Privacy Policy

The responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Rocketgran AG
Nicole Bretscher
Eibenstrasse 9
8045 Zurich

Phone: 077 435 90 87
Email: office@rocketgran.com

General note

Based on Article 13 of the Swiss Federal Constitution and the federal data protection regulations (Data Protection Act, DSG), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as best as possible from unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission over the Internet (e.g., when communicating via email) may be subject to security gaps. Complete protection of data from access by third parties is not possible.

By using this website, you consent to the collection, processing, and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or the name of the file accessed, the date, and the time of day are stored on the server for statistical purposes without being directly related to you. Personal data, in particular name, address, or email address, is collected on a voluntary basis wherever possible. Data will not be passed on to third parties without your consent.

Processing of personal data

Personal data is all information relating to an identified or identifiable person. A data subject is a person whose personal data is processed. Processing encompasses any handling of personal data, regardless of the means and procedures used, including, but not limited to, the storage, disclosure, acquisition, deletion, storage, alteration, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, to the extent and to the extent that the EU GDPR is applicable, we process personal data in accordance with the following legal bases in connection with Art. 6 (1) GDPR:

• lit. a) Processing of personal data with the consent of the data subject.
• lit. b) Processing of personal data to fulfill a contract with the data subject and to carry out corresponding pre-contractual measures.
• lit. c) Processing of personal data to fulfil a legal obligation to which we are subject under applicable EU law or under applicable law of a country in which the GDPR is applicable in whole or in part.
• lit. d) Processing of personal data to protect the vital interests of the data subject or of another natural person.
• Letter f) Processing of personal data to protect our legitimate interests or those of third parties, unless the fundamental freedoms and rights and interests of the data subject override these interests. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.

We process personal data for the period necessary for the respective purpose(s). If longer retention periods are required due to legal or other obligations to which we are subject, we limit processing accordingly.

Privacy Policy for Cookies

This website uses cookies. These are small text files that make it possible to store specific, user-related information on the user's device while they use the website. Cookies make it possible, in particular, to determine the frequency and number of users of the pages, to analyze site usage behavior, and also to make our offering more customer-friendly. Cookies remain stored beyond the end of a browser session and can be accessed again when you visit the site again. If you do not want this, you should configure your Internet browser to refuse cookies.

A general objection to the use of cookies used for online marketing purposes can be made for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU side http://www.youronlinechoices.com/ Furthermore, cookies can be blocked by deactivating them in your browser settings. Please note that in this case, not all functions of this website may be available.

Privacy Policy for SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and the lock symbol in your browser's address bar.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Third-party services

This website may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos.

These services of the American Google LLC use, among other things, cookies and as a result data is transferred to Google in the USA, although we assume that no personal tracking takes place in this context solely through the use of our website.

Google is committed to ensuring adequate data protection in accordance with the US-EU and US-Swiss Privacy Shield.

Further information can be found in the Google Privacy Policy .

Privacy Policy for Contact Form

If you send us inquiries via the contact form, your information from the form, including the contact details you provided there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.

Privacy Policy for Newsletter Data

If you would like to receive the newsletter offered on this website, we require an email address from you as well as information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter. No further data will be collected. We use this data exclusively to send the requested information and do not share it with third parties.

You can revoke your consent to the storage of your data, your email address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.

Use of Google Maps

This website uses Google Maps. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your Google profile, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right you must contact Google. Further information on the purpose and scope of data collection and processing by Google, as well as further information on your rights and settings options for protecting your privacy, can be found at: www.google.de/intl/de/policies/privacy .

Google AdWords

This website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Adwords will place a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this purpose - for example, by setting your browser to generally deactivate the automatic setting of cookies or by setting your browser to block cookies from the domain "googleleadservices.com".

Please note that you must not delete the opt-out cookies as long as you do not wish to have measurement data recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

Use of Google Remarketing

This website uses the remarketing feature of Google Inc. This feature is designed to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the website visitor's browser, which makes it possible to recognize the visitor when they visit websites that belong to the Google advertising network. On these pages, visitors may be presented with advertisements that relate to content that the visitor has previously viewed on websites that use the Google remarketing feature.

According to Google, no personal data is collected during this process. However, if you do not wish to use Google's remarketing feature, you can deactivate it by selecting the appropriate settings under http://www.google.com/settings/ads Alternatively, you can opt out of the use of cookies for interest-based advertising through the Advertising Network Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp consequences.

Use of Google reCAPTCHA

This website uses the reCAPTCHA service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The query is used to distinguish whether the input was made by a human or by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data. Your data may also be transmitted to the USA. For data transfers to the USA, the European Commission has issued an adequacy decision, the "Privacy Shield." Google participates in the "Privacy Shield" framework and has submitted to its requirements. By clicking on the link, you consent to the processing of your data. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Further information about Google reCAPTCHA and the associated privacy policy can be found at: https://policies.google.com/privacy?hl=de

Privacy Policy for Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller of the data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google."

