Location

Sauna Boat Lugano
by Boatcenter Lugano

Piazza Bernardino Luini
6900 Lugano
Switzerland

Weather
Lugano
13°

Fair
06:3520:12 CEST
Lugano, CH weather forecast ▸
More

© 2026 Sauna Boat Lugano | made with ♥ by p1xel.net |

GENERAL TERMS AND CONDITIONS (GTC) AND PRIVACY POLICY
OF SAUNABOOT GMBH

1 SCOPE OF APPLICABILITY
We recommend that you read the following General Terms and Conditions carefully. These General Terms and Conditions (“GTC”) apply to all contractual relationships between the lessee (and their guests) and Saunaboot GmbH (hereinafter also referred to as the “lessor”), unless explicitly agreed otherwise.

The terms reservation or reservieren (or similar) are at all times to be equated with Buchung or buchen (or similar).
The same applies to the terms Mietobjekt and Mietboot.

General contractual terms and conditions of the tenant that deviate from these GTC shall only apply if they are expressly recognized by the lessor in writing.

2 ACKNOWLEDGEMENT
The tenant expressly acknowledges the general terms and conditions as an integral part of the rental agreement, in particular the liability for damage caused by the tenant to the rented property or to third party property and ensures that it is properly informed about the handling of the rented property.

3 BEGINNING AND END OF THE RENT
All rents begin at the agreed location of the Lessor and end as soon as the rental object is delivered to the same location of the Lessor on time, unless otherwise agreed. The Lessor must be notified immediately if the rental period cannot be commenced or is extended unexpectedly. If the rented property is not returned after the agreed time, the tenant must pay CHF 200 for each hour or part thereof. If this makes it impossible to rent out the rented property again, the tenant must pay compensation for the full loss of use (see clause 12).

4 CHANGE OR CANCELLATION OF A BOOKING OR ORDER
Changes or cancellations of a booking/order must be communicated to Saunaboot GmbH by e-mail and are only valid with the written consent of Saunaboot GmbH. The date on which Saunaboot GmbH takes note of the cancellation declaration is decisive for the calculation of the cancellation date.

A rebooking to another Saunaboot GmbH location (e.g. Zurich) is deemed to be a new booking and the existing booking is subject to the cancellation deadlines listed under points 4.1 and 4.2 with the corresponding costs.

4.1 CHANGE OR CANCELLATION OF A BOOKED SAUNABOOT SLOT
The tenant has the right to provide a replacement tenant under the conditions agreed with Saunaboot GmbH if the tenant is unable to start the rental period.

If a booking/order is cancelled by the hirer, he/she shall bear the cancellation costs and the processing fees as follows.

CANCELLATION PERIOD BEFORE START OF BOOKING CANCELLATION COSTS IN % PROCESSING FEE
up to 7 days free of charge CHF 30.
up to 3 days 10 % CHF 30
up to 1 day 20 % CHF 30.
0 days 100 % none

4.2 CHANGE OR CANCELLATION OF A PURCHASED VOUCHER
If a purchased voucher is canceled by the tenant, the tenant must pay the cancellation costs and processing fees as follows.

CANCELLATION PERIOD AFTER PURCHASE CANCELLATION COSTS IN % PROCESSING FEE
24 h free of charge free of charge
up to 14 days free of charge CHF 30.
after 14 days 20 % CHF 30.

5 AUTHORITY TO DRIVE THE RENTAL OBJECT
The person who has signed the rental agreement is liable as the skipper for the rental object. The tenant is fully liable for any traffic violations, etc. The tenant or the skipper must be ready to maneuver at all times. Several tenants may sign the rental agreement and are then jointly and severally liable for the rental property.

The hirer or skipper must be of full age. Children and young people are the responsibility of their parents/guardians.

According to Art. 40a of the Inland Navigation Ordinance (SR 747.201.1), anyone with a blood alcohol level of over 0.5 per mille is not permitted to drive a sports or leisure vessel on Swiss waters. Furthermore, all persons involved in the navigation of the vessel must comply with this regulation.

6 RENTAL BOAT
The fuel and firewood provided are included in the rental price. The rental object is handed over in running order. The hirer or the skipper undertakes to return the rental object in the same condition as at the start of the rental period. Any soiling of the rental property must be avoided. In the event of excessive soiling, the additional cleaning costs of at least CHF 300 (deposit) will be charged to the hirer. Furthermore, the renter remains personally liable for all additional cleaning costs that are not covered by the comprehensive liability insurance.

Cooking or heating of food is not permitted on the entire rented property.

Any explosive or flammable substances are prohibited on the rental property. This applies in particular to candles. Smoking is strictly prohibited on the entire rental property.

Animals are not allowed on the rental object.

7 HEALTH RISKS
The use of the rental property is associated with risks. The lessee acknowledges that after using the sauna, the lessee must first cool down with cold water before diving into the lake. The lessor points out that the bathing ladder must be used and that you must never jump directly into the lake. After cooling down, a rest period of 15 minutes is recommended. Use of the sauna is only permitted with a sufficiently large sauna towel. The stove door remains closed except when adding firewood. The landlady advises people with cardiovascular problems in particular not to use the rental property. Sex on the rental property is prohibited.

The roof may not be entered under any circumstances.

Bathing with the engine running is expressly forbidden.

The lessor also accepts no liability for burns, drowning, injuries due to slipping, possible infections etc.

8 OBLIGATIONS IN THE EVENT OF AN ACCIDENT
In accordance with Art. 12 of the Inland Navigation Ordinance (SR 747.201.1), the hirer shall ensure that the names and addresses of the persons involved in the accident and witnesses are ascertained; all persons involved in the accident must make themselves available. The skipper must provide immediate assistance to persons or vessels in danger, insofar as this is compatible with the safety of his or her vessel. If people are injured or killed or if people are missing, the police must be called immediately. The lessor must also be informed immediately. Agreements with parties involved in accidents or third parties shall be of no consequence to the lessor.

9 LIABILITY FULL CASH INSURANCE
In the event of damage, the lessee must pay the lessor an amount of at least CHF 300 as a deductible and compensation. The lessor accepts no liability for damage to property or personal injury. The tenants and guests of the rental property are responsible for taking out appropriate accident/personal protection insurance themselves.

10 DAMAGE TO THE RENTAL BOAT
In the event of damage to the rental property, the renter shall be liable for an amount of at least CHF 300 (deposit). In addition, they remain personally liable for all damage not covered by the comprehensive liability insurance.

11 LOSS OF LOOSE OBJECTS
In the event of the loss of loose objects belonging to the Lessor (keys, rain trowel, etc.), the Lessee shall be liable for compensation of at least CHF 300 (deposit). Furthermore, the tenant shall remain personally liable for all damage not covered by the insurance (see Section 10).

The landlord accepts no liability for lost items belonging to the tenants.

12 REPAIRS
The Hirer is obliged to inspect the rental property before commencing the rental period. In the event of silence, it is assumed that the rental object is in a clean, flawless and roadworthy condition upon handover. The lessee shall be liable for any damage occurring during the rental period in accordance with points 9 and 10. Necessary repairs must always be carried out by a workshop designated by the lessor. No repairs or alterations may be made to the rented property without the Lessor’s consent. The tenant shall pay the landlord the full loss of use for the duration of a repair.

13 LESSOR’S LIABILITY
If the responsibility for a defect in the rented property does not lie with the Lessee, the Lessor shall not be liable for any damage or consequential damage.

14 FULFILLMENT OF CONTRACT
In the event that the rental property cannot be made ready to drive in the period between conclusion of the contract and commencement of the rental, the Lessor shall have the right to withdraw from the contract. The renter will receive their money back or a voucher to the value of the booking made for a new date.

15 WEATHER RESPONSIBILITY
In the event of uncertain weather or storm forecasts, the lessor reserves the right to only permit saunas on the rental property directly at the jetty, whereby a rent reduction of 30% of the basic boat rent without extras (picnic basket, drinks, laundry, etc.) will be offered. Alternatively, the hirer can cancel their booking and receive a voucher to the value of the booking for a new date.

The strong wind warning (orange flashing light which lights up approximately 40 times per minute) draws attention to the danger of strong winds (cf. Art. 40 Para. 1 of the Inland Navigation Ordinance (SR 747.201.1). The hirer or skipper must return the hired vessel to the location where the hire commenced.

The storm warning (orange flashing light which lights up approximately 90 times per minute) draws attention to the danger of strong winds (cf. Art. 40 Para. 2 of the Inland Navigation Ordinance (SR 747.201.1). In the event of a storm warning, the hirer or skipper is obliged to return immediately to the nearest port.

