DATA PROTECTION STATEMENT

With this data protection statement, we inform you about how we process your personal data. Personal data is all information that relates to you as a person or with which you can be personally identified.

Table of contents

 

1. Who are we?

Egli AG Import and Distribution (hereinafter referred to as "we") operates the websites egli-import.ch, maya-popcorn.ch, halsfeger.ch, microlife.ch and emosan.ch. On these websites you can find out more about our organisation, make use of our services and get in touch with us.

We are responsible for the collection, processing and use of your personal data and ensure compliance with the Swiss Data Protection Act (nFDAP) and the European Data Protection Regulation (EU GDPR).  

With this data protection statement, we are informing you about how and why we process your personal data. In particular you will learn:  

  • which data we process and for what purpose;
  • who has access to your data and to whom we pass on your data;
  • the legal basis on which we process your data; 
  • how long we store your data
  • how we protect your data
  • when and how you can object to data processing; 
  • what rights you have and how you can assert these rights
  • which third-party tools we use on our websites.

We may change this data protection statement over time, e.g. if processing or the legal situation changes. To the extent that this is possible with reasonable effort, you will be notified separately in the event of significant changes.

This data protection statement applies to all processes in which we process your personal data, unless we inform you of this separately. This data protection statement applies in particular to the following processes: 

  • you visit our websites; 
  • you shop in our web-shops; 
  • you take advantage of our online offers; 
  • you subscribe to one of our newsletters; 
  • you contact us; 
  • you receive information or marketing communication from us; 
  • you take part in our competitions or prize draws; 
  • you take part in one of our loyalty programmes; 
  • you receive market research, opinion or customer surveys from us.

If you have any concerns or questions about data protection, you can primarily contact Egli AG Import and Distribution: 

    Egli AG Import and Distribution 

    Im Langhag 11 

    8307 Effretikon 

    +41 52 354 77 88 

    [email protected] 

If you submit a request to us in accordance with section 5, please always include proof of identity, i.e. a copy of your ID. If you are acting on behalf of a data subject, please submit a power of attorney.

6.1. Right to information

You can request information about which personal data about you that we process at any time.  

We may restrict or refuse to provide information if this information conflicts with our legal obligations, our own legitimate interests or public interests or the interests of a third party. The same applies if your request for information is manifestly querulous or an abuse of rights. In the event of disproportionate expenditure, we may request a contribution to the costs, about which we will inform you in advance.  

The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of enquiries, for legal or technical reasons or because we need further information from you. You will be informed of the deadline extension in a timely manner. 

 

6.2. Right to data disclosure

You have the right to request the personal data that you have provided to us in a common electronic file format. We may refuse, restrict or postpone the disclosure and transfer of your data for the same reasons as set out in section 6.1 or, in the event of disproportionate expenditure, request a contribution to the costs. 

 

6.3. Deletion and correction

You have the option to request the deletion or correction of your personal data at any time.  

We may reject the request if statutory provisions oblige us to store the data for a longer period or to store it unchanged or if your request conflicts with a permission. 

Please note that the exercise of your rights may be in conflict with contractual agreements and may have corresponding effects on the execution of the contract (e.g. premature cancellation of the contract or cost consequences). 

 

6.4. Right to withdraw

You are entitled to withdraw your consent to the processing of personal data at any time with effect for the future. To this end, we have created a simple opt-out option for certain processing operations. The legality of the data processing that has already taken place remains unaffected by the withdrawal. 

 

6.5. Right to object

You have the right to object to direct advertising, including profiling based on direct advertising, at any time. In the event of an objection, we will refrain from processing your data for direct marketing purposes in the future.

 

6.6. Legal process

If you are affected by the processing of personal data, you have the option of enforcing your rights in court or submitting a report to the responsible supervisory authority. The responsible supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: http://www.edoeb.admin.ch

We primarily process the personal data that is necessary to: 

  • make our websites and the offers contained therein accessible to you; 
  • make our websites and offers user-friendly; 
  • respond to your enquiries and address your complaints; 
  • process your order in our web-shops;  
  • fulfil our legal obligations (e.g. accounting obligations); and 
  • inform you about our new products and services.  

 

More detailed information on the personal data processed can be found in the individual purposes section (see section 9).  

Normally, you provide us with your personal data yourself, e.g. by sending it to us or when you communicate with us.  

