IMPRINT
Vendor:
Gastrofrit AG
Blumenfeldstrasse 14
CH-9403 Goldach
Contact:
Phone: +41 71 855 80 70
E-Mail: info@gastrofrit.ch
Website: www.gastrofrit.ch
DATA PROTECTION DECLARATION
Sample Data Protection Declaration according to the GDPR
I. Name and Address of the Responsible Party
The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is:
Sample Company
Sample Street 1
12345 Sample City
Switzerland
Phone: Phone number
E-Mail: sample@e-mail.de
Website: www.samplewebsite.de
II. Name and Address of the Data Protection Officer
The data protection officer of the responsible party is:
Max Mustermann
Sample Company (if external)
Sample Street 1
12345 Sample City
Germany
Phone: Phone number
E-Mail: max.mustermann@e-mail.de
Website: www.samplewebsite.de
III. General Information on Data Processing
1. Scope of Processing Personal Data
We generally process personal data of our users only to the extent necessary to provide a functional website, as well as our content and services. The processing of personal data of our users occurs regularly only after the user’s consent. An exception applies in cases where obtaining prior consent is not possible for actual reasons and the processing of data is permitted by legal regulations.
2. Legal Basis for Processing Personal Data
We generally process personal data of our users only to the extent necessary to provide a functional website, as well as our content and services. The processing of personal data of our users occurs regularly only after the user’s consent. An exception applies in cases where obtaining prior consent is not possible for actual reasons and the processing of data is permitted by legal regulations.
- Where we obtain consent for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
- If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.
- If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
- If the processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
- If the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for processing.
3. Data Deletion and Storage Duration
Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may continue if provided for by the European or national legislator in EU regulations, laws, or other provisions to which the responsible party is subject. Data will also be deleted or blocked when a storage period prescribed by the aforementioned standards expires unless there is a need for further storage of the data for a contract conclusion or contract fulfillment.
IV. Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected:
This section should be customized as needed. Remove irrelevant data and add missing data.
(1) Information about the browser type and version used
(2) The user’s operating system
(3) The user’s Internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system accesses our website
(7) Websites that the user’s system accesses via our website
Option 1: The log files contain IP addresses or other data that allow for user identification. This could be the case, for example, if the link to the website from which the user accessed the website or the link to the website the user switched to contains personal data.
The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.
Option 2: The log files do not contain IP addresses or other data that allow for user identification.
The data is also stored in the log files of our system. This does not affect the user’s IP addresses or other data that allows for the association of the data with a user. Storage of this data together with other personal data of the user does not take place.
2. Legal Basis for Data Processing
If IP addresses are stored in log files:
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
If no IP addresses are stored in log files:
The legal basis for the temporary storage of data is Article 6(1)(f) GDPR.
3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s device. For this purpose, the user’s IP address must be stored for the duration of the session.
If IP addresses are stored in log files:
Storage in log files is done to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our IT systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also constitute our legitimate interest in data processing under Article 6(1)(f) GDPR.
4. Storage Duration
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this occurs when the respective session ends.
If IP addresses are stored in log files:
In the case of storing the data in log files, this occurs no later than seven days. A longer storage period is possible. In this case, the users’ IP addresses are deleted or anonymized so that association with the accessing client is no longer possible.
5. Objection and Elimination Possibility
Data collection for the provision of the website and storage of data in log files is essential for the operation of the website. Therefore, the user has no possibility to object.
V. Use of Cookies
a) Description and Scope of Data Processing
Our website uses cookies. Cookies are text files stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.
If technically necessary cookies are used:
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
Provide a list of stored data. Examples could include:
(1) Language settings
(2) Items in a shopping cart
(3) Log-in information
If technically unnecessary cookies are also used:
We also use cookies on our website that allow the analysis of the user’s surfing behavior.
The following data can be transmitted in this way:
Provide a list of collected data. Examples could include:
(1) Entered search terms
(2) Frequency of page views
(3) Use of website functions
It was previously possible under § 15(3) TMG to pseudonymize personal data processed by technically unnecessary cookies and inform the user about the use of cookies and their right to object and remove them (“opt-out solution”). However, there is legal uncertainty as to whether this provision still applies under GDPR. The safest legal approach is to obtain the user’s prior consent (“opt-in solution”).
If technically unnecessary cookies are set without prior user consent:
The data collected in this way is pseudonymized by technical means. Therefore, it is no longer possible to associate the data with the accessing user. The data will not be stored together with other personal data of the users.
When accessing our website, users are informed about the use of cookies for analysis purposes via an information banner and referred to this data protection declaration. A notice is also provided on how to prevent the storage of cookies in the browser settings.
If the opt-out solution is applied:
The data collected in this way is pseudonymized by technical means. Therefore, it is no longer possible to associate the data with the accessing user. The data will not be stored together with other personal data of the users.
When accessing our website, users are informed about the use of cookies for analysis purposes via an information banner and referred to this data protection declaration. A notice is also provided on how to prevent the storage of cookies in the browser settings.
If technically unnecessary cookies are set with prior user consent:
When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. A reference to this data protection declaration is also made in this context.
b) Legal Basis for Data Processing
If only technically necessary cookies are used or if technically necessary and technically unnecessary cookies are used without prior user consent:
The legal basis for the processing of personal data using cookies is Article 6(1)(f) GDPR.
If technically necessary and technically unnecessary cookies are used with prior user consent:
The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes, provided the user’s consent has been obtained, is Article 6(1)(a) GDPR.
c) Purpose of Data Processing
If only technically necessary cookies are used:
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after a page change.
We need cookies for the following applications:
Provide a list of applications that are supported by technically necessary cookies. Examples could include:
(1) Shopping cart
(2) Applying language settings
(3) Remembering search terms
The user data collected through technically necessary cookies is not used to create user profiles.
If technically unnecessary cookies are also used:
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through analysis cookies, we learn how the website is used and can thus continuously optimize our offer.
These purposes also constitute our legitimate interest in processing personal data according to Article 6(1)(f) GDPR.
d) Duration of Storage, Right to Object, and Elimination Option
Cookies are stored on the user’s computer and transmitted to our site. Therefore, you, as a user, also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Stored cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.
If Flash cookies are also used:
The transmission of Flash cookies cannot be prevented through the browser settings but can be done by changing the settings of the Flash Player.
V. Newsletter
1.Description and Scope of Data Processing
Newsletter distribution occurs based on the user’s registration on the website:
On our website, there is the possibility to subscribe to a free newsletter. During the registration for the newsletter, the data entered into the input form is transmitted to us.
At this point, the specific data collected should be mentioned. At a minimum, this includes the user’s email address.
Additionally, the following data is collected during registration:
The actually collected additional data must be specified. This may include, for example:
(1) IP address of the requesting computer
(2) Date and time of registration
Your consent is obtained during the registration process for the processing of the data, and reference is made to this privacy policy.
Newsletter distribution occurs due to the sale of goods or services:
If you purchase goods or services on our website and provide your email address, this may subsequently be used by us for sending a newsletter. In such a case, the newsletter will exclusively contain direct advertising for our own similar goods or services.
In connection with the data processing for sending newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.