Privacy Policy

Privacy Policy
 
1. Data protection at a glance
 
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. Detailed information on data protection is provided in our Privacy Policy contained herein.
 
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is the responsibility of Weseta Textil AG. You can find our contact details in the Legal Notice (Impressum) of this website.
 
How do we collect your data?
On the one hand, your data is collected by communicating it to us. This can be, for example, data that you enter in a contact form or by placing an online order.
Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g., Internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.
 
What do we use your data for?
When using our online shop, personal data may be processed in various ways. Part of the data is collected to ensure that the website is provided without error. Other data may be used to analyse your user behaviour. Furthermore, the data is also used for orders in the online shop, for creating a customer account/registration in the online shop, the Newsletter, the magazine, participation in prize competitions, submission of reviews, and customer enquiries through the contact form.
Your data will be stored at Weseta Textil AG. This mainly concerns company-specific data, such as addresses, telephone numbers, contact persons, tax numbers, item-specific data as well as the data about our business process (offers, delivery notes, invoices, etc.).
We would like to draw your attention to the fact that this data is only used by Weseta Textil AG for the purpose of processing our business relationship.
 
What rights do you have with regard to your data?
You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to request the rectification, blocking or erasure of this data. You can contact us at any time about this topic and for any further question on the subject of data protection at the address given in the Legal Notice (Impressum). You also have the right to lodge a complaint with the competent supervisory authority.
Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. For details, please refer to the Privacy Policy under “Right to restriction of processing”.
 
How long do we store your data?
We store your data for as long as the processing purpose requires it. As soon as the processing purpose no longer applies or you request that we erase your data, we will erase your data unless we can assert overriding interests or a legal basis for retaining the data for a longer period.
 
2. General notes and mandatory information
 
Data protection
Weseta Textil AG takes the protection of data very seriously and complies with the statutory provisions on data protection. Your data is stored by technical and organisational measures in such a way that it is not accessible to third parties.
Please note that the Internet is a publicly accessible system. Data entered into the system can be lost, sent to a wrong addressee or fall into the hands of unauthorised persons. For this reason, all personal information and data is provided voluntarily and at your own risk. This Privacy Policy applies to all services offered by us.
 
Information regarding the controller
The data controller on this website is:
WESETA TEXTIL AG
Bergen 4
CH-8765 Engi/Glarus Süd
+41 55 642 61 00
[email protected]
 
Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR)If data is processed on the basis of point (e) or (f) of Art. 6(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data; this also applies to profiling based on those provisions. The legal basis for any processing is set forth in this Privacy Policy. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will then no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
 
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge the complaint shall be without prejudice to any other administrative or judicial remedy.
 
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract transmitted to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transmission of the data to another controller, this will be done only to the extent that it is technically feasible.
 
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser title bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
 
Access, blocking, erasure and rectification
Within the framework of the applicable statutory provisions, you have the right to receive information free of charge at any time about your stored personal data, their origin and recipients and the purpose of the data processing and, if necessary, a right to rectification, blocking or erasure of this data. You can contact us at any time about this topic and for any further question on the subject of personal data at the address given in the Legal Notice (Impressum).
 
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time about this topic at the address given in the Legal Notice (Impressum). The right to restriction of processing applies in the following cases:
• If you contest the accuracy of your personal data stored by us, we usually need time to review this. For the duration of our review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you have the right to request the restriction of data processing instead of erasure.
• If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests have to be weighed against our interests. For as long as it has not yet been established whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – other than its storage – be processed only with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest of Switzerland, the European Union or a Member State.
 
3. Data collection on our website
 
Cookies
Some of the Internet pages use so-called cookies. Cookies do no harm to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies”. They will be automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser the next time you visit it.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies that are necessary for the electronic communication process or for the provision of certain functions that you have requested (e.g., shopping cart function) are stored on the basis of point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in the storage of cookies for the purpose of providing technically error-free and optimised provision of its services. To the extent that other cookies (e.g., cookies for the analysis of your browsing behaviour) are stored, they are treated separately in this Privacy Policy.
 
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address
This data will not be merged with other data sources.
The transfer is based on point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimisation of its website, for which purpose the server log files must be recorded.
 
4. Contact form
 
Purpose
If you send us enquiries via the contact form, we will store your details from the enquiry form, including the contact details you provide therein, for the purpose of processing the enquiry and any follow-up questions.
 
Recipient(s)
We do not share this data without your consent.
 
Legal basis
The processing of the data entered in the contact form is therefore exclusively based on your consent (point (a) of Art. 6(1) GDPR).You have the right to withdraw your consent at any time. An informal email notification to us will be sufficient. The legality of the data processing operations carried out until the withdrawal remains unaffected by the withdrawal.
 
Storage/erasure
The data you enter in the contact form will remain with us until you ask us to erase it, withdraw your consent to its storage, or the purpose for data storage no longer applies (e.g., after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
 
5. Orders in the online shop

Purpose
Weseta Textil AG collects and processes your data provided in the course of ordering products in the online shop in order to enable the purchase of our products in the online shop.
 
Legal basis
The processing of your data is necessary for the conclusion and fulfilment of the online purchase contracts within the meaning of point (b) of Art. 6(1) GDPR.
 
Storage/erasure
We store the data required for the performance of the contract until the expiry of the statutory warranty periods, provided that statutory retention obligations do not preclude erasure and the data is not required in individual cases to defend or enforce legal claims.
 
Recipient(s)
The necessary data for payment processing will be passed on by us to the payment service providers you have selected. We pass on your data required for order and order processing to our logistics partners, suppliers.
 
6. Creation of a customer account/registration in the online shop
 
Purpose
The creation of the customer account is always voluntary.
 
