PRIVACY POLICY

We, Mazzanares Parts Grenzweg 3 2540 Grenchen, info@mazzanares-parts.ch, operate the website www.mazzanares-parts.ch and the associated online store and are the provider of the products offered on the website. We are subsequently considered the responsible party for the collection, use and processing of your data.

In the following, we show you whether and how we process your data:

1.Data processing, storage, deletion

We only process personal data that we collect directly via our online store, the associated applications, via external platforms, via so-called “landing pages” and/or as part of the business relationship with our customers and other business partners. Processing only takes place after consent or if there is a corresponding legal basis.

Within the scope of the consent you have given, we will only process your data within the limits of this consent, unless one of the following legal bases applies. We expressly point out that you can revoke your consent at any time, whereby a – lawful – processing action that has already taken place is not affected by the revocation.

The following legal bases may be considered:

• Consent of the data subject;
• Fulfillment of the contract with the data subject as a contracting party or required pre-contractual measures at the request of the data subject;
• Fulfillment of necessary legal obligations of our company;
• Performing or exercising a task in the public interest;
• Legitimate interests of our company, provided that the interests of the data subject or their fundamental rights do not prevail.

The personal data collected will be deleted as soon as we no longer need it for the stated purpose or the purpose of storage no longer applies. On the other hand, data must be stored if the Swiss or European legislator provides for a corresponding obligation. Such obligations exist, among other things, in contract and tax law or may result from the provisions on commercial accounting: Business documents, contracts or accounting vouchers are subject to a retention period of 10 years. This data, which also includes personal data, is blocked should we no longer need it to provide our services. We use them exclusively for the purpose of accounting and taxes.

2. disclosure to third parties

In the course of order processing, it may be necessary to use the services of third parties. In this context, it may be necessary to pass on data to these external service providers in order to provide the services in accordance with the contract. The legal bases for disclosure are identical to the legal bases for lawful processing and can be found under para. 1 can be viewed. In any case, we contractually ensure that the third parties entrusted with the processing of your data comply with the requirements of data protection. Finally, under certain circumstances, we may also be required by official or court order to disclose data to third parties or government agencies.

3. provision of our services and creation of log files

Our system automatically collects and stores information in so-called log files as soon as you visit our website. These are:

• Browser type and version
• Operating system
• IP address
• Internet Service Provider
• Date and time

The aforementioned data cannot be directly assigned to any person. The data collected and stored in this way are not merged with other personal data and stored, but are in our system. The legal basis for the collection and storage in log files are the legitimate interests of our company.

The storage in log files serves exclusively the functionality of our services. Furthermore, this supports the optimization of our services and ensures the security of our information technology systems. The deletion of the log files is automated after each session.

The collection of your data and its storage in log files is absolutely necessary for the operation of our website; there is no possibility to object.

4. cookies

We use cookies on our website. These are small text files that your browser stores on your computer (in the appropriate browser folder or under the program data). This allows your browser to be uniquely identified when you return to our website. The display settings and login information are stored and transmitted in the cookies. We use cookies to make our website user-friendly and secure. The legal basis is the legitimate interests of our company.

Due to the fact that cookies are stored on your computer system, you have full control over their use. You can disable or restrict the transfer of cookies through your browser settings. You can also delete stored cookies at any time via your browser settings; this can also be done automatically. We would like to point out that deactivating cookies may mean that you can no longer use all the services on our website.

6. contact form

Our website has a contact form, which is used so that you can get in touch with us. In doing so, the following data provided by you will be transmitted to us and stored: first and last name, telephone number, e-mail address, subject and message.

The information you provide to us is solely for the purpose of completing your request/message. By sending the request/message, you consent to the data processing described (legal basis: consent). You can revoke your consent at any time, whereby processing that has already taken place is not affected by the revocation.

7. zahls.ch

We use the plugin zahls.ch on our website. Zahls.ch is a plugin of the Swiss company siebenberge GmbH, Toggenburgerstrasse 29, 9652 Neu St. Johann SG.

Zahls.ch serves your order possibility, resp. payment processing, whereby the legal basis for the use of zahls.ch lies in your consent as a data subject when you order products from us and pay via zahls.ch.

Further information about the data that zahls.ch, resp. siebenberge GmbH, processed, can be found at: https://www.zahls.ch/de/datenschutz/.

8. Facebook

We use Facebook social plug-ins on our website from the company of the same name, Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. You can recognize the corresponding plug-ins by the Facebook logo, the “Like” button or the “Share” button on our site. You can find a corresponding overview under the link https://developers.facebook.com/docs/plugins. As soon as you visit our website, the respective plug-in creates a connection from your browser to the Facebook server. Regardless of whether you are logged in to Facebook or whether you even have a corresponding Facebook account, Facebook thereby receives the information that you have visited our website with your IP address. This information is stored on the aforementioned server in the USA. If you are logged in to Facebook while visiting our website, Facebook can assign your visit directly to your profile.

