I. Name and address of the person responsible
The person responsible in the sense of General Data Protection Regulation and other national data protection laws of the Member states as well as other data protection regulations is:
Instore Solutions GmbH
Seemattstraße 25
6333 Hünenberg See
Switzerland
Tel.: +41 41 544 4136
E-Mail: info@instore-solutions.com
Website: www.instore-solutions.com
II. Name and address of the data protection officer
The data protection officer of the person responsible is:
Manuela serious
Phone: +41 41 544 4136
E-Mail: manuela.ernst@instore-solutions.com
III. General information on data processing
1. Scope of processing of personal data
We process personal data of our In principle, users only insofar as this is necessary for the provision of a functional Website as well as our content and services is required. The processing Personal data of our users is usually only provided with consent of the user. An exception applies in those cases in which a previous Obtaining consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
2. Legal basis for the processing of personal data
As far as we do for processing operations obtain the consent of the data subject for personal data, serves Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.
When processing personal data, for the fulfillment of a contract, the contracting party of which is the data subject is required, Art. 6 Para. 1 lit. b GDPR serves as Legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures are required.
As far as the processing of personal data is necessary to fulfill a legal obligation, which is our Is subject to Art. 6 Para. 1 lit. c GDPR as Legal basis.
In the event that vital interests of the data subject or another natural person processing make personal data necessary, Article 6 Paragraph 1 lit. d GDPR as the legal basis.
Is the processing to maintain a legitimate Interest of our company or a third party required and prevail the interests, fundamental rights and freedoms of the person concerned that If the former interest does not apply, Art. 6 Paragraph 1 lit. GDPR as the legal basis for processing.
3. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. A Storage can also take place if this is done by the European or national legislators in EU regulations, laws or other regulations to which the controller is subject has been provided. The data will also be blocked or deleted if the specified storage period expires, unless a Necessity for further storage of the data for the conclusion of a contract or there is a fulfillment of a contract.
IV. Provision of the website and creation of Log files
1. Description and scope of data processing
Recorded every time our website is accessed our system automates data and information from the computer system of the calling computer.
The following data is collected:
- Information about the browser type and version used
- The operating system of the user
- The Internet service provider of the user
- The user's IP address
- Date and time of access
- Websites from which the user's system is based on our website
- Websites that are accessed by the user's system through our Website
The data is also stored in the log files stored in our system. A storage of this data together with others personal data of the user does not take place.
2. Legal basis for data processing
Legal basis for the temporary Storage of the data and the log files is Article 6 Paragraph 1 lit. GDPR.
3. Purpose of data processing
The temporary storage of the IP address by The system is necessary to deliver the website to the computer of the To enable users. For this, the user's IP address must be used for the duration remain saved during the session.
The storage takes place in log files to ensure the functionality of the website. Besides We use the data to optimize the website and to ensure the Security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interests also lie in these purposes Interest in data processing according to Art. 6 Paragraph 1 lit. GDPR.
4. Duration of storage
The data will be deleted as soon as they are available for the Achievement of the purpose of their collection are no longer necessary. In the event of the collection of data for the provision of the website, this is the case if the respective session has ended.
If the data is stored in Log files, this is the case after seven days at the latest. A additional storage is possible. In this case the IP addresses of the users deleted or alienated so that an assignment of the calling clients is no longer possible.
5. Opposition and removal option
The collection of data for the provision of the website and the storage of the data in log files is necessary for the operation of the website absolutely necessary. There is consequently none on the part of the user Possibility of objection.
V. Use of cookies
a) Description and scope of data processing
Our website uses cookies. It is about cookies are text files that are stored in the Internet browser or by the Internet browser on the The user's computer system. A user calls a website a cookie can be saved on the user's operating system. This cookie contains a characteristic string of characters that is a unique Identifies the browser when you visit the website again.
We use cookies to run our website to make it more user-friendly. Some elements of our website require that the calling browser also after a page change can be identified.
The following data is stored in the cookies stored and transmitted:
- language settings
- items in a shopping cart
- Log-in information
We also use on our website Cookies that enable an analysis of the surfing behavior of the user.
