Naturofloor Privacy Policy

Data security is an important concern for us. Below you can find out more about how we protect your personal data.

In this privacy policy, we, Naturofloor, explain how we collect and otherwise process personal data. This is not an exhaustive description; other data protection declarations may regulate specific matters. Personal data refers to all information relating to an identified or identifiable person. 
If you provide us with the personal data of other persons (e.g. family members, data of work colleagues), please ensure that these persons are aware of this privacy policy and only provide us with their personal data if you are permitted to do so and if this personal data is correct. 
This Privacy Policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (“DSG”) and the revised Swiss Data Protection Act (“revDSG”). However, whether and to what extent these laws are applicable depends on the individual case.

1. controller / data protection officer / representative 
Naturofloor, Zeughausstrasse 10, 7208 Malans, info@naturofloor.ch is responsible for data processing.If you have any data protection concerns, you can send them to us at the above contact address.

2. Purposes of data processing and legal basis 
Your data will only be processed for the purpose stated at the time of collection, for which you have given your consent, which is necessary due to the business relationship or which is provided for by law.

3. Collection and processing of personal data 
We primarily process the personal data that we receive from our customers and other business partners as part of our business relationship with them and other persons involved or that we collect from their users when operating our website, apps and other applications.

3.1 General provisions
The companies involved in Naturofloor are entitled to use the personal data collected in accordance with the following paragraphs on the basis of Art. 6 para. 1 lit. f EU GDPR to optimize services, for consulting and advertising purposes and to forward it to other companies for these purposes.
Your personal data may be transferred on the basis of Art. 6 para. 1 lit. f GDPR in the event of the purchase/sale of business divisions, companies or parts of companies and other transactions under company law.
We may also be obliged to disclose certain personal data on the basis of legal provisions within the meaning of Art. 6 para. 1 lit. c GDPR, e.g. to the Swiss Financial Market Supervisory Authority.
We may use the personal data disclosed to us for the development, testing and improvement of our products on the basis of Art. 6 para. 1 lit. f EU GDPR.
By disclosing your personal data on the websites, apps or contractual relationship, you agree that this personal data may be used for the assertion of legal claims and defense in connection with legal disputes and official proceedings as well as for the prevention and investigation of criminal offenses and other misconduct (e.g. conducting internal investigations, data analyses to combat fraud).

3.2 Cookies
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

3.3 Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

• Browser type and browser version

• Operating system used

• referrer URL

• Host name of the accessing computer

• Time of the server request

• IP address

This data is used in accordance with Art. 6 para. 1 lit. f EU GDPR for statistical evaluations for the purpose of operation, to ensure the security of our IT systems and to optimize the websites and apps. This enables you to use our websites and apps securely and without disruption.

3.4 Google Analytics (If Google Analytics is not used, the chapter can be deleted)
We use Google Analytics (analysis services of Google Inc. “Google”) for our websites to analyze user behavior. The analysis of the use of the offer makes it possible to tailor the offer even better to customer needs.  Google may transfer anonymized usage information to third parties if this is required by law or if third parties process this data on behalf of Google.
Google will not associate your IP address with any other data held by Google. Google Analytics uses cookies to analyze the website. Google can use the information generated by the cookies to analyze your use of the website. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of all websites and apps. By consenting to the cookies on our websites and apps, you consent to the processing of the data collected by Google Analytics as described above within the meaning of Art. 6 para. 1 lit. a EU GDPR, unless the data collected is technically necessary for the trouble-free operation of the website and apps and thus constitutes a legitimate interest on our part within the meaning of Art. 6 para. 1 lit. f EU GDPR.

3.5 Google Maps (If Google Maps is not used, chapter can be deleted)
This website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. When you access a web page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data:

• Date and time of the visit to the website in question

• Internet address or URL of the website accessed

• IP address, (start) address entered as part of route planning

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.
It is possible to deactivate Google Maps and prevent data transmission to Google by deactivating JavaScript in your browser. As a result, you will not be able to use the map display. Further information can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de.
By using our website, you consent to the processing of data about you by Google Maps Route Planner in the manner and for the purposes set out above.

3.6 Social media plug-ins (if no social media plug-ins are used, the chapter can be deleted)
We also use plug-ins from social networks such as Facebook, Twitter, YouTube, Pinterest and Instagram on our website. This is visible to you in each case (typically via corresponding icons). We have configured these elements so that they are deactivated by default. If you activate the plug-ins (by clicking/tapping on them), the operators of the respective social networks can register that you use our offers (websites/apps) and how you use them. The processing of your personal data is then the responsibility of this operator in accordance with its data protection provisions. We do not receive any information about you from them. 

3.7 Collection of contact data via contact form or other form (if there is no contact form or other form on the website, the chapter can be deleted)
If you contact us via the contact options offered, the data you provide, such as gender, surname, first name, telephone number, email address and other data voluntarily provided by you, such as address, telephone number, etc., will be stored on the basis of Art. 6 para. 1 lit. f EU GDPR so that this data can be used to process and respond to your inquiry. We delete the data arising in this context after storage is no longer required, or processing is restricted if there are statutory retention obligations. This data will not be passed on to third parties without your consent.

3.8 Newsletter (If there is no newsletter, chapter can be deleted)
Our website offers the option of subscribing to a newsletter. When registering for the newsletter, the data from the input mask is transmitted. The date and time of registration are also recorded. The data is not passed on to third parties. The data is only used to send the newsletter.

4. duration of the storage of personal data 
We process and store your personal data for as long as is necessary for the fulfillment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e. for the duration of the entire business relationship (from the initiation, execution to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data may be stored for the period in which claims can be asserted against our company and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible. For operational data (e.g. system protocols, logs), shorter retention periods of twelve months or less generally apply. 

5. data security 
We take technical and organizational measures to protect your personal data from unauthorized access, misuse, loss and destruction. In particular, we use encryption for data transmission (SSL/TLS encryption) and have implemented other protective measures to ensure that the personal data processed via our website is protected as completely as possible. 

6. obligation to provide personal data
As part of our business relationship, you must provide the personal data that is necessary for the establishment and execution of a business relationship and the fulfillment of the associated contractual obligations (as a rule, you do not have a legal obligation to provide us with data). Without this data, we will generally not be able to conclude or execute a contract with you (or the entity or person you represent). The website can also not be used if certain information to secure data traffic (such as IP address) is not disclosed.

7 Rights of the data subject 
You have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing, as well as to the disclosure of certain personal data for the purpose of transfer to another body (so-called data portability) within the framework of the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR). Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or require it for the assertion of claims. If you incur costs, we will inform you in advance. We have already informed you about the possibility of withdrawing your consent in section 3. Please note that exercising these rights may conflict with contractual agreements and may have consequences such as premature termination of the contract or cost consequences. We will inform you in advance if this is not already contractually regulated. 

The exercise of such rights generally requires that you clearly prove your identity (e.g. by means of a copy of your identity card, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in section 1.

Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority.  The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

8 Changes
We may amend this privacy policy at any time without prior notice. The current version published on our website shall apply. If the data protection declaration is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.