Privacy Policy
Last updated on: 25.06.2024
We place great importance on transparency in the handling of personal data. This privacy policy provides information about the personal data we collect, the purposes for which we use it, and to whom we may disclose it. To ensure high transparency, this privacy policy is regularly reviewed and updated.
- Services We Use
⦁ Google Analytics
⦁ WhatsApp Business Chat
⦁ Cart Functionality
⦁ WooCommerce - Contact Information
If you have any questions or concerns about the protection of your data by us, you can reach us at any time via email at ybach@web.de. The person responsible for data processing on this website is:
Yanis Bachammar
Breitistrasse 16
8426 Lufingen
Switzerland
Data Protection Officer:
Yanis Bachammar
ybach@web.de - General Principles
3.1 What Data Do We Collect from You and from Whom Do We Receive This Data?
Primarily, we process personal data that you provide to us or that we collect during the operation of our website. In some instances, we may also receive personal data about you from third parties. These may include the following categories:
⦁ Personal data (name, address, date of birth, etc.)
⦁ Contact information (mobile number, email address, etc.)
⦁ Financial data (e.g., account information)
⦁ Online identifiers (e.g., cookie ID, IP addresses)
⦁ Location and traffic data
⦁ Audio and visual recordings
⦁ Particularly sensitive data (e.g., biometric data or health information)
3.2 Under What Conditions Do We Process Your Data?
We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We ensure that data processing is transparent and proportionate.
If we are exceptionally unable to adhere to these principles, the data processing may still be lawful if there is a legal justification. Such justifications may include:
⦁ Your consent
⦁ The performance of a contract or pre-contractual measures
⦁ Our legitimate interests, provided that your interests do not override them
3.3 How Can You Withdraw Your Consent?
If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent, as long as we have no other legal justification.
You can withdraw your consent at any time by sending an email to the address provided in the imprint. Data processing already carried out remains unaffected.
3.4 In What Cases May We Disclose Your Data to Third Parties?
a. General Principle
We may need to rely on the services of third parties or affiliated companies and engage them to process your data (so-called processors). Categories of recipients include:
⦁ Accounting, fiduciary, and auditing firms
⦁ Consulting firms (legal advice, taxes, etc.)
⦁ IT service providers (web hosting, support, cloud services, website design, etc.)
⦁ Payment service providers
⦁ Providers of tracking, conversion, and advertising services
We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially.
We may also be required to disclose your personal data to authorities.
b. Visiting Our Social Media Channels
We may have embedded links to our social media channels on our website. This is typically indicated by the respective symbols. Clicking on these symbols will redirect you to our social media channels.
The social media providers learn that you are accessing their platform from our website. These providers can use the collected data for their own purposes. We point out that we have no knowledge of the content of the transmitted data or its use by the operators.
c. Transfer Abroad
In the context of order processing, your personal data may be transferred to companies abroad. These companies are obligated to protect your data to the same extent as we do. The transfer can take place worldwide.
If the data protection level does not match that of Switzerland, we conduct a prior risk assessment and contractually ensure that the same protection as in Switzerland is guaranteed (e.g., through the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses at the following link: Standard Contractual Clauses for Controllers and Processors in the EU/EEA
3.5 How Long Do We Retain Your Data?
We retain personal data only as long as necessary to fulfill the purposes for which the data was collected.
Data collected during your visit to our website is retained for twelve months. An exception applies to analytics and tracking data, which may be retained longer.
We retain contract data longer due to legal obligations. Specifically, we must retain business communications, concluded contracts, and booking records for up to 10 years. If we no longer need such data to provide services, it will be locked and used only for accounting and tax purposes.
3.6 How Do We Protect Your Data?
We will store your data securely and take all reasonable measures to protect it from loss, access, misuse, or alteration.
Our partners and employees who have access to your data are committed to complying with data protection regulations. In some cases, it may be necessary to forward your inquiries to affiliated companies. Your data will also be treated confidentially in these cases.
On our website, we use the SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser.
3.7 What Are Your Rights?
a. Right of Access
You can request information about the data we hold about you at any time. Please send your access request along with proof of identity to ybach@web.de.
You also have the right to receive your data in a common file format if we process your data automatically and if:
⦁ You have given your consent for this data processing; or
⦁ You have disclosed data in connection with the conclusion or execution of a contract.
We may restrict or refuse to provide information or data if this conflicts with our legal obligations, legitimate own or public interests, or the interests of a third party.
The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to high request volume, legal or technical reasons, or because we need more information from you. You will be informed of the extension in a timely manner, at least in text form.
b. Right to Deletion and Correction
You have the right to request the deletion or correction of your data at any time. We may deny the request if legal provisions require us to retain the data longer or unchanged, or if there is a legal reason that contradicts your request.