In this way, the following data can be transmitted will:
- entered Searches
- frequency page views
- utilization of website functions
The user data collected in this way are pseudonymized by technical precautions. Hence an assignment the data on the calling user is no longer possible. The data will not stored together with other personal user data.
When you visit our website, the users through an information banner about the use of cookies for analysis purposes informed and referred to this data protection declaration. It takes place in this In this context, there is also an indication of how cookies are stored in the Browser settings can be prevented.
When accessing our website, the user is informed about informed about the use of cookies for analysis purposes and his consent to process the personal data used in this context caught up. In this context there is also a reference to this Data protection.
b) Legal basis for data processing
The legal basis for the processing Personal data using technically necessary cookies is Art. 6 Paragraph 1 lit.f GDPR.
The legal basis for the processing personal data using cookies for analysis purposes is at If the user has given his / her consent, Art. 6 Para. 1 lit. a GDPR.
c) Purpose of data processing
The purpose of using technically necessary Cookies are to simplify the use of websites for the user. Some Functions of our website cannot be used without the use of cookies Tobe offered. For this it is necessary that the browser also after a Page change is recognized.
We need cookies for the following applications:
- shopping cart
- takeover Voice Settings
- Notice Keyword
The data collected by technically necessary cookies User data are not used to create user profiles.
The analysis cookies are also used Purpose to improve the quality of our website and its content. Through the Analysis cookies tell us how the website is used and so we can use it Constantly optimize the offer.
Our legitimate interest lies in these purposes the processing of personal data according to Article 6 Paragraph 1 lit. GDPR.
e) Duration of Storage, possibility of objection and removal
Cookies are stored on the user's computer and from this transmitted to our side. Therefore, as a user, you also have the full control over the use of cookies. By changing the Settings in your internet browser allow you to set the transmission of cookies deactivate or restrict. Cookies that have already been saved can be used at any time to be deleted. This can also be done automatically. Are cookies for If our website is deactivated, you may not be able to use all functions the website can be used in full.
The transmission of flash cookies can be not through the browser settings, but by changing the Prevent setting of Flash Player.
YOU. Newsletter
1. Description and scope of data processing
On our website there is the Possibility to subscribe to a free newsletter. The Registration for the newsletter, the data from the input mask are transmitted to us.
In addition, the following data is stored in the Registration charged:
- IP address of the calling computer
- Date and time of registration
The As part of the registration process, your consent is obtained and based on this Privacy policy referenced.
If you were on our website or purchase services and deposit your e-mail address, we can then use this to send a newsletter will. In such a case, the newsletter will be used exclusively Send direct mail for your own similar goods or services.
It takes place in connection with the Data processing for sending newsletters does not transfer the data to Third. The data is used exclusively for sending the newsletter used.
2. Legal basis for data processing
Legal basis for processing the Data after registration for the newsletter by the user is available if a Consent of the user Art. 6 Para. 1 lit. a GDPR.
Legal basis for sending the newsletter as a result of the sale of goods or services is § 7 Abs. 3 UWG.
3. Purpose of data processing
The purpose of collecting the user's email address is to deliver the newsletter.
The collection of other personal Data during the registration process is used to prevent misuse of the services or the e-mail address used.
4. Duration of storage
The data will be deleted as soon as they are available for the Achievement of the purpose of their collection are no longer necessary. The The user's email address is therefore stored for as long as the subscription of the newsletter is active.
The other under the The personal data collected during the registration process are usually processed after deleted within a period of seven days.
5. Opposition and removal option
The subscription to the newsletter can be done by affected users can be terminated at any time. For this purpose, see a corresponding link for each newsletter.
This also results in a revocation of the Consent to the storage of the data collected during the registration process personal data.
VII. Registration
1. Description and scope of data processing
On our website we offer users the Possibility to register by providing personal data. The Data is entered in an input mask and transmitted to us and saved. A transfer of data to third parties does not take place. The following Data is collected as part of the registration process:
- The user's IP address
- Date and time of registration
As part of the registration process, consent is required obtained from the user for processing this data.
2. Legal basis for data processing
The legal basis for processing the data is if the user has given his consent, Art. 6 Para. 1 lit. a GDPR.
The registration is used for fulfillment of a contract to which the user is a party or the implementation pre-contractual measures, is an additional legal basis for the Processing of the data Art. 6 Para. 1 lit. b GDPR.
