Contacts

1. Name and address of the Controller
   The Controller in terms of data protection law is:
   VunaNexus AG
   Weststrasse 173
   8003 Zurich
   E-mail address: [email protected]
   
   
2. Name and address of the data protection officer
   The data protection officer of the controller is:
   David de Chambrier
   Weststrasse 173
   8003 Zurich
   E-mail address: [email protected]

Data processing in general

1. Purpose of data processing
2. 1. We generally process personal data to offer and provide products and services, for advertising and marketing (unless you object), to provide full access to, operate, improve and develop our website, to analyse the use of our website and our offerings, to detect, investigate and prevent attacks on our website and infrastructure, to communicate with you and to defend and enforce legal claims.
3. Categories of personal data
4. 1. We process the following categories of personal data:
      Inventory data (e.g. names and addresses)
      Contact details (e.g. e-mail and telephone numbers)
      Content data (e.g. text input)
      Usage data (e.g. websites visited, access times)
      Meta/communication data (e.g. IP addresses, device information) 
5. Legal basis of the processing
6. 1. We regularly use the following as the legal basis for processing your personal data:
      your consent, which you can revoke at any time (e.g. to receive our newsletter or to register for your customer account)
      the conclusion or fulfilment of a contract with you or your enquiry in advance of this (for example, by ordering products from us or submitting a job application)
      a balancing of interests (for example, if your professional contact details are collected when you place an order/contact on behalf of your employer).
      a legal obligation (for example, for us to retain receipts)
7. Disclosure of personal data to third parties
8. 1. As a matter of principle, we treat your personal data as confidential and only pass it on if you have expressly consented to this, we are legally obliged or entitled to do so (e.g. within the framework of commissioned data processing) or this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we disclose your personal data to third parties to the extent that this is necessary or expedient in the context of the use of the website or for the possible provision of the services requested by you. We disclose your personal data to the following categories of recipients:
   2. 1. Service providers;
      2. Logistics partners;
      3. Payment service provider;
      4. Advertising partner;
      5. Collection agencies;
      6. Business partners.
   3. In doing so, we naturally comply with the legal regulations on the transfer of personal data to third parties. If we use processors to provide our services, we take appropriate legal precautions as well as corresponding technical and organisational measures to ensure the protection of your personal data in accordance with the relevant legal regulations.
      If the level of data protection in a country where the data is processed does not comply with the applicable data protection regulations, we will contractually ensure that the protection of your personal data is equivalent to that in Switzerland or the European Economic Area (EEA) at all times.
      We may also base our transfer abroad on legal exceptions, including in particular your consent or the performance of a contract with you.
9. Nature and duration of the processing
10. 1. As a matter of principle, we process personal data for the period of time required to achieve the respective purposes.
       Insofar as statutory retention obligations exist, the personal data in question will be stored for the duration of the retention obligation. After expiry of the retention obligation, it is checked whether there is a further need for processing. If there is no longer a need, the data will be deleted.
       If we store the data on the basis of a contractual relationship with you, this data will remain stored at least as long as the contractual relationship exists and at the longest as long as limitation periods for possible claims by us apply or statutory or contractual retention obligations exist.

Visit of our website

1. Website
2. 1. When you visit our website, our servers temporarily store each access in a log file, the so-called server log files.
      For example, your internet protocol address (IP address), the date and time of your visit, your browser, operating system and other similar information is collected to help prevent danger in the event of attacks on our information technology systems.
      
