Privacy policy

Preface

As the operator of the website www.swissoja.ch, Swissoja SA, Route des Acacias 43, 1227 Geneva, is responsible for the collection, processing, and use of your personal data in compliance with all applicable data protection legislation, including, in Swiss law, the Federal Data Protection Act (LPD), the Ordinance to the Federal Data Protection Act (OLPD), the Telecommunications Act (LTC), and in European Union law, the General Data Protection Regulation (GDPR).

1. Personal data

When you visit our site, the following technical data is captured and stored without any intervention on our part:

• the IP address of the computer accessing the site;

• the name of the owner of the IP space (usually your Internet service provider);

• the date and time of the request;

• the difference in time zone from Greenwich Mean Time (GMT);

• the content of the order (specific page);

• the access status and HTTP status code (communication protocol);

• the amount of data transferred;

• the website from which you accessed our site (original URL) and possibly the search keywords used;

• the browser you are using (type, version, language);

• the operating system of your computer and its interface;

• your username from registration/authentication.

The collection and processing of this data are intended to enable the use of our website (establishment of a connection) and to ensure the long-term security and stability of the system.

These processes are lawful and necessary for the purposes of our legitimate interests, in accordance with Article 6(1) (f) of the GDPR..

Furthermore, we use the following data to fulfill our contractual obligations (Article 6(1)(b) of the GDPR), that is, to process your orders, deliver products, and ensure payment:

• First name and last name;

• Billing address (if different from the shipping address);

• Payment information (depending on the chosen payment method);

• Identifiers, namely email address and password (for registered customers).

2. Communication of personal data to third parties

We only transmit your personal data if you have expressly consented to it (Article 6(1)(a) of the GDPR), if we are legally obligated to do so (Article 6(1)(c) and (e) of the GDPR), or if it is necessary to assert our rights (Article 6(1)(f) of the GDPR).

Furthermore, we are also entitled to transmit your personal data outside of the EU for the processing of data as outlined in Section 1 of our Privacy Policy. If the level of data protection in a given country does not correspond to the Swiss or European level, we establish a contract to ensure that the protection of your personal data always corresponds to that of Switzerland or the EU.

3. Cookies

(a) Cookies are small text files that your web browser automatically saves to your hard drive. They provide certain information that flows to the entity that defines the cookie (in this case, us as well). Cookies are used to make the Internet offering more user-friendly and efficient overall.

(b) Our website uses both temporary cookies (temporary use) and persistent cookies (time-limited use).

This notably includes session cookies. These cookies remember your session, allowing various requests from your browser to be assigned to the common session. Your computer can thus be recognized when you return to the site. They will be automatically deleted when you close the browser.

As for persistent cookies, they are automatically deleted after a certain duration, which may vary from one cookie to another.

(c) You can also configure your browser settings so that, for example, you can refuse cookies from third parties or simply all cookies. In such cases, you may no longer be able to use all the features of the site.

4. Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc.

(« Google »). Google Analytics uses cookies, text files that are stored on your computer and allow you to analyze the use of the website. The information generated by the cookies about your use of the website is transmitted to a Google server in the United States where it is stored. The IP address communicated by your browser via Google Analytics is not associated with other data.

On behalf of the operator of this website, Google uses this information to evaluate your use of the site, to compile reports on website activity, and to provide other services related to website usage and internet usage to the operator. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.

5.Duration of storage

Your personal data may not be retained for longer than is necessary to fulfill the purposes for which it was collected or to comply with our legal obligations (Article 5(1)(e) of the GDPR).

Regardless of this period during which we retain your personal data, we also erase your personal data if you explicitly request it by notifying us at the contact details indicated in Section 6(b) of this Privacy Policy.

6. User and Stakeholder Rights

  • Right of access, inspection, rectification, deletion, and limitation

You have the right to access free of charge and at any time your personal data by consulting the personal data concerning you and processed by us, and if necessary, to have incorrect/incomplete personal data corrected or deleted, or to have them removed or completed, or even, in some cases, to limit the processing of your personal data or to object to the processing.

  • Right to withdraw consent

You have the right to withdraw your previously given consent for the processing of your personal data at any time.

You can exercise these rights (referred to (a) and (b)) by sending your request in writing to:

  • SWISSOJA SA – Route des Acacias 43 – 1227 Acacias

The request must be accompanied by a copy of the identity document with the signature of the document holder, specifying the address to which the response should be sent.

  • Right to file a complaint with the supervisory authority.

Furthermore, you also have the right to lodge a complaint with the supervisory authority if you are not satisfied with the processing of your request by us, at the following address:

  • Federal Data Protection and Transparency Officer – Feldeggweg 1 – 3003 Bern