16 BEHAVIOR AT SEA
The rules of conduct at sea are governed by the Inland Navigation Ordinance (SR 747.201.1).
The following rules of conduct must be observed in particular:

  • Noise in the harbour area and near the shore must be avoided.
  • Course vessels always have the right of way. The minimum distance to course vessels is 50 metres.
  • Motor vessels may only enter the inner shore zone (0 to 150 metres) to moor or cast off, to anchor or to pass through narrow passages; they must take the shortest route. As a rule, this means taking the path at right angles to the shore. Parallel sailing to the shore is prohibited. Parallel sailing is only permitted in the outer shore zone (150 to 300 metres). When anchoring and taking a sauna, a distance of 50 metres from the shore must also be maintained. For noise reasons, saunas must not be taken in the vicinity of residents.
  • When the boat is anchored, one person must always remain on board and be ready to manoeuvre.

17 DATA PROTECTION
By concluding the contract, the tenant accepts the processing of their personal data, in particular the exchange between Saunaboot GmbH and third parties regarding all data of the tenant in connection with the rental of the rental property. This also applies in particular to the cooperation between the booking platforms and third parties that ensure the rental of the rental property at the location of the rental start. Personal data is only collected, processed or used insofar as it is necessary for the establishment, content or modification of the legal relationship.

In addition, the lessee hereby acknowledges that the rental property is equipped with a tracking system for security purposes and that Saunaboot GmbH is entitled to check where the rental property is located.

The lessee acknowledges that data may be collected by the IT system when visiting the Saunaboot GmbH website. As a rule, this is technical data that is collected automatically, in particular when you visit the website. The data of Saunaboot GmbH is hosted by an external service provider, whereby all data can be stored on the servers of the host or third parties. Data protection-compliant processing is guaranteed. This applies in particular to payment data, data from the contact form or newsletter, data from registration on the Saunaboot GmbH website, information from the comment function, etc. Data from web analysis services (Google, Facebook, MailChimp, YouTube, etc.) are processed and stored in compliance with data protection regulations.

Tenants are hereby expressly advised that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Saunaboot GmbH accepts no liability.

Please also refer to the privacy policy, which is available online at https://saunaboot.ch/datenschutz/.

18 SUPPLEMENTARY PROVISIONS
The Swiss Code of Obligations applies in addition to these provisions.

19 JURISDICTION
Horw is agreed as the exclusive place of jurisdiction for any disputes arising from this contract.

Horw, April 2023

Privacy policy

1. data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the “Information on the controller” section of this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order inquiries.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have further questions on the subject of data protection.

Analysis tools and tools from third-party providers

When you visit this website, your surfing behavior may be statistically evaluated. This is mainly done with so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy policy.

2. hosting

We host the content of our website with the following provider:

All-Inkl

The provider is ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter All-Inkl). Details can be found in All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. general notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The controller responsible for data processing on this website is:

Saunaboot GmbH
St. Niklausenstrasse 105
6047 Kastanienbaum
Switzerland

Telephone: [Telephone number of the responsible body] E-mail: hello@saunaboot.ch

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a DSGVO bzw. Art. 9 Abs. 2 lit. a DSGVO, sofern besondere Datenkategorien nach Art. 9 Abs. 1 DSGVO verarbeitet werden. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a DSGVO. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of § 25 para. 1 TDDDG. Consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b DSGVO. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c DSGVO. Data processing may also be based on our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO erfolgen. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.

Note on the transfer of data to third countries that are not secure under data protection law and the transfer to US companies that are not DPF-certified

Among other things, we use tools from companies based in third countries that are not secure under data protection law and US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to these countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in third countries that are not secure under data protection law.

We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that of the EU. Data transfer to the USA is therefore permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has suitable additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.

Recipients of personal data

As part of our business activities, we work together with various external bodies. In some cases, it is also necessary to transfer personal data to these external bodies. We only pass on personal data to external bodies if this is necessary for the fulfillment of a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f GDPR or if another legal basis permits the transfer of data. When using processors, we only pass on our customers’ personal data on the basis of a valid contract for order processing. In the case of joint processing, a joint processing agreement is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, a right to correction or deletion of this data at any time. You can contact us at any time if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do this. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to check this. You have the right to request the restriction of the processing of your personal data for the duration of the review.
If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a fee-based contract, this data is required for payment processing.

Payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

With encrypted communication, the payment data you transmit to us cannot be read by third parties.

Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

4. data collection on this website

Cookies

Our Internet pages use so-called “cookies”. Cookies are small data packets and do not cause any damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

You can find out which cookies and services are used on this website in this privacy policy.

Consent with Borlabs Cookie

Our website uses Borlabs Cookie consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document these in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the provider of Borlabs Cookie.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded for this purpose.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

5. analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data records and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymization

Google Analytics IP anonymization is activated. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics e-commerce measurement

This website uses the “e-commerce measurement” function of Google Analytics. With the help of e-commerce measurement, the website operator can analyze the purchasing behavior of website visitors to improve its online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product is recorded. This data can be summarized by Google under a transaction ID that is assigned to the respective user or their device.

6. plugins and tools

Vimeo

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages featuring a Vimeo video, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Vimeo uses cookies or comparable recognition technologies (e.g. device fingerprinting) to recognize website visitors.

The use of Vimeo is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO dar. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TDDDG umfasst. Consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on “legitimate business interests”. You can find details here: https://vimeo.com/privacy.

Further information on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5711.

Google Fonts (local hosting)

This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. Google Fonts are installed locally. There is no connection to Google servers.

Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Font Awesome (local hosting)

This site uses Font Awesome for the uniform display of fonts. Font Awesome is installed locally. There is no connection to the servers of Fonticons, Inc.

Further information about Font Awesome can be found in the Font Awesome privacy policy at: https://fontawesome.com/privacy.

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of this service, we can integrate map material on our website.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO dar. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find more information on the handling of user data in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

Die Speicherung und Analyse der Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Wordfence

We have integrated Wordfence on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”).

Wordfence serves to protect our website from unwanted access or malicious cyberattacks. For this purpose, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can compare its databases with the accesses made on our website and block them if necessary.

The use of Wordfence is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO & § 25 Abs. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.wordfence.com/help/general-data-protection-regulation/.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

ManageWP

We manage this website with the help of the ManageWP tool. The provider is GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrade, Serbia (hereinafter ManageWP).

With ManageWP, we can monitor the security and performance of our website and create automatic backups, among other things. ManageWP therefore has access to all website content, including our databases. ManageWP is hosted on the provider’s servers.

The use of ManageWP is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the most effective and secure operation of its website(s). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4957.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

7. eCommerce and payment providers

Processing of customer and contract data

We collect, process and use personal customer and contract data to establish, structure the content of and amend our contractual relationships. We collect, process and use personal data about the use of this website (usage data) only insofar as this is necessary to enable or charge the user for the use of the service. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any existing statutory retention periods. Statutory retention periods remain unaffected.

Data transmission upon conclusion of contract for online stores, retailers and shipping of goods

If you order goods from us, we will pass on your personal data to the transport company entrusted with the delivery and to the payment service provider commissioned to process the payment. Only the data required by the respective service provider to fulfill its task will be disclosed. The legal basis for this is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. If you have given your consent in accordance with Art. 6 para. 1 lit.
a GDPR, we will transfer your e-mail address to the transport company entrusted with the delivery so that it can inform you by e-mail about the shipping status of your order; you can revoke your consent at any time. a GDPR, we will transfer your e-mail address to the transport company entrusted with the delivery so that it can inform you by e-mail about the shipping status of your order; you can revoke your consent at any time.

Data transmission upon conclusion of a contract for services and digital content

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution responsible for processing payments.

Further transmission of the data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Payment services

We integrate third-party payment services on our website. When you make a purchase from us, your payment details (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The use of payment service providers is based on Art. 6 para. 1 lit. b GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consent can be revoked at any time for the future.

We use the following payment services / payment service providers on this website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter referred to as “Mastercard”).

Mastercard may transfer data to its parent company in the USA. The data transfer to the USA is based on Mastercard’s Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter referred to as “VISA”).

The UK is considered a safe third country under data protection law. This means that the UK has a level of data protection that corresponds to the level of data protection in the European Union.

VISA may transfer data to its parent company in the USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

Further information can be found in VISA’s privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

Privacy policy

1. data protection at a glance

General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.

Data collection on this website
Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. For details, please refer to the privacy policy under “Right to restriction of processing”.

Analysis tools and tools from third-party providers

When you visit this website, your surfing behavior may be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.

You can object to this analysis or prevent it by not using certain tools. You can find detailed information on these tools and on your options to object in the following privacy policy.

2. hosting

External hosting
This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.

Conclusion of a contract for order processing
In order to guarantee data protection-compliant processing, we have concluded an order processing contract with our hoster.

3 General notes and mandatory information

Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible body
The controller responsible for data processing on this website is:

Saunaboot GmbH
St. Niklausenstrasse 105
6047 Kastanienbaum LU

Phone: +41 76 260 22 09
E-mail: hello@saunaboot.ch

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6 para. 1 lit. E or F GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Art. 21 para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website
If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a fee-based contract, this data is required for payment processing.

Payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

With encrypted communication, the payment data you transmit to us cannot be read by third parties.

Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction or deletion of this data. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to check this. You have the right to request the restriction of the processing of your personal data for the duration of the review.
If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Objection to advertising e-mails
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

4. data collection on this website

Cookies
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies, die zur Durchführung des elektronischen Kommunikationsvorgangs oder zur Bereitstellung bestimmter, von Ihnen erwünschter Funktionen (z. B. Warenkorbfunktion) erforderlich sind, werden auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO gespeichert. Der Websitebetreiber hat ein berechtigtes Interesse an der Speicherung von Cookies zur technisch fehlerfreien und optimierten Bereitstellung seiner Dienste. Sofern eine entsprechende Einwilligung abgefragt wurde (z. B. eine Einwilligung zur Speicherung von Cookies), erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded for this purpose.

Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.

Die Verarbeitung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO, sofern Ihre Anfrage mit der Erfüllung eines Vertrags zusammenhängt oder zur Durchführung vorvertraglicher Maßnahmen erforderlich ist. In allen übrigen Fällen beruht die Verarbeitung auf Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO) und/oder auf unseren berechtigten Interessen (Art. 6 Abs. 1 lit. f DSGVO), da wir ein berechtigtes Interesse an der effektiven Bearbeitung der an uns gerichteten Anfragen haben.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Registration on this website
You can register on this website in order to use additional functions on the site. We will only use the data you enter for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse your registration.

In the event of important changes, for example to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.

Comment function on this website
For the comment function on this page, in addition to your comment, information about the time the comment was created, your e-mail address and, if you are not posting anonymously, the user name you have chosen will be saved.

Storage of the IP address
Our comment function stores the IP addresses of users who post comments. As we do not check comments on this website before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.

Subscribe to comments
As a user of the site, you can subscribe to comments after registering. You will receive a confirmation e-mail to check whether you are the owner of the e-mail address provided. You can unsubscribe from this function at any time via a link in the info mails. In this case, the data entered when subscribing to comments will be deleted; however, if you have transmitted this data to us for other purposes and elsewhere (e.g. newsletter subscription), it will remain with us.

Storage duration of the comments
The comments and the associated data (e.g. IP address) are stored and remain on this website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).

Legal basis
The comments are stored on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations already carried out remains unaffected by the revocation.

5. analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Die Speicherung von Google-Analytics-Cookies und die Nutzung dieses Analyse-Tools erfolgen auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an der Analyse des Nutzerverhaltens, um sowohl sein Webangebot als auch seine Werbung zu optimieren. Sofern eine entsprechende Einwilligung abgefragt wurde (z. B. eine Einwilligung zur Speicherung von Cookies), erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de

Facebook Pixel
This website uses Facebook’s visitor action pixel to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This allows Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.

Die Nutzung von Facebook-Pixel erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an effektiven Werbemaßnahmen unter Einschluss der sozialen Medien. Sofern eine entsprechende Einwilligung abgefragt wurde (z. B. eine Einwilligung zur Speicherung von Cookies), erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

You can find further information on protecting your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

6th Newsletter

Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

MailChimp
This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), this data is stored on MailChimp’s servers in the USA.

MailChimp is certified in accordance with the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA that is intended to ensure compliance with European data protection standards in the USA.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp’s servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you do not wish to be analyzed by MailChimp, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

For more information, please refer to MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/.

Conclusion of a data processing agreement
We have concluded a so-called “Data Processing Agreement” with MailChimp, in which we oblige MailChimp to protect our customers’ data and not to pass it on to third parties.

7. plugins and tools

YouTube with enhanced data protection
This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts. The cookies remain on your device until you delete them.

After the start of a YouTube video, further data processing operations may be triggered over which we have no influence.

Die Nutzung von YouTube erfolgt im Interesse einer ansprechenden Darstellung unserer Online-Angebote. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO dar. Sofern eine entsprechende Einwilligung abgefragt wurde (z. B. eine Einwilligung zur Speicherung von Cookies), erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

You can find more information about data protection at YouTube in their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers.

Google Maps (with consent)
This website uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection on this website, Google Maps is deactivated when you enter this website for the first time. A direct connection to Google’s servers is only established when you activate Google Maps yourself (consent pursuant to Art. 6 para. 1 lit. a GDPR). This prevents your data from being transmitted to Google the first time you enter the site.

After activation, Google Maps will save your IP address. This is then usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer after Google Maps has been activated.

You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

8. eCommerce and payment providers

Processing of data (customer and contract data)
We collect, process and use personal data only insofar as it is necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only insofar as this is necessary to enable or charge the user for the use of the service.

The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transmission upon conclusion of contract for online stores, retailers and shipping of goods
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the credit institution commissioned with payment processing. Any further transmission of data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Data transmission upon conclusion of a contract for services and digital content
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution responsible for processing payments.

Further transmission of the data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

PayPal
On this website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

Die Übermittlung Ihrer Daten an PayPal erfolgt auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO (Einwilligung) und Art. 6 Abs. 1 lit. b DSGVO (Verarbeitung zur Erfüllung eines Vertrags). Sie haben die Möglichkeit, Ihre Einwilligung zur Datenverarbeitung jederzeit zu widerrufen. Ein Widerruf wirkt sich auf die Wirksamkeit von in der Vergangenheit liegenden Datenverarbeitungsvorgängen nicht aus.

Informativa sulla privacy

1. la protezione dei dati in sintesi

Informazioni generali

Le seguenti informazioni forniscono una semplice panoramica di ciò che accade ai tuoi dati personali quando visiti questo sito web. Per dati personali si intendono tutti i dati che possono essere utilizzati per identificarti personalmente. Detailed information on the subject of data protection is available in our privacy policy below this text.

Raccolta di dati su questo sito web

Chi è responsabile della raccolta dei dati su questo sito?

Il trattamento dei dati su questo sito web viene effettuato dal gestore del sito. Puoi trovare i dati di contatto dell’operatore nella sezione “Informazioni sul responsabile del trattamento” di questa informativa sulla privacy.

Come raccogliamo i tuoi dati?

Da un lato, i tuoi dati vengono raccolti quando ce li fornisci. Ad esempio, i dati inseriti in un modulo di contatto.

Altri dati vengono raccolti automaticamente o con il tuo consenso dai nostri sistemi informatici quando visiti il sito web. Si tratta principalmente di dati tecnici (ad esempio il browser internet, il sistema operativo o l’ora di visualizzazione della pagina). Questi dati vengono raccolti automaticamente non appena accedi al sito web.

Per cosa utilizziamo i tuoi dati?

Alcuni dati vengono raccolti per garantire che il sito web venga fornito senza errori. Altri dati possono essere utilizzati per analizzare il comportamento degli utenti. Se i contratti possono essere conclusi o avviati tramite il sito web, i dati trasmessi saranno elaborati anche per le offerte di contratto, gli ordini o altre richieste di ordine.

Quali diritti hai in merito ai tuoi dati?

Hai il diritto di ricevere gratuitamente e in qualsiasi momento informazioni sull’origine, il destinatario e lo scopo dei tuoi dati personali memorizzati. Hai inoltre il diritto di richiedere la correzione o la cancellazione di tali dati. Se hai dato il tuo consenso al trattamento dei dati, puoi revocarlo in qualsiasi momento per il futuro. Hai anche il diritto di richiedere la limitazione del trattamento dei tuoi dati personali in determinate circostanze. Inoltre, hai il diritto di presentare un reclamo all’autorità di vigilanza competente.

Puoi contattarci in qualsiasi momento se hai ulteriori domande sul tema della protezione dei dati.

Strumenti di analisi e strumenti di fornitori terzi

When you visit this website, your navigation performance can be statistically evaluated. This is mainly done with the help of computer programs for analysis.

Informazioni dettagliate su questi programmi di analisi sono disponibili nella seguente informativa sulla privacy.

2. hosting

Il contenuto del nostro sito web è ospitato dal seguente provider:

All-Inkl

Il provider è ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf (di seguito All-Inkl). I dettagli sono disponibili nell’informativa sulla privacy di All-Inkl: https://all-inkl.com/datenschutzinformationen/.

L’utilizzo di All-Inkl si basa sull’Art. 6 comma 1 lit. f GDPR. Abbiamo un interesse legittimo a visualizzare il nostro sito web nel modo più affidabile possibile. Se è stato richiesto un consenso corrispondente, il trattamento viene effettuato esclusivamente sulla base dell’art. 6 par. 1 lett. a GDPR e del § 25 par. 1 TDDDG, nella misura in cui il consenso include la memorizzazione di cookie o l’accesso a informazioni nel dispositivo terminale dell’utente (ad esempio, l’impronta digitale del dispositivo) ai sensi del TDDDG. Il consenso può essere revocato in qualsiasi momento.

Elaborazione dell’ordine

Abbiamo stipulato un accordo di trattamento dei dati (DPA) per l’utilizzo del servizio di cui sopra. Si tratta di un contratto prescritto dalla legge sulla protezione dei dati, che garantisce il trattamento dei dati personali dei visitatori del nostro sito web solo in conformità alle nostre istruzioni e nel rispetto del GDPR.