Using the statistics collected, we can improve our offering and make it more interesting for you as a user. This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out using a user ID. If you have a Google user account, you can deactivate cross-device analysis of your usage in the settings under "My Data," "Personal Data."

The legal basis for the use of Google Analytics is Art. 6 (1) (f) GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that on this website, Google Analytics has been extended by the code "_anonymizeIp();" to ensure anonymized collection of IP addresses. This means that IP addresses are shortened and further processed, thus preventing them from being personally identifiable. If the data collected about you is personally identifiable, this will be immediately excluded and the personal data will be deleted immediately.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website activity and internet usage. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework .

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. You can prevent cookies from being saved by setting your browser software accordingly; however, we point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Deactivate Google Analytics .

You can also prevent the use of Google Analytics by clicking on this link: Deactivate Google Analytics . This will store an opt-out cookie on your data storage device, which prevents Google Analytics from processing personal data. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted. This means that you must set the opt-out cookies again if you wish to continue to prevent this form of data collection. The opt-out cookies are set for each browser and computer/device and must therefore be activated separately for each browser, computer, or other device.

Privacy Policy for Google Ads

This website uses the online marketing tool Google Ads from Google ("Google Ads"). Google Ads uses cookies to display ads relevant to users, improve campaign performance reports, and prevent users from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Google Ads can also use cookie IDs to record so-called conversions related to ad requests. This is the case, for example, when a user sees a Google Ads ad and later visits the advertiser's website using the same browser and makes a purchase there. According to Google, Google Ads cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, there is a possibility that Google will obtain and store your IP address.

You can prevent participation in this tracking process in several ways:

• by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any third-party advertisements;
• by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain «www.googleadservices.com», https://adssettings.google.com , although this setting will be deleted if you delete your cookies;
• by deactivating interest-based ads from providers who are part of the self-regulation campaign “About Ads” via the link https://www.aboutads.info/choices , although this setting will be deleted if you delete your cookies;
• by permanently deactivating them in your browsers Firefox, Internet Explorer or Google Chrome under the link https://www.google.com/settings/ads/plugin . Please note that in this case, you may not be able to fully use all functions of this website.

The legal basis for processing your data is a balancing of interests, according to which the processing of your personal data as described above does not conflict with any overriding interests on your part (Art. 6 (1) (f) GDPR). Further information about Google Ads from Google can be found at https://ads.google.com/intl/de_DE/home/ , as well as general information on data protection at Google: https://www.google.de/intl/de/policies/privacy . Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org visit.

Google Tag Manager

Google Tag Manager is a solution that allows us to manage website tags via a single interface, allowing us to integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal user data. Regarding the processing of users' personal data, please refer to the following information on Google services. Terms of Use: https://www.google.com/intl/de/tagmanager/use-policy.html .

Privacy Policy for Facebook

This website uses functions from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers. This transfers data to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our page. Interactions, in particular the use of a comment function or clicking a "Like" or "Share" button, are also passed on to Facebook. You can find out more at https://de-de.facebook.com/about/privacy .

Privacy Policy for Instagram

Our website incorporates functions of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or how Instagram uses it.

For more information, please see Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

External payment service providers

This website uses external payment service providers through whose platforms users and we can carry out payment transactions. For example,

• PostFinance (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)
• Visa (https://www.visa.de/USE Conditions/visa-privacy-center.html)
• Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)
• American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html)
• Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
• Bexio AG (https://www.bexio.com/de-CH/datenschutz)
• Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)
• Apple Pay (https://support.apple.com/de-ch/ht203027)
• Stripe (https://stripe.com/ch/privacy)
• Klarna (https://www.klarna.com/de/datenschutz/)
• Skrill (https://www.skrill.com/de/fusszeile/datenpolitik/)
• Giropay (https://www.giropay.de/rechts/datenschutzerklaerung) etc.

To fulfill contracts, we use payment service providers based on the Swiss Data Protection Ordinance and, where necessary, Art. 6 (1) (b) of the EU GDPR. Furthermore, we use external payment service providers based on our legitimate interests in accordance with the Swiss Data Protection Ordinance and, where necessary, Art. 6 (1) (f) of the EU GDPR in order to offer our users effective and secure payment options.

The data processed by the payment service providers includes inventory data such as name and address, bank details such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, amount and recipient-related information. This information is required to carry out the transactions. However, the data entered is only processed and stored by the payment service providers. We as the operator do not receive any information about the (bank) account or credit card, but only information to confirm (accept) or reject the payment. Under certain circumstances, the payment service providers will transmit the data to credit agencies. This transmission is for the purpose of identity and credit checks. For more information, please refer to the terms and conditions and data protection information of the payment service providers.

