Data Protection

1. Introduction

With the following information, we would like to give you as a data subject an overview of the processing of your personal data by us and your rights under data protection laws. It is generally possible to use our website without entering personal data. However, if you wish to make use of special services of our company via our website, it may be necessary to process personal data. If there is no legal basis for the processing of personal data, we generally ask for your consent.

The processing of your personal data, such as your name, address or e-mail address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to our company. This privacy policy is intended to inform you about the scope and purpose of the personal data we collect, use and process.

As the data controller, we have taken numerous technical and organizational measures to ensure that the personal data processed via this website is protected as comprehensively as possible. Nevertheless, data transmissions on the Internet can generally have security gaps, so that absolute protection cannot be guaranteed. You can therefore also transmit personal data to us by alternative means, for example by telephone or post.

2. Note on the responsible body

The controller within the meaning of the GDPR is

Delta Lektorat, Flawilerstrasse 31, 9500 Wil, Switzerland

Representative of the controller: Meriton Ceka

For questions and concerns regarding the processing of your data and your data protection rights towards us, please contact

Delta Lektorat

Data protection office

Flawilerstrasse 31

9500 Wil

Wil, Switzerland

E-mail: datenschutz@deltalektorat.ch

3. Definitions of terms

This Privacy Policy is based on the terminology used by the European Directive and Regulation Giver in the formulation of the General Data Protection Regulation (GDPR). The aim of our privacy policy is to be understandable and easily accessible for the public as well as for our customers and business partners. To achieve this, we would first like to explain the terms used in this statement.

In this privacy policy, we use the following terms, among others

3.1 Personal data

Personal data includes all information that relates to an identified or identifiable natural person. A person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social aspects of that person’s identity.

3.2 Data subject

A data subject is any natural person who is identified or identifiable and whose personal data is processed by the controller (our company).

3.3 Processing

Processing means any operation or set of operations which is performed on personal data, whether or not by automated means. This includes activities such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of data.

3.4 Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting its future processing.

3.5 Profiling

Profiling includes any form of automated processing of personal data that is used to evaluate specific personal characteristics relating to a natural person. This includes, in particular, the analysis or prediction of aspects such as work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movement patterns of that natural person.

3.6 Pseudonymization

Pseudonymization refers to the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information. This requires that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data cannot be attributed to an identified or identifiable natural person.

3.7 Processor

A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

3.8 Recipient

Recipient is a natural or legal person, public authority, agency or other body to whom personal data is disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

3.9 Third party

A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorized to process the personal data.

3.10 Consent

Consent is the voluntary, specific, informed and unambiguous agreement of a data subject, expressed by a statement or other clearly affirmative act. The data subject thereby signals their consent to the processing of their personal data.

4 Legal basis of the processing

Art. 6 para. 1 lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which the data subject is party, such as operations necessary for the supply of goods or the provision of a service, the processing is based on Art. 6 para. 1 lit. b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another person. This would be the case if a person were injured in our company and information such as name, age, health insurance data or other important data would have to be passed on to medical personnel or third parties. The processing would then be based on Art. 6 para. 1 lit. d GDPR.

Finally, processing operations could be based on Art. 6 para. 1 lit. f GDPR. This legal basis includes operations that are not covered by any of the aforementioned bases if the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not prevail. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. The latter took the view that a legitimate interest could be assumed if the data subject is a customer of our company (Recital 47 Sentence 2 GDPR).

4.1 Coaches & editors

If you work as a coach or lecturer and have given us your contractual consent in accordance with Art. 6 para. 1 lit. a) GDPR, we reserve the right to publish your name, your specialist area, a profile description and, if available, a picture of you on selected websites operated by us.

In addition, we store your contact information (e-mail address and telephone number) for communication purposes, price information, quotation preparation and service provision as well as your billing address for billing purposes. We process this data on the basis of Art. 6 para. 1 lit. b) GDPR to fulfill the contract or to carry out pre-contractual measures.

4.2 Data protection for applications and in the application process

Delta Lektorat collects and processes the personal data of applicants exclusively for the purpose of handling the application process. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by e-mail or via a form on the website. If Delta Lektorat concludes an employment contract or a contract for cooperation on a freelance basis (as a coach or editor) with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no contract is concluded with the applicant, the application documents will be deleted three months after receipt of the documents, provided that no other legitimate interests on the part of Delta Lektorat prevent deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

5 Transmission of data to third parties

Your personal data will not be transmitted to third parties for purposes other than those listed below.

