Privacy Policy

Privacy policy REWI Autoersatzteile GmbH

 

Scope of data protection declaration

This data protection declaration applies to the website www.eshop-rewi.ch.REWI Autoersatzteile GmbH operates an online store for car spare parts for Switzerland via the said website. The Swiss Data Protection Act (DSG) applies.

This privacy statement is intended to inform users about the nature, scope and purpose of the collection and use of personal data by the website operator (REWI Autoersatzteile GmbH). Personal data includes all information that relates to a specific or identifiable person.

If you provide us with personal data of other persons, please make sure that you are allowed to do so and that these data are correct and that these persons are aware of this privacy policy.

 

Processing of personal data; nature, purpose and their use

General

We primarily process personal data that we receive in the course of our business relationship with you and other business partners or that we collect from their users when operating our website, apps and other applications. We primarily use the personal data we collect to enter into and process our contracts with our customers and business partners.

Specifically, we process personal data from you and other persons in the following areas:

When visiting the website

When you visit our website, information is temporarily stored in so-called log files on our server. This is information that the browser of your terminal device automatically sends. Namely:

 

- [IP address of the contacting device]

- [date and time]

- [URL of the page accessed]

- [referrer URL]

- [Browser and other device information]

 

The above data is processed by us for the following purposes:

 

- Connection establishment of the website

- Use of our website

- System security and stability

- Statistical analysis

- Improvement of the website

The website operator reserves the right to subsequently check the log files if there are concrete indications of illegal use.

 

When ordering car spare parts

The data processing is carried out upon your request and is necessary for the stated purposes for the fulfillment of the contract and pre-contractual measures for the purchase of car spare parts.

All data entered by the customer in the course of processing an order are stored. This includes in particular:

- Name, first name, (company)

- date of birth

- home address

- telephone number

- e-mail address

- Payment data

 

As soon as the storage of your data is no longer necessary or required by law, it will be deleted.

Every customer has the option to create a password protected customer account. In this case your data as well as your transacted and active orders remain stored. The website operator assumes no liability for password misuse, unless this was caused by the website operator itself.

By completing your order via the online store, you have given your consent to the data processing described above.

 

Disclosure of data to third parties

General

A transfer of your personal data to third parties for purposes other than those listed below does not take place in principle.

For the execution of contracts

Insofar as this is necessary for the processing of contractual relationships with you, your personal data will be passed on to third parties. This includes in particular the transfer to shipping companies for the purpose of delivery of the goods ordered by you, the transfer of payment data to payment service providers or credit institutions to carry out a payment transaction, as well as the transfer to other service providers (suppliers, dealers or other business partners) of us, including order processors (eg IT providers). The data passed on may be used by the third party exclusively for the corresponding purposes.

Credit assessment

In order to ensure your security and that of the website operator, the latter may carry out a credit check before concluding a contract. In addition to a check of past transactions with the website operator and any changes to your personal data, the website operator also uses third party service providers. In this context, your data may be passed on to third parties.

 

Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone, etc.). are stored when you visit our site. A cookie does not mean that we can identify you in every case.

The use of cookies serves on the one hand to log the frequency of use, number of users and behavior on our website, to increase the security of website use and to design our information offer in a user-friendly way. As soon as you leave the website, these cookies are automatically deleted.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

You have the option of preventing the cookie from being stored on your device by making the appropriate settings in your browser. It is not guaranteed that you can access all functions of our website without restrictions if your browser does not allow cookies.

 

Analysis tools

Google Analytics

Our website uses the web analysis service Google Analytics from Google Inc, USA. Google Analytics uses cookies (see under Cookies). These enable an analysis of the use of our website offer incl. IP addresses by Google in the USA. We would like to point out that IP anonymization is used on this website. If anonymization is active, Google truncates IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area, which is why no conclusions can be drawn about your identity. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google observes the data protection provisions of the "Swiss-USA Privacy Shield" agreement and thus has an adequate level of data protection. Google uses the information collected to evaluate the use of our websites for us, to compile reports for us in this regard and to provide other related services to us. You can find out more at www.google.com/intl/de/analytics/privacyoverview.html, in particular regarding the possibility of deactivating Google Analytics at http://tools.google.com/dlpage/gaoptout?hl=de.