In certain cases, we collect data about you, e.g. when you use our services, shop with us or surf our websites. In particular, this includes online identifiers such as your device identification data and tracking information (see section 9.3). In certain cases, we can also derive the data from existing data, e.g. by evaluating the behavioural data (see section 14).  

We may also obtain your personal data from third parties. This may, for example, involve the following third parties: 

  • people in your environment (e.g. address for delivery, powers of attorney); 
  • banks or payment processors (e.g. for purchases); 
  • credit agencies (e.g. for obtaining credit reports); 
  • online service providers (e.g. analysis services) and address dealers (e.g. for address updates); 
  • authorities (e.g. in connection with legal proceedings); 
  • public sources (e.g. public registers, media, internet).  

The personal data we receive from third parties may include the following categories: 

  • personal master data (name, address, date of birth, etc.); 
  • contact details (mobile phone number, e-mail address, etc.); 
  • financial data (e.g. account details, creditworthiness, etc.); 
  • online identifiers (e.g. IP addresses, etc.); 
  • location and traffic data; 
  • information on criminal or administrative measures or sanctions as well as social welfare measures;  
  • particularly sensitive data (e.g. information about your health).
9.1. Contract fulfilment

In order for us to conclude and process contracts with you, we normally need to process your personal data. This is the case, for example, if you place a customer order in one of our web-shops or another way, register for a customer account or take advantage of other offers from us in the online and offline area. The following categories of personal data in particular may be processed in order to fulfil the contract: 

  • personal master data (e.g. title, first name, surname, date of birth, gender, customer number, user name);
  • contact information (e.g. home address, e-mail address, telephone number, delivery address); 
  • financial data (e.g. payment details, credit report); 
  • transaction data (e.g. shopping basket); 
  • customer history (e.g. interaction with customer service, information on the handling of shortcomings or complaints).  

 

For the purpose of contract fulfilment, we may carry out all processing that is necessary for the initiation of the contract, the conclusion of the contract, the execution of the contract or for the enforcement of the contract. For example, we may obtain a credit report on you (with data on your solvency and payment behaviour) before concluding a contract in order to decide whether or in what form we enter into a contract with you. For products for which there is an age requirement, we may request proof of your date of birth by means of a copy of your passport or ID or automatically check your age using your passport or ID number. Your data may be passed on to third-party service providers (e.g. the post office) in order to deliver the goods you have ordered. For payment processing, there is also an exchange with the corresponding payment service provider. We may also process your data in connection with your enquiries about the product, to remedy shortcomings, to handle complaints, to reserve products or to evaluate products. 

 

9.2. Communication

We need to process your personal data so that we can communicate with you and respond to your concerns. This may be the case if you use a contact form from us, contact us by e-mail, post or telephone or another way, when we contact you, or for customer care purposes. We process the following data in particular for this purpose:  

  • Name and contact details (e.g. name, address, e-mail address, telephone number);  
  • Content of the communication (e.g. letter, e-mail, chat, comments on the website, telephone conversations); 
  • Boundary data of the communication (e.g. information on the type, time or, if applicable, location of the communication). 

 

We can carry out all processing operations that are necessary for communication with you. In particular, we can answer your enquiries or contact you if we have any questions. We may also use the communication data for quality assurance and training purposes. In this case, the data will only be used in pseudonymised or anonymised form whenever possible. Communication in connection with other purposes such as contract fulfilment (section 9.1), marketing (section 9.3) or market research (section 9.4) may also be collected. 

 

9.3. Marketing and information

We may process your personal data for marketing purposes so that we can make you attractive and suitable offers and send you interesting information about products, services, events, etc. This is the case, for example, when you make a purchase in one of our online shops, place an order with us in another way, register for a customer account, take part in a competition or prize draw, or when you take advantage of other offers from us in the online and offline area. We may process the following data in particular from you for marketing purposes: 

  • personal master data (e.g. title, first name, surname, date of birth, gender, customer number, user name); 
  • contact information (e.g. home/delivery address, e-mail address, telephone number); 
  • behavioural and transaction data (e.g. shopping basket details, shopping behaviour, participation in competitions, participation in events, information on subscribed services); 
  • online identifiers (e.g. device identification data, IP addresses); 
  • profile data or personal preference data (e.g. preferences in relation to products or services). 