3. Purpose of data processing
A registration of the user is necessary for the Provision of certain content and services on our website required.
4. Duration of storage
The data will be deleted as soon as they are available for the Achievement of the purpose of their collection are no longer necessary.
Dies ist für die während des Registrierungsvorgangs erhobenen Daten der Fall, wenn die Registrierung auf unserer Internetseite aufgehoben oder abgeändert wird.
5. Opposition and removal option
Als Nutzer haben sie jederzeit die Möglichkeit, die Registrierung aufzulösen. Die über Sie gespeicherten Daten können Sie jederzeit abändern lassen. Hierzu genügt es, ein formloses Email an datenschutz@instore-solutions.com zu senden.
VIII. Kontaktformular und E-Mail-Kontakt
1. Beschreibung und Umfang der Datenverarbeitung
Auf unserer Internetseite ist ein Kontaktformular vorhanden, welches für die elektronische Kontaktaufnahme genutzt werden kann. Nimmt ein Nutzer diese Möglichkeit wahr, so werden die in der Eingabemaske eingegeben Daten an uns übermittelt und gespeichert. Diese Daten sind:
- Name, first name of the user
- Email address of the user
- Telephone number of the user (if given)
At the time of sending the message will be the following data are also stored:
- The user's IP address
- Date and time of registration
The processing of the data is carried out within the framework of the Your consent has been obtained during the sending process and on this data protection declaration referenced.
Alternatively, you can contact the provided email address possible. In this case, those with the The user's personal data transmitted by email is saved.
There is no disclosure in this context the data to third parties. The data are used exclusively for processing the Conversation used.
2. Legal basis for data processing
The legal basis for processing the data is if the user has given his consent, Art. 6 Para. 1 lit. a GDPR.
Legal basis for processing the data that are transmitted in the course of sending an email, Art. 6 Paragraph 1 lit.f GDPR. If the e-mail contact aims to complete a Contract, the additional legal basis for processing is Art. 6 Para. 1 lit.b GDPR.
3. Purpose of data processing
Processing of personal data The input mask is only used to process the contact. In the event of A contact by e-mail is also necessary here legitimate interest in processing the data.
The others during the sending process Processed personal data serve to prevent misuse of the Contact form and the security of our to ensure IT systems.
4. Duration of storage
The data will be deleted as soon as they are available for the Achievement of the purpose of their collection are no longer necessary. For the personal data from the input mask of the contact form and those that were sent by email, this is the case if the the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the person concerned The matter is finally clarified.
The additionally collected during the sending process personal data will be processed at the latest after a period of seven days deleted.
5. Opposition and removal option
The user has the option at any time of his To revoke consent to the processing of personal data. Takes If the user contacts us by e-mail, he can save his object to personal data at any time. In such a case, the Conversation cannot be continued.
It is sufficient to send an informal email to datenschutz@instore-solutions.com zu senden.
All personal data collected in the course of Contact will be deleted in this case.
VIII. Rights of the data subject
The following List includes all rights of the data subjects under the GDPR. Rights for the own website is irrelevant, need not be mentioned. So far the listing can be shortened.
Are personal data processed by you, are You are affected within the meaning of the GDPR and you have the following rights against the Responsible for:
1. Right to information
You can get a confirmation from the person responsible request whether we process personal data concerning you will.
If such processing is available, you can use the Request information from those responsible about the following information:
(1) the purposes, for which the personal data are processed;
(2) the Categories of personal data that are processed;
(3) die Empfänger bzw. die Kategorien von Empfängern, gegenüber denen die Sie betreffenden personenbezogenen Daten offengelegt wurden oder noch offengelegt werden;
(4) die geplante Dauer der Speicherung der Sie betreffenden personenbezogenen Daten oder, falls konkrete Angaben hierzu nicht möglich sind, Kriterien für die Festlegung der Speicherdauer;
(5) das Bestehen eines Rechts auf Berichtigung oder Löschung der Sie betreffenden personenbezogenen Daten, eines Rechts auf Einschränkung der Verarbeitung durch den Verantwortlichen oder eines Widerspruchsrechts gegen diese Verarbeitung;
(6) das Bestehen eines Beschwerderechts bei einer Aufsichtsbehörde;
(7) alle verfügbaren Informationen über die Herkunft der Daten, wenn die personenbezogenen Daten nicht bei der betroffenen Person erhoben werden;
(8) das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling gemäß Art. 22 Abs. 1 und 4 DSGVO und – zumindest in diesen Fällen – aussagekräftige Informationen über die involvierte Logik sowie die Tragweite und die angestrebten Auswirkungen einer derartigen Verarbeitung für die betroffene Person.
