• Privacy Policy of ifolor AG, Kreuzlingen (Switzerland)

    At ifolor, we are delighted you have chosen us to process your images. Your satisfaction is our top priority. We are sharing our privacy policy below so you can reassure yourself that we are handling your images and personal data appropriately. In our privacy policy, we explain which personal data (information about identified or identifiable individuals) we collect when you visit our website or place an order, and how this data is used and processed. We also explain how we use cookies.

    Collection of personal data
    When you visit our website, our web servers temporarily store data relating to your access and the data that is required to ensure the functionality of our user interfaces and to process your enquiry. This includes your computer’s connection data (IP address), the pages you visit on our site, the date, and duration of your visit, the device, operating system and browser you are using, and the website or other location from which you access our site. The only other personal data we process is that which you yourself provide by registering or at least providing us with your e-mail address, placing an order or submitting an enquiry, and the images you send us, plus further information allowing us to process your orders. We only collect and process this data insofar as is necessary for the professional handling of your orders and for the initiation, expansion or maintenance of the customer relationship. Irrespective of this, we process anonymised information about how visitors use our user interfaces. This information helps us to improve our offers and the functionality of our website and to adapt them to your needs.

    Use and disclosure of personal data
    We treat your data confidentially and do not pass it on to third parties. However, we reserve the right to have data processed by third parties for the purpose of operational processing of your orders and for the initiation, expansion or maintenance of customer relationships, including advertising, or to process data jointly with third parties. These third parties may be located in Switzerland, in the European Economic Area (EEA) or in the rest of the world. Appropriate data protection is guaranteed.
    Your image files are automatically deleted on completion of the order and after a period of 30 days at the latest.
    If you have subscribed to our newsletter, it is sent via the technical service provider Selligent SA in Belgium (Selligent), to whom we pass on the data you provided when registering for the newsletter. This transfer serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Selligent uses this information to send out the newsletter and provide us with a statistical, pseudonymised evaluation of the newsletters. You can unsubscribe from the newsletter at any time.

    We also use Selligent to send you other electronic messages/e-mails. On this basis, Selligent may receive your personal data within the scope of our existing order processing agreement. It is held for the duration for which storage is lawful for purposes in accordance with this privacy policy, i.e. in particular for contractual communication based on existing contracts with you or otherwise for advertising communication.

    Selligent's privacy policy can be found at https://www.selligent.com/privacy-policy-europe/.

    Trusted Shops
    The Trusted Shops 'Trustbadge' is integrated into this website as an indicator of the Trusted Shops seal of quality and of any reviews submitted. It also allows us to offer Trusted Shops products to buyers after they place an order. This serves to safeguard our legitimate interests in optimising the marketing of what we offer, which take priority when weighing up interests. The Trustbadge and the services advertised with it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
    When you click on the Trustbadge, the web server automatically saves what is known as a server log file, which contains, for example, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit to the site.
    Other personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

    Social media link
    You can transmit image data to us for processing not only from your own devices, but also from online services such as Facebook, OneDrive and Picasa. This does not provide us with access to your login data or other data related to these services. Ifolor’s order software only gains access to the data and images you have shared, and to your public profile. You can find out what information these services make accessible from your profile. Please also note the privacy policies of the respective services.

    Cookies
    We strive to make our website as user-friendly and efficient as possible. We utilise cookies to accomplish this. You can decide whether to allow our software to store cookies on your computer or not. You can configure your browser to only accept cookies from certain websites, to only accept them after alerting you, or to not accept them at all. Please be aware, however, that rejecting our website’s cookies may limit or remove certain website functions. To make things easier, we recommend setting your browser to accept our cookies. Click on the fingerprint button in the bottom left corner to find out more about cookies and possible settings.

    Third-party cookies and tracking integrations:

    Web analysis
    We strive to make our website as user-friendly and efficient as possible. To this end, we use web analysis services to determine how many users visit our website, how often and how they do so. We do not use this software to collect individual personal data or individual IP addresses. The data is used exclusively in an anonymised, aggregate form, for statistical purposes and for the further development of the website.

    You can object to the collection of this data from your visit by clicking on the fingerprint button in the bottom left corner to deactivate Webtrekk for this domain.

    VWO (Wingify)
    To continuously improve our online services, we regularly carry out A/B and multi-variant tests on our website. In doing so, we collect information about visitor access and your interaction with our online offer. This is recorded anonymously and used for statistical analysis. We use the Visual Website Optimiser (“VWO”) technology operated by Wingfy (14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India) for this purpose as part of the order processing.

