Privacy policy

1. Overview of our data protection

 

1.1 General information
The following notes provide a simple overview of what happens to your data when you visit this website. Your data is any data by which you can be personally identified. For detailed information on data protection, please refer to our data protection declaration listed below this text.

 

1.2 Data collection on this website

Who is responsible for the data collection on this website?
The website operator carries out data processing on this website. You can find his contact details in the section “Note on the responsible party” in this privacy policy.

 

How do we collect your data?
On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form. Other data is collected automatically or after your consent when you visit the website through our IT systems. This is mainly technical data (e.g., Internet browser, operating system, or page request time). The collection of this data takes place automatically as soon as you enter this website

 

What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

 

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time in the future. Furthermore, you have the right to request the restriction of processing your personal data under certain circumstances. Moreover, you have the right to complain to the competent supervisory authority. For this and other questions on the subject of data protection, you can contact us at any time.

 

1.3 Analysis tools and third-party tools
When visiting this website, your surfing behavior may be statistically analyzed. This is done primarily with so-called analysis programs. Detailed information about these analysis programs can be found in the following privacy policy.

2. General notes and mandatory information

 

Data protection
The operators of these pages take the protection of your data very seriously. We treat your data confidentially by the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and use it for. It also explains how and for what purpose this is done. We want to point out that data transmission on the Internet (e.g., when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible party

The responsible party for data processing on this website is:

Kolinplatz 17
CH-6300 Zug
Telefon: +41 41 711 19 40
Mail: contact@bellefleur.ch

 

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of personal processing data (e.g., names, e-mail addresses, or similar).

 

Storage period
Unless a more specific storage period has been stated within this privacy policy, your data will remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted. Unless we have other legally permissible reasons for storing your data (e.g., retention periods under tax or commercial law), in the latter case, the data will be deleted after these reasons no longer apply.

 

Note on data transfer to the USA and other third countries
Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your data may be transferred to these third countries and processed there. We want to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject taking legal action against this. It can, therefore, not be ruled out that US authorities (e.g., intelligence services) process, evaluate, and permanently store your data located on US servers for monitoring purposes. We do not influence these processing activities.

 

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke the consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected.

 

Right to object to data collection in exceptional cases and to direct marketing (Art. 21 DSGVO)

If the data is processed based on art. 6 abs. 1 lit. E or F DSGVO, you have the right to object to processing your data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing exceeding your interests, rights, and freedoms to make, exercise, or defend legal claims (opposition to art. 21 para. 1 DSGVO). If your data is processed for direct marketing, you have the right to object at any time to the processing of personal data concerning you; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct advertising (objection under Article 21(2) of the GDPR).

 

Right of appeal to the competent supervisory authority
In the event of violations of the GDPR, data subjects shall have a right of appeal to a supervisory authority, particularly in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right of appeal is without prejudice to other administrative or judicial remedies.

 

Right to data availability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

 

ssL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses ssL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line. If ssL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

Encrypted payment transactions on this website
Suppose there is an obligation to transmit your payment data (e.g., account number in the case of direct debit authorization) to us after the conclusion of a contract with costs. In that case, this data is required for payment processing.

 

Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted ssL or TLS connection. You can recognize an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line. With encrypted communication, the payment data that you transmit to us cannot be read by third parties.

 

Information, deletion, and correction
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, the data processing, and, if necessary, a right to correct or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.

 

Right to restriction of processing
You have the right to request the restriction of processing your personal data. For this purpose, you can contact us at any time. The right to restriction of processing exists in the following cases:

 

– If you dispute the accuracy of our data stored, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing your personal data.

 

– If the processing of your data has happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.

– If we no longer need your data but need it to exercise, defend or assert legal claims, you have the right to request the restriction of processing your data instead of erasure.

 

– If you have objected according to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing your personal data.

 

– If you have restricted the processing of your data, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or reasons of an important public interest of the European Union or a Member State.

 

Objection to advertising e-mails
The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby objected to. The operators of the pages explicitly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

 

3. Social media

 

Instagram plugin
On this website, functions of the service Instagram are integrated. These functions are offered by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We want to point out that we, as the provider of the pages, do not know the content of the transmitted data or its use by Instagram. If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account.

The storage and analysis of the data are based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in ensuring the most excellent possible visibility on social media. As a corresponding consent was requested, the processing is carried out exclusively based on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook or Instagram. We and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to collecting the data and its forwarding to Facebook or Instagram. After the forwarding, the processing by Facebook or Instagram is not part of the joint responsibility. Our joint obligations have been set out in a standard processing agreement.

 

The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.

 

According to this agreement, we are responsible for providing privacy information when using the Facebook or Instagram tool and for the privacy-secure implementation of the device on our website. Facebook is responsible for the data security of Facebook or Instagram products. You can assert data subject rights (e.g., requests for information) regarding the data processed by Facebook or Instagram directly with Facebook. We must forward the subject data rights to Facebook if you assert them with us.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

– https://www.facebook.com/legal/EU_data_transfer_addendum,
– https://help.instagram.com/519522125107875 and
– https://de-de.facebook.com/help/566994660333381

 

For more information, please see Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

4. Plugins and tools

 

Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

You need to store your IP address to use the functions of Google Maps. This information is usually transferred to a Google server in the USA and stored there. The provider of this site does not influence this data transmission. If Google Maps is activated, Google may use Google Web Fonts for a uniform display of fonts. When calling up Google Maps, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an accessible location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. As a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

– https://privacy.google.com/businesses/gdprcontrollerterms/

– https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

 

More information on handling user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de

5. eCommerce and payment providers

 

Processing of data (customer and contract data)
We collect, process, and use personal data only to the extent necessary for establishing, content, or amending the legal relationship (inventory data). This is done based on Art. 6 (1) lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process, and use personal data about this website (usage data) only to the extent necessary to enable the user to use the service or to bill the user.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

 

Data transfer upon conclusion of the contract for online stores, retailers, and goods dispatch
If you order goods from us, we will pass on your data to the transport company entrusted with delivery and to the payment service provider entrusted with payment processing. Only such data is released that the respective service provider requires to fulfill its task. The legal basis for this is Art. 6 (1) lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Provided that you have given corresponding consent according to Art. 6 (1) lit. a DSGVO, we will hand over your e-mail address to the transport company entrusted with the delivery. This way, they can inform you by e-mail about the shipping status of your order; you can revoke your consent at any time.

 

Data transfer upon conclusion of the contract for services and digital content
We transmit personal data to third parties only if necessary in processing the contract, for example, to the credit institution entrusted with processing payments.

Further data transmission does not take place only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example, for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

 

Payment services
We integrate payment services from third-party companies on our website. When you purchase from us, your payment data (e.g., name, payment amount, account details, credit card number) is processed by the payment service provider to process the payment. For these transactions, the respective providers’ respective contract and data protection provisions apply. The payment service providers are used based on Art. 6 para. 1 lit. b DSGVO (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f DSGVO). As your consent is requested for specific actions, Art. 6 para. 1 lit. a DSGVO is the legal basis for data processing; consent can be revoked at any time in the future.