Your personal data will only be passed on to third parties if:

1. you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
2. the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is permissible to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
3. in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
4. this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

6. technology

6.1 SSL/TLS encryption

This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that are sent to us as the operator. You can recognize an encrypted connection by the fact that the address line of the browser displays “https://” instead of “http://” and a lock symbol appears in your browser line.

This technology is used to secure the data you transmit.

6.2 Data collection when visiting the website

When you use our website for informational purposes only, i.e. without registering or transmitting information, we only collect the data that your browser sends to our server (in so-called “server log files”). Each time you or an automated system accesses our website, certain general data and information is collected and stored in the server log files. The following can be recorded

1. Browser types and versions used,
2. the operating system used by the accessing system
3. the website from which an accessing system accesses our website (so-called referrer)
4. the sub-websites which are accessed via an accessing system on our website
5. the date and time of access to the website
6. a shortened Internet Protocol address (anonymized IP address),
7. the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your person. Rather, this information is required in order to

1. deliver the content of our website correctly
2. optimize the content of our website and the advertising for it
3. ensure the long-term functionality of our IT systems and the technology of our website, and
4. to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

The data and information we collect is evaluated statistically and used to improve data protection and data security in our company. Our aim is to ensure a high level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data provided by a data subject.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in data collection arises from the above-mentioned purposes.

7. cookies

7.1 General information on cookies

On our website, we use cookies, small files that are automatically created by your browser and stored on your device (laptop, tablet, smartphone, etc.) when you visit our site.

The cookies store information related to the device used. However, this does not mean that we directly learn your identity.

Cookies are used to make the use of our website more convenient for you. For example, we use session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted after you leave our site.

We also use temporary cookies that are stored on your device for a specified period of time to improve user-friendliness. When you visit our site again, it automatically recognizes that you have already been there and which entries and settings you have made so that you do not have to make them again.

Furthermore, we use cookies to statistically record the use of our website and to evaluate it for the optimization of our offer. These cookies allow us to automatically recognize that you have already visited our website when you return. They are automatically deleted after a specified period of time.

7.2 Legal basis for the use of cookies

The data processed by cookies, which are required for the proper functioning of the website, are therefore necessary to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

For all other cookies, you have given your consent to this via our opt-in cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.

8 Contents of our website

8.1 Data processing for order processing

The personal data collected by us in the context of contract processing will be forwarded to the transport company commissioned with the delivery of the goods, insofar as this is necessary for the delivery of the goods. Your payment information will be transmitted to the relevant credit institution for the processing of the payment. If you use payment service providers, we will inform you separately. The legal basis for the transfer of this data is Art. 6 para. 1 lit. b GDPR.

8.2 Making contact / contact form

If you contact us (e.g. via a contact form or by email), personal data will be collected. The type of data collected when using a contact form can be found in the respective form. This data is used and stored exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is also to be used as the legal basis. Your data will be deleted after final processing of your request, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no statutory retention obligations to the contrary.

8.3 Services / digital goods

We only pass on personal data to third parties if this is necessary for the execution of the contract, for example to the financial institution responsible for processing payments.

Your data will not be transmitted beyond this or only if you have expressly consented to such transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

9 Our activities in social networks

In order to communicate with you on social networks and inform you about our services, we have our own pages on these platforms. When you visit our social media pages, we are jointly responsible with the provider of the respective social media platform within the meaning of Art. 26 GDPR with regard to the processing of personal data triggered by this.

We are not the original providers of these sites, but use them within the scope of the options provided by the respective providers.

It is possible that your data may also be processed outside the European Union or the European Economic Area. This may entail data protection risks, as it may be more difficult to protect your rights such as access, erasure, objection, etc. The providers of social networks often use the data directly for advertising purposes or to analyze user behavior without us having any influence over this. If user profiles are created, cookies are often used or the user behavior is assigned directly to your profile on the social networks (if you are logged in there).

Personal data is processed on the basis of our legitimate interest and the interest of the providers in accordance with Art. 6 para. 1 lit. f GDPR in order to communicate with you in a timely manner and to inform you about our services. If you have given the providers your consent to data processing, the legal basis is based on Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.