     

    Every time you access our website, the information transmitted by your browser is collected and analysed for this purpose. The data is collected via JavaScript and cookies. The following information is collected anonymously and processed statistically:

    • Browser used
    • Number of pages viewed
    • Number of visits
    • Order of the visit
    • Duration of the visit
    • Interactions such as filling/emptying a shopping basket
    • Recording the use of individual websites (except during the check-out and registration process, for example)
    • Transactions carried out
    • Etc.

    VWO uses your IP address to carry out geo-localisation (regional details of your location). Your IP address is deleted immediately after geo-localisation, which takes place as soon as you visit the site.

    When VWO is used, the following cookies are set with the lifetimes below:

    • Session cookie (for session recognition, lifetime: one session, i.e. until the browser is closed)
    • Long-term cookie (for pseudonymised recognition of returning visitors: 10 years)
    • Opt-out cookie (if you object to tracking: 10,000 days)

    If you do not agree to the storage and evaluation of the usage metrics from your visit, you can click on the fingerprint button in the bottom left corner and change the settings.

    This allows you to store what is known as an opt-out cookie in your browser. This means that the service does not set any cookies to measure usage and does not collect any session data. Please note: If you delete your cookies, the opt-out cookie will also be deleted and you may need to reactivate it.

    VWO's current privacy policy can be found at https://vwo.com/privacy-policy/.

    Surveypal
    To better understand and address customer needs, we use the online survey tool of Surveypal Inc, Kauppakatu 3 B 25, 33200 Tampere, Finland (“Surveypal”) as part of the order processing. This automatically collects and stores data. Surveypal uses this data to create anonymised reports about the online survey for us. Using our online surveys and providing information in them is voluntary at all times.
    Surveypal's current privacy policy can be accessed at https://surveypal.com/privacy-policy/.

    guuru – Expert chat
    We offer a live chat with experts on our website. We use technology from guuru ltd, Hünenberg, Switzerland (“guuru”). If the information collected in this way has a personal reference, it is processed on the basis of our legitimate interest in effective customer service and the statistical analysis of user behaviour for the purpose of optimising our website.

    guuru's current privacy policy can be found at https://www.guuru.com/de/privacy-policy/index.html.

    Profity
    As a thank you for your orders, we provide you with access to vouchers and special offers for purchases and other services from other providers on the Internet via Profity, an offer from our partner adfocus GmbH, based in Zug, Switzerland. To provide you with this access, we include a corresponding note from adfocus via an encrypted connection when you place orders on our website, whereby data which may represent personal data, such as your Internet Protocol (IP) address is exchanged with adfocus. Any personal data that is exchanged within this framework is used exclusively to provide Profity on a permanent, secure and reliable basis.

    If a Profity user lands on ifolor.ch via the voucher selection process, Profity creates a first-party cookie using JavaScript. The first party cookie is used for identification on the order completion page. Profity only saves the client ID in the cookie. The following information is collected for the visual integration included on the order completion page:

    • Website language
    • Profity cookie
    • Conversion data (order value, order number, voucher code used) from conversion tracking (this data is only used if Profity is the intermediary for the order).

    Profity only uses the IP address for geo-localisation purposes. The IP address is not processed in any other way and is not stored in the system.

    Profity sets the following cookies, which have a lifespan as follows:

    • Session cookies (for session recognition, language handling, version numbers, etc.; lifespan: a session, i.e. until the browser is closed)
    • long-term cookies (for pseudonymised recognition of returning visitors and their preferences: 90 days)

    Profity does not offer its own opt-out solution, as no session data is collected or session-specific data is processed. Profity's current privacy policy can be found at https://www.profity.ch/about/privacy.

    Excentos Product Guides – “Gift Guide”
    Our website uses Product Guides from excentos Software GmbH, Reiterweg 1, 14469 Potsdam, Germany (“excentos”) to make it as easy as possible for our website users to select products. The product guides record how users use the website, such as selected response options and navigation activities, interaction with and any purchases of the product recommendations in the product guide. This usage data is permanently stored in a web analysis system operated by excentos. No IP addresses are stored in the web analysis system, and all data is anonymised. The Product Guides or the server services required for this purpose also collect users' IP addresses and usage activities as part of a legitimate weighting of interests in order to ward off cyberattacks. This is a necessary precaution that allows us to provide our services. This data is only stored temporarily (7 days) in order to identify potential attack patterns. During this period, it may be possible to assign it indirectly to usage activities based on timestamps. The IP addresses, including all log data, are then completely deleted. The user’s usage activities are also queried during the session with the Product Guide in order to be able to operate the Product Guide, including its interaction and recommendation calculations. This data remains in the memory but is not stored longer term.