3 Note generali e informazioni obbligatorie

Protezione dei dati

Gli operatori di queste pagine prendono molto sul serio la protezione dei tuoi dati personali. Trattiamo i tuoi dati personali in modo confidenziale e in conformità con le norme di legge sulla protezione dei dati e con la presente informativa sulla privacy.

Quando utilizzi questo sito web, vengono raccolti diversi dati personali. I dati personali sono dati che possono essere utilizzati per identificarti personalmente. La presente informativa sulla privacy spiega quali dati raccogliamo e per quali scopi li utilizziamo. Spiega inoltre come e per quale scopo vengono raccolti.

Desideriamo sottolineare che la trasmissione dei dati su Internet (ad esempio quando si comunica via e-mail) può essere soggetta a vulnerabilità di sicurezza. It is not possible to completely protect data from being accessed by third parties.

Nota sull’ente responsabile

Il responsabile del trattamento dei dati su questo sito web è

Saunaboot GmbH
St. Niklausenstrasse 105
6047 Kastanienbaum
Svizzera

Telefono: [Numero di telefono dell’ente responsabile] E-mail: hello@saunaboot.ch

Il responsabile del trattamento è la persona fisica o giuridica che, da sola o insieme ad altri, determina le finalità e i mezzi del trattamento dei dati personali (ad esempio nomi, indirizzi e-mail, ecc.).

Durata della conservazione

A meno che non sia stato specificato un periodo di conservazione più specifico nella presente informativa sulla privacy, i tuoi dati personali rimarranno presso di noi fino a quando lo scopo del trattamento dei dati non sarà più valido. Se fai valere una richiesta giustificata di cancellazione o revochi il tuo consenso al trattamento dei dati, i tuoi dati saranno cancellati a meno che non ci siano altri motivi legalmente consentiti per conservare i tuoi dati personali (ad esempio, periodi di conservazione previsti dalla legge fiscale o commerciale); in this last case, the deletion will take place after the reasons are no longer valid.

Informazioni generali sulla base giuridica del trattamento dei dati su questo sito web

Se hai acconsentito al trattamento dei dati, trattiamo i tuoi dati personali sulla base dell’art. 6 par. 1 lett. a GDPR or dell’art. 9 par. 2 lett. a GDPR, nella misura in cui vengono trattate categorie particolari di dati ai sensi dell’art. 9 par. 1 GDPR. In caso di consenso esplicito al trasferimento dei dati personali a paesi terzi, il trattamento dei dati viene effettuato anche sulla base dell’art. 49 par. 1 lit. a GDPR. Se hai acconsentito alla memorizzazione di cookie o all’accesso alle informazioni nel tuo dispositivo finale (ad esempio tramite il fingerprinting del dispositivo), il trattamento dei dati viene effettuato anche in base all’Articolo 25 (1) TDDDG. Il consenso può essere revocato in qualsiasi momento. Se i tuoi dati sono necessari per l’adempimento di un contratto o per l’attuazione di misure precontrattuali, trattiamo i tuoi dati sulla base dell’art. 6, comma 1, lettera b del GDPR. Inoltre, trattiamo i tuoi dati se ciò è necessario per adempiere a un obbligo di legge ai sensi dell’art. 6 par. 1 lett. c GDPR. Il trattamento dei dati può essere effettuato anche sulla base del nostro legittimo interesse ai sensi dell’art. 6 par. 1 lett. f GDPR. Le informazioni sulle basi giuridiche pertinenti in ogni singolo caso sono fornite nei paragrafi successivi della presente informativa sulla privacy.

Nota sul trasferimento dei dati a paesi terzi che non sono sicuri ai sensi della legge sulla protezione dei dati e sul trasferimento a società statunitensi che non sono certificate DPF

In addition, we use tools from companies based in third countries that are not secure within the meaning of the Data Protection Act and state-owned tools whose providers are not certified within the meaning of the EU-US Data Privacy Framework (DPF). Se questi strumenti sono attivi, i tuoi dati personali potrebbero essere trasferiti in questi paesi e lì elaborati. Desideriamo sottolineare che un livello di protezione dei dati paragonabile a quello dell’UE non può essere garantito in paesi terzi che non sono sicuri ai sensi della legge sulla protezione dei dati.

Desideriamo sottolineare che gli Stati Uniti, in quanto paese terzo sicuro, hanno generalmente un livello di protezione dei dati paragonabile a quello dell’UE. Il trasferimento dei dati negli Stati Uniti è pertanto consentito se il destinatario è certificato ai sensi del “EU-US Data Privacy Framework” (DPF) o se dispone di adeguate garanzie aggiuntive. Le informazioni sui trasferimenti verso paesi terzi, compresi i destinatari dei dati, sono disponibili nella presente informativa sulla privacy.

Destinatari dei dati personali

Nell’ambito delle nostre attività commerciali, collaboriamo con diverse organizzazioni esterne. In alcuni casi, è necessario trasferire i dati personali a queste organizzazioni esterne. Trasmettiamo i dati personali a enti esterni solo se ciò è necessario per l’adempimento di un contratto, se siamo obbligati per legge a farlo (ad esempio, trasmettendo i dati alle autorità fiscali), se abbiamo un interesse legittimo al trasferimento in conformità con l’art. 6 par. 1 lett. f GDPR or se un’altra base giuridica consente il trasferimento dei dati. Quando utilizziamo dei responsabili del trattamento, trasmettiamo i dati personali dei nostri clienti solo sulla base di un contratto valido per l’elaborazione dell’ordine. In caso di elaborazione congiunta, viene stipulato un accordo di elaborazione congiunta.

Revoca del consenso al trattamento dei dati

Molte operazioni di trattamento dei dati sono possibili solo con il tuo consenso espresso. Puoi revocare il tuo consenso in qualsiasi momento. La legalità del trattamento dei dati effettuato fino alla revoca rimane inalterata.

Diritto di opporsi alla raccolta dei dati in casi particolari e al marketing diretto (Art. 21 GDPR)

SE IL TRATTAMENTO DEI DATI SI BASA SULL’ART. 6 ABS. 1 LIT. E O F DEL GDPR, HAI IL DIRITTO DI OPPORTI IN QUALSIASI MOMENTO AL TRATTAMENTO DEI TUOI DATI PERSONALI PER MOTIVI LEGATI ALLA TUA SITUAZIONE PARTICOLARE; CIÒ VALE ANCHE PER LA PROFILAZIONE BASATA SU TALI DISPOSIZIONI. LE RISPETTIVE BASI GIURIDICHE SUUI SI FONDA IL TRATTAMENTO SONO RIPORTATE NELLA PRESENTE INFORMATIVA SULLA PRIVACY. SE TI OPPONI, NON TRATTEREMO PIÙ I TUOI DATI PERSONALI, A MENO CHE NON POSSIAMO DIMOSTRARE L’ESISTENZA DI MOTIVI LEGITIMI E IMPELLENTI PER IL TRATTAMENTO CHE PREVALGONO SUI TUOI INTERESSI, DIRITTI E LIBERTÀ O CHE IL TRATTAMENTO SERVE PER L’ACCERTAMENTO, L’ESERCIZIO O LA DIFESA DI DIRITTI LEGALI (OPPOSIZIONE AI SENSI DELL’ART. 21, PAR. 1 DEL GDPR).

SE I TUOI DATI PERSONALI SONO TRATTATI PER FINALITÀ DI MARKETING DIRETTO, HAI IL DIRITTO DI OPPORTI IN QUALSIASI MOMENTO AL TRATTAMENTO DEI DATI PERSONALI CHE TI RIGUARDANO PER TALI FINALITÀ; CIÒ VALE ANCHE PER LA PROFILAZIONE NELLA MISURA IN CUI È CONNESSA A TALE MARKETING DIRETTO. SE TI OPPONI, I TUOI DATI PERSONALI NON SARANNO PIÙ UTILIZZATI PER FINALITÀ DI MARKETING DIRETTO (OPPOSIZIONE AI SENSI DELL’ART. 21 PAR. 2 DEL GDPR).

Diritto di proporre reclamo all’autorità di vigilanza competente

In caso di violazioni del GDPR, gli interessati hanno il diritto di presentare un reclamo a un’autorità di controllo, in particolare nello Stato membro in cui risiedono abitualmente, lavorano o in cui si è verificata la presunta violazione. Il diritto di presentare un reclamo non pregiudica eventuali altri rimedi amministrativi o giudiziari.

Diritto alla portabilità dei dati

Hai il diritto di ottenere che i dati che trattiamo automaticamente sulla base del tuo consenso o in adempimento di un contratto vengano consegnati a te o una terza parte in un formato comunemente utilizzato e leggibile da una macchina. Se richiedi il trasferimento diretto dei dati a un altro titolare del trattamento, questo avverrà solo se tecnicamente fattibile.

Informazioni, correzione e cancellazione

Nell’ambito delle disposizioni di legge applicabili, hai il diritto di ottenere in qualsiasi momento informazioni gratuite sui tuoi dati personali memorizzati, sulla loro origine e sul loro destinatario e sullo scopo del trattamento dei dati e, se necessario, il diritto alla correzione o alla cancellazione di tali dati. Puoi contattarci in qualsiasi momento se hai ulteriori domande sul tema dei dati personali.

