privacy

Privacy statement

PhytoVero Privacy Policy (Version 1.1 / November 13, 2018)

In this data protection declaration we, PhytoVero GmbH (hereinafter referred to as PhytoVero, we or ourselves), explain how we collect and otherwise process personal data. This is not an exhaustive description; other data protection declarations may regulate specific circumstances. By personal data we mean all information relating to a specific or identifiable person.

This data protection declaration is based on the EU Data Protection Basic Regulation (DSGVO). Although the DSGVO is a regulation of the European Union (EU), it is of importance to us. The Swiss Data Protection Act (DSG) is strongly influenced by EU law, and companies outside the European Union or the European Economic Area (EEA) must comply with the DSGVO under certain circumstances. Therefore, we have aligned this data protection declaration to their standard.

1. responsible person 

PhytoVero GmbH is responsible for the data processing that we describe here, unless otherwise stated in individual cases. If you have any concerns regarding data protection, you can send them to us at the following contact address: PhytoVero GmbH, Wangenstrasse 51, 3018 Bern, Switzerland

2. collection and processing of personal data

We primarily process the personal data which we receive from our customers and other persons involved in our business relationships with them and other business partners or which we collect from their users during the operation of our websites, the online shop and other applications.

Insofar as this is permitted, appropriate, ethically justifiable and absolutely necessary, in special cases we also extract certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, press, Internet) or receive such data from our clients and their employees, from authorities, (arbitration) courts and other third parties (e.g. business partners and contractual partners of our customers). In addition to the data that you provide directly to us, the categories of personal data that we receive about you from third parties include, in particular, information from public registers, creditworthiness information (if we conduct business with you personally), information about you that is provided to us by persons from your environment (family, advisors, legal representatives, etc.), information about you, and information about your personal data.) so that we can conclude or process contracts with you or with your involvement (e.g. references, your address for deliveries, powers of attorney). Information on compliance with legal requirements such as combating money laundering and export restrictions, information from banks, insurance companies, sales and other contractual partners from us on the use of or provision of services by you (e.g.Your personal data (e.g. payments made, purchases made), information about you from the media and the Internet (insofar as this is indicated in the specific case, e.g. in the context of an application, press review, marketing|sales, etc.), your addresses and any interests and other socio-demographic data (for marketing), data in connection with the use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages called up and content, functions used, referring website, location information).

3. purposes of data processing and legal bases

We use the personal data collected by us primarily in order to conclude and process our contracts with our customers and business partners, in particular within the scope of fulfilling our services to our customers and purchasing products and services from our suppliers, as well as to fulfil our legal obligations at home and abroad. If you work for such a customer or business partner, you may also be affected in this function with your personal data.

In addition, we process personal data from you and other persons, to the extent permitted and deemed appropriate by us, also for the following purposes in which we (and sometimes also third parties) have a legitimate interest corresponding to the purpose:

Offer and further development of our offers, services and websites and other platforms on which we are present; communication with third parties and processing of their enquiries (e.g. applications, media enquiries); advertising and marketing (including the execution of events), insofar as you have not objected to the use of your data (if we send you advertising from us as an existing customer, you can object to this at any time, we will then place you on a blocking list against further advertising mailings); market and opinion research, media monitoring;

Warranties of our operations, in particular IT, our websites and other platforms;

If you have given us your consent to process your personal data for certain purposes (for example, when you register to receive newsletters (PhytoVero Newsletter), we process your personal data within the scope of and based on this consent, unless we have another legal basis and we need such. A given consent can be revoked at any time, but this has no effect on data processing that has already taken place.

4 Cookies | Tracking and other technologies in connection with the use of our website 

We typically use "cookies" and similar technologies to identify your browser or device on our websites, as specified by the provider. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you use when you visit our website. When you return to this site, we may recognize you even if we do not know who you are. In addition to cookies that are only used during a session and are deleted after your visit to our website ("session cookies"), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) ("permanent cookies"). However, you can set your browser so that it rejects cookies, saves them only for one session or otherwise deletes them prematurely. Most browsers are preset to accept cookies. We use permanent cookies so that we better understand how you use our offers and contents. If you block cookies, certain functions (such as language selection) may no longer work.

We sometimes use Google Analytics or comparable services on our websites. This is a service provided by third parties, which may be located in any country of the world (in the case of Google Analytics, it is Google LLC in the USA, www.google.com), with which we can measure and evaluate the use of the website (not personal). Permanent cookies set by the service provider are also used for this purpose. The service provider does not receive any personal data from us (nor does it keep any IP addresses), but can track your use of the website, combine this information with data from other websites that you have visited and which are also tracked by service providers, and use this information for its own purposes (e.g. advertising control). If you have registered with the Service Provider yourself, the Service Provider will also know you. The processing of your personal data by the service provider is then the responsibility of the service provider in accordance with its data protection provisions. The service provider merely informs us how our respective website is used (no information about you personally).

5. data transfer and transmission at home and abroad

We do not pass on any data to third parties !

6. duration of the storage of personal data

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations or otherwise the purposes pursued with the processing, i.e. for the duration of the entire business relationship (from the initiation, processing to the termination of a contract or purchase) as well as beyond that in accordance with the legal storage and documentation obligations. As soon as your personal data is no longer required for the aforementioned purposes, it will be deleted or anonymised as far as possible. For operational data (e.g. system protocols, logs), generally shorter retention periods of twelve months or less apply.

7. data security

Together with our provider (Hostpoint), we take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymization, controls.

8 Obligation to provide personal data

As part of our business relationship, you must provide the personal information necessary to establish and conduct a business relationship and to fulfill the contractual obligations associated therewith (you do not normally have a legal obligation to provide us with information). Without this information, we will generally not be able to enter into or complete a contract/purchase with you. The website can also not be used if certain information to secure data traffic (such as IP address) is not disclosed.

9. rights of the data subject

You have the right to information, correction, deletion, the right to restrict data processing and otherwise object to our data processing and to the surrender of certain personal data for the purpose of transfer to another location (so-called data portability) within the framework of the data protection law applicable to you and to the extent provided for therein (such as in the case of the DSGVO). Please note, however, that we reserve the right to assert the statutory restrictions on our part, for example if we are obliged to store or process certain data, if we have an overriding interest in it (to the extent that we may invoke it) or if we need it for the assertion of claims. If you incur any costs, we will inform you in advance. We have already informed you about the possibility of withdrawing your consent in section 3. Please note that the exercise of these rights may conflict with contractual agreements and this may have consequences such as premature termination of the contract or cost consequences. In this case, we will inform you in advance if this has not already been contractually agreed.

As a rule, the exercise of such rights requires that you prove your identity unambiguously (e.g. by means of a copy of your identity card, where your identity is otherwise not clear or cannot be verified). To exercise your rights you may contact us at the address set out in paragraph 1.

In addition, every data subject has the right to assert his or her claims in court or to file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

10 Amendments

We may change this privacy statement at any time without notice. The current version published on our website applies. If the data protection declaration is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.