Privacy policy

The responsible body within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Tobacco shop Achermann Thun
Lilli Achermann
Freienhofgasse, 2
CH-3600 Thun

E-mail: [email protected]
Website: http://www.tabakversand.ch/

Order processing in the online shop with customer account

We process the data of our customers acc. the data protection regulations of the federal government (Data Protection Act, DSG) and the EU GDPR, in the context of the ordering processes in our online shop, in order to enable you to select and order the selected products and services, as well as their payment and delivery, or execution.

The processed data includes master data (inventory data), communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services in the context of the operation of an online shop, billing, delivery and customer services. We use session cookies, e.B. for the storage of the shopping cart content and permanent cookies, e.B. for the storage of the login status.

The processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as required is required for the establishment and fulfilment of the contract. We disclose the data to third parties only in the context of delivery, payment or within the framework of legal permissions and obligations. The data will only be processed in third countries if this is necessary for the fulfilment of the contract (e.B. at the customer’s request upon delivery or payment).

Users can optionally create a user account, in particular by viewing their orders. As part of the registration, the required mandatory information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines, e.B. Google. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention for commercial or tax reasons. Art. 6 para. 1 lit. c GDPR necessary. Information in the customer account remains until it is deleted with subsequent archiving in the event of a legal obligation. It is the responsibility of the users to back up their data before the end of the contract in the event of termination.

As part of the registration and re-registration as well as use of our online services, we store the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as the protection of the user against misuse and other unauthorized use. In principle, this data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so acc. Art. 6 para. 1 lit. c GDPR.

The deletion takes place after expiry of statutory warranty and comparable obligations, the necessity of storing the data is checked at irregular intervals. In the case of statutory archiving obligations, the deletion takes place after their expiry.

Changes

We may amend this Privacy Policy at any time without notice. The current version published on our website shall apply. To the extent that the Privacy Policy is part of an agreement with you, we will notify you of the change by email or other appropriate means in the event of an update.

Questions to the Data Protection Officer

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection listed at the beginning of the privacy policy in our organization.

Source: SwissAnwalt