Diritto alla limitazione del trattamento

Hai il diritto di richiedere la limitazione del trattamento dei tuoi dati personali. Puoi contattarci in qualsiasi momento per farlo. Il diritto alla limitazione del trattamento esiste nei seguenti casi:

Se contesti l’accuracyzza dei tuoi dati personali da noi memorizzati, in genere abbiamo bisbogno di tempo per verificarla. Per la durata della verifica, hai il diritto di richiedere la limitazione del trattamento dei tuoi dati personali.
Se il trattamento dei tuoi dati personali era/è illegale, puoi richiedere la limitazione del trattamento dei dati invece della cancellazione.
Se non abbiamo più bisogno dei tuoi dati personali, ma ti servono per l’esercizio, la difesa o l’affermazione di diritti legali, hai il diritto di richiedere la limitazione del trattamento dei tuoi dati personali invece della loro cancellazione.
Se hai presentato un’obiezione ai sensi dell’art. 21 (1) GDPR, è necessario trovare un equilibrio tra i tuoi interessi e i nostri. Finché non sarà stato stabilito quali interessi prevalgono, hai il diritto di richiedere la limitazione del trattamento dei tuoi dati personali.
Se hai limitato il trattamento dei tuoi dati personali, questi – a parte la loro conservazione – potranno essere trattati solo con il tuo consenso o per l’accertamento, l’esercizio o la difesa di diritti legali o per la tutela dei diritti di un’altra persona fisica o giuridica o per motivi di rilevante interesse pubblico dell’Unione Europea o di uno Stato membro.

Crittografia SSL o TLS

Questo sito utilizza la crittografia SSL o TLS per motivi di sicurezza e per proteggere la trasmissione di contenuti riservati, come gli ordini o le richieste di informazioni che ci invii in qualità di gestore del sito. Puoi riconoscere una connessione crittografata dal fatto che la riga dell’indirizzo del browser passa da “http://” a “https://” e dal simbolo del lucchetto nella riga del browser.

Se la crittografia SSL o TLS è attivata, i dati che ci trasmetti non possono essere letti da terzi.

Transazioni di pagamento criptate su questo sito web

Se esiste l’obbligo di fornirci i tuoi dati di pagamento (ad esempio il numero di conto per l’autorizzazione all’addebito diretto) dopo la conclusione di un contratto a pagamento, tali dati sono necessari per l’elaborazione del pagamento.

Le transazioni di pagamento tramite i consueti mezzi di pagamento (Visa/MasterCard, addebito diretto) vengono effettuate esclusivamente tramite una connessione criptata SSL o TLS. Puoi riconoscere una connessione criptata dal fatto che la riga dell’indirizzo del browser cambia da “http://” a “https://” e dal simbolo del lucchetto nella riga del browser.

Con la comunicazione criptata, i dati di pagamento che ci trasmetti non possono essere letti da terzi.

Obiezione alle e-mail pubblicitarie

Con la presente ci opponiamo all’utilizzo dei dati di contatto pubblicati nell’ambito dell’obbligo di notifica legale per l’invio di materiale pubblicitario e informativo non richiesto. Gli operatori di questo sito web si riservano espressamente il diritto di intraprendere azioni legali in caso di invio non richiesto di informazioni pubblicitarie, come ad esempio e-mail di spam.

4. raccolta di dati su questo sito web

Biscotti

Le nostre pagine Internet utilizzano i cosiddetti “cookie”. I cookie sono piccoli pacchetti di dati e non causano alcun danno al tuo dispositivo finale. Vengono memorizzati sul tuo dispositivo temporaneamente per la durata di una sessione (cookie di sessione) o permanentemente (cookie permanenti). I cookie di sessione vengono eliminati automaticamente al termine della visita. I cookie permanentei rimangono memorizzati sul tuo dispositivo finale finché non li cancelli tu stesso o finché non vengono eliminati automaticamente dal tuo browser web.

I cookie possono provenire da noi (cookie di prima parte) o da società terze (i cosiddetti cookie di terze parti). I cookie di terze parti consentono l’integrazione di alcuni servizi di aziende terze all’interno dei siti web (ad esempio, i cookie per l’elaborazione dei servizi di pagamento).

I cookie hanno diverse funzioni. Molti cookie sono tecnicamente necessari, in quanto alcune funzioni del sito web non potrebbero funzionare senza di essi (ad esempio la funzione del carrello della spesa o la visualizzazione dei video). Altri cookie possono essere utilizzati per analizzare il comportamento degli utenti o per scopi pubblicitari.

I cookie necessari per eseguire il processo di comunicazione elettronica, per fornire determinate funzioni richieste dall’utente (ad esempio, per la funzione del carrello della spesa) o per ottimizzare il sito web (ad esempio, i cookie per misurare l’audience del web) (cookie necessari) vengono memorizzati sulla base dell’art. 6 par. 1 lit. f GDPR, a meno che non venga specificata un’altra base giuridica. L’operatore del sito web ha un interesse legittimo nella memorizzazione dei cookie necessari per l’erogazione tecnicamente priva di errori e ottimizzata dei propri servizi. Se è stato richiesto il consenso alla memorizzazione di cookie e tecnologie di riconoscimento comparabili, il trattamento viene effettuato esclusivamente sulla base di tale consenso (art. 6 par. 1 lett. a GDPR e § 25 par. 1 TDDDG); il consenso può essere revocato in qualsiasi momento.

Puoi impostare il tuo browser in modo da essere informato sull’impostazione dei cookie e consentire i cookie solo in singoli casi, escludere l’accettazione dei cookie per determinati casi o in generale e attivare la cancellazione automatica dei cookie alla chiusura del browser. Se i cookie vengono disattivati, le funzionalità di questo sito web potrebbero essere limitate.

Puoi scoprire quali sono i cookie e i servizi utilizzati su questo sito web nella presente informativa sulla privacy.

Consenso con il Cookie Borlabs

Il nostro sito web utilizza la tecnologia di consenso Borlabs Cookie per ottenere il tuo consenso all’archiviazione di determinati cookie nel tuo browser o all’utilizzo di determinate tecnologie e per documentarle in conformità alle normative sulla protezione dei dati. Il fornitore di questa tecnologia è Borlabs GmbH, Rübenkamp 32, 22305 Amburgo, Germania (di seguito Borlabs).

Quando accedi al nostro sito web, nel tuo browser viene memorizzato un cookie Borlabs in cui vengono memorizzati i consensi che hai dato o la revoca di tali consensi. Questi dati non vengono trasmessi al fornitore del cookie Borlabs.

I dati raccolti saranno conservati fino a quando non ci chiederai di cancellarli o non eliminerai tu stesso il cookie Borlabs o fino a quando lo scopo per cui sono stati conservati non sarà più valido. I periodi di conservazione obbligatori per legge rimangono inalterati. I dettagli sul trattamento dei dati da parte di Borlabs Cookie sono disponibili all’indirizzo https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

La tecnologia di consenso dei cookie di Borlabs viene utilizzata per ottenere il consenso legalmente richiesto per l’utilizzo dei cookie. La base giuridica è l’Art. 6 comma 1 lit. c GDPR.

File di log del server

Il fornitore delle pagine raccoglie e memorizza automaticamente le informazioni nei cosiddetti file di log del server, che il tuo browser ci trasmette automaticamente. These are

Tipo e versione del browser
Sistema operativo utilizzato
URL di riferimento
Nome host del computer di accesso
Ora della richiesta del server
Indirizzo IP
Questi dati non vengono uniti ad altre fonti di dati.

Questi dati vengono raccolti sulla base dell’Art. 6 comma 1 lit. f GDPR. L’operatore del sito web ha un interesse legittimo alla presentazione tecnicamente priva di errori e all’ottimizzazione del proprio sito web: a tal fine è necessario registrare i file di log del server.

Modulo di contatto

Se ci invii richieste di informazioni tramite il modulo di contatto, i tuoi dati dal modulo di richiesta, compresi i dati di contatto che ci fornisci, saranno conservati da noi allo scopo di elaborare la richiesta e in caso di domande successive. We will not transfer this data without your consent.

Questi dati vengono elaborati sulla base dell’Art. 6 comma 1 lit. b GDPR se la tua richiesta è legata all’adempimento di un contratto o è necessaria per l’attuazione di misure precontrattuali. In tutti gli altri casi, il trattamento si basa sul nostro legittimo interesse all’effettivo trattamento delle richieste di informazioni che ci vengono rivolte (art. 6, par. 1, lett. f GDPR) o sul tuo consenso (art. 6, par. 1, lett. a GDPR) se questo è stato richiesto; il consenso può essere revocato in qualsiasi momento.

Conserveremo i dati da te forniti nel modulo di contatto fino a quando non ne richiederai la cancellazione, non revocherai il tuo consenso alla loro conservazione o non verrà meno lo scopo per cui sono stati conservati (ad esempio, dopo aver soddisfatto la tua richiesta). Le disposizioni di legge obbligatorie, in particolare i periodi di conservazione, rimangono inalterate.

