DATA PROTECTION POLICY
§ 1 Introduction
This data protection policy informs you which of your personal data are collected, processed and/or used (activities henceforward summarized as “processing”) by us, Sanoviva AG, Zugerstr. 76 b, 6340 Baar, Switzerland (“website provider” or “we”), in connection with the use of our website www.sanoterra.ch (“website”).
§ 2 Data controller
We are the data controller for the processing of personal data in connection with the use of our website. You can find further information about us in § 11 of this data protection policy and in the imprint of our website.
§ 3 Purpose of the data processing
Where personal data are processed in connection with the use of the website, this is carried out solely for the purpose of enabling proper provision of the website and of the functionalities provided to users in it.
To ensure that visiting our website is a user-friendly experience and to enable certain functions to be used, we make use of “cookies” on various pages. These consist of small text files that are saved on your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (“session cookies”). Other cookies remain on your device and enable us to recognize your browser the next time you visit the website (“persistent cookies”). You can configure your browser so that you are informed when cookies are used and decide whether to accept them on a case-by-case basis or else refuse to accept cookies for certain cases or as a general rule. You can also apply a setting within your browser so that your browser automatically deletes cookies when the browser is closed. If you choose not to accept cookies, the functionality of our website may be limited.
§ 5 Anonymous data processing
Each time our website is accessed, various technical information (browser type/version, the user’s IP address, date and time of access) is in addition stored anonymously on the basis of the information transmitted by your browser. This information is processed solely for statistical purposes and for the purpose of organizing our website in line with user requirements. No merging takes pace of such data with data from the contact forms or the newsletter that might enable identification of the user concerned.
§ 6 Web analytics for advertising purposes
We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies” – text files that are stored on your computer and that help analyze the ways in which you use our website. We utilize Google Analytics in order to capture and improve the use made by individual users of our website and the content and functions provided on it. This is a legitimate interest of ours in accordance with Article 6, paragraph 1, point f) of the GDPR. The information generated by the Google Analytics cookie about your use of this website is normally transferred to a Google server in the United States and stored there. Further information on how the user data collected by Google Analytics is handled can be found in the Google Analytics policies on security and data protection, at https://support.google.com/analytics/answer/6004245?hl=de
§ 7 Use of social media plug-ins
On our website, we might make use of what are termed social media plug-ins (“plug-ins”) associated with the Facebook, Google+, Twitter and Xing social networks. These plug-ins are offered by Facebook Inc., Google Inc., Twitter Inc. and Xing AG (“plug-in providers”). In order to enhance the protection of your data when you visit our website, the plug-ins are not enabled by default but have to be specifically enabled by you. This integration ensures that no connection to the servers of the plug-in providers is established when you access a page of our website that contains such plug-ins. Only when you activate the plug-ins and thereby give your consent to the transmission of data will your browser make a direct connection to the servers of the plug-in providers. The content of the relevant plug-in is then transmitted from the associated provider directly to your browser and integrated into the page. By integrating the plug-in, the providers receive the information that your browser has accessed the corresponding page of our website even if you do not have a profile with the provider concerned or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a server belonging to the provider concerned and is stored there. If you are logged in to one of the services, the plug-in providers can directly associate the visit to our site with your profile on Facebook, Google+, Twitter or Xing. If you interact with the plug-ins, the associated information is also transmitted directly to a server belonging to the plug-in provider and stored there. The information is also published on the social network concerned and shown to you there. For the purpose and scope of data collection and the further processing and use of data by the plug-in providers as well as the associated rights and settings options for protecting your privacy, please see the privacy policies of the relevant plug-in providers:
If you do not want Facebook, Google+, Twitter or Xing to link your visit to our website with your profile, you should unsubscribe from the relevant service before the plug-ins are enabled.
§ 8 Integration of YouTube videos
§ 9 Transmission of your data
As a general principle, personal data shall only be transmitted to persons or entities only to organizations affiliated to the website provider within the meaning of Sections 15 et seq. of the German Stock Corporation Act (AktG) and furthermore only in those cases in which this is necessary for the performance of the service or for contractual execution. No further transmission of data shall take place.
§ 10 Duration of storage of your data
Your personal data is stored by us to the extent that and for as long as this is necessary for the processing purposes pursued by us. When you utilize the features provided by us on our website such as sending an enquiry to us or indicating that you wish to receive information, we store your data collected in this context until the completion or termination of the associated usage arrangement. Where legal or contractual retention periods exist beyond this time that require continued storage of your data, your personal data shall be erased on completion of the relevant retention periods unless you have expressly consented to the further use of your data.
§ 11 Rights of the data subject, Articles 15 et seq. of the GDPR
Right of access, rectification, restriction, erasure and portability: On request, we shall gladly provide you with information as to which of your personal data is being processed. In the event that your stored data are inaccurate, you shall have a right to rectification or restriction with regard to the data concerned. You shall also have the right to have the data stored by us in relation to you blocked or erased if the purpose of the processing of the data is no longer valid or other legal requirements exist (Article 17 of the GDPR). In the event that the erasure is counter to legal, contractual or fiscal/commercial law-related retention periods or other legally based grounds, then your data may be blocked instead of being deleted. In addition, you also have the right to portability in respect of your data. Right to lodge an objection: You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you that is taking place on the basis of Article 6, paragraph 1, point f) of the GDPR (data processing on the basis of a balance of interests). If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or where the processing is for the establishment, exercise or defense of legal claims. Objections can be lodged in an informal manner. In some cases, we process your personal data in order to carry out direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, then we will no longer process your personal data for these purposes. To enforce the aforementioned rights and/or to obtain more detailed information about these, please contact us under the following address:
Zugerstr. 76 b
CH – 6340 Baar
T: +41(0) 4176 – 72 800
F: +41(0) 4176 – 44
Right to lodge a complaint: If you believe that the processing of your personal data described in this data protection policy infringes legal regulations, you may lodge a complaint about this, without prejudice to any other administrative or judicial remedy, with the responsible supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.
§ 12 Changes to the data protection policy
We reserve the right to amend this data protection policy at any time in accordance with applicable data protection regulations. The current status is of August 2018.