Data protection declaration of IONIA AZURÉ AG

Version dated 19.01.2025
 
In this privacy policy, we, IONIA AZURÉ AG (hereinafter IONIA AZURÉ AG, we or us), explain how we collect and otherwise process personal data. This is not an exhaustive description; the general terms and conditions, conditions of participation and similar documents may also govern specific circumstances. Personal data is understood to mean any information relating to an identified or identifiable person.
 
If you provide us with personal data of other persons (e.g. family members, data of work colleagues), please ensure that these persons are aware of this privacy policy and only provide us with their personal data if you are allowed to do so and if this personal data is correct.
 
This data protection declaration is designed to meet the requirements of the EU General Data Protection Regulation (‘GDPR’), the Swiss Data Protection Act (‘DSG’) and the revised Swiss Data Protection Act (‘revDSG’). However, whether and to what extent these laws are applicable depends on the individual case.
 

1. Controller / Data Protection Officer / Representative

The data controller for the data processing described here is IONIA AZURÉ AG. If you have any data protection concerns, you can report them to us at the following contact address: IONIA AZURÉ AG, Grubenackerstrasse 27, 8052, Zurich, Switzerland, 043 53 8 23 43, info@ionia-azure.com.
 
Our representative in the EEA in accordance with Art. 27 GDPR is: IONIA AZURÉ AG Niederlassung Deutschland, DE-79761, Waldshut - Tiengen.
 

2. Collection and processing of personal data

We primarily process personal data that we receive from our customers and other business partners and other persons involved in the context of our business relationship with them, or that we collect from their users when operating our websites, apps and other applications.
 
Where permitted, we also obtain certain data from publicly accessible sources (e.g. debt registers, land registers, commercial registers, press, internet) or receive such data from authorities and other third parties (such as credit reference agencies, Swiss Post). In addition to the data that you provide us directly, the categories of personal data that we receive about you from third parties include, in particular, information from public registers, information that we learn in connection with official and judicial proceedings, information in connection with your professional functions and activities (so that we can, for example, conclude and process transactions with your employer with your help), information about you in correspondence and meetings with third parties, credit information (insofar as we conduct business with you personally), information about you that persons close to you (family, advisors, legal representatives, etc.) provide to us so that we can conclude or execute contracts with you or with your involvement (e.g. references, your address for deliveries, powers of attorney, information for compliance with legal requirements such as combating money laundering and export restrictions, information from banks, insurance companies, sales and other contractual partners of ours for the purpose of claiming or providing services by you (e.g. payments made, purchases made)), information about you from the media and the internet (insofar as this is indicated in a specific case, e.g. in the context of an application, press review, marketing/sales, etc. ), your addresses and, where applicable, your interests and other socio-demographic data (for marketing), data in connection with the use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location information).
 

3. Purposes of data processing and legal bases

We use the personal data we collect primarily to conclude and process our contracts with our customers and business partners, in particular in the context of selling products and services to our customers and purchasing products and services from our suppliers and subcontractors, as well as to fulfil our legal obligations at home and abroad. If you work for one of our customers or business partners, you may also be affected in this role with your personal data.
In addition, we process personal data about you and other persons, to the extent permitted and as we deem appropriate, for the following purposes in which we (and sometimes third parties) have a legitimate interest:
 
Offering and further developing our offers, services and websites, apps and other platforms on which we are present;
Communicating with third parties and processing their requests (e.g. job applications, media requests);
Checking and optimising needs analysis procedures for the purpose of direct customer contact and collecting personal data from publicly accessible sources for the purpose of customer acquisition.
Advertising and marketing (including events), provided you have not objected to the use of your data (if we send advertising to you as an existing customer, you can object to this at any time and we will put you on a blacklist to prevent further advertising mail);
market and opinion research, media monitoring.
assertion of legal claims and defence in connection with legal disputes and official proceedings.
prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud);
ensuring our operations, in particular our IT, our websites, apps and other platforms.
video surveillance to safeguard our domiciliary rights and other measures for IT, building and system security and protection of our employees and other individuals and assets belonging to or entrusted to us (such as access controls, visitor lists, network and mail scanners, telephone recordings);
the purchase and sale of business units, companies or parts of companies and other corporate transactions and the associated transfer of personal data, as well as measures for business management and compliance with legal and regulatory obligations and internal regulations of IONIA AZURÉ AG.
 