As we do not have access to the providers’ databases, we recommend that you assert your rights (e.g. to information, rectification, erasure, etc.) directly with the respective providers. Below you will find further information on data processing in social networks as well as options for exercising your rights of objection or revocation (so-called opt-out) with the social network providers we use.

. The following social networks are integrated into our website through links:

9.1 YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

Privacy policy: https://policies.google.com/privacy

9.2 LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.

Privacy policy: https://www.linkedin.com/legal/privacy-policy

9.3 Instagram

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.

Privacy policy: https://help.instagram.com/519522125107875

10. web analysis

10.1 LinkedIn pixel

The LinkedIn pixel of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) may be used on our website.

The LinkedIn pixel makes it possible to track user behavior during visits to our website. The usage data generated by the service is usually transferred to servers in a LinkedIn data center and stored there. This data enables us to optimize our offer and the user experience. LinkedIn uses the information collected to measure the effectiveness of advertisements and to display LinkedIn advertisements. If you are logged into your LinkedIn account during your visit to our website, LinkedIn may be able to link the data to your LinkedIn user account. If you do not want LinkedIn to collect data, you can adjust the settings in your LinkedIn account.

The legal basis for the processing of your data is based on our legitimate interest in analyzing user behavior in order to optimize our offering. Further information can be found at: linkedin.com/legal/privacy-policy.

10.2 Facebook Pixel

This website uses the “Facebook pixel” from Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (‘Facebook’). With your express consent, it enables us to track the behavior of users who have seen or clicked on a Facebook ad. This method is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to improve advertising measures in the future.

The data we collect is anonymous and does not provide us with any information about the identity of the user. However, Facebook stores and processes the data, which enables a connection to the respective user profile. Facebook may use the data for its own advertising purposes in accordance with its Data Usage Policy(https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to place advertisements on Facebook and outside of Facebook. A cookie may be stored on your device for this purpose. This processing only takes place with your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Facebook Inc. is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

To deactivate the use of cookies on your device, you can set your Internet browser so that cookies can no longer be stored on your device or cookies that have already been stored are deleted. However, deactivating all cookies may mean that some functions on our websites are no longer available. You can also deactivate the use of cookies by third-party providers such as Facebook on the website of the Digital Advertising Alliance: https://www.aboutads.info/choices/

In addition, you can deactivate cookies for reach measurement and advertising purposes via the following websites

1. http://optout.networkadvertising.org/
2. Your ad choices

Please note that this setting will also be deleted if you delete your cookies.

10.3 Google Analytics 4 (G4)

On our websites, we use Google Analytics 4 (G4), a web analytics service provided by Google Ireland Limited(https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google”). Pseudonymized user profiles are created and cookies (see section “Cookies”) are used. The information generated by the cookie about your use of this website, such as

1. Browser type/version,
2. operating system used,
3. Referrer URL (the previously visited page),
4. Host name of the accessing computer (IP address),
5. time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of our website, to compile reports on website activity and to provide other services relating to website activity and internet usage for market research purposes and to tailor the design of this website to meet requirements. This information may also be passed on to third parties if this is required by law or if third parties process the data on our behalf. Your IP address will never be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned (IP masking).

You can prevent the installation of cookies by setting your browser software accordingly; however, it is possible that not all functions of the website will then be fully usable.

This processing will only take place if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and its processing by Google by downloading and installing a browser add-on(https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially on mobile devices, you can prevent Google Analytics from collecting data by clicking on this link: Deactivate Google Analytics. This sets an opt-out cookie that prevents the future collection of your data when you visit this website. This opt-out cookie only works in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help(https://support.google.com/analytics/answer/6004245?hl=de).

11 Advertising

11.1 Newsletter

If you subscribe to our free newsletter, you provide us with your e-mail address and optionally your name and address. We also record the IP address of the internet connection from which you access our website, as well as the date and time of your registration. During the registration process, we obtain your consent to send you the newsletter, inform you about the content and refer you to this privacy policy. We use the data collected exclusively for sending the newsletter and do not pass it on to third parties.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR.

You can revoke your consent to receive the newsletter at any time for the future in accordance with Art. 7 para. 3 GDPR. Please inform us of your revocation or use the unsubscribe link contained in every newsletter.

