Source: https://www.bauraulacvins.ch/en/legal-disclaimer.html
Timestamp: 2019-05-19 18:46:32
Document Index: 731871964

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Legal Disclaimer & Privacy Policy - Baur au Lac Vins
We use these data, and any telephone number which you voluntarily provide, only to give you the most effective and personalised response to your query as possible. The processing of these data is therefore necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the implementation of pre-contractual measures, or is in our legitimate interests under Art. 6 para. 1 lit. f GDPR.
The above data are required for data processing. We process these data solely for the purpose of telling you about our products and services, and to personalise the information and offers we send you and better match them to your interests.
By registering, you consent to our processing of the data you provide to enable us to regularly send the newsletter to the address specified by you, and for the statistical evaluation of user behaviour and to optimise our newsletter. Within the meaning of Art. 6 para. 1 lit. a GDPR, this consent constitutes our legal basis for the processing of your email address. We are entitled to commission third parties to handle the technical aspects of advertising measures and are entitled to pass on your data for this purpose (see 16 below).
6. Purchases on the internet (webshop)
If you wish to purchase goods via the ‘bauraulacvins.ch’ webshop, we will need the following information in order to process your transaction:
We will use these data and any other information voluntarily provided by you (e.g. separate delivery address, credit card information, additional requests or comments) only to process your booking, unless otherwise stated in this data privacy policy or if you have not specifically consented to such use. We will process the data under your name in order to record your booking as requested, to provide the services booked, to contact you in the event of any queries or problems, and to ensure correct payment. In addition, our technical partner ‘MySign AG’ (see 13 and 15) will be given access to the data collected, for the purpose of ensuring the secure operation of our webshop.
7. Purchases in our stores
Generally, no personal data are collected from customers who purchase goods in our stores. Exceptions to this rule are purchases on account, and purchases made using credit or debit cards.
Data relating to purchases made on credit or debit cards are handled in accordance with the requirements of the PCI DSS (Payment Card Industry Data Security Standard). Credit card details are collected anonymously for the sales staff and forwarded to SIX Group Payment Services.
8. Purchases on order / on account
If you wish to pre-order and/or buy goods on account at Baur au Lac Vins, we will need the following information in order to process your transaction:
We will use these data and any other information voluntarily provided by you (e.g. separate delivery address, credit card information, additional requests or comments) only to process your transaction, unless otherwise stated in this data privacy policy or if you have not specifically consented to such use. We will process the data under your name in order to record your booking as requested, to provide the services booked, to contact you in the event of any queries or problems, and to ensure correct payment. In addition, our technical partner ‘MySign AG’ (see 13 and 15) will be given access to the data collected, for the purpose of ensuring the secure operation of our webshop.
After you have entered your personal data with the order information, a credit check is automatically carried out at check-out. A credit check is also carried out for telephone orders and in-store purchases on account.
The buyer authorises H. Kracht’s Erben AG to obtain the information required to process your transaction from public authorities or a central credit-checking agency. The firm
CRIF AG, Hagenholzstrasse 81, CH-8050 Zurich - https://www.crif.ch
is responsible for carrying out the credit checks.
No credit check is carried out for in-store purchases in our branches.
b. Creation of pseudonymised user profiles
The Google Analytics service is provided by Google Inc., an undertaking of the holding company Alphabet Inc, based in the United States. The IP address communicated by your browser within the scope of Google Analytics will not be associated with any other data held by Google. According to Google Inc., under no circumstances will the IP address be associated with other data relating to the user.
For further information about the web analysis service used, visit the Google Analytics website. For instructions on how to prevent your data being processed by the web analysis service, see https://tools.google.com/dlpage/gaoptout?hl=en.
e. Crazy Egg
We use the analysis service provided by Crazy Egg Inc. (16220 E. Ridgeview Lane, La Mirada, CA 9063, USA) on our website. Crazy Egg is a user behaviour analysis tool. Using Crazy Egg, we can measure and evaluate the behaviour of visitors to our website (e.g. mouse movement in the form of ‘heatmaps’, clicks, scroll height etc.). To do this, Crazy Egg places cookies on the end devices of people who use the site, and can store data of site visitors, such as browser information, operating system, length of stay and IP address etc.
