. The right to deletion cannot be granted if the processing is necessary to exercise the right to freedom of expression, to fulfil a legal obligation or a task in the public interest or to assert, exercise or defend legal claims.
You also have the right to lodge a complaint with the competent supervisory authority in accordance with the statutory provisions.
Right of revocation
You have the right to revoke any consent given with effect for the future.
Right of objection
You can object to the future processing of data concerning you in accordance with the legal requirements at any time. The objection may in particular be made against processing for the purposes of direct advertising.
Cookies and right of objection for direct mail
“Cookies” are small files that are stored on the user’s computer. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit within an online information. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online information and closes his browser. A login status, for example, can be stored in such a cookie. “Permanent” or “persistent” cookies are those that remain stored even after the browser is closed. For example, the login status can be saved if the user visits it after several days. Likewise, the interests of the users can be stored in such a cookie, which are used for range measurement or marketing purposes. Third-party cookies are cookies that are offered by providers other than the person responsible for the online information (otherwise, if it is only his cookies, it is called “first-party cookies”).
We may use temporary and permanent cookies.
The use of cookies and the processing of your data in this regard is based on the legal basis of our legitimate interests in the design of a user-friendly website. Furthermore, by using websites but also the corresponding functions (e.g. language selection, autologin), the user agrees to the use of permanent cookies.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of our online information.
A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU-site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that it may not be possible to use all functions of our online information in this case.
Deletion of data, data storage
The data processed by us will be deleted or restricted in their processing in accordance with the legal requirements. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations.
If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
Changes and updates to the privacy policy
We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes make it necessary for you to cooperate (e.g. consent) or to receive other individual notification. The current version published on the website applies.
Contact
When contacting us (e.g. via contact form, e-mail, telephone or via social media), the user’s details are processed for the purpose of handling the contact request and its processing within the framework of contractual/pre-contractual relations or other requests. The user’s details may be stored in a customer relationship management system (“CRM system”) or comparable enquiry organisation.
We will delete the inquiries if they are no longer required. Furthermore, the statutory archiving obligations apply.
Retail shops
In particular, but not conclusively, trade fair stands, sales points and premises, manufacturing plants, where goods and services of Limonedesign are exhibited, offered, marketed, sold or informed about, advised or recommended. Sales points of business partners (especially distributors) are also considered as retail shops. In the context of visits to such shops Limonedesign can collect personal data directly or via the business partners. This includes, but is not limited to, name, address, telephone number, e-mail etc. Personal data will only be processed if the person concerned has given his or her consent or if it is otherwise lawful and only to the extent that this is necessary or reasonable. It may be necessary for personal data to be passed on to third parties, but only to the extent that this is necessary or useful for the provision of the requested service. Personal data will only be processed and used for purposes other than those for which it was collected within the scope of the applicable statutory provisions or with the consent of the data subject.
Hosting and E-Mail dispatch
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services which we use for the purpose of operating our online information.
For this purpose, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online information on the basis of our legitimate interests in an efficient and secure provision of this online information.
Collection of access data and log files
We, or our hosting provider, may collect data about each access to the server on which this service is located (so-called server log files) based on our legitimate interests. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited site), IP address and the requesting provider.
Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC (“Google”), based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online information). Google uses cookies. The information generated by the cookie about the use of the online information by the user is usually transferred to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee that it complies with Swiss and European data protection laws (Link).
Google will use this information on our behalf to evaluate the use of our online information by users, to compile reports on the activities within this online information and to provide us with further services related to the use of this online information and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.
We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
The IP address transmitted by the user’s browser is not merged with other Google data. Users may refuse the use of cookies by selecting the appropriate settings on their browser software. Furthermore, users may refuse the use of cookies by selecting the appropriate settings on their browser software, and prevent the collection and processing of data generated by the cookie and relating to their use of the online information by Google by downloading and installing the browser plug-in available at the following link: Link
Further information on Google’s use of data, setting and objection options, can be found in Google’s privacy policy (Link) and in the settings for the display of advertising by Google (Link).
Online presence in social media
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services/products.
Please note that user data may be processed outside Switzerland and the European Union. This may result in risks for the users, because, for example, the enforcement of the users’ rights could be made more difficult. With regard to US providers certified under the Privacy Shield, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.
Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the user behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers.
Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless need help, please contact us.
– Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) – Datenschutzerklärung: (Link), Opt-Out: (Link) und (Link), Privacy Shield: (Link).
– Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Datenschutzerklärung: (Link), Opt-Out: (Link), Privacy Shield: (Link).
– Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Datenschutzerklärung/ Opt-Out: (Link).
– Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Datenschutzerklärung: (Link), Opt-Out: (Link), Privacy Shield: (Link).
Integration of third-party services and content
Within our online information, we use content or service offers from third parties on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online information) in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
This always presupposes that the third-party providers of such content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore required to display this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. “Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information on the browser and operating system, referring web pages, visiting time and other details on the use of our online information, as well as being linked to such information from other sources.
Within our online information, functions and contents of the Twitter service, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, can be integrated. This may include, for example, content such as images, videos or text and buttons that allow users to share content from this online information within Twitter.
If the users are members of the Twitter platform, Twitter can assign the access to the above-mentioned contents and functions to the user profiles there. Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (Link). Privacy policy: (Link), Opt-Out: (Link)
Within our online information, functions and content of the Instagram service, offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated. This may include, for example, content such as images, videos or text and buttons that allow users to share content from this online information within Instagram. If users are members of the Instagram platform, Instagram may associate the access to the above content and functions with the profiles of users there. Instagram Privacy Policy: (Link)