 

The marketing purpose includes all processing that enables us to inform you appropriately about our offers. We can send you written and electronic information or offers. This includes, for example, the electronic dispatch of newsletters, e-mails or other electronic communications as well as the postal dispatch of advertising brochures, magazines or other printed matter. We can also send you vouchers or invite you to events, competitions and contests. We may also show you recommendations for products or services on our websites or notify you of cancelled orders. 

We can also personalise the relevant offers and information based on the data we have about you so that, whenever possible, you only receive information and offers that are relevant and interesting to you. We can carry out corresponding analyses and create profiles for this purpose (see section 14). We also measure and analyse the effectiveness of our advertising measures. 

We may also commission third-party providers to place advertising measures, run advertising campaigns and measure of conversions as well as carry out corresponding analyses (e.g. with the use of third-party cookies, see sections 16.2, 16.3).  

You can unsubscribe from marketing communications at any time. To that end, you will find a corresponding unsubscribe link in each e-mail communication. The relevant information for preventing marketing cookies (which lead to personalised ads, for example) can be found in the cookie policy (section 16.2). 

 

 
9.4. Other purposes

We may also process your personal data for other purposes. These include:

  • Assertion of legal claims: In order for us to be able to assert legal claims or defend against unjustified claims, we may need to process your personal data. This may involve distinct categories of personal data, depending on the case concerned.
  • Compliance with legal requirements and the prevention and investigation of criminal offences or other misconduct: We may be obliged to check compliance with legal requirements and to cooperate with the authorities in the event of legal violations. Personal data may be processed for these purposes. This may affect all relevant personal data. This is the case, for example, when enforcing the protection of minors (e.g. an age limit for the sale of alcohol) or other regulatory requirements, when disclosing information or documents to authorities if we are legally obliged to do so, or when cooperating in an official investigation (e.g. criminal prosecution or supervisory authority) if there is a legal obligation to do so.
  • Security: To ensure your security and the security of our business, we may need to process your personal data. This may affect all of your personal data. This also includes, in particular, the carrying out of random checks to verify the correct billing of goods, the analysis of behavioural and transaction data for the purpose of identifying suspicious behavioural patterns or the evaluation and analysis of the use of our systems.
  • Other purposes: We may process your personal data for other purposes, e.g. as part of our internal processes and administration. These other purposes include, for example, administrative purposes (such as the management of master data, accounting, data archiving as well as the testing, management and ongoing improvement of IT infrastructure) and the evaluation and improvement of internal processes. This also includes, for example, analysing usage behaviour on our websites to optimise them (see also section 16). The protection of other legitimate interests is also one of the other purposes that cannot be listed exhaustively.

We do not use your personal data arbitrarily, which is why we adhere to the following principles: 

  • We will inform you about what we do with your personal data, unless this is obvious. 
  • We only obtain as much personal data about you as is necessary for the fulfilment of the processing purposes. 
  • We take care to ensure proportionate processing. 
  • We protect your personal data from misuse and manipulation. 
  • We make sure that your personal data is correct. 

In addition, we process your personal data lawfully by ensuring that the data processing is based on one of the following aspects:  

  • your consent; 
  • the execution of a contract or precontractual measures; 
  • the fulfilment of legal requirements or within the framework of legal permission; 
  • the protection of vital interests; 
  • the carrying out of research, planning or statistics;  
  • our legitimate interests, provided that your interests do not outweigh ours. 

The following reasons in particular may be considered legitimate interests: 

  • the range and further development of our products, services, websites and other platforms on which we are present; 
  • communication with third parties and processing their requests (e.g. for the delivery of products and services to third parties); 
  • the testing and optimisation of needs analysis procedures for the purpose of addressing customers directly; 
  • the realisation of advertising and marketing activities as well as the conducting of market and opinion research; 
  • the fight against fraud and complying with legal regulations. 

We may be required to pass on your personal data to third parties if this is necessary in the context of contract processing (e.g. to the company entrusted with the delivery of the goods or the credit institution commissioned to process payment), or in order to make use of necessary technical or organisational services. Such third parties are contractually obliged to process your personal data exclusively on our behalf and in accordance with our instructions. In addition, third parties must ensure the security of your personal data by means of suitable technical and organisational measures. Service providers in the following areas in particular may be affected by such order processing: 

  • shipping and logistics (e.g. for the shipping of ordered goods); 
  • organisation and implementation of events; 
  • corporate administration, fiduciary services and auditing; 
  • payment and collection services; 
  • IT services (IT infrastructure, web hosting, backup and storage, security, etc.); 
  • anti-fraud measures; 
  • provider of tracking services, conversion measurement, user analyses, content delivery, web design etc.; 
  • advertising and marketing (e.g. for sending communications such as mailings, postcards, newsletters and for measuring reach, display advertising, organising competitions, surveys and market research); 
  • other advisory services and legal representation. 

