Last updated on: 23.06.2024

We attach great importance to the transparent handling of personal data. This privacy policy provides information about which personal data we collect, for what purpose and to whom we pass it on. To ensure a high level of transparency, this privacy policy is regularly reviewed and updated.

1. What services we use

• Cloudflare CDN
• Shopping cart functionality
• Google Pay
• Shopify

2. Contact information

If you have any questions or concerns about how we protect your data, you can contact us at any time by email at contact@wirzundweli.ch. The person responsible for data processing carried out via this website is:

Wirz & Weli Worlds
Stansstaderstrasse 39
6370 Stans
Switzerland

Person responsible for data protection:
Prisca Zehnder
contact@wirzundweli.ch
+41 79 373 69 40

3. General principles

3.1 What data do we collect from you and from whom do we receive this data

We primarily process personal data that you send to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may be in the following categories:

• Personal master data (name, address, date of birth, etc.);
• Contact details (mobile number, email address, etc.);
• Financial data (e.g. account details);
• Online identifiers (e.g. cookie identifiers, IP addresses);
• Location and traffic data;
• Sound and image recordings;
• particularly sensitive data (e.g. biometric data or information about your health).

3.2 Under what conditions do we process your data?

We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We ensure that processing is transparent and proportionate.

If, in exceptional circumstances, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. The following may be considered justification:

• your consent;
• the execution of a contract or pre-contractual measures;
• our legitimate interests, unless your interests outweigh them.

3.3 How can you withdraw your consent?

If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.

You have the option to revoke your consent at any time by sending an email to the address provided in the imprint. This does not affect data processing that has already taken place.

3.4 In which cases can we pass on your data to third parties?

a. Principle

We may be dependent on using the services of third parties or affiliated companies and commissioning them to process your data (so-called data processors). The categories of recipients are:

• Accounting, trust and auditing companies;
• Consulting companies (legal advice, taxes, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers;
• Providers of tracking, conversion and advertising services.

We ensure that these third parties and our affiliates comply with data protection requirements and treat your personal data confidentially.

We may also be required to disclose your personal data to authorities.

b. Visiting our social media channels

We may have embedded links to our social media channels on our website. This will be visible to you in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels.

In this case, the social media providers will learn that you are accessing their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or how it is used by the operators.

c. Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are obliged to protect data to the same extent as we are. The transfer can take place worldwide.

If the level of data protection does not correspond to that of Switzerland, we carry out a prior risk assessment and contractually ensure that the same level of protection is guaranteed as in Switzerland (e.g. using the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following link. https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 How long do we keep your data?

We only retain personal data for as long as necessary to fulfil the individual purposes for which the data was collected.

Data that we store when you visit our website is retained for twelve months. An exception applies to analytics and tracking data, which may be retained for longer.

We store contract data for longer because we are required to do so by law. In particular, we must store business communications, concluded contracts and booking documents for up to 10 years. If we no longer need such data from you to carry out the services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 How do we protect your data?

We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases it will be necessary for us to forward your enquiries to companies affiliated with us. In these cases too, your data will be treated confidentially.

On our website we use the SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser.

3.7 What rights do you have?

a. Right to information

You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to contact@wirzundweli.ch.

You also have the right to receive your data in a common file format if we process your data automatically and if:

• You have given your consent for the processing of this data; or
• You have disclosed data in connection with the conclusion or execution of a contract.

We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate or public interests or the interests of a third party.

The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons, or because we require further information from you. You will be informed of the extension in good time, at least in text form.

b. Deletion and rectification

You have the right to request that your data be deleted or corrected at any time. We may reject your request if legal regulations require us to store the data for a longer period or without changes, or if a legal basis conflicts with your request.

Please note that the exercise of your rights may conflict with contractual agreements and may have corresponding effects on the implementation of the contract (e.g. early termination of the contract or cost consequences).

c. Legal recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a report with the responsible supervisory authority. The responsible supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

3.8 Changes to the Privacy Policy

We may change this privacy policy at any time. The changes will be published on https://wirzundweli.ch/ and you will not be informed separately.

4. Individual data processing operations

4.1 Providing the website and creating log files

What information do we receive and how do we use it?

By visiting https://wirzundweli.ch/, certain data is automatically stored on our servers or on servers of services and products that we purchase and/or have installed for the purposes of system administration, statistical or backup purposes or for tracking purposes. This includes:

• the name of your Internet service provider;
• Your IP address (where applicable);
• the version of your browser software;
• the operating system of the computer used to access the URL;
• the date and time of access;
• the website from which you visit URL;
• the search terms you used to find the URL.

Why are we allowed to process this data?

This data cannot be assigned to a specific person and is not merged with other data sources. The log files are stored to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?

The data is only stored for as long as it is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted at the end of each session. The storage of log files is essential for the operation of the website, so you have no option to object to this.

4.2 Cloudflare CDN

Our website uses the Content Delivery Network (CDN) service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"). A CDN helps deliver content from our website faster by distributing copies of the content to a network of fast loading servers.

When you visit our website, your IP address is transmitted to Cloudflare and cookies may be placed in your browser that are necessary for the optimization and security of the service. Cloudflare uses this data to speed up data traffic between our web server and your device and to protect our website from attacks.

4.3 Shopping cart function (Cart Functionality)

Our website offers a shopping cart functionality that allows visitors to select products or services and reserve them for purchase. During this process, data about the selected products, quantity and total price may be stored.

To facilitate the purchase process, our website may also store information such as your name, shipping and billing address, email address and other data relevant to the purchase. This data is used to facilitate the purchase process and provide you with a seamless user experience.

The data collected as part of the shopping cart functionality is stored on our servers and is only accessible to authorized persons who are responsible for managing and processing orders. This data will not be passed on to third parties without your express consent, unless this is required by law or necessary for the execution of the contract, e.g. for the delivery of the ordered products by a third party.

To improve the user experience, our website also uses cookies that allow the contents of your shopping cart to be saved even if you leave the website and return later. You can delete or block these cookies at any time via your browser settings.

4.4 Google Pay

For processing payment transactions on our website, we offer Google Pay as a payment option, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Pay enables you to make payments using the payment methods stored in your Google account without having to re-enter this payment information on our website.

If you choose to pay with Google Pay, certain transaction data, including details of the product or service purchased and the transaction amount, will be transmitted to Google. Google may also collect other information, such as your IP address or information about your device.

Google uses this information to process payments, prevent fraud, and improve its services. Google may combine this information with other information collected from your use of other Google services.

4.5 Shopify

Our website uses services from Shopify, an e-commerce platform offered by Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON, K2P 2L8, Canada. We use Shopify to provide you with an optimized online shopping experience and to sell our products online.

When you shop in our online store, your order data, including personal information such as name, address and payment information, will be transferred to Shopify to complete the purchase process. Shopify also uses cookies and other technologies to improve the shopping experience and ensure the security of the shopping process.

BrainBox Generators

BrainBox Generators is a service provided by BrainBox Solutions GmbH to identify all data protection-relevant services on a website and, among other things, to help with the creation of the data protection declaration. No personal data is collected or processed.