Payment transactions are subject to the terms and conditions and privacy policy of the respective payment service providers, which are available on the respective website or transaction applications. We also refer to these for further information and to assert your rights of withdrawal, information, and other data subjects.

Newsletter - Mailchimp

The newsletter is sent via the shipping service provider 'MailChimp', a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can find the privacy policy of the shipping service provider here The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection standards ( Privacy Shield ). The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and a data processing agreement pursuant to Art. 28 (3) (1) GDPR.

The shipping service provider may use the recipients' data in pseudonymous form, i.e., without assigning it to a specific user, to optimize or improve its own services, e.g., to technically optimize the delivery and presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to contact them directly or to pass the data on to third parties.

Order processing in the online shop with customer account

We process our customers' data in accordance with the federal data protection regulations (Data Protection Act, DSG) and the EU GDPR, as part of the ordering process in our online shop, in order to enable them to select and order the selected products and services, as well as to pay for and deliver them or execute them.

The data processed includes master data (inventory data), communication data, contract data, and payment data. The persons affected by the processing include our customers, interested parties, and other business partners. The processing is carried out for the purpose of providing contractual services within the scope of operating an online shop, billing, delivery, and customer services. We use session cookies, e.g., to store shopping cart contents, and permanent cookies, e.g., to store the login status.

Processing is based on Art. 6 (1) (b) (execution of order transactions) and (c) (legally required archiving) GDPR. The information marked as required is necessary to establish and fulfill the contract. We only disclose this data to third parties in the context of delivery, payment, or within the scope of legal permissions and obligations. Data will only be processed in third countries if this is necessary to fulfill the contract (e.g., at the customer's request during delivery or payment).

Users can optionally create a user account, which allows them to view their orders, in particular. During registration, the required mandatory information is communicated to users. User accounts are not public and cannot be indexed by search engines, such as Google. If users cancel their user account, their data will be deleted, unless retention is necessary for commercial or tax law reasons in accordance with Art. 6 (1) (c) GDPR. Information in the customer account remains until it is deleted and subsequently archived in the event of a legal obligation. It is the user's responsibility to back up their data before the end of the contract if the contract is terminated.

During registration and subsequent registrations, as well as during use of our online services, we store the IP address and the time of the respective user action. This storage is based on our legitimate interests, as well as the user's interest in protecting against misuse and other unauthorized use. This data is generally not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 (1) (c) GDPR.

Deletion occurs after the expiration of statutory warranty and similar obligations; the necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion occurs after these expiration.

Administration, financial accounting, office organization, contact management

We process data in accordance with the federal data protection regulations (Data Protection Act, DSG) and the EU GDPR within the scope of administrative tasks as well as the organization of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process within the scope of providing our contractual services. The processing bases are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose of and our interest in the processing lies in administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information stated in these processing activities.

We disclose or transmit data to the tax authorities, consultants such as tax consultants or auditors as well as other fee offices and payment service providers.

Furthermore, based on our business interests, we store information about suppliers, event organizers, and other business partners, e.g., for the purpose of later contact. We generally store this mostly company-related data permanently.

Note on data transfer to the USA

Our website includes tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obligated to disclose personal data to security authorities without you, as the data subject, being able to take legal action. It cannot therefore be ruled out that US authorities (e.g., intelligence agencies) may process, evaluate, and permanently store your data on US servers for surveillance purposes. We have no influence over these processing activities.

Copyrights

The copyright and all other rights to content, images, photos, or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. For the reproduction of any files, prior written consent from the copyright holder is required.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and, in some cases, to compensation for damages.

General Disclaimer

All information on our website has been carefully reviewed. We strive to ensure that our information is up-to-date, accurate, and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, and we therefore cannot guarantee the completeness, accuracy, or timeliness of information, including journalistic and editorial content. Liability claims for material or immaterial damage caused by the use of the information provided are excluded, unless there is evidence of intentional or grossly negligent fault.

The publisher reserves the right to modify or delete text at its sole discretion and without notice and is not obligated to update the content of this website. Use of or access to this website is at the visitor's own risk. The publisher, its clients, or partners are not responsible for any damages, including direct, indirect, incidental, foreseeable, or consequential damages, allegedly resulting from visiting this website, and therefore assume no liability for such damages.

The publisher also assumes no responsibility or liability for the content and availability of third-party websites accessible via external links on this website. The operators of the linked sites are solely responsible for their content. The publisher therefore expressly distances itself from all third-party content that may be relevant to criminal or liability law or violate common decency.

Changes

We may amend this Privacy Policy at any time without prior notice. The most current version published on our website will apply. If this Privacy Policy is part of an agreement with you, we will notify you of any changes by email or other appropriate means.

Questions for the Data Protection Officer

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization listed at the beginning of the data protection declaration.

Zurich, December 8, 2020
Source: Swiss Lawyer