Source: http://www.pwg-basel.ch/data-protection-declaration/
Timestamp: 2019-04-26 11:41:03+00:00

Document:
This data protection declaration explains to you the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) as part of the provision of our services and within our online offer and the websites, functions and contents connected with it as well as external online presences, e.g. our social media profile (hereinafter jointly referred to as “online offer”). With regard to the terms used, such as “processing” or “person responsible”, we refer to the definitions in Art. 4 of the Basic Data Protection Ordinance (DSGVO).
The legal basis for the processing for the fulfilment of our legal obligations is Art. 6 para. 1 lit. c DSGVO; In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis.
The legal basis for the processing required to carry out a task in the public interest or in the exercise of official authority assigned to the person responsible is Art. 6 para. 1 lit. e DSGVO.
The legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f DSGVO.
The processing of data for purposes other than those for which they were collected shall be governed by the provisions of Art. 6 para. 4 DSGVO.
The processing of special categories of data (in accordance with Art. 9 para. 1 DSGVO) is governed by the provisions of Art. 9 para. 2 DSGVO.
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, taking into account the state of technology, implementation costs and the type, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of natural persons.
Such measures shall in particular include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transmission, security of availability and its separation. Furthermore, we have established procedures to ensure the exercise of rights of data subjects, deletion of data and reaction to endangerment of data.
Furthermore, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly presettings.
You have the right to request confirmation as to whether the data concerned are being processed and to request information about this data as well as further information and a copy of the data in accordance with the legal requirements.
Processing is carried out to fulfil our services and to carry out contractual measures (e.g. execution of order transactions) and to the extent required by law (e.g., legally required archiving of business transactions for commercial and tax purposes). The information marked as necessary is required to establish and fulfil the contract. We disclose the data to third parties only within the framework of delivery, payment or within the framework of legal permits and obligations, and also if this is done on the basis of our legitimate interests, about which we inform you within the framework of this data protection declaration (e.g., to legal and tax advisors, financial institutions, freight companies and authorities).
Users can optionally create a user account, in particular by viewing their orders. During the registration process, the required information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to its storage is necessary for commercial or tax reasons. Information remains in the customer account until it is deleted with subsequent archiving in the event of a legal obligation or our legitimate interests (e.g., in the event of legal disputes). It is up to the users to save their data before the end of the contract if they have given notice of termination.
When registering, re-registering and using our online services, we store the IP address and the time of the respective user action. The data is stored on the basis of our legitimate interests as well as the user’s protection against misuse and other unauthorized use. A passing on of this data to third parties does not take place in principle, unless it is necessary to pursue our legal claims as a legitimate interest or there is a legal obligation to do so.
The data will be deleted upon expiry of statutory warranty and other contractual rights or obligations (e.g., payment claims or performance obligations arising from contracts with customers), whereby the necessity of storing the data will be checked every three years; in the case of storage due to statutory archiving obligations, the data will be deleted insofar after their expiry.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 9