Data Protection

Version from August 31, 2023

1. General

By using our website and/or applications for mobile devices (apps) (hereinafter referred to as websites), you agree to the processing of your personal data in accordance with the following provisions.

When you visit our websites, we collect, use and store your personal data. Personal data is information about personal or factual circumstances. We don't do any profiling. Your data will be processed in Switzerland.

You can revoke any consent you have given for specific data processing operations at any time. All you need to do is send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

You have the right to object to the processing of your personal data at any time for reasons relating to your particular situation. If you object, we will no longer process your affected personal data unless the processing serves to assert, exercise or defend legal claims. If your personal data is processed for the purpose of direct advertising, you have the right to object to the processing at any time. If you object, your personal data will no longer be used for direct advertising purposes.

This data protection declaration is designed to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DSG, SR 235.1).

2. Type and purpose of the data processed

We process different categories of data about you: Technical data to ensure the functionality and security of our offerings; User account registration information; Communication data from email, telephone and chat; Master data required for contract processing and for marketing and advertising purposes; contract data; Behavioral and preference data as well as other data that does not fall into any of the above categories.

We process your data for the purpose of communicating with you; to establish, manage and process contractual relationships; for marketing purposes and relationship management; for market research, to improve our services and operations and for product development, for security purposes and for access control; to comply with laws, instructions and recommendations from authorities as well as for risk management and corporate governance purposes.

3. Information, blocking, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to receive free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correct, block or delete this data.

4. Objection to advertising emails

If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

5. Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time about this. The right to restriction of processing exists in the following cases:

If the processing of your personal data is unlawful, you can request that data processing be restricted instead of deletion. If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deletion. If you have lodged an objection, a balance must be made between your interests and ours. Until it is clear whose interests prevail, you have the right to request that the processing of your personal data be restricted. If you have restricted the processing of your personal data, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

6. Disclosure of data

In connection with our contracts, the website, our services and products, our legal obligations or to protect our legitimate interests, we also transmit your personal data to third parties, in particular to service providers such as shipping companies, contractual partners where back-to-back deliveries take place and authorities, insofar as we are legally obliged to do so.

7. Cookies

We use cookies on our site. Cookies are used to store information locally, usually the settings of the website visited. However, this does not mean that we receive direct knowledge of your identity. We use pixel tags (also called tracking pixels or tracking pixels, beacon trackers) for statistical purposes. The pixel tag itself does not store or change any information on your device. The pixel tag sends your IP address, the referrer URL of the website visited, the time at which the pixel was viewed, the browser used and previously set cookie information to a web server. The use of cookies and pixel tags serves on the one hand, to make the use of our offer more pleasant and secure. We use so-called session cookies to recognize which pages have already been visited, which banners have already been displayed, whether you have logged into your user account or to display your shopping cart. These are automatically deleted after you leave our site.

To optimize user-friendliness, we also use temporary cookies, which are stored on the end device for a specific period of time. They ensure that certain information does not have to be re-entered when you visit the website again. The data processed by these cookies is necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 lit. f GDPR, which is why we process them based on your consent in accordance with Art. 6 Para as well as Art. 6 DSG may process.

8. Google analysis tools

Our websites use the functions of the web analysis service Google Analytics, based in Ireland. Google uses performance cookies to track the behavior of visitors to our website (duration, frequency of pages accessed, geographical origin of access, etc.) and, on this basis, creates reports for us about the use of our website. IP anonymization works on our websites. The user's IP address is shortened within the member states of the EU and the European Economic Area and in the other contracting states to the agreement. The information about your use of this website is usually transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit. f. GDPR and Art. 6 DSG.

9. Social networks

We also communicate on social networks and other platforms operated by third parties. We may receive data from you and the platforms if you come into contact with us via our online presence. At the same time, the platforms evaluate your use of our online presence and link this data with other data about you known to the platforms.

10. Web links

Our websites contain links to websites operated and/or controlled by third parties. This may involve a co-branding agreement with the third-party provider that provides for the display of our logo or other trademarks on the website. The uniform resource reference (Uniform Record Locator, URL) always tells you whether the page you are visiting is on one of our websites. We recommend that you review the privacy policies of these third-party websites as they may differ from ours.

11. Security and SSL-TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the operator, our websites use an SSL or. TLS encryption. You can recognize an encrypted connection by the browser address line changing from http:// to https:// and by the lock symbol in the browser line.

12. Data Storage

We process your data for as long as our processing purposes, the legal retention periods and our legitimate interests in processing for documentation and evidence purposes require it, or for as long as storage is required for technical reasons. The log files are usually stored for ten years. Depending on the predefined intervals, the data (log files) are deleted by the host after just one week. We take appropriate organizational and technical measures to protect personal data from manipulation, loss, destruction or unauthorized processing. We assume no liability for damage resulting from loss of data or access to and processing of personal data by unauthorized persons.

13. Foreign language versions of this data protection declaration

If there are differences between foreign language versions and this data protection declaration, the German language text applies.

14. Website operator and data protection officer

The website is operated by Karoxa GmbH, Konrad Strasse 1a, CH-8280 Kreuzlingen, Switzerland, the data protection officer is Teyfik Karaboga, info@karoxa.ch.