Privacy Policy
1. Introduction
Below, we explain, among other things, who is responsible for processing your data, what data we collect when you visit our website and use our services, the purposes for which we process this data, and who we may disclose it to. We also explain how long we process your data, the legal basis for processing it (where required), and the rights you have in relation to our processing of your data. This Privacy Policy applies to all data about you that we already hold or may hold in the future. Please note that we may amend this Privacy Policy from time to time. The current version published on our website applies.
Personal data means any information relating to an identified or identifiable person (hereinafter “personal data”). This includes, in particular, information such as a name, address, telephone number, email address and, in some cases, IP addresses and device IDs. In this Privacy Policy, the general term “data” also includes non-personal and anonymised data. Processing means any handling of data, regardless of the means or methods used, and in particular collecting, storing, using, modifying, disclosing, archiving or deleting data (hereinafter “processing”).
If you provide us with personal data about other people, please ensure that they are aware of this Privacy Policy and only share their personal data with us if you are authorised to do so under applicable data protection law.
2. Name and address of the controller
The party responsible for processing data under this Privacy Policy is:
Vital Praxis GmbH
Muespacherstrasse 76, 4055 Basel, Switzerland
0800 932 932
This is a placeholder and won't appear on the live site.
3. Categories of data processed
When you visit our website, use our services or contact us, we collect certain data. As a rule, we collect this data directly from you. The personal data we process may include:
- Data collected or provided when you visit our website or use our services. This includes, among other things, the IP and MAC address or device ID of the device you use; cookies; the pages you visit and search terms you enter; entries in dialogue boxes; ratings; the time and duration of visits; clicks; referrer/exit URLs; information about when you use our services, your browser and device type, the operating system and internet service provider you use, and the amount of data transferred.
- Data exchanged during or in connection with contact with us, e.g. communications by letter, telephone, email, contact form, etc. (in particular name, contact details, gender, marital status, date of birth, job title, photo, employees, language, payment information).
- Data provided when signing up for a newsletter or downloading a file (e.g. software), in particular your email address and name.
- Data provided when creating a customer account for online shopping and in connection with orders placed (in particular username, password, selected payment method and delivery address).
- Data relating to quotes and concluded contracts (e.g. contract date, type, content, product, parties, term, value, amendments, payment details, contact details, contact persons, billing and correspondence addresses, customer feedback, cancellations, disputes, etc.).
- Data provided through the comment feature, in particular your email address, the username you choose if you do not post anonymously, and your IP address.
- Data provided when participating in competitions, surveys and similar activities.
The above data is not always personal data. As a rule, we cannot associate data generated when you use our services without registering (e.g. for a newsletter or online shop) with an individually identified person. In some cases, however, this may be possible when combined with other data.
Please note that the information you provide through the contact form or comment feature may include particularly sensitive personal data (such as health data), which you provide to us voluntarily.
4. Purposes of processing
To the extent permitted by applicable law, we will process personal data in particular for the following purposes:
- Initiating, concluding, performing and managing contracts;
- Providing, developing and improving our services; developing new services; operating, maintaining and optimising our services and infrastructure, and ensuring their security;
- Administration of users of our services, identity verification, logins and other authentication;
- Maintaining, administering and developing our customer relationships; communicating with customers and third parties; promotions, advertising and marketing; offering tailored services and relevant content;
- Quality control and preparing statistics;
- Compliance with legal and regulatory obligations and internal rules; enforcement of legal rights; civil, administrative and criminal proceedings; complaints; preventing misuse; investigations; and responding to requests from authorities and government agencies.
5. Legal basis
Where required under applicable data protection law, we use personal data for the purposes set out above on the following legal bases:
- Performance of contracts;
- Compliance with legal obligations;
- Consent given to us or to third parties;
- Our legitimate interests and those of third parties, in particular:
- Offering and providing services;
- Advertising and marketing;
- Maintaining contact and communicating with users;
- User management, identity verification and logins;
- Compliance with legal and regulatory obligations; enforcement of legal rights; civil, administrative and criminal proceedings; complaints; investigations; and responding to requests from authorities.
