GTC & Privacy

Conditions of use

1. Scope and seller information
1.1 These “General Terms and Conditions” (hereinafter referred to as “GTC”) regulate the rights and obligations of GNL AG (“GNL”) and the customer who purchases a product (“Products”) via the GNL webshop www.gnlfootwear.com (“website”).

1.2 GNL reserves the right to change the terms and conditions from time to time. The GTC valid at the time of the confirmation of the customer order by GNL apply.

1.3 Further information about the seller can be found in the imprint.

2. Conclusion of contract
2.1 The presentation of the products and the indication of prices on the website do not constitute a legally valid offer but are to be understood as an offer to the customer to conclude a contract.

2.2 GNL does not transmit an order acceptance, but only confirms receipt of the customer order. The actual delivery by GNL is considered as acceptance of the order by GNL and regulates the corresponding subject and scope of the contract between the parties. This also applies to advance payments by the customer, e.g., if GNL debits the credit card account specified by the customer. GNL reserves the right to reject the customer’s contract offer and not to deliver the ordered products if they are not available from GNL’s supplier or manufacturer. The publication of specifications, the scope of delivery etc. in the webshop is in no case legally binding; the actual specifications and scope of delivery specified by the product manufacturer at the time of delivery apply exclusively. If GNL is unable to deliver the ordered products per the customer’s order (price and product specifications), GNL will reimburse any advance payments made.

2.3 Unless confirmed in writing by GNL, the specified delivery times are only to be regarded as non-binding information, even though GNL has named them to the best of its knowledge. This applies in particular to delivery problems on the part of the manufacturer. If a delivery is delayed beyond the date confirmed in writing by GNL, the customer can set a grace period of at least three weeks. After the grace period has expired, the customer can withdraw from his order. Further claims are hereby excluded.

2.4 GNL is entitled to cancel confirmed orders at any time or not to deliver them, especially if GNL itself is not supplied with products by its suppliers. The customer acknowledges in particular that GNL reserves the right to make changes to the sales prices of the products, i.e., that prices may increase between the date of the order and the date of delivery by GNL; in such a case the customer is entitled to refuse delivery of the products. In this case, the customer will receive a refund of the purchase price paid for all products not delivered (even if a credit card specified by the customer is charged); any further claims are hereby excluded.

2.5 Order changes or cancellations requested by the customer are only valid if they have been confirmed in writing by GNL. Costs that have already been incurred by GNL up to this point can be charged to the customer.

2.6 GNL is entitled to make partial deliveries webshop and the customer undertakes to accept partial deliveries.

2.7 No guarantee is assumed for technical data and information about the scope of delivery, i.e., GNL is not liable for damage caused by deviations from this information.

3. Prices and terms of payment
3.1 The prices to be paid by the customer correspond to those in the currency indicated, which are valid at the time GNL accepts the order.

3.2 All prices stated in the webshop include Swiss VAT.

4. Payment and delivery
4.1 The payment methods we accept are listed on our website.

4.2 GNL only charges credit cards when the ordered products are dispatched. GNL reserves the right to verify credit card payments before accepting this form of payment. In the event of a delay in payment, GNL is entitled to partially or completely suspend all further deliveries to the customer without prior notice until the payment in question has been received or secured. 

4.3 Purchase by invoice with partial payment option (POWERPAY)

As an external payment provider, MF Group/POWERPAY offers the payment option ‘Pay by invoice’. You can simply pay for your online purchase by invoice using the order invoice. If you do not make the payment within the specified period, you will receive a subsequent monthly invoice the following month with an order overview.

When a purchase agreement is made, POWERPAY takes on the amount receivable and processes it using the payment method selected. By selecting purchase by invoice, you are also agreeing to our GTC, POWERPAY’s GTC. (powerpay.ch/en/agb).

4.4 Rejected shipments are treated as normal returns. See section 6.

5. Retention of title
Ordered products remain the property of GNL until full payment to GNL.

6. Right of withdrawal
6.1 After receipt of delivery, the customer can withdraw from the contract without giving a reason and return the delivered products within 30 days of the original invoice date.

6.2 To request the return procedure from GNL, the customer must observe the requirements for the return of deliveries, which are described in the Returns section on the website under Shipping & Returns.