Richiesta via e-mail, telefono o fax

Se ci contatti via e-mail, telefono o fax, la tua richiesta, compresi tutti i dati personali (nome, richiesta), verrà memorizzata ed elaborata da noi allo scopo di elaborare la tua richiesta. We will not transfer this data without your consent.

Questi dati vengono elaborati sulla base dell’Art. 6 comma 1 lit. b GDPR se la tua richiesta è legata all’adempimento di un contratto o è necessaria per l’attuazione di misure precontrattuali. In tutti gli altri casi, il trattamento si basa sul nostro legittimo interesse all’effettivo trattamento delle richieste di informazioni che ci vengono rivolte (art. 6, par. 1, lett. f GDPR) o sul tuo consenso (art. 6, par. 1, lett. a GDPR) se questo è stato richiesto; il consenso può essere revocato in qualsiasi momento.

I dati che ci invii tramite le richieste di contatto rimarranno presso di noi fino a quando non ci chiederai di cancellarli, non revocherai il tuo consenso alla conservazione o lo scopo della conservazione dei dati non sarà più valido (ad esempio, dopo che la tua richiesta è stata elaborata). Le disposizioni di legge obbligatorie, in particolare i periodi di conservazione previsti dalla legge, rimangono inalterate.

5. strumenti di analisi e pubblicità

Google Tag Manager

Utilizziamo Google Tag Manager. Il fornitore è Google Ireland Limited, Gordon House, Barrow Street, Dublino 4, Irlanda.

Google Tag Manager è uno strumento che ci permette di integrare strumenti di tracciamento o statistici e altre tecnologie sul nostro sito web. Il Google Tag Manager non crea alcun profilo utente, non memorizza alcun cookie e non effettua analisi indipendenti. Viene utilizzato solo per gestire e visualizzare gli strumenti integrati tramite esso. Tuttavia, Google Tag Manager registra il tuo indirizzo IP, che potrebbe essere trasmesso alla società madre di Google negli Stati Uniti.

Google Tag Manager è utilizzato in base all’art. 6, comma 1, lettera f del GDPR. L’operatore del sito web ha un interesse legittimo all’integrazione e alla gestione rapida e semplice di vari strumenti sul proprio sito web. Se è stato richiesto un consenso corrispondente, il trattamento viene effettuato esclusivamente sulla base dell’art. 6 par. 1 lett. a GDPR e del § 25 par. 1 TDDDG, nella misura in cui il consenso include la memorizzazione di cookie o l’accesso a informazioni nel dispositivo terminale dell’utente (ad es. fingerprinting del dispositivo) ai sensi del TDDDG. Il consenso può essere revocato in qualsiasi momento.

L’azienda è certificata in conformità con il “Data Privacy Framework UE-USA” (DPF). Il DPF è un accordo tra l’Unione Europea e gli Stati Uniti volto a garantire il rispetto degli standard europei di protezione dei dati per l’elaborazione dei dati negli Stati Uniti. Ogni azienda certificata ai sensi del DPF si impegna a rispettare questi standard di protezione dei dati. Ulteriori informazioni in merito possono essere ottenute dal fornitore al seguente link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

Questo sito web utilizza le funzioni del servizio di analisi web Google Analytics. Il fornitore è Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublino 4, Irlanda.

Google Analytics consente al gestore del sito web di analizzare il comportamento dei visitatori del sito. L’operatore del sito web riceve diversi dati di utilizzo, come le pagine viste, la durata della visita, i sistemi operativi utilizzati e la provenienza dell’utente. Questi dati vengono riassunti in un ID utente e assegnati al rispettivo dispositivo finale del visitatore del sito web.

Possiamo anche utilizzare Google Analytics per registrare i movimenti e i clic del mouse e dello scroll, tra le altre cose. Google Analytics utilizza anche diversi approcci di modellazione per integrare i dati registrati e utilizza tecnologie di apprendimento automatico per l’analisi dei dati.

Google Analytics utilizza tecnologie che consentono di riconoscere l’utente allo scopo di analizzarne il comportamento (ad es. cookie o fingerprinting del dispositivo). Le informazioni raccolte da Google sull’utilizzo di questo sito web vengono generalmente trasmesse a un server di Google negli Stati Uniti e lì memorizzate.

L’utilizzo di questo servizio si basa sul tuo consenso ai sensi dell’art. 6 par. 1 lett. a GDPR e del § 25 par. 1 TDDDG. Il consenso può essere revocato in qualsiasi momento.

Il trasferimento dei dati negli Stati Uniti si basa sulle clausole contrattuali standard della Commissione Europea. Puoi trovare i dettagli qui: https://privacy.google.com/businesses/controllerterms/mccs/.

L’azienda è certificata in conformità con il “Data Privacy Framework UE-USA” (DPF). Il DPF è un accordo tra l’Unione Europea e gli Stati Uniti volto a garantire il rispetto degli standard europei di protezione dei dati per l’elaborazione dei dati negli Stati Uniti. Ogni azienda certificata ai sensi del DPF si impegna a rispettare questi standard di protezione dei dati. Ulteriori informazioni in merito possono essere ottenute dal fornitore al seguente link: https://www.dataprivacyframework.gov/participant/5780.

Anonimizzazione dell’IP

L’anonimizzazione dell’IP di Google Analytics è attivata. Di conseguenza, il tuo indirizzo IP verrà troncato da Google all’interno degli Stati membri dell’Unione Europea o in altri Stati firmatari dell’Accordo sullo Spazio Economico Europeo prima di essere trasmesso agli Stati Uniti. Solo in casi eccezionali l’indirizzo IP completo verrà trasmesso a un server di Google negli Stati Uniti e lì troncato. Per conto del gestore di questo sito web, Google utilizzerà queste informazioni per analizzare l’utilizzo del sito web da parte dell’utente, per compilare report sulle attività del sito web e per fornire al gestore del sito web altri servizi relativi alle attività del sito web e all’utilizzo di internet. L’indirizzo IP trasmesso dal tuo browser nell’ambito di Google Analytics non verrà unito ad altri dati di Google.

Plugin del browser

Puoi impedire la raccolta e il trattamento dei tuoi dati da parte di Google scaricando e installando il plug-in del browser disponibile al seguente link: https://tools.google.com/dlpage/gaoptout?hl=de.

Puoi trovare maggiori informazioni su come Google Analytics gestisce i dati degli utenti nell’informativa sulla privacy di Google: https://support.google.com/analytics/answer/6004245?hl=de.

Elaborazione dell’ordine

Abbiamo stipulato un contratto per l’elaborazione degli ordini con Google e applichiamo pienamente i severi requisiti delle autorità tedesche per la protezione dei dati quando utilizziamo Google Analytics.

Misurazione dell’e-commerce con Google Analytics

Questo sito web utilizza la funzione “misurazione e-commerce” di Google Analytics. Con l’aiuto della misurazione dell’e-commerce, l’operatore del sito web può analizzare il comportamento di acquisto dei visitatori del sito per migliorare le proprie campagne di marketing online. Vengono registrate informazioni quali gli ordini effettuati, il valore medio degli ordini, i costi di spedizione e il tempo trascorso dalla visualizzazione all’acquisto di un prodotto. Questi dati possono essere riassunti da Google con un ID di transazione assegnato al rispettivo utente o al suo dispositivo.

6. plugin e strumenti

Vimeo

Questo sito web utilizza i plugin del portale video Vimeo. Il fornitore è Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

Quando visiti una delle nostre pagine con un video di Vimeo, viene stabilita una connessione con i server di Vimeo. Questo comunica al server di Vimeo quali pagine hai visitato. Vimeo also receives your IP address. Questo vale anche se non hai effettuato l’accesso a Vimeo o non hai un account Vimeo. Le informazioni raccolte da Vimeo vengono trasmesse al server di Vimeo negli Stati Uniti.

Se sei connesso al tuo account Vimeo, permetti a Vimeo di assegnare il tuo comportamento di navigazione direttamente al tuo profilo personale. Puoi evitare che ciò accada disconnettendoti dal tuo account Vimeo.

Vimeo utilizza cookie o tecnologie di riconoscimento comparabili (ad esempio l’impronta digitale del dispositivo) per riconoscere i visitatori del sito web.

L’utilizzo di Vimeo è nell’interesse di una presentazione accattivante delle nostre offerte online. Ciò costituisce un interesse legittimo ai sensi dell’Art. 6 comma 1 lit. f GDPR. Se è stato richiesto un consenso corrispondente, il trattamento viene effettuato esclusivamente sulla base dell’art. 6 par. 1 lett. a GDPR e del § 25 par. 1 TDDDG, nella misura in cui il consenso include la memorizzazione di cookie o l’accesso a informazioni nel dispositivo terminale dell’utente (ad es. impronta digitale del dispositivo) ai sensi del TDDDG. Il consenso può essere revocato in qualsiasi momento.