      The purpose of processing this information is to display our website and its content and offers correctly and to ensure data traffic, to optimise our website, content and offers, to ensure the stability and security of our website and systems on a permanent basis and to enable the clarification, defence and prosecution of cyberattacks, spam and other unlawful acts in relation to our website and systems and to enforce claims in this respect. This is our legitimate interest in processing.
      We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of our website, the deletion takes place when the respective session has ended.
      For the hosting of the website, we may use the services of third parties in Switzerland and abroad who carry out the above processing on our behalf. Currently, our websites are hosted exclusively with European hosting providers and on servers in Europe.
3. Newsletter
   You can subscribe to free e-mail newsletters on our website. In order for you to be able to subscribe to our newsletter, you must provide a valid e-mail address. This information is required so that we can send you our newsletter. If we ask you to provide further (voluntary) data, you enable us to provide you with even more targeted information. We store and process the information that you enter yourself in the input mask during registration. You will be asked to enter all the required information in each case. Without this required information, it will not be possible for us to send you the newsletter. To combat abuse, such as identity theft and spam in particular, we also store your IP address and the time and date of registration.
   By registering, you give us your consent to process the information collected from you for sending the newsletter as well as for evaluating your usage behaviour and optimising the newsletter. You can revoke your consent at any time via the link contained at the end of each of our newsletters.
   On the basis of our legitimate interests, our newsletters may in part and to the extent permitted contain graphics and/or web links that record on a personal basis whether, when and how often an individual newsletter was opened in an email application and which web links were clicked on. Such graphics and/or web links record the use of newsletters in order to ensure the quality and enable improvements to the newsletter. You can block the setting of such graphics and/or web links in your e-mail application.
4. Contact
5. 1. On our website, you have the option of contacting us via a contact form and/or by e-mail. If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions and will not be passed on to third parties without your consent.
      The basis for processing your personal data is our legitimate interest in processing your enquiry. If the purpose of contacting you is to fulfil a contract to which you are a party or to carry out pre-contractual measures, this is an additional basis for processing your personal data.
      You can object to this data processing at any time. Please send your objection to the e-mail address mentioned in section 1.2 and we will check your request. In such a case, your request will not be processed further.
      Your personal data will be deleted as soon as the request you made has been dealt with. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and the deletion does not conflict with any legal obligations to retain data.
   2. Vacancies
      When you apply for a job with us, we process the personal data that we receive from you as part of the application process or that you enter or upload in the application form. In addition to your personal details, education, work experience and skills, this includes the usual correspondence data such as e-mail address and telephone number. In addition, all documents submitted by you in connection with the application, such as CV and references, are processed. This data is stored, evaluated, processed or forwarded internally exclusively in the context of your application. Furthermore, they may be processed for statistical purposes (e.g. reporting). In this case, no conclusions can be drawn about individual persons.
6. Online shop
7. 1. If you wish to order or purchase goods or services in our online shop, the following information is mandatory for the processing of the contract. The other details are voluntary:
   2. 1. First and last name
      2. Delivery address
      3. Billing address (if different from the delivery address)
      4. Information within the framework of the payment (depending on the selected payment method)
      5. Telephone number
   3. The mandatory information is required to process your order and/or to deliver the ordered products as well as to ensure correct payment.
      The basis for processing your personal data is your and our joint legitimate interest in processing your order. If the order serves the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures, this is an additional basis for the processing of your personal data.
      Within the scope of order processing, the service providers we use (such as carriers and payment service providers) receive the necessary data for the processing of your order. The payment service provider selected by you is responsible for your payment data. You can find more information about the data protection of these providers on their websites.
      Payment is made via the online payment system of Saferpay (see point 6). The processing of payment and personal data takes place directly via this provider. We do not know or store your payment data in this case. With regard to the payment, the data protection provisions of Saferpay also apply.
8. Setting up a (business) customer account
   You can open a business or customer account on our website. Depending on the type of account, this enables you to process orders more easily, to obtain certain services (such as public tours) or to order goods. When you open a customer account, you receive password-protected direct access to your data stored with us.
   You can log in using a user name and password of your choice. In the customer account you can, among other things, view your order data or manage your personal data.
   We store and process the information that you enter yourself in the input mask during registration. You will be asked to enter all the required information. This mandatory information is required to provide you with password-protected direct access to your inventory data stored with us and to process your orders.
   The opening of a customer account is voluntary and is based on your consent.
   To close your account, send an email to [email protected].
   If you close your customer account, the associated data will be deleted, subject to legal retention obligations. It is your responsibility to back up your personal data when you close your account. We are entitled to irretrievably delete all data stored during the term of the contract.
9. Use of your personal data for market or opinion research and surveys
   Based on your consent, we also use your contact data for surveys, market or opinion research. We may use the services of third parties in Switzerland and abroad for this purpose. We use the data collected by means of surveys, market or opinion research to analyse, improve and further develop our offers and their use, as well as for statistical purposes. You will find more detailed information (in particular on the evaluation of your data) in the context of the respective survey, market or opinion research, or where you provide your data.
   Your answers to surveys, market or opinion polls will not be published or passed on to third parties.
10. Cookies
    We use so-called cookies on our website. Cookies are small text files that are placed and stored on your end device (laptop, tablet, smartphone or similar) with the help of the browser. They serve to make our website more user-friendly and effective overall and to make your visit to our website as pleasant as possible. Cookies do not cause any damage to your end device. They cannot execute any programs and cannot contain any viruses.
    Most of the cookies we use are so-called session cookies. These are automatically deleted when you log out or close the browser. Other cookies remain stored on your computer beyond the respective usage process and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these are treated separately in this data protection declaration.
    The basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the basis for processing your data is your consent. Otherwise, the personal data processed using cookies is processed on the basis of our legitimate interests (e.g. customer-friendly and effective design of the website visit) or, if the use of cookies is necessary to fulfil our contractual obligations.
    Regardless of whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent you have given or to object to the processing of your data by cookie technologies. You can set up your browser so that it informs you about the setting of cookies and you only allow the acceptance of cookies for certain cases in individual cases or generally exclude them. However, we would like to point out that you may then not be able to use all the functions of our website.