    If you do not agree to the storage and analysis of the usage metrics from your visit, you can object to this by clicking on the following link: https://analytics.excentos.com/index.php?module=CoreAdminHome&action=optOut&language=en

    This allows you to store what is known as an opt-out cookie in your browser. This means that the service does not set any cookies to measure usage and does not collect any session data. Please note: If you delete your cookies, the opt-out cookie will also be deleted and you may need to reactivate it.

    Excentos' current privacy policy can be found at https://www.excentos.com/de/datenschutz.

    Data and communication security
    We use appropriate technical and organisational measures to ensure that the data we collect containing your personal data is permanently protected against loss and abuse. This data is saved in a secure operating environment that is not accessible to the public. In certain cases, e.g. during log-in and the payment process, your personal data is encrypted during transmission. This means that the communication between your computer and the ifolor servers takes place using a recognised encryption method.

    Information and correction
    At your request, we will inform you what personal data we have stored about you, and if we have any doubts about the accuracy of the data provided to us, we will check its accuracy. If you should notice that the data processed by us is incorrect or out of date, you are entitled to have it corrected immediately and at no cost. You have the right to inform us at any time that you no longer wish for us to process your data, whereby we reserve the right to process necessary data (e.g. invoice data).
    We reserve the right to request your identification in an appropriate manner in order to process the above requests.

    Please only send requests of this kind to the following address, which will make it easier for us to process them:

    Ifolor AG
    Data Protection Officer (CQD)
    Sonnenwiesenstrasse 2
    8280 Kreuzlingen, Switzerland
    E-mail: service@ifolor.ch
    Phone: +41 71 686 54 54

    For our customers from Liechtenstein

    For our customers from Liechtenstein, in addition to the above declarations about the collection of personal data, the use and disclosure of personal data, the handling of cookies and third-party cookies and tracking integrations in accordance with Art. 13 GDPR, we also declare:–  –

    1. Controller, Contact details of our data protection officer
    (1) “Controller” in accordance with Art. 4 (7) GDPR is:
    Ifolor AG
    Sonnenwiesenstrasse 2
    8280 Kreuzlingen
    Switzerland
    E-mail: service@ifolor.ch
    Phone: +41 71 686 54 54


    (2) You can contact our data protection officer at:
    Data Protection Officer
    Ifolor AG
    Sonnenwiesenstrasse 2
    8280 Kreuzlingen
    Switzerland
    E-mail: dsb@ifolor.ch

    2. Legal bases for our data processing:
    The legal bases for the data processing are derived from the provision of Art. 6 GDPR, whereby our data processing is predominantly

    • for contract initiation and fulfilment, Art. 6 para. 1 sentence 1 lit. b. GDPR
    • on the basis of consent, Art. 6 para. 1 sentence 1 lit. a GDPR
    • for the fulfilment of legal obligations, Art. 6 para. 1 lit. c. GDPR and 
    • for the protection of legitimate interests, Art. 6 para. 1 lit. f. GDPR.


    3. Your rights as a data subject
    (1) In accordance with the GDPR, you have the following rights with regard to your personal data:

    • Right to access, Art. 15 GDPR
    • Right to rectification, Art. 16 GDPR
    • Right to deletion (“right to be forgotten”), Art. 17 GDPR
    • Right to restriction of processing, Art. 18 GDPR
    • Right to data portability, Art. 20 GDPR
    • Right to object to processing, Art. 21 GDPR (see also section 5 below).

    (2) In accordance with Art. 22 GDPR, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, provided that the decision

    • is not necessary for entering into, or the performance of, a contract between you as the data subject and us as the controller,
    • is authorised by Union or Member State law to which we as the controller are subject and which also provides suitable measures to safeguard your rights and freedoms and legitimate interests as a data subject, or 
    • is based on your explicit consent.

    (3) If you are of the opinion that the processing of data concerning you violates the data protection regulations, you have the right to file a complaint with a supervisory authority in accordance with Art. 77 GDPR. The right to file a complaint can be asserted in particular with a supervisory authority in the Member State in which you are a resident or in the place of the alleged infringement.

    4. Your rights of revocation and objection
    (1) Your right of revocation of consent
    You have the right to revoke a given consent at any time without affecting the legality of the processing carried out so far. If consent is withdrawn, we will cease the relevant data processing.

    (2) Your right to object in the case of legitimate interests
    In accordance with Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. f GDPR. We will no longer process your personal data unless there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the affected person, or for the assertion, exercise or defence of legal claims.

    (3) Your right to object to direct marketing
    In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data for the purpose of direct marketing, the exercise of which leads to the termination of processing for the purpose of direct marketing or the protection of legitimate interests.