Please note that exercising your rights may conflict with contractual agreements and may have corresponding impacts on contract execution (e.g., early termination of the contract or cost consequences).
c. Legal Recourse
If you are affected by the processing of personal data, you have the right to enforce your rights through the courts or to file a complaint with the relevant supervisory authority. The relevant supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (EDÖB): https://www.edoeb.admin.ch.
3.8 Changes to the Privacy Policy
We may change this privacy policy at any time. The changes will be published on www.city-numismatic.ch, and you will not be specifically informed about them.
- Individual Data Processing Operations
4.1 Providing the Website and Creating Log Files
What information do we receive and how do we use it?
By visiting www.city-numismatic.ch, certain data is automatically stored on our servers or on the servers of services and products we use and/or have installed for the purposes of system administration, statistical analysis, security, or tracking. This includes:
⦁ The name of your internet service provider
⦁ Your IP address (if applicable)
⦁ The version of your browser software
⦁ The operating system of the computer used to access the URL
⦁ The date and time of access
⦁ The website from which you visit our URL
⦁ The search terms you used to find our URL
Why are we allowed to process this data?
This data cannot be assigned to specific individuals, and there is no merging of this data with other data sources. The storage of log files is necessary to ensure the functionality of the website and to guarantee the security of our information technology systems. This constitutes our legitimate interest.
How can you prevent data collection?
The data is only stored for as long as necessary to achieve the purpose of its collection. Accordingly, the data is deleted after the end of each session. The storage of log files is essential for the operation of the website; therefore, you have no possibility to object to this.
4.2 Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), on our website. Google Analytics uses “cookies,” which are text files stored on your computer that allow an analysis of your use of the website.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet use to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.
4.3 WhatsApp Business Chat
For direct communication, we offer you the opportunity to contact us via “WhatsApp Business Chat.” This service is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
When you contact us via WhatsApp Business Chat, your mobile phone number and the content of your message, as well as any additional data you provide, will be transmitted to and processed by WhatsApp. We receive this data and use it to respond to your inquiry.
WhatsApp uses cookies and other technologies to provide the service and enable communication. Your IP address may also be collected and stored in this process.
Please note that the use of WhatsApp Business Chat and communication through this service is subject to WhatsApp’s privacy policy. We recommend reading these policies before using the service.
4.4 Cart Functionality
Our website offers a cart functionality that allows visitors to select products or services and save them for purchase. During this process, data about the selected products, quantities, and total price may be stored.
To facilitate the purchase process, our website may also store information such as your name, shipping and billing address, email address, and other purchase-related data. This data is used to facilitate the purchase process and provide you with a seamless user experience.
The data collected as part of the cart functionality is stored on our servers and is only accessible to authorized personnel responsible for managing and processing orders. This data will not be shared with third parties without your explicit consent unless required by law or necessary to fulfill the contract, such as delivering the ordered products through a third-party provider.
To improve the user experience, our website also uses cookies that allow the content of your cart to be saved even if you leave the website and return later. You can delete or block these cookies at any time through your browser settings.
4.5 WooCommerce
WooCommerce is an open-source software from Automattic, Inc., located at 60 29th Street #343, San Francisco, CA 94110, USA. WooCommerce is an eCommerce platform that enables us to offer products and services on our website.
We use WooCommerce to manage our online shop. This includes product presentation, order processing, payment handling, and inventory management. In the context of using WooCommerce, personal data of users may be collected and processed.
Data Collected
⦁ Order Data: Information about purchased products, order numbers, transaction details, and delivery status.
⦁ Customer Data: Personal data such as name, email address, shipping and billing address, and phone number provided during the order process.
⦁ Payment Data: Payment information is securely transmitted to the payment service providers we use. WooCommerce itself does not store complete payment data.
⦁ Technical Data: IP address, browser type and version, and other technical information necessary for the functionality and security of the website.
Use of Data
The collected data is used for the following purposes:
⦁ Order Processing and Shipping: Processing and shipping of orders.
⦁ Payment Handling: Processing of payments and fraud prevention.
⦁ Customer Support: Providing customer service and assistance with questions or issues.
Data Sharing
Your data will only be shared in the following cases:
⦁ Service Providers: With partners and service providers who assist us in order processing and delivery.
⦁ Legal Obligations: When we are legally required to do so or to enforce our rights.
BrainBox Generators
BrainBox Generators is a service provided by BrainBox Solutions GmbH to identify all privacy-relevant services on a website and assist in creating the privacy policy. No personal data is collected or processed in this process.