Analysis and marketing

1. Google Services
   Based on your consent, we use various services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"):
   - Google Analytics
   - Google Tag Manager
   You can find more detailed information on the individual concrete services from Google that we use on our websites below. Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of our website. The information generated by this about your use of our website may be transmitted to a Google server in the USA and stored there. We use tools provided by Google that Google claims may process personal data in countries where Google or Google's subcontractors maintain facilities. Google promises in its https://business.safety.google/adsprocessorterms/ , to ensure an adequate level of data protection by relying on the EU standard contractual clauses. In order to ensure an appropriate level of data protection when transferring data to the USA, we have concluded so-called EU standard contractual clauses with Google as suitable guarantees. In addition, Google is still certified under the EU-US and Swiss-US Privacy Shield agreements. You can find more information in Google's privacy policy. You can find information on Google's privacy settings at https://safety.google/privacy/privacy-controls.
   
2. Google Analytics
   Our website uses Google Analytics, a web analytics service provided by Google. Google uses so-called "cookies". The information generated by the cookie about your use of our website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google uses this information to evaluate your use of our website, to compile reports on website activity and to provide us with other services related to website and internet usage. In doing so, pseudonymous user profiles can be created from the processed data. The IP address transmitted by your internet browser as part of Google Analytics will not be merged with other Google data.We would like to point out that we only use Google Analytics with IP anonymisation activated. This means that your IP address will be shortened by Google within Switzerland or the EU/EEA before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The legal basis for the processing of your personal data is your consent. If you have given us your consent to use Google Analytics, you can revoke this consent at any time by accessing the cookie settings with effect for the future. Alternatively, you can generally prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google at any time for the future by downloading and installing the browser add-on to deactivate Google Analytics. If you allow cookies to be stored, Google Analytics will retain your data for 26 months. Data that has reached the end of this retention period is automatically deleted. For further information, please refer to the Google Analytics Terms of Use and Google's Privacy Policy.
3. Google Tag Manager
   Our website uses Google Tag Manager, a service provided by Google. Through this service, we can manage our "website tags". Google Tag Manager itself, which implements the tags, is a cookie-less domain and does not collect any personal data. However, the tool does trigger other tags, which in turn may collect data. Google Tag Manager itself, on the other hand, does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. You can generally object to interest-based advertising by Google by making the appropriate settings for personalised advertising by Google. You can find more information about the Google Tag Manager in Google's help section and in Google's privacy policy.
4. Facebook Pixel, Custom Audiences and Facebook-Conversions
   Our website uses Facebook Pixel if you are habitually resident in the European Economic Area (EEA) or Switzerland, a service provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The parent company is Meta Platforms Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Meta"). Instagram is also a service of Meta. The legal basis for the use of Facebook Pixel is your consent. With the help of the Facebook pixel, Meta is able to determine the visitors to our online offers as the target group for the display of advertisements (so-called "Facebook Ads" or "Instagram Ads"). Accordingly, we use the Facebook pixel to display the Facebook and Instagram ads placed by us only to those Facebook users who have also shown an interest in our online offers or have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Meta (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook and Instagram ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can also track the effectiveness of the Facebook and Instagram ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook or Instagram ad (so-called "conversions"). 