 

Social media plug-in

We use the social plug-ins listed below on our website to make our company better known. The underlying promotional purpose is to be regarded as a legitimate interest. This is apparent to you in each case (typically via corresponding icons). The responsibility for data protection-compliant operation is to be ensured by their respective providers. Data processing in connection with these plug-ins takes place with your consent when you use them.

If you use the services of these social networks independently of or in connection with our website, the social networks evaluate your use of the plug-in. In this case, information about the plug-in is forwarded to the social networks.

 

Facebook

Our website uses plug-ins of the social network Facebook, which is offered by Facebook Inc. The Facebook plug-ins are marked with a Facebook logo or the addition "Like" or "Share". An overview of the Facebook plug-ins and their appearance can be found at https://developers.facebook.com/docs/plugins.

When you call up a page of our website that contains such a plug-in, your browser establishes a direct connection to Facebook's servers. The content of the plug-in is transmitted by Facebook directly to your browser and integrated into the page.

Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plug-ins, for example by clicking the "Like" button, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, can be found in Facebook's privacy policy: www.facebook.com/policy.php.

Google Maps

Google Maps services are used on our website (e.g. in-screen or via interfaces/API). Google LLC, USA, may therefore process information about your actual location. Google uses various technologies such as IP addresses, GPS and other sensors to determine your location, which provide Google with information about nearby devices, WLAN access points or mobile phone masts, for example.

For the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, please refer to Google's privacy policy at https://policies.google.com/privacy?hl=de&gl=de.

 

Instagram

Plug-ins of the social network Instagram Inc, USA, are installed on our website. You can recognize the Instagram plug-in by the Instagram logo. When you call up a page of our website that contains such a plug-in, a direct connection is established between your browser and the Instagram server. Instagram thereby receives the information that you have visited our site with your IP address. If you click the Instagram button while logged into your Instagram account, you can link the content of our pages on your LinkedIn profile. This allows Instagram to associate the visit to our pages with your user account. We point out that we as the provider of the pages have no knowledge of the content of the transmitted data and its use by Instagram.

The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this respect and settings options for the protection of your personal data, are explained in detail on this website.

For your privacy, please refer to Google's privacy policy at https://instagram.com/about/legal/privacy/.

 

Newsletter

By subscribing to the newsletter, the following personal data will be processed: Name, first name, e-mail address. The data is processed for the purpose of authenticating the subscriber upon registration and to send the subscriber a newsletter.

The data entered by you for the purpose of receiving the newsletter will be processed exclusively on the basis of your consent. You can revoke this consent at any time, for example via the "unsubscribe" link in the newsletter. The data processing operations that have already taken place remain unaffected by the revocation. When we send newsletters, we can determine whether a newsletter has been opened and which links have been clicked.

 

Your rights

Within the scope of the data protection law applicable to you and insofar as provided therein, you have the right:

- To request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making and, if applicable, meaningful information about its details. In the event of disproportionate effort, we reserve the right to require you to provide proof of identity and to pay the actual costs in advance.

- demand the correction of incorrect or incomplete personal data stored by us without delay.

- demand the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

- To request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing.

- To receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

- To revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.

In addition, every data subject has the right to enforce his or her claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Swiss Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

For our part, we reserve the right to assert the restrictions provided for by law, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we are entitled to rely on this) or require it for the assertion of claims.

 

Data security

We take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse.

For security reasons and to protect the transmission of confidential content, such as registrations or inquiries that you send to us as site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Retention period

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations or otherwise the purposes pursued with the processing, i.e. for example for the processing of the order or the duration of the entire business relationship (from the initiation, processing to the termination of a contract) as well as beyond that in accordance with the legal storage and documentation obligations. In this context, it is possible that personal data will be retained for the time during which claims can be asserted against our company and insofar as we are otherwise legally obligated to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as a matter of principle and to the extent possible. For operational data (e.g. system logs, logs), generally shorter retention periods of twelve months or less apply.

 

Up-to-dateness and amendment of this data protection declaration

The website operator may change or adapt this data protection declaration at any time without prior notice. The currently valid data protection declaration can be accessed via the website. Insofar as the data protection declaration is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

 

 

Roggwil, November 2020