6.3 The product is in original condition, i.e., undamaged, clean, and to be returned to GNL in the original packaging.

6.4 GNL does not offer a free pick-up service. The customer bears the cost of return transport. 

6.5 If the customer has informed GNL that he wants to withdraw from the contract, all amounts owed to GNL will be repaid as soon as possible, at the latest within 30 days after receipt of the ordered goods in our warehouse (any shipping costs and import taxes will not be refunded). 

6.6 The right of return does not exist for the purchase of gift vouchers and the category "Re-Sole".

7. Transport damage
If the customer determines on receipt of delivery that the ordered products have been damaged in transit, he must inform the delivery service employee and contact GNL customer service via info@gnlfootwear.com. The customer’s warranty rights remain unaffected if he does not notify the shipping company or GNL of transport damage, but it will then be more difficult for GNL to enforce claims against the shipping company or an insurance company.

8. Warranty 
The warranty period is (6) months without product registration and (1) year with product registration (see the FAQ to register your shoes). All product defects covered by the warranty will be rectified by GNL free of charge for the customer. GNL’s warranty obligations for defective products are limited to correcting errors or exchanging products. A contract cancellation or reduction of the purchase price is hereby excluded. The warranty does not cover normal wear and tear and product changes.

Warranty of re-soling is one year upon date of receipt. This does not include wear and tear. GNL does not take responsibility for repair work done by third parties.

9. Limitation of liability 
GNL is only liable for direct damage, and only if the customer can prove that GNL AG, its subsidiaries or third parties commissioned by it have acted with gross negligence or wilful misconduct. GNL’s liability is, in any case, limited to the purchase price of the deliveries/services in question. Any further liability on the part of GNL AG, its subsidiaries or third parties commissioned by it for damage of any kind is hereby excluded. In particular, the customer is not entitled to liability claims for damage that was not caused by the product itself. Examples of this are loss of production, use, orders or profits, or other indirect or consequential damage.

10. Applicable law and jurisdiction
10.1 For consumers: The contractual relationships within the framework of this GTC between GNL and the consumer are subject to the laws applicable at the place of residence of the consumer. The place of jurisdiction for all disputes arising directly or indirectly from the contractual relationships between the parties is the competent court as the place of residence of the consumer.

10.2 For all other customers: The contractual relationships within the framework of these terms and conditions between GNL and professional customers (resellers) are subject to Swiss law. The application of international contracts, in particular, the United Nations Convention of 11 April 1980 on contracts for the international sale of goods (Vienna Sales Law), is excluded. The place of jurisdiction for all disputes arising directly or indirectly from the contractual relationships between the parties is Zurich, Switzerland. Alternatively, GNL is entitled to sue the customer at the place of jurisdiction of his place of business.

11. Final provisions 
If one of these GTC is declared invalid, all other provisions remain unaffected. Instead of the invalid provision, the corresponding valid law is to be applied.

Privacy

1. Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website, and thank you for your interest. Below, we inform you about the handling of your data when using our website. Personal data is all data with which you can be personally identified.

1.2 Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Name: Eric Braunschweiler
Address: Renggerstrasse 60, 8038 Zürich, Switzerland
E-mail: eric@gnlfootwear.com
Telephone: +41 44 482 00 17

The person responsible for the processing of personal data is the natural or legal person who, alone or together with others, decides on the purposes and means of personal processing data. 

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries into the person responsible), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.

2. Data collection when visiting our website

When using our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used

Processing takes place in accordance with Art. 6 Para. 1 Point (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are specific indications of illegal use.

3. Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called “cookies” on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called “session cookies”). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the content of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out per Art.6 Para.1 Point (b) GDPR either for the execution of the contract or under Art. 6 Para. 1 Point (f) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective web page design.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also saved on your hard disk when you visit our website (third-party cookies). Please note that you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookies settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links: Internet Explorer, Firefox, Chrome, Safari or Opera.

Please note that the functionality of our website may be restricted if cookies are not accepted.

4. Establishing contact
When contacting us (e.g., via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively to answer your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request per Art. 6 Para. 1 Point (f) GDPR. If your contact is aimed after a contract, then an additional legal basis for the processing is Art. 6 Para. 1 Point (b) GDPR. Your data will be deleted after the final processing of your request; this is the case if it can be inferred from the circumstances that the matter concerned has been finally clarified and provided that there are no statutory retention requirements.