You can prevent Crazy Egg from processing these data by disabling the use of cookies in the settings in your web browser, and deleting any cookies already active. Another way to prevent data processing by Crazy Egg is to activate the ‘Do not track’ function in your browser.
This website uses Optimizely, a web analytics service provided by Optimizely, Inc., (‘Optimizely’). In order to continually improve our website, we carry out tests on individual pages. Optimizely uses cookies for this purpose. The information generated by the cookie about your visit to our website (including your IP address) is transmitted to an Optimizely server in the United States and stored there.
Optimizely does not collect any personal data. The information about your visit to this website is transmitted in anonymised form to an Optimizely server in the United States and stored there. You can disable Optimizely by following the instructions on this page: https://www.optimizely.com/opt_out
g. StatHat
Our website uses the web statistics tool StatHat.com, provided by Numerotron Inc., Chicago IL, USA. With StatHat, the behaviour of site visitors can be tracked and page views evaluated. The data collected are anonymous for us; we cannot identify you. The data are stored and processed by StatHat, and cannot be linked to individual users. We have no control over this use of the data.
For further information, please see StatHat’s data privacy policy at http://www.stathat.com/docs/privacy.
h. Google AJAX Search API
JavaScript code provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter ‘Google’) is loaded on our site. If you have activated JavaScript in your browser and have not installed a JavaScript blocker, your browser may transfer personal data to Google. We do not know what data Google associates with the data it receives, or for what purpose Google uses those data. To prevent altogether the execution of JavaScript code by Google, you can install a JavaScript blocker (for example, www.noscript.net).
Use of Google Tag Manager: Google Tag Manager is a solution that enables marketers to manage website tags via a single interface. The ‘Tool Tag Manager’ itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access these data. If deactivation has been carried out at domain or cookie level, it remains in effect for all tracking tags that are implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html
12. Email traffic
13. Purchase of event tickets and gift vouchers
Customers are able to purchase and pay for event tickets and gift vouchers via the website. The purchase of event tickets for events operated by Baur au Lac Vins requires users to register on the platform of our partner ‘Eventfrog.ch’.
The legal basis for the processing of data for this purpose is the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR. Please also see Eventfrog’s data protection notice at
https://eventfrog.ch/de/datenschutzerklaerung.html.
14. Centralised storage and linking of data
We store the data indicated in paragraphs 4-9 in a central electronic data processing system. The data relating to you are systematically recorded and linked for the processing of your bookings and performance of the contractual services. For this we use a software package provided by the firm ‘SAP’.
We use a management tool provided by the company ‘MySign AG’, based in CH-4600 Olten, to store and process newsletter recipient data and user data from the webshop.
The processing of these data in the context of the software is based on our legitimate interest, within the meaning of Art. 6 para. 1 lit. f GDPR, in a customer-friendly and efficient management of customer data.
One service provider to whom the personal data collected via the website are disclosed, or who has or may have access to those data, is our webhoster, aspectra AG, Weberstrasse 4, CH-8004 Zurich. The website is hosted on servers in Switzerland. The transfer of the data is for the purpose of providing and maintaining the functionalities of our website. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Personal data for purchases in our webshop are collected and processed with ‘MySign’.
MySign AG, Neuhardstrasse 38, CH-4600 Olten - mysign.ch
Personal data for event registrations on the website are collected and processed with ‘Eventfrog’.
Eventfrog AG, Neuhardstrasse 38, CH-4600 Olten - eventfrog.ch
Datatrans AG, Kreuzbühlstr. 26, CH-8008 Zurich
17. Transfer of personal data abroad
18. Right of access, rectification, erasure and restriction of processing; right to data portability
Requests to exercise the rights of data subjects are accepted via the websites (data privacy form). To process your requests, we require a proof of identify of the person making the request.
21. Right to object to a data protection supervisory authority