We would like to point out that Facebook may use this information for the purpose of advertising, market research or for other purposes such as the adjustment of the displayed advertisements; we have no influence on this. If you do not wish your account to be associated with Facebook, we ask that you log out of your Facebook account before visiting our website.

For more information, please see the corresponding Facebook privacy policy: https://www.facebook.com/about/privacy.

9. Instagram

We use so-called social plug-ins from Instagram of the company of the same name Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA on our website. You can recognize the corresponding plug-ins by the Instagram logo or the “Camera” button on our website. As soon as you visit our website, the respective plug-in creates a connection from your browser to the Instagram server. Regardless of whether you are logged in to Instagram or whether you even have a corresponding account, Instagram thereby receives the information that you have visited our website with your IP address. This information is stored on the aforementioned server in the USA. If you are logged into Instagram while visiting our website, Instagram can assign your visit to your profile.

If you do not want Instagram to be able to assign the data collected on our website directly to your account, you must log out of Instagram before accessing our website. Loading of Instagram plug-ins can also be completely prevented with an add-on for your browser.

Information regarding the purpose and scope of the respective data collection, the further processing and use of your data by Instagram as well as your rights and setting options can be found in the respective privacy notices of Instagram: https://help.instagram.com/155833707900388.

10. Right to information

As a data subject, you may request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have the right to access the following information:

• The purposes for which the personal data are processed;
• The categories of personal data that are processed;
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;
• The planned duration of the storage of the personal data concerning you, or, if this is not possible, the criteria for determining this duration;
• The existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing;
• The existence of a right of appeal to a supervisory authority;
• Any available information about the origin of the personal data that has not been collected from you;
• The existence of automated decision-making, including profiling, and meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You also have the right to request information about whether personal data concerning you will be transferred to a third country or an international organization; in this case, you have the right to be informed about the appropriate safeguards in connection with the transfer.

11. right to rectification and cancellation

You have the right to request us to correct and/or complete incorrect and/or incomplete personal data concerning you without undue delay.

You also have the right to request that we delete the personal data concerning you without delay, provided that one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You revoke your consent and there is no other legal basis for the processing;
• You object to processing on grounds relating to your particular situation and there are no overriding legitimate grounds for processing or you object to processing for the purposes of direct marketing;
• The personal data concerning you has been processed unlawfully;
• The deletion of the personal data concerning you is necessary to comply with a legal obligation;
• The personal data concerning you has been processed in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO collected.

12. right to restriction of processing

As the data subject, you have the right to request the restriction of processing if one of the following conditions is met:

• The accuracy of the personal data is disputed. The restriction may be requested for the duration that allows us to verify the accuracy of the personal data;
• The processing is unlawful and you – instead of deletion – request restriction;
• We no longer need the personal data for processing, but you need it to assert, exercise or defend legal claims;
• You object to the processing.

If the processing of personal data concerning you is restricted, we may, with the exception of their storage, only process the data with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of public interest.

If you have obtained a restriction of processing in accordance with the aforementioned conditions, you will be informed by us before this restriction is lifted.

13. information and notification obligation towards third parties

If we have made the personal data concerning you public and we are obliged to erase it, we shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform the data controller and/or the processor of the personal data that you have requested the erasure of the personal data concerning you.

We will notify all recipients to whom personal data has been disclosed of any rectification or deletion of personal data and of any restrictions on processing, unless this proves impossible or involves a disproportionate effort.

14. exceptions to the right to erasure

The right to erasure does not exist if the processing is necessary for the exercise of the right to freedom of expression and information and/or for the establishment, exercise and/or defense of legal claims.

15. right to data portability

You – as the data subject – have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent or on a contract and the processing is carried out with the aid of automated processes.

You also have the right to have the personal data concerning you transferred directly from us to another controller, insofar as this is technically feasible. The rights and freedoms of other persons may not be impaired thereby.

16. right of objection

You – as the data subject – have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (2) of the Data Protection Act. 1 lit. e or f DSGVO are carried out. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. An additional exception is processing for the purpose of asserting, exercising or defending legal claims.

If we process personal data concerning you in order to carry out direct advertising, you have the right to object to the processing for the purpose of such advertising at any time. If you object to processing for the aforementioned purpose, we will no longer use personal data relating to you for this purpose.

You have the right to revoke your consent at any time. This revocation shall not affect the lawfulness of the – lawful – processing already carried out.

17. Right to complain to a supervisory authority

You have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular at your place of residence (EU/CH), your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR or the DPA.

The competent authority for Switzerland is: Swiss Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern

The supervisory authority to which the complaint has been filed shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy.

Mazzanares Parts, September 2023