11.2 Google Ads with conversion tracking

Google Ads, an online advertising service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is integrated on our website. Google Ads makes it possible to place ads both in Google search results and in the Google advertising network. Advertisers can define keywords in advance which mean that an ad will only appear in Google search results if a corresponding search result is retrieved using the search engine. In the Google advertising network, the ads are distributed to relevant websites based on these keywords.

Google Ads is used to promote our website through targeted, interest-based advertising on third-party websites and in Google search results, as well as to display third-party advertising on our website.

If you reach our website via a Google ad, Google places a conversion cookie on your device. This cookie has a limited validity and is not used for personal identification. It enables us and Google to track whether you have visited certain pages on our website. The data generated by the conversion cookie is used by Google to compile visit statistics for our website, which in turn help us to measure the success of our ads and to optimize future advertising measures. Google may pass this data on to third parties under certain circumstances.

You can prevent the setting of cookies at any time by selecting the appropriate settings on your browser. However, this may mean that you will not be able to use all the functions of our website to their full extent. You can also object to interest-based advertising by Google by making the appropriate settings at www.google.de/settings/ads.

This data will only be processed with your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Further information on Google’s data protection practices can be found at https://www.google.de/intl/de/policies/privacy/.

11.3 Bing Ads with conversion tracking

Each Bing Ads customer receives an individual cookie. It is therefore not possible to track cookies via the websites of other Bing Ads customers. Information obtained through the conversion cookie helps to compile statistics for Bing Ads customers who use conversion tracking. They learn how many users have clicked on their ad and visited a page with a conversion tracking tag, but do not receive any information that personally identifies the users.

If you do not wish to participate in tracking, you can refuse the setting of cookies, e.g. by changing your browser settings to generally prevent the automatic setting of cookies. You can also block Bing Ads cookies by configuring your browser to block cookies from the domain“https://advertise.bingads.microsoft.com”.

You can find information on data collection, processing and use by Microsoft in Microsoft’s privacy policy(https://privacy.microsoft.com/de-de/privacystatement). It also explains options for protecting your privacy and suppressing usage-based online advertising.

12 Plugins and other services

12.1 Google reCAPTCHA

On our website, we use the reCAPTCHA function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This function is mainly used to distinguish whether an entry is made by a person or abusively by automated, machine processing. The IP address and any other data required for the reCAPTCHA service are also transmitted to Google.

This data processing only takes place if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Google Ireland Limited is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection that applies in the EU.

Further information about Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

12.2 Google WebFonts

Our website uses Google Web Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display fonts uniformly. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

To do this, the browser you are using must establish a connection to Google’s servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts serves the purpose of a uniform and appealing presentation of our online offers.

This data processing only takes place after you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Google Ireland Limited is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

12.3 Contact Form 7

The Contact Form 7 plugin is used to create contact forms. It is used to forward encrypted form data to our company’s email address without storing it additionally, for example in the WordPress database. Further information and data protection provisions about Contact Form 7 can be found at https://de.wordpress.org/plugins/contact-form-7/ and https://rocklobster.in/. Contact Form 7 is open source software, and communication between the browser and server takes place exclusively via HTTPS (SSL/TLS) encryption. The use of Contact Form 7 is based on Art. 6 para. 1 f) GDPR due to our legitimate interest in a technical solution for our contact form. If Contact Form 7 is used together with cookies, the use is based on Art. 6 para. 1 a) GDPR, i.e. your consent, which we obtain as part of the cookie consent with the corresponding plugin.

12.4 Cookie consent

To obtain your consent to the storage of cookies, we use the “Cookie Notice” plugin from the provider Digital Factory, based in Poland. Further information can be found at https://dfactory.eu/about/. The use of this plugin is based on our legitimate interest in enabling the use of other plugins in accordance with Art. 6 para. 1 f) GDPR. After a legal assessment, we have come to the conclusion that the use of this plugin is reasonable, necessary and permissible in order to obtain your consent to the use of cookies. You have the option of managing and blocking the use of plugins via your browser. You can also refuse your consent at any time.

12.5 Mailchimp

We use MailChimp, a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, to send newsletters. Further data protection information from The Rocket Science Group can be found at http://mailchimp.com/legal/privacy/.

When you register for the newsletter, the data requested, such as your e-mail address and optionally your name and address, will be processed by The Rocket Science Group. We also store your IP address and the date and time of your registration. During the registration process, your consent to receive the newsletter is obtained, the content is specified and reference is made to this privacy policy.