You have the right to request information about whether the personal data concerning you to a third country or to a international organization. In this context you can You request to be informed about the appropriate guarantees according to Art. 46 GDPR in To be informed in connection with the transmission.
2. Right to rectification
You have a right to correction and / or Completion to the person responsible, if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.
3. Right to restriction of processing
Unter den folgenden Voraussetzungen können Sie die Einschränkung der Verarbeitung der Sie betreffenden personenbezogenen Daten verlangen:
(1) wenn Sie die Richtigkeit der Sie betreffenden personenbezogenen für eine Dauer bestreiten, die es dem Verantwortlichen ermöglicht, die Richtigkeit der personenbezogenen Daten zu überprüfen;
(2) die Verarbeitung unrechtmäßig ist und Sie die Löschung der personenbezogenen Daten ablehnen und stattdessen die Einschränkung der Nutzung der personenbezogenen Daten verlangen;
(3) the person responsible for the personal Data are no longer required for processing purposes, but you do to assert, exercise or defend legal claims, or
(4) if you have objected to the Processing in accordance with Art. 21 Paragraph 1 GDPR and still it is not certain whether the legitimate reasons of the person responsible Your reasons outweigh.
Has been processing your concern restricted personal data, this data - from your Storage apart - only with your consent or to assert, Exercise or defense of legal claims or to protect rights another natural or legal person or for reasons of one important public interest of the Union or a member state are processed.
Has the processing been restricted according to the above? Restricted requirements, you will be informed by the person responsible before the restriction is lifted.
4. Right to cancellation
a) Deletion obligation
You can ask the person responsible that you relevant personal data will be deleted immediately, and the The person responsible is obliged to delete this data immediately if one of the following reasons applies:
(1) The personal data concerning you Data are for the purposes for which they were collected or otherwise processed are no longer necessary.
(2) You withdraw your consent to which the processing according to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other Legal basis for the processing.
(3) Sie legen gem. Art. 21 Abs. 1 DSGVO Widerspruch gegen die Verarbeitung ein und es liegen keine vorrangigen berechtigten Gründe für die Verarbeitung vor, oder Sie legen gem. Art. 21 Abs. 2 DSGVO Widerspruch gegen die Verarbeitung ein.
(4) Die Sie betreffenden personenbezogenen Daten wurden unrechtmäßig verarbeitet.
(5) Die Löschung der Sie betreffenden personenbezogenen Daten ist zur Erfüllung einer rechtlichen Verpflichtung nach dem Unionsrecht oder dem Recht der Mitgliedstaaten erforderlich, dem der Verantwortliche unterliegt.
(6) Die Sie betreffenden personenbezogenen Daten wurden in Bezug auf angebotene Dienste der Informationsgesellschaft gemäß Art. 8 Abs. 1 DSGVO erhoben.
b) Information to third
Does the person responsible for you personal data is made public and is in accordance with Art. 17 Para. 1 GDPR is obliged to delete them, taking into account the available technology and the implementation costs appropriate measures, also of a technical nature, in order to be responsible for the data processing, the process personal data to inform that you as affected person to delete all links to them personal data or copies or replications thereof have requested personal data.
c) Exceptions
The right to deletion does not exist if the Processing is required
(1) zur Ausübung des Rechts auf freie Meinungsäußerung und Information;
(2) zur Erfüllung einer rechtlichen Verpflichtung, die die Verarbeitung nach dem Recht der Union oder der Mitgliedstaaten, dem der Verantwortliche unterliegt, erfordert, oder zur Wahrnehmung einer Aufgabe, die im öffentlichen Interesse liegt oder in Ausübung öffentlicher Gewalt erfolgt, die dem Verantwortlichen übertragen wurde;
(3) aus Gründen des öffentlichen Interesses im Bereich der öffentlichen Gesundheit gemäß Art. 9 Abs. 2 lit. h und i sowie Art. 9 Abs. 3 DSGVO;
(4) für im öffentlichen Interesse liegende Archivzwecke, wissenschaftliche oder historische Forschungszwecke oder für statistische Zwecke gem. Art. 89 Abs. 1 DSGVO, soweit das unter Abschnitt a) genannte Recht voraussichtlich die Verwirklichung der Ziele dieser Verarbeitung unmöglich macht oder ernsthaft beeinträchtigt, oder
(5) zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.