6. Disclosure and sharing of data
We may disclose and share data as follows:
Data processors
We may engage third parties to provide certain services (e.g. IT services, application operations, administration, shipping, etc.) and to process and store data (so-called “data processors”). Data processors may have access to personal data and process it on our behalf. We require our processors to comply with data protection law and to process data only in the same way as we do. Processors that may receive personal data are located in the following countries:
Contractual partners
We may share data with contractual partners (for example, sales partners, service providers, financial companies, etc.). This may be done, for example, to fulfil contractual obligations, offer specific services, for debt collection and marketing purposes, analyse the use and operation of our services, systems and infrastructure, and process payments. Potential recipients may also include buyers or parties interested in acquiring business units, companies or parts thereof. Contractual partners may access personal data and process it for their own purposes (for example, to fulfil contracts or their own legal obligations). They are independently responsible for complying with applicable data protection laws. Contractual partners who may receive personal data may be located in any country, in particular Switzerland, countries in the EU and EEA, and the USA.
Disclosures to authorities
In certain situations, we may disclose data to authorities, government agencies and other third parties. We do so when we are officially or legally requested to, or when we consider ourselves obliged to.
7. Data retention period
We store personal data for as long as necessary for the purpose for which it was collected. Certain personal data is also subject to legally binding retention periods of ten years or more, which we observe. We may also store personal data for at least the applicable limitation periods, which are five or ten years in many cases. We generally delete personal data generated in connection with your use of our services (e.g. records, logs, analytics, etc.) that is not subject to such retention or limitation periods sooner, as soon as we no longer have an interest in processing it. Data may also be retained for longer in anonymised form. Unless expressly agreed otherwise in a contract, we are not obliged to retain data for any specific period.
8. Data security
We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, and unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
9. Your rights (rights of data subjects)
Every data subject has the right to access their personal data. They also have the right to request the correction, deletion and restriction of processing of their personal data, and to object to such processing. Exercising these rights generally requires the data subject to clearly prove their identity. If personal data is processed on the basis of consent, the data subject may withdraw their consent at any time. In certain cases, data subjects have the right to receive data generated through their use of online services in a structured, commonly used and machine-readable format that allows them to reuse and transfer it. Requests relating to these rights should be sent to the address above. We reserve the right to restrict the rights of data subjects under applicable law, for example, by not providing complete access to information or not deleting data. Please also note that deleting your personal data may mean that some or all of our services are no longer available or usable.
This is a placeholder and won't appear on the live site. Every data subject has the right to lodge a complaint with the competent data protection authority. If the controller is based in Switzerland, this is the Federal Data Protection and Information Commissioner. If the controller is based in the Principality of Liechtenstein, it is the Data Protection Office of Liechtenstein.
10. Cookies, web analytics and tracking tools
We use various commonly used technologies to collect, store and analyse data when you visit our website and use our services.
This includes cookies, which can be used to identify your browser or device. A cookie is a small file sent to your computer or automatically stored on your computer or mobile device by the web browser you are using. If you visit a service again, it can recognise your browser or device using the cookie. Cookies can store user preferences and other information. We use session cookies. These are necessary for the basic functionality of our services and are automatically deleted after you use our services. We also use temporary and persistent cookies, which remain stored on your computer or mobile device for longer. The information collected through cookies enables us to improve our website and services to meet customer needs and to make you offers tailored to you.
You can block or delete cookies in your browser settings. Please note that if you do not accept cookies, you may not be able to use all the features of a service fully. If you delete cookies, any opt-out cookies you have set may also be deleted. You will then need to enable these opt-out cookies again the next time you visit the relevant service. Otherwise, you will be recognised as a new user and your data will be collected again.
In addition to cookies, we use web analytics and tracking tools to measure and evaluate how our website and services are used, personalise our services, and display offers and advertising tailored to you. The terms of use and privacy policies of these third parties apply to the processing of data by such tools, which are usually provided by third parties.
We use the following cookies, web analytics and tracking tools:
11. Integration of third-party services
We integrate third-party services and content into our websites, which may allow you to interact with third parties (e.g. YouTube videos or online payments through a payment service provider). Any data provided may be forwarded to these third parties for processing and delivery of the relevant service, or processed directly by them.
Please note that the terms of use and privacy policies of these third parties apply to their processing of data.
Version of this Privacy Policy: [DD.MM.JJJ]