As independent controllers, our service providers may also process data about how their services are used and other data generated in the course of using their services for their own legitimate interests (e.g. for statistical analysis or billing). The service providers provide information about independent data processing in their respective data protection statements. 

We may also disclose personal data to authorities at home and abroad if we are legally obliged or authorised to do so or if this is necessary to protect our legitimate interests. The authorities process the data they have received from us under their own responsibility. 

To the extent possible, we process your personal data in Switzerland or the European Economic Area (EEA). Your personal data may be transmitted to service providers abroad as part of order processing (see section 10). In exceptional cases, the transmission may take place worldwide. 

Data will only be transmitted to a third country in the absence of adequate data protection in the third country concerned if we have agreed on suitable guarantees with the recipient to ensure data protection (e.g. standard contractual clauses of the EU, available at: https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de. A transmission based on standard contractual clauses only takes place after a prior risk assessment. If the risk assessment shows that the recipient cannot comply with the standard contractual clauses, we will ensure that additional technical measures are taken to safeguard the integrity and confidentiality of the personal data transmitted.

We only process particularly sensitive personal data (e.g. health data) if this is absolutely necessary for the provision of services and you have disclosed the relevant data to us or have consented to the processing.  

During certain ordering processes, we can draw conclusions about your health data. Such a conclusion is drawn, for example, when we deliver medical devices directly to patients. The processing of health data serves only to execute the contract and is carried out with the utmost care and strict confidentiality. The health data will not be used for any other purpose. 

We only store personal data for as long as is necessary to fulfil the individual purposes for which the data was collected or if we are legally obliged to store it longer. 

We store certain data (e.g. contract data) longer, as we are obliged to do so by legal regulations. Such retention requirements arise, for example, from accounting regulations and tax law. According to these regulations, business communications, signed contracts and accounting documents must be stored for up to 10 years. Provided that we no longer need such data from you to provide the services, the data will be blocked and we will only use it for legally defined purposes.

We store your personal data securely and take appropriate technical and organisational measures to protect your personal data from loss, access, misuse or alteration. Our contractual partners and employees who have access to your personal data are obliged to comply with data protection regulations. 

Our websites use SSL or TLS encryption for security reasons and to protect the transmission of confidential information (e.g. your orders or enquiries). You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. Payment transactions via the usual means of payment (e.g. Visa/MasterCard, etc.) are made exclusively via an encrypted SSL or TLS connection. 

As complete data security cannot be guaranteed for communication by e-mail, we recommend using an encrypted form of transmission for confidential information. 

The following information shows you how we process personal data or other data in connection with our websites. This is done in particular using cookies or similar technologies. The following provisions apply to our websites, even if only one website is referred to in each case. 

 

16.1. Provision of the website and creation of log files

What information do we receive and how do we use it? 

When you visit our websites, certain data is automatically stored on our servers or on servers of services and products that we have obtained and/or installed. This is done for the purposes of system administration, security, tracking or for statistical analyses. In particular, this involves the following data:

  • the name of your internet service provider;
  • your IP address (if need be);
  • referrer URL (the previously visited page)
  • provider
  • the version of your browser software;
  • the operating system of the computer used to access our websites;
  • the date and time of access;
  • the amount of data transmitted;
  • browser type;
  • host name of the computer
  • access type.

 

How can you prevent data collection?
The data is only stored for as long as is necessary to fulfil the purpose for which it was collected. Accordingly, the data is normally deleted at the end of each session. The storage of log files is absolutely necessary for the operation of the websites. You therefore have no option to object to this.

 

16.2. Cookies

How do cookies work and what purpose do they serve? 
Cookies are text files that are stored on the operating system of your device with the help of the browser when you access a website. Cookies contain a unique identification number (ID) that enables us to distinguish individual visitors from others. As a rule, however, you will not be identified. Cookies do not cause any damage to your computer and do not contain any viruses. They are also used to significantly improve user interaction so that certain settings are saved for you, and they are essential for some technical controls (e.g. session or shopping basket management).

What types of cookies are there? 
Most of the cookies we use are so-called "session cookies", which are automatically deleted at the end of your visit.