Il trasferimento dei dati negli Stati Uniti si basa sulle clausole contrattuali standard della Commissione UE e, secondo Vimeo, su “legittimi interessi commerciali”. Puoi trovare i dettagli qui: https://vimeo.com/privacy.

Ulteriori informazioni sul trattamento dei dati degli utenti sono disponibili nell’informativa sulla privacy di Vimeo: https://vimeo.com/privacy.

L’azienda è certificata in conformità con il “Data Privacy Framework UE-USA” (DPF). Il DPF è un accordo tra l’Unione Europea e gli Stati Uniti volto a garantire il rispetto degli standard europei di protezione dei dati per l’elaborazione dei dati negli Stati Uniti. Ogni azienda certificata ai sensi del DPF si impegna a rispettare questi standard di protezione dei dati. Ulteriori informazioni in merito possono essere ottenute dal fornitore al seguente link: https://www.dataprivacyframework.gov/participant/5711.

Google Fonts (hosting locale)

Questo sito utilizza i cosiddetti Google Fonts, forniti da Google, per la visualizzazione standardizzata dei caratteri. I font di Google sono installati localmente. Non vi è alcuna connessione ai server di Google.

Ulteriori informazioni su Google Fonts sono disponibili all’indirizzo https://developers.google.com/fonts/faq e nell’informativa sulla privacy di Google: https://policies.google.com/privacy?hl=de.

Font Awesome (hosting locale)

Questo sito utilizza Font Awesome per la visualizzazione standardizzata dei font. Font Awesome è installato localmente. Non vi è alcuna connessione ai server di Fonticons, Inc.

Ulteriori informazioni su Font Awesome sono disponibili nell’informativa sulla privacy di Font Awesome all’indirizzo: https://fontawesome.com/privacy.

Google Maps

Questo sito utilizza il servizio di mappe Google Maps. Il fornitore è Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublino 4, Irlanda. Con l’aiuto di questo servizio, possiamo integrare materiale cartografico sul nostro sito web.

Per utilizzare le funzioni di Google Maps, è necessario salvare il tuo indirizzo IP. Queste informazioni vengono solitamente trasmesse a un server di Google negli Stati Uniti e lì memorizzate. Il fornitore di questo sito non ha alcuna influenza su questo trasferimento di dati. Se Google Maps è attivato, Google può utilizzare Google Fonts per standardizzare la visualizzazione dei caratteri. Quando richiami Google Maps, il tuo browser carica i web font necessari nella cache del browser per visualizzare correttamente i testi e i caratteri.

L’utilizzo di Google Maps è finalizzato a una presentazione accattivante delle nostre offerte online e a facilitare la ricerca dei luoghi da noi indicati sul sito web. Ciò costituisce un interesse legittimo ai sensi dell’art. 6 par. 1 lett. f GDPR. Se è stato richiesto un consenso corrispondente, il trattamento viene effettuato esclusivamente sulla base dell’art. 6 par. 1 lett. a GDPR e dell’art. 25 par. 1 TDDDG, nella misura in cui il consenso include la memorizzazione di cookie o l’accesso a informazioni nel dispositivo terminale dell’utente (ad es. impronta digitale del dispositivo) ai sensi del TDDDG. Il consenso può essere revocato in qualsiasi momento.

Il trasferimento dei dati verso gli Stati Uniti si basa sulle clausole contrattuali standard della Commissione Europea. I dettagli sono disponibili qui: https://privacy.google.com/businesses/gdprcontrollerterms/ e https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Puoi trovare maggiori informazioni sul trattamento dei dati degli utenti nell’informativa sulla privacy di Google: https://policies.google.com/privacy?hl=de.

L’azienda è certificata in conformità con il “Data Privacy Framework UE-USA” (DPF). Il DPF è un accordo tra l’Unione Europea e gli Stati Uniti volto a garantire il rispetto degli standard europei di protezione dei dati per l’elaborazione dei dati negli Stati Uniti. Ogni azienda certificata ai sensi del DPF si impegna a rispettare questi standard di protezione dei dati. Ulteriori informazioni in merito possono essere ottenute dal fornitore al seguente link: https://www.dataprivacyframework.gov/participant/5780.

Google reCAPTCHA

Su questo sito web utilizziamo “Google reCAPTCHA” (di seguito “reCAPTCHA”). Il fornitore è Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublino 4, Irlanda.

Lo scopo di reCAPTCHA è quello di verificare se i dati inseriti su questo sito web (ad esempio in un modulo di contatto) sono stati inseriti da un essere umano o da un programma automatico. A tal fine, reCAPTCHA analizza il comportamento del visitatore del sito web in base a diverse caratteristiche. L’analisi inizia automaticamente non appena il visitatore entra nel sito web. Per l’analisi, reCAPTCHA valuta diverse informazioni (ad esempio l’indirizzo IP, il tempo trascorso sul sito web dal visitatore o i movimenti del mouse effettuati dall’utente). I dati raccolti durante l’analisi vengono trasmessi a Google.

Le analisi di reCAPTCHA vengono esegono completamente in background. I visitatori del sito web non vengono informati che è in corso un’analisi.

I dati sono conservati e analizzati sulla base dell’art. 6, comma 1, lettera f del GDPR. L’operatore del sito web ha un interesse legittimo a proteggere il proprio sito web da spionaggio automatico abusivo e SPAM. Se è stato richiesto un consenso, il trattamento viene effettuato esclusivamente sulla base dell’art. 6 par. 1 lett. a GDPR e dell’art. 25 par. 1 TDDDG, nella misura in cui il consenso include la memorizzazione di cookie o l’accesso a informazioni nel dispositivo terminale dell’utente (ad esempio l’impronta digitale del dispositivo) ai sensi del TDDDG. Il consenso può essere revocato in qualsiasi momento.

Per ulteriori informazioni su Google reCAPTCHA, consulta l’Informativa sulla privacy di Google e le Condizioni d’uso di Google ai seguenti link: https://policies.google.com/privacy?hl=de e https://policie s.google.com/terms?hl=de.

L’azienda è certificata in conformità con il “Data Privacy Framework UE-USA” (DPF). Il DPF è un accordo tra l’Unione Europea e gli Stati Uniti volto a garantire il rispetto degli standard europei di protezione dei dati per l’elaborazione dei dati negli Stati Uniti. Ogni azienda certificata ai sensi del DPF si impegna a rispettare questi standard di protezione dei dati. Ulteriori informazioni in merito possono essere ottenute dal fornitore al seguente link: https://www.dataprivacyframework.gov/participant/5780.

Wordfence

Abbiamo integrato Wordfence in questo sito web. Il fornitore è Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (di seguito “Wordfence”).

Wordfence serve a proteggere il nostro sito web da accessi indesiderati o da attacchi informatici dannosi. A tal fine, il nostro sito web stabilisce una connessione permanente ai server di Wordfence in modo che quest’ultimo possa confrontare i suoi database con gli accessi effettuati sul nostro sito web e bloccarli se necessario.

L’utilizzo di Wordfence si basa sull’articolo 6, paragrafo 1, lettera f del GDPR. L’operatore del sito web ha un interesse legittimo a proteggere il proprio sito web nel modo più efficace possibile contro i cyberattacchi. Se è stato richiesto un consenso corrispondente, il trattamento viene effettuato esclusivamente sulla base dell’art. 6 par. 1 lett. a GDPR e del § 25 par. 1 TDDDG, nella misura in cui il consenso include la memorizzazione di cookie o l’accesso a informazioni nel dispositivo terminale dell’utente (ad es. fingerprinting del dispositivo) ai sensi del TDDDG. Il consenso può essere revocato in qualsiasi momento.

Il trasferimento dei dati negli Stati Uniti si basa sulle clausole contrattuali standard della Commissione Europea. Puoi trovare i dettagli qui: https://www.wordfence.com/help/general-data-protection-regulation/.

Elaborazione dell’ordine

Abbiamo stipulato un accordo di trattamento dei dati (DPA) per l’utilizzo del servizio di cui sopra. Si tratta di un contratto prescritto dalla legge sulla protezione dei dati, che garantisce il trattamento dei dati personali dei visitatori del nostro sito web solo in conformità alle nostre istruzioni e nel rispetto del GDPR.

GestisciWP

Gestiamo questo sito web con l’aiuto dello strumento ManageWP. Il fornitore è GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrado, Serbia (di seguito ManageWP).

Con ManageWP possiamo monitorare la sicurezza e le prestazioni del nostro sito web e creare backup automatici, tra le altre cose. ManageWP has access to all the contents of our website, including our database. ManageWP è ospitato sui server del provider.

L’utilizzo di ManageWP si basa sull’Art. 6 comma 1 lit. f GDPR. L’operatore del sito web ha un interesse legittimo nel funzionamento più efficace e sicuro dei suoi siti web. Se è stato richiesto un consenso corrispondente, il trattamento viene effettuato esclusivamente sulla base dell’art. 6 par. 1 lett. a GDPR e del § 25 par. 1 TDDDG, nella misura in cui il consenso include la memorizzazione di cookie o l’accesso a informazioni nel dispositivo terminale dell’utente (ad es. impronte digitali del dispositivo) ai sensi del TDDDG. Il consenso può essere revocato in qualsiasi momento.