5. Data processing when opening a customer account and for contract processing
According to Art. 6 Para. 1 Point (b) GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time, and you can send a message to the above address of the person responsible. We save and use the data you provide for contract processing. After completion of the contract or deletion of your customer account, your data will be blocked with due regard to tax and commercial law retention periods and deleted after this period, unless you have expressly consented to further use of your data or reserve a legally permitted further data use on our part, about which we will inform you accordingly below.

6. Use of your data for direct advertising (newsletter)
If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of any other data is voluntary and is used to address you personally. We use the opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to the sending of the newsletters. With your registration, you give us your consent to the use of your data under Art. 6 Para. 1 Point (a) GDPR. When registering for the newsletter, we save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will only be used for advertising purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person named above. After unsubscribing, your e-mail address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this declaration.

7. Data processing for order processing
To process your order, we work with the following service provider(s) who support us in whole or in part in the execution of contracts. Certain personal data is transmitted to these service providers per the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery as far as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of the data is Art. 6 Para.1 Point (b) GDPR.

7.1 Using Stripe
We use Stripe, an offer from the American Stripe Inc. (hereinafter “Stripe”) to process payments (legal basis according to GDPR, if and insofar as applicable: Art. 6 Para. 1 Point (b) and (f) GDPR). Stripe is certified according to both the EU-American and the Swiss-American Privacy Shield, thereby ensuring adequate data protection. In particular, Stripe has published the following information on the type, scope, and purpose of data processing: data protection declaration, entry in the Privacy Shield list.

8. Web analytics services
8.1 AWStats
To be able to evaluate our website statistically, we use the AWStats program. The program is a free web analysis software. It is used to evaluate log files that web servers create based on visitor requests. The program does not use cookie files for evaluation. The statistical analysis is carried out via the log files, which also contain IP addresses. As a rule, this data cannot be assigned to specific persons. This data is not merged with other data sources; the data is also deleted after statistical analysis. In contrast to other statistical programs, no data is transmitted to an external server at AWStats. The program is installed on your server. For example, data transmission abroad is avoided because our servers are located in Switzerland (CH).

8.2 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there. This website uses Google Analytics exclusively with the extension "_anonymizeIp()”, which ensures anonymization of the IP address by shortening it and excludes a direct personal reference. The extension will shorten your IP address from Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases. In these exceptional cases, this processing takes place per Art. 6 Para. 1 Point (f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from the processing of this data by Google by downloading the browser plug-in available under the following link and install. As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data,” “Personal data.” You can find more information on the handling of user data at Google Analytics in Google’s privacy policy.

8.3 Google conversion tracking
The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ads and were redirected to a page with a conversion tracking tag. However, they will not receive any information that can be used to identify users personally. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. “Conversion cookies” are saved based on Art. 6 Para.1 Point (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

8.4 Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC). If you have given your consent, Google will link your web and app browser history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on any device on which you log in with your Google account. To support this function, Google Analytics records Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising. You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account by following this link: https://www.google.com/settings/ads/onweb/. The summary of the data recorded in your Google account takes place exclusively based on your consent, which you can give or revoke Google (Art. 6 Para. 1 Point (a) GDPR). In the case of data collection processes that are not merged into your Google account (e.g., because you do not have a Google account or have objected to the merging), the collection of the data is based on Art. 6 Para. 1 Point (f) GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes. Further information and the data protection regulations can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/.

8.5 Facebook Pixel
The so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, is used within our online offer. With the help of the Facebook Pixel, Facebook can determine you as a visitor to our online offer as a target group for the display of advertisements. Accordingly, the Facebook Pixel is used only to display the Facebook ads placed by us to those Facebook users who have shown an interest in our online offer or who have certain characteristics (interests in certain topics or products that are determined based on the websites visited) that we transmit to Facebook (Custom Audiences). With the help of the Facebook Pixel it is ensured that our Facebook ads correspond to the potential interest of the users and do not cause a nuisance. Facebook Pixel is used to analyze the effectiveness of Facebook ads for statistical and market research purposes. Conversions become visible, forwarding Facebook ads to our shop.

Facebook’s privacy policy
Facebook processes the data per Facebook’s data usage guidelines. Accordingly, general information on the display of Facebook ads is in the data usage guidelines of Facebook. Special information and details about the Facebook Pixel and how it works are listed in the Facebook help section.