The Rocket Science Group newsletter contains a web beacon (tracking pixel), which we use to record whether and when you have read the newsletter and clicked on links contained therein. In addition to technical data, such as your IT system and your IP address, the data is stored in order to improve our newsletter offering and adapt it to the needs of our readers.

The legal basis for sending the newsletter and the analysis is Art. 6 para. 1 lit. a) GDPR.

You can revoke your consent to receive the newsletter at any time in accordance with Art. 7 para. 3 GDPR. Please inform us of your revocation or use the unsubscribe link contained in every newsletter.

13. payment providers

13.1 PayPal

Components of PayPal, an online payment service, are integrated on our website. Payments can be made via PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of processing payments via credit cards, even if no PayPal account is available. A PayPal account is managed via an e-mail address, which replaces a traditional bank account number. PayPal enables online payments to third parties or the receipt of payments. PayPal also offers trustee functions and buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select PayPal as a payment option during the ordering process in our online store, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transmission of the personal data required for payment processing.

The personal data transmitted to PayPal generally includes your name, address, e-mail address, IP address, telephone number or other data required for payment processing. Data related to the respective order is also required for processing the purchase contract.

The transmission of the data serves the purpose of payment processing and fraud prevention. We transmit personal data to PayPal if there is a legitimate interest in the transmission. The personal data collected by PayPal may be passed on to credit agencies for identity and credit checks.

PayPal may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfill contractual obligations or if the data is processed on behalf of PayPal.

You can withdraw your consent to the processing of personal data from PayPal at any time. However, a revocation has no influence on data that must be processed for payment processing.

The use of PayPal is in the interest of smooth payment processing, which constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

PayPal’s privacy policy can be viewed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

14 Your rights as a data subject

14.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

14.2 Right to information Art. 15 GDPR

You are entitled to request information free of charge at any time about the personal data we have stored about you and a copy of this information in accordance with the legal requirements.

14.3 Right to rectification Art. 16 GDPR

You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

14.4 Erasure Art. 17 GDPR

You are entitled to demand that we erase your personal data without undue delay if one of the reasons specified by law applies and the processing or storage of this data is not necessary.

14.5 Restriction of processing Art. 18 GDPR

You have the right to demand that we restrict processing if one of the legal requirements is met.

14.6 Data portability Art. 20 GDPR

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without restriction on our part, provided that the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and automated procedures are used, unless the processing is in the public interest or is carried out in the exercise of official authority vested in us.

Furthermore, you have the right, pursuant to Art. 20 para. 1 GDPR, to obtain that personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and does not adversely affect the rights and freedoms of other persons.

14.7 Objection Art. 21 GDPR

You have the right to object to the processing of your personal data at any time for reasons arising from your individual situation if this is based on Art. 6 para. 1 lit. e (data processing in the public interest) or f (data processing on the basis of a balancing of interests) of the GDPR. This also includes profiling in accordance with Art. 4 No. 4 GDPR, which is based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims.

If we process personal data for direct marketing purposes, you may object at any time to the processing of your personal data for such marketing purposes, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will stop processing your personal data for these purposes.

You also have the right to object, on grounds relating to your particular situation, to processing of your personal data for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

You may exercise your right to object in the context of the use of information society services, notwithstanding Directive 2002/58/EC, including by automated means using technical specifications.

14.8 Withdrawal of consent under data protection law

You are entitled to withdraw your consent to the processing of your personal data at any time, whereby this withdrawal will take effect for future processing.

15. Routine storage, deletion and blocking of personal data

Your personal data will only be processed and stored by us for as long as is necessary for the purpose of storage or as provided for by the legal provisions to which our company is subject.

As soon as the purpose of storage ceases to apply or a legally prescribed storage period expires, the personal data will be blocked or deleted in accordance with the statutory provisions.

16. Duration of the storage of personal data

The duration for which we store personal data depends on the respective statutory retention periods. After this period has expired, the relevant data is routinely deleted, provided it is no longer required for the fulfillment or initiation of a contract.

17. Up-to-dateness and amendment of the privacy policy

The current version of this privacy policy is valid and is dated

January 7, 2024.

Due to the further development of our website and our services or due to changes in legal or regulatory requirements, it may become necessary to update this privacy policy. The latest version of the privacy policy is always available on our website at https://deltalektorat.ch/datenschutz/, where you can view and print it out.