L’azienda è certificata in conformità con il “Data Privacy Framework UE-USA” (DPF). Il DPF è un accordo tra l’Unione Europea e gli Stati Uniti volto a garantire il rispetto degli standard europei di protezione dei dati per l’elaborazione dei dati negli Stati Uniti. Ogni azienda certificata ai sensi del DPF si impegna a rispettare questi standard di protezione dei dati. Ulteriori informazioni in merito possono essere ottenute dal fornitore al seguente link: https://www.dataprivacyframework.gov/participant/4957.

Elaborazione dell’ordine

Abbiamo stipulato un accordo di trattamento dei dati (DPA) per l’utilizzo del servizio di cui sopra. Si tratta di un contratto prescritto dalla legge sulla protezione dei dati, che garantisce il trattamento dei dati personali dei visitatori del nostro sito web solo in conformità alle nostre istruzioni e nel rispetto del GDPR.

7. fornitori di servizi di eCommerce e di pagamento

Trattamento dei dati dei clienti e dei contratti

Raccogliamo, elaboriamo e utilizziamo i dati personali dei clienti e del contratto per stabilire, organizzare il contenuto e modificare i nostri rapporti contrattuali. Raccogliamo, elaboriamo e utilizziamo i dati personali relativi all’utilizzo di questo sito web (dati di utilizzo) solo nella misura in cui ciò è necessario per consentire all’utente di utilizzare il servizio o per fatturare all’utente. La base giuridica è l’art. 6, comma 1, lettera b del GDPR.

I dati del cliente raccolti saranno cancellati dopo il completamento dell’ordine o la cessazione del rapporto commerciale e la scadenza di eventuali periodi di conservazione previsti dalla legge. I periodi di conservazione previsti dalla legge rimangono inalterati.

Trasmissione dei dati al momento della stipula del contratto per i negozi online, i rivenditori e la spedizione dei prodotti

Se ordini dei prodotti da noi, trasmetteremo i tuoi dati personali alla società di trasporto incaricata della consegna e al fornitore di servizi di pagamento incaricato di elaborare il pagamento. Verranno divulgati solo i dati richiesti dal rispettivo fornitore di servizi per svolgere il proprio compito. La base giuridica è l’art. 6 par. 1 lit. b GDPR, che consente il trattamento dei dati per l’adempimento di un contratto o di misure precontrattuali. Se hai dato il tuo consenso ai sensi dell’art. 6 par. 1 lett. a GDPR, trasmetteremo il tuo indirizzo e-mail all’azienda di trasporto incaricata della consegna affinché possa informarti via e-mail sullo stato di spedizione del tuo ordine; puoi revocare il tuo consenso in qualsiasi momento.

Trasmissione dei dati alla conclusione di un contratto per servizi e contenuti digitali

Trasferiamo i dati personali a terzi solo se ciò è necessario nel contesto dell’elaborazione del contratto, ad esempio all’istituto di credito responsabile dell’elaborazione dei pagamenti.

L’ulteriore trasmissione dei dati non avverrà o avverrà solo se avrai espressamente acconsentito alla trasmissione. I tuoi dati non saranno trasmessi a terzi senza il tuo esplicito consenso, ad esempio per scopi pubblicitari.

La base per il trattamento dei dati è l’art. 6 par. 1 lit. b GDPR, che consente il trattamento dei dati per l’adempimento di un contratto o di misure precontrattuali.

Servizi di pagamento

Sul nostro sito web integriamo servizi di pagamento di società terze. Quando effettui un acquisto da noi, i tuoi dati di pagamento (ad es. nome, importo del pagamento, dettagli del conto, numero di carta di credito) vengono elaborati dal fornitore del servizio di pagamento ai fini dell’elaborazione del pagamento. A queste transazioni si applicano le disposizioni contrattuali e di protezione dei dati dei rispettivi fornitori. I fornitori di servizi di pagamento sono utilizzati sulla base dell’Art. 6 comma 1 lit. b GDPR (trattamento del contratto) e nell’interesse di un processo di pagamento agevole, comodo e sicuro (Art. 6 comma 1 lit. f GDPR). Nel caso in cui venga richiesto il tuo consenso per determinate azioni, l’Art. 6 par. 1 lit. a GDPR è la base giuridica per il trattamento dei dati; il consenso può essere revocato in qualsiasi momento per il futuro.

Su questo sito web utilizziamo i seguenti servizi di pagamento/fornitori di servizi di pagamento:

PayPal

Il fornitore di questo servizio di pagamento è PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Lussemburgo (di seguito “PayPal”).

Il trasferimento dei dati negli Stati Uniti si basa sulle clausole contrattuali standard della Commissione Europea. Puoi trovare i dettagli qui: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

I dettagli sono disponibili nell’informativa sulla privacy di PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Mastercard

Il fornitore di questo servizio di pagamento è Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgio (di seguito “Mastercard”).

Mastercard può trasferire i dati alla sua società madre negli Stati Uniti. Il trasferimento dei dati agli Stati Uniti si basa sulle Norme Vincolanti d’Impresa di Mastercard. I dettagli sono disponibili qui: https://www.mastercard.de/de-de/datenschutz.html e https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

Il fornitore di questo servizio di pagamento è Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, Regno Unito (di seguito “VISA”).

Il Regno Unito è considerato un paese terzo sicuro ai sensi della legge sulla protezione dei dati. Ciò significa che il Regno Unito ha un livello di protezione dei dati che corrisponde a quello dell’Unione Europea.

VISA può trasferire i dati alla sua società madre negli Stati Uniti. Il trasferimento dei dati agli Stati Uniti si basa sulle clausole contrattuali standard della Commissione Europea. I dettagli sono disponibili qui: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

Ulteriori informazioni sono disponibili nell’informativa sulla privacy di VISA: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

Mentions légales

Address de contact

Saunaboot GmbH
St. Niklausenstrasse 105
6047 Kastanienbaum
Suisse

E-Mail : info@saunaboot.ch

Person(s) habilitée(s) à représenter l’entreprise
Andreas Wallimann, Direction
Samuel Muff, Direction
Stella Holz, Direction

Inscription au registre du commerce
Nom de l’entreprise enregistrée : Saunaboot GmbH
N° du registre du commerce : CHE-221.834.093

Numéro de TVA
CHE-221.834.093

Exclusion de responsabilité
L’auteur n’assume aucune garantie quant à l’exactitude, la précision, l’actualité, la fiabilité et l’exhaustivité du contenu des informations.

L’auteur ne saurait être tenu pour responsable des dommages matériels ou immatériels qui pourraient être causés par l’accès aux informations diffusées ou par leur utilisation ou non-utilization, par le mauvais usage de la connexion ou par des problèmes techniques.

All offers are without engagement. L’auteur se réserve expressément le droit de modifier, de compléter ou de supprimer des parties de pages ou l’ensemble de l’offre sans préavis particulier, ou d’en suspendre temporairement ou définitivement la publication.

Exclusion de responsabilité pour les liens
Les renvois et liens vers des sites web de tiers ne relèvent pas de notre responsabilité. We disclaim all liability for such websites. Access to such sites and their use are subject to the risks and liabilities of the user concerned.

Rights of the author
Les droits d’auteur et tous les autres droits liés aux contenus, images, photos ou autres fichiers de ce site Internet appartiennent exclusivement à la société Saunaboot GmbH ou aux titulaires de droits spécialement cités. Pour la reproduction de tout élément, l’accord écrit du détenteur des droits d’auteur doit être obtenu au préalable.

Source : Générateur de mentions légales de SwissAnwalt Traduit par DeepL. La version allemande fait foi.

Imprint

Contact address

Saunaboot GmbH
St. Niklausenstrasse 105
6047 Chestnut tree
Switzerland

E-mail: hello@saunaboot.ch

Authorized representative(s)
Andreas Wallimann, Management Board
Samuel Muff, Management Board
Stella Holz, Management

Commercial register entry
Registered company name: Saunaboot GmbH
Commercial register no.: CHE-221.834.093

VAT number
CHE-221.834.093

Disclaimer
The author accepts no liability whatsoever with regard to the correctness, accuracy, up-to-dateness, reliability and completeness of the information.

Liability claims against the author for material or immaterial damage resulting from access to or use or non-use of the published information, misuse of the connection or technical faults are excluded.

All offers are non-binding. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without prior notice or to temporarily or permanently cease publication.

Disclaimer for links
References and links to third-party websites are outside our area of responsibility. Any responsibility for such websites is rejected. Access to and use of such websites is at the user’s own risk.

Copyrights
The copyright and all other rights to content, images, photos or other files on this website belong exclusively to Saunaboot GmbH or the specifically named rights holders. The written consent of the copyright holder must be obtained in advance for the reproduction of any elements.

Source: Imprint generator from SwissAnwalt

Go to Top