   Furthermore, we use the additional function "Automatic Advanced Matching" when using the Facebook pixel. Here, data such as telephone numbers, email addresses, dates of birth or postcodes are sent to Meta in encrypted form as additional information, provided you have made this data available to us. This enables us to increase the number of assigned "conversions" and to enlarge our "Custom Audiences". You can find further information on "Automatic Advanced Matching" in the corresponding help area of Facebook. Data processing by Meta takes place within the framework of Facebook's data policy. You can find general information on the display of Facebook and Instagram Ads in this policy. Through the use of cookies, Meta can subsequently recognise you in the member area of Facebook or Instagram and optimise the efficiency of advertisements, e.g. by offering advertisements targeted to specific groups. The prerequisite for this is that you have a Facebook and/or Instagram account and are logged into the member area of Facebook or Instagram. If you are not a member of Facebook or Instagram, you are not affected by this data processing. General information on the use of data by Meta, your rights in this regard and options for protecting your privacy can be found in the Facebook data policy and the Instagram data protection policy. Specific information and details about the Facebook Pixel and how it works can be found in the Facebook help section. If you generally want to object to the collection by Facebook Pixel and the use of your data for the display of Facebook or Instagram Ads, you can do this in the advertising settings of Facebook, or the privacy settings of Instagram. To do this, you must be logged in to Facebook or Instagram. If you do not have a Facebook or Instagram account, you can also opt-out of cookies used for reach measurement and advertising purposes via the Network Advertising Initiative opt-out page and additionally on the US website YourAdChoices or the European website Your Online Choices. You can revoke your consent for data processing by Facebook Pixel and the use of your data to display Facebook and Instagram Ads for our website at any time with future effect by adjusting your privacy settings.

Other services

1. Vimeo 
   On our website, we use plugins from the video portal Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA ("Vimeo") to integrate videos.
   When you call up one of our websites that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the website. This provides Vimeo with the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there.
   If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (e.g. by clicking on the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
   If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.
   The legal basis for the processing of your personal data is your consent. If you have given us your consent to use Vimeo, you can revoke this at any time by accessing the cookie settings with effect for the future.
   For further information on the purpose and scope of the data collection and the further processing and use of the data by Vimeo, as well as your rights in this regard and setting options for protecting your privacy, please refer to Vimeo's privacy policy.
2. YouTube
   Furthermore, we use the services of the provider YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube"), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94053, USA ("Google"), for the integration of videos on our website.
   When you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. This information (including your IP address) may be transmitted to a Google server in the USA and stored there. If you are logged into your YouTube account at the same time, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.
   We use the so-called extended data protection mode from YouTube. According to YouTube, this mode ensures that YouTube does not store any data about you as a visitor to our website before you watch or play the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode.
   The legal basis for the processing of your personal data is your consent. If you have given us your consent to use YouTube, you can revoke this at any time by accessing the cookie settings with effect for the future.
   Further information can be found in YouTube's terms of use and Google's privacy policy.
3. Google Maps
   We have embedded the online map service Google Maps of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA or, if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website.
   This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. This purpose is also our legitimate interest in data processing.
   When you call up a website on which Google Maps maps are embedded, Google Maps will set a cookie. As a rule, this cookie is not deleted by closing the browser, but expires after a certain time, unless you delete it manually beforehand.
   By using Google Maps, information about your use of our website (including your IP address) may be transmitted to a Google server in the USA and stored there. Google may store this data as usage profiles for the purpose of tailoring its services, advertising and market research. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish this, you must log out beforehand. If you do not agree to this processing of your information, you have the option of deactivating the Google Maps service. To do this, you must deactivate the Java Script function in your browser. However, this may also affect other functions of our website.
   For more information, please refer to the Google Maps Terms of Use and Google's Privacy Policy.