5. Recht auf Unterrichtung
Haben Sie das Recht auf Berichtigung, Löschung oder Einschränkung der Verarbeitung gegenüber dem Verantwortlichen geltend gemacht, ist dieser verpflichtet, allen Empfängern, denen die Sie betreffenden personenbezogenen Daten offengelegt wurden, diese Berichtigung oder Löschung der Daten oder Einschränkung der Verarbeitung mitzuteilen, es sei denn, dies erweist sich als unmöglich oder ist mit einem unverhältnismäßigen Aufwand verbunden.
Ihnen steht gegenüber dem Verantwortlichen das Recht zu, über diese Empfänger unterrichtet zu werden.
6. Recht auf Datenübertragbarkeit
You have the right to the personal data concerning you Data that you have provided to the person responsible in one structured, common and machine-readable format. also you have the right to transfer this data to another responsible person without hindrance by the person responsible to whom the personal data was provided were to be transmitted, provided
(1) the processing is based on consent according to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 lit. b GDPR is based and
(2) the processing takes place with the help of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you directly from a Responsible person will be transmitted to another person responsible, as far as this is technically feasible. This allows the freedoms and rights of other people not be affected.
The right to data portability does not apply to a Processing of personal data necessary for the performance of a task which is in the public interest or in the exercise of official authority which has been transferred to the person responsible.
7. Right to Object
You have the right, for reasons arising from their special situation arise at any time against the processing of you related personal data, which is based on Article 6 Paragraph 1 lit. or f GDPR takes place to object; this also applies to one on this Regulations-based profiling.
The person responsible processes the data concerning you personal data no longer, unless it can be compelling prove legitimate reasons for the processing that your interests, Rights and freedoms predominate, or the processing serves the Assertion, exercise or defense of legal claims.
Will the personal data concerning you processed in order to operate direct mail, you have the right at any time Objection to the processing of your personal data insert for the purpose of such advertising; this also applies to profiling, as far as it is related to such direct mail.
Object to processing for the purposes of Direct mail, the personal data concerning you will not be processed more processed for these purposes.
You have the option in connection with the use of information society services - regardless of the directive 2002/58 / EG - to exercise your right of objection by means of automated procedures, where technical specifications are used.
8. Right to revoke the declaration of consent under data protection law
You have the right to your data protection Revoke declaration of consent at any time. By revoking the Consent is the legality of the based on the consent until Revocation does not affect processing carried out.
9. Automated decision in individual cases including profiling
You have the right not one exclusively on one automated processing - including profiling - based Decision to be subjected to you, which has legal effect on you unfolds or significantly affects you in a similar manner. this applies not if the decision
(1) für den Abschluss oder die Erfüllung eines Vertrags zwischen Ihnen und dem Verantwortlichen erforderlich ist,
(2) based on Union legislation or of the member states to which the controller is subject and these legal provisions take reasonable measures to safeguard your rights and Contain freedoms and your legitimate interests or
(3) with your express consent is given.
However, these decisions should not be based on particular ones Categories of personal data are based on Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures to protect rights and freedoms as well as your legitimate interests were met.
With regard to the cases mentioned in (1) and (3), the Person responsible for taking appropriate measures to protect the rights and freedoms as well as your to protect legitimate interests, including at least the right to obtain the Intervention of a person on the part of the person responsible, on the presentation of the own point of view and when challenging the decision.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or You have the right to lodge a complaint with a judicial remedy Supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged violation, if you are the Are of the opinion that the processing of your personal Data violates the GDPR.
The supervisory authority to which the complaint was lodged informs the complainant of the status and results of the Complaint including the possibility of a judicial remedy according to Art. 78 GDPR.