Basis 
The use of Facebook Pixel and the storage of “conversion cookies” is based on Art. 6 Para. 1 Point (f) GDPR. We have a legitimate interest in analyzing user behavior to optimize both our website and our advertising.

9. Tools and Others
9.1 Google Maps
On our website we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive (land) maps to display geographic information visually. By using this service, our location will be shown to you and any travel will be easier. As soon as you call up the sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be assigned to Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular per Art. 6 Para. 1 Point (f) GDPR on the basis of Google’s legitimate interests in the display of personalized advertising, market research and/or the design of its website in line with requirements. You have a right to object to the creation of these user profiles, and you must contact Google to exercise them. Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. If you do not agree to the future transmission of your data to Google when using Google Maps, there is also the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus the map display on this website, cannot then be used. You can view Google’s terms of use here, and the additional terms of use for Google Maps can be found here. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website or here.

9.2 Facebook Social Plugin
Our website uses so-called social plugins (“plugins”) from the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the caption “social plugin from Facebook” or “Facebook social plugin.” An overview of the Facebook plugins and their appearance can be found here. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted from Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with the plugins, for example, by clicking the “Like” button or making a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, can be found in Facebook’s data protection information. If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of the Facebook plugins with add-ons for your browser.

9.3 Instagram Social Media Plugin
Our website uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example, in the form of an “Instagram camera”. An overview of the Instagram plugins and their appearance can be found here. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is sent from your browser directly to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plugins, for example, by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information will also be published on your Instagram account and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights and setting options for protecting your privacy, can be found in Instagram’s data protection information. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g., using the script blocker “NoScript.

9.4 YouTube
We embed YouTube videos on some of our pages. The corresponding plugins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed on which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior. Anyone who has deactivated the storage of cookies for the Google ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser. Further information on data protection at “YouTube” can be found in Google’s data privacy policy.

10. Rights of the data subject
The applicable data protection law grants you comprehensive data protection rights (information and intervention rights) to the person responsible concerning the processing of your personal data, about which we will inform you below:

• Right to information per Art. 15 GDPR: In particular, you have a right to information about your data processed by us, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if we have not collected it from you, the existence of automated decision-making, including profiling and, if necessary, meaningful information about the logic involved and the scope that affects you and the intended effects of such processing, as well as your right to be informed about the guarantees that exist according to Art. 46 GDPR when your data is forwarded to third countries;

• Right to correction under Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;

• Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your data if the requirements of Art. 17 Para. 1 GDPR is met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

• Right to the restriction of processing per Art. 18 GDPR: You have the right to request the restriction of the processing of your data as long as the correctness of your data, which you disputed, is checked, if you reject the deletion of your data due to inadmissible data processing and instead request the restriction of the processing of your data if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data once the purpose has been achieved or if you have objected based on your particular situation, as long as it is not certain whether our legitimate reasons prevail;

• Right to information per Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to correct or delete the data to all recipients to whom the personal data concerning you have been disclosed or to restrict processing unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients;

• Right to data portability per Art. 20 GDPR: You have the right to receive your data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible, insofar as this is technically feasible;

• The right to revoke the consent given per Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal;

• Right to file a complaint per Art. 77 GDPR: If you believe that the processing of your data violates the GDPR, you have the right to complain with a supervisory authority, in particular without prejudice to any other administrative or judicial remedy of the Member State of your residence, your place of work or the place of the alleged violation.

11. Right to object
If we process your data based on our overriding legitimate interest as part of a balancing of interests, you have the right at any time to object to this processing with future effect for reasons that arise from your particular situation. If you exercise your right to object, we will stop processing the data concerned. Further processing is reserved, however, if we can prove compelling reasons for processing worthy of protection that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If we process your data for direct marketing purposes, you have the right to object at any time to the processing of your data for such advertising. You can exercise the objection as described above. If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

12. Duration of storage of personal data
The duration of the storage of personal data is based on the respective statutory retention period (e.g., retention periods under commercial and tax law). After the deadline has expired, the corresponding data will be routinely deleted, provided that it is no longer required to fulfill the contract or initiate a contract and/or that we have no legitimate interest in the further storage.

Zurich, 25 May 2018