Legal basis
Your data will be processed on the basis of your consent in accordance with point (a) of Art. 6(1) GDPR. You have the right to withdraw your consent at any time by deactivating your customer account.
 
Storage/erasure
Your data will generally be stored until the deactivation/deletion of your customer account and thereafter for a period of two years, provided that statutory retention obligations do not preclude erasure and the data is not required in individual cases to defend or enforce legal claims.
 
7. Newsletter advertising
 
Purpose
The details provided below have the purpose of informing you about the contents of our Newsletter as well as the registration, dispatch, and statistical evaluation procedure as well as your right to object. By subscribing to our Newsletter, you agree to receive it and to accept the procedures described below.
 
Newsletter content:
We send out newsletters, emails, and other electronic notifications with promotional information (“Newsletter”) only with the consent of the recipients in accordance with point (a) of Art. 6(1) GDPR or with a legal permission. To the extent that the content of the Newsletter is specifically described in the course of registration, such content will form the basis of the user’s consent. Other than that, our Newsletters provide information about our services and us.
 
Double opt-in and logging:
The subscription to our Newsletter requires a so-called double-opt-in procedure. This means that you will receive an email after registration asking you to confirm your registration. This confirmation is necessary so that no one can register with external email addresses. Registrations of the Newsletter are logged in order to be able to prove that the registration process is in compliance with the legal requirements. This includes the storage of the registration/login and confirmation time, as well as the IP address. Changes to your data stored by the dispatch service provider are logged as well.
 
Registration data:
All you have to do to subscribe to the Newsletter is to provide your email address. We will ask you, as an option, to also provide a name so that we can address you personally in the Newsletter.
 
Logging:
The registration procedure is logged on the basis of our legitimate interests. We are interested in providing a user-friendly and secure newsletter system that not only serves our business interests but also meets the expectations of the users and allows us to prove consent.
 
Termination/withdrawal:
You have the right to unsubscribe the Newsletter at any time at the occasion of receiving your individual Newsletter email or by contacting Weseta Textil AG directly.
 
Dispatch:
The Newsletters are sent through the dispatch service provider "MailChimp“, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The privacy policy of the dispatch service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with the Swiss and European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The dispatch service provider is used on the basis of our legitimate interests in accordance with point (f) of Art. 6(1) GDPR and on the basis of a data processing agreement in accordance with Art. 28(3) sentence 1 GDPR.
 
Dispatch service provider:
The dispatch service provider may use the recipients' data in pseudonymised form, i.e., without assignment to a user, to optimise or improve its own services, e.g., to technically optimise the dispatch and presentation of the Newsletters or for statistical purposes. However, the dispatch service provider will not use the data of our Newsletter recipients to write to them or to pass on the data to third parties.
 
Newsletter - performance measurement
The Newsletters contain a so-called “web-beacon”, i.e., a pixel-sized file, which is retrieved from our server when the Newsletter is opened, or, if we use a dispatch service provider, from that provider’s server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected initially.
This information is used for the technical improvement of the services on the basis of the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the time of access. Statistical surveys will also provide the information of whether the Newsletters are opened, when they are opened, and which links are clicked. It is true, that based on technology, this information can be assigned to the individual Newsletter recipients. However, it is neither our intention nor that of the dispatch service provider, if we use one, to watch individual users. Rather, such analyses allow us to recognise the reading patterns of our users and to adapt our content to them or to send out different information adjusted to the interests of our users.
 
8. Prize competitions
 
Purpose
The personal data you disclose will be processed for the purpose of carrying out the competition (draw).
 
Legal basis
Participation in the competition requires the processing of the data of the participants and winners (point (b) of Art. 6(1) GDPR). If you do not provide the above data, you will not be able to enter the competition. The publication of the winners is based on your consent for this purpose in accordance with point (a) of Art. 6(1) GDPR. You have the right to withdraw your consent free of charge at any time.
 
Storage/erasure
The data of all participants will be erased three months after the end of the participation period, unless statutory retention obligations preclude erasure, or we need the data in individual cases to defend or enforce legal claims.
 
9. Submission of reviews
 
Purpose
When submitting reviews, we process additional data (especially name, email address, place and last order number) in addition to your review (including title and comment). The processing of this data serves the purpose of collecting and publishing customer reviews by Weseta Textil AG.
 
Legal basis
The data processing is based on your consent pursuant to point (a) of Art. 6(1) GDPR). You have the right to withdraw your consent free of charge at any time.
 
10. Social media
 
Facebook plugins (Like & Share button)
Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the "Like" button on our site. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. This provides Facebook with the information that you have visited our site with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.
If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
The use of the Facebook plugins is based on point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in the widest possible visibility on social media.
 
11. Miscellaneous
 
Google Fonts
We integrate the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Opt-Out: You can prevent Google from setting cookies by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
 
12. Remarketing Privacy Policy
 
Third-party providers, including Google, display ads on websites on the Internet. Third parties, including Google, use stored cookies to display ads based on a user's previous visits to this website.
 
13. Google Analytics
 
On the basis of our legitimate interests (i.e., interest in the analysis, optimisation and economic operation of our online offer within the meaning of point (f) of Art. 6(1) GDPR), we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services associated with the use of this online offer and Internet use. In doing so, pseudonymous user profiles of the users can be created from the processed data.
We only use Google Analytics with IP anonymisation enabled. This means that the IP address of the users is truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offer and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The users' personal data will be deleted or anonymised after 14 months.
 
For more information about Google's use of data, setting and objection options, see Google's privacy policy (https://policies.google.com/technologies/ads) and Google's advertising display settings (https://adssettings.google.com/authenticated).
 
(Swissanwalt, 2019)