Other cookies remain stored on your end device until you delete them (normally, however, they are deleted after 2 years at the latest). The purpose of these cookies is to save your preferences (e.g. language and location settings), to ensure the fast provision and attractive presentation of website content (e.g. through the use of fonts and content delivery networks), to analyse the use of this website for statistical evaluation and for continuous improvements and marketing purposes (usually by means of third-party cookies, see below).

Which cookies or similar technologies do we use?  
We may use the following types of cookies or similar technologies:

  • Necessary cookies: These include cookies that are necessary for a website and its functions to be used. These cookies ensure, for example, that form data already entered is not deleted when switching between pages and that shopping basket contents are not lost.
  • Performance cookies: Performance cookies allow us to carry out analyses by collecting information about how a website is used. This allows us to see, for example, how visitors move around a website. We can also measure the loading times or the behaviour of the website on different browser types. Thanks to performance cookies, we can constantly improve our websites and the user experience.
  • Function cookies: Thanks to these cookies, we can save certain data that you enter on our websites so that you do not have to enter it again (e.g. location, language, form data, etc.). This enables us to improve the user-friendliness of our websites.
  • Marketing cookies: Marketing cookies enable us (or our marketing partners) to present you with advertisements on our websites (or third-party websites) that are tailored to your surfing behaviour and are of interest to you.

 

How can you prevent data collection via cookies? 
The cookies are stored on your computer. You therefore have full control over the use of cookies. You can delete them completely or deactivate or restrict transmission by changing the browser settings. You can also use a browser extension to block tracking by certain third parties. Further information on the use of cookies can be found on the help pages of your browser. After deactivating cookies, it may no longer be possible to use all the functions on our websites to their full extent.

Below you will find instructions for the most common browsers:

 

For cookies that are used for performance and reach measurement or advertising, a general objection ("opt-out") is generally possible for numerous services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA). 

 

 

16.3. Tracking tools

We may use tracking tools on our websites that help us to analyse the use of our online services and to target visitors with marketing measures. Below you will find a list including an explanation of the most important tracking tools that we use. 

 

a. Google Analytics

How does Google Analytics work? 
We use Google Analytics, a service provided by Google Ireland Ltd (Google Building Gordon House, Barrow St, Dublin 4, Ireland). Google uses cookies that are stored on your device and enable website usage to be analysed. The information generated by the cookie regarding your usage of this website is usually transmitted to a Google server in the US and stored there. We have added the code "anonymiseIP" to Google Analytics. This ensures that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. 

Why do we use Google Analytics? 
Google evaluates the data collected on our behalf so that we can get an idea of the visits to and user behaviour on our websites. This enables us to improve our services and website content as well as their design. 

How can you prevent the collection of your data via Google Analytics? 
You can prevent the storage of cookies by adjusting the settings in your browser accordingly (see section 16.2). You can deactivate Google Analytics by downloading and installing the Google browser add-on. 

 

 

b. Google Ads conversion tracking or similar services from other providers

With Google Ads conversion tracking or comparable services from other providers, a cookie is set on your computer if you have reached one of our websites via a corresponding advert. This is done for the purpose of tracking and determining performance. No information is collected that could be used to identify the user. Our legitimate interests in determining performance serve as the legal basis. The cookies are automatically deleted after 30 days. 

Right to object 
If you do not wish to participate in the tracking process, you can prevent the necessary cookies from being set in your browser settings.  

You can find more information about Google Ads and Google conversion tracking in Google's privacy policy. 

 

c. Google Tag Manager

We use Google Tag Manager on our websites. This collects data about user behaviour on our websites and forwards it to our analysis tools. Google Tag Manager does not have access to the data, it only collects the data.  

As Google Tag Manager does not process any personal data per se, please refer to the information on the respective tracking services and the Google Tag Manager usage guidelines. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html. 

 

 

16.4. CDN services

CDN (Content Delivery Network) services are implemented on our websites in order to optimise loading times and enable faster provision of content. The external CDN services jsDelivr and Cloudflare are used to integrate the JavaScript and CSS libraries. The integration of the JavaScript and CSS libraries via CDN services enables faster delivery of content to you. The use of these services reduces loading times and optimises the user experience. 

When using CDN services, certain data, such as IP addresses, may be transmitted to the CDN provider's servers and processed. However, we have taken security precautions to ensure the protection of data. 

Version 1.0 / August 2023