Payment service provider

Stripe:
For certain services, we offer the option of processing payment transactions via the payment service provider Stripe, ℅ Legal Process, 510, Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, the following data is particularly collected by Stripe to the extent necessary for the performance of the contract (Art. 6 para. 1 lit b. GDPR).

1. 1. Name of the cardholder
   2. E-mail address
   3. Customer number
   4. Order number
   5. Credit card data
   6. Period of validity of the credit card
   7. Credit card verification number (CVC)
   8. Date and time of transaction
   9. Transaction amount
   10. Name of the provider
   11. Place

The processing of the data provided under this section is not required by law or contract. We cannot process a payment through Stripe without the submission of your personal data.

Stripe has a dual role as a controller and processor in data processing activities. As a controller, Stripe uses your submitted data to comply with regulatory obligations. This corresponds to Stripe's legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the execution of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). We have no influence on this process.

Stripe acts as a processor to be able to complete transactions within payment networks. Within the scope of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obligated within the meaning of Art. 28 GDPR to comply with the provisions of data protection law.

Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

For more information on opt-out and redress options against Stripe, please visit: https://stripe.com/privacy-center/legal

Social media presence

We maintain social media profiles on Facebook, Instagram, Twitter, YouTube and LinkedIn.

The data you enter on our social media profiles is published by the social media platform and is not used or processed by us for any other purpose at any time. However, we reserve the right to delete content if this should be necessary. At most, we communicate with you via the social media platform. This is based on your and our legitimate interest in exchanging information with each other in this way.

Be aware that the operator of the social media platform uses web tracking methods. The web tracking, over which we have no control, can also take place regardless of whether you are logged in or registered with the social media platform.

More detailed information on data processing by the provider of the social media platform can be found in the privacy policy of the respective provider:

• Facebook
• Instagram
• Twitter
• YouTube
• LinkedIn

Contents and links to other websites

Our website may contain links to other websites which are not operated by us and to which this data protection declaration does not extend. After clicking on the link, we no longer have any influence on the processing of any data transmitted to third parties (such as the IP address or the URL), as the behaviour of third parties is naturally beyond our control. Therefore, we cannot assume any liability for these third-party contents. The respective provider or operator of the pages is always responsible for the content of the linked pages.

Illegal contents were not recognisable at the time of linking. However, a permanent control of the contents and examination of the linked pages without concrete indications of an infringement is not reasonable. Such links will be removed immediately if infringements become known.

Data security

We take appropriate technical and organisational security measures to protect the personal data we process, in particular against accidental or intentional manipulation, loss, destruction or unauthorised access by third parties. This includes, for example, the use of recognised encryption procedures (e.g. encryption using SSL/TLS).

Our security measures are continuously improved in line with technological developments. The measures taken are designed to ensure the confidentiality and integrity of your personal data and the availability and resilience of our systems and services when processing your personal data on an ongoing basis. They also ensure the rapid restoration of the availability of your personal data and access to it in the event of a physical or technical incident. 

We also take our own internal data protection seriously. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of data protection law. Moreover, they are only granted access to your personal data to the extent necessary.

Your rights

You are generally entitled to the rights of information, correction, deletion, restriction, data portability, objection to processing and revocation of consent with regard to your personal data.

If you believe that the processing of your personal data violates data protection law or that your data protection rights have been violated in any other way, you can also complain to the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC; https://www.edoeb.admin.ch/).

For this purpose and for questions, suggestions and requests, please contact the contact listed in section 1.2.

Chances

This privacy policy may be amended by us at any time by publication on this website. The current version published on this website shall apply.