If you have given us consent to process your personal data for specific purposes (e.g. when you registered to receive newsletters or to carry out a background check), we will process your personal data within the scope of and based on this consent, provided we have no other legal basis and we require one. Consent that has been given can be withdrawn at any time, although this will not affect any data processing that has already taken place.
 

4. Cookies / Tracking and other technologies in connection with the use of our website

We typically use ‘cookies’ and similar techniques on our websites that can be used to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored by the web browser you are using on your computer or mobile device when you visit our website. If you visit this website again, we will be able to recognise you, even if we do not know who you are. In addition to cookies that are only used during a session and deleted after your visit to the website (‘session cookies’), cookies can also be used to store user settings and other information over a certain period of time (e.g. two years) (‘permanent cookies’). However, you can set your browser to reject cookies, to only store them for one session or to delete them prematurely. Most browsers are set to accept cookies by default. We use permanent cookies to enable you to save user settings (e.g. language, auto-login), to help us understand how you use our offers and content, and to enable us to display offers and advertising tailored to you (which can also happen on other companies' websites; however, they will not find out who you are, even if we do, because they only see that the same user who visited a certain page on our site is on their site). Some of the cookies are set by us, some by contractual partners with whom we work. If you block cookies, certain functionalities (such as language selection, shopping cart, order processes) may no longer work.
We also include visible and invisible image files in our newsletters and other marketing e-mails, to the extent that this is permitted. When you access these files, our servers can determine whether and when you opened the e-mail, so that we can measure and better understand how you use our offers and how we can tailor them to you. You can block this in your email programme; most are set up by default to allow you to do this.
 
By using our websites and apps and consenting to receive newsletters and other marketing emails, you consent to the use of these technologies. If you do not consent, you must adjust your browser or email settings accordingly or uninstall the app if you are unable to adjust these settings.
 
We sometimes use Google Analytics or similar services on our websites. This is a third-party service that may be located in any country in the world (in the case of Google Analytics, it is Google Ireland (based in Ireland), which relies on Google LLC (based in the United States) as a processor (both ‘Google’), www.google.com), which we use to measure and evaluate the use of the website (not personal). Permanent cookies set by the service provider are also used for this purpose. We have configured the service so that the IP addresses of visitors to Google in Europe are shortened before being forwarded to the USA and thus cannot be traced back. We have switched off the ‘Data sharing’ and ‘Signals’ settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google may use this data to draw conclusions about the identity of visitors for its own purposes, create personal profiles and link this data to the Google accounts of these individuals. If you have registered with the service provider yourself, the service provider also knows you. In this case, the service provider is responsible for processing your personal data in accordance with its data protection provisions. The service provider only informs us how our respective website is used (no information about you personally).
 
We use the ‘visitor action pixel’ of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (‘Facebook’) on our website. This allows us to track the behaviour of users after they have clicked on a Facebook ad and been redirected to the provider's website. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimise future advertising efforts. The data collected is anonymous to us and does not provide us with any information about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage guidelines (https://www.facebook.com/about/privacy/). They can enable Facebook and its partners to place ads on and off Facebook. Furthermore, a cookie may be stored on your computer for these purposes.
We also use plug-ins from social networks such as Facebook, Twitter, Youtube, Pinterest or Instagram on our websites. This is typically indicated to you (typically by means of corresponding icons). We have configured these elements so that they are disabled by default. If you enable them (by clicking on them), the operators of the respective social networks can register that you are on our website and where and can use this information for their own purposes. The processing of your personal data is then the responsibility of that operator in accordance with their data protection provisions. We do not receive any information about you from them.
 
A detailed list of the website cookies currently active on your device can be found in chapter ‘14. Appendix: Detailed list of cookies currently used on this device’.
 
You can change the cookie settings on this device at any time: please go to the home page, where you will find the cookie banner button at the bottom left. When you click/tap on this button, the cookie form will open, allowing you to change the cookies you have accepted or reject all non-essential cookies.
 

5. Purchasing via the website https://www.ionia-azure.ch

When you visit https://www.ionia-azure.ch anonymously.
Our portals can be visited anonymously (i.e. without registration or login). However, every web server automatically logs visits to the websites. You will not be identified and no links will be created between anonymous visitor information and any stored data in our database. We analyse this data to ensure that our web servers work well, quickly and stably with all common devices, operating systems and browsers, that we take the correct and necessary security measures against malicious attacks and software and that we keep the portal content up to date.
 
On our portals, you can send messages (e.g. a product recommendation) to third parties. These messages, as well as the associated e-mail addresses, can be stored on our server and are handled in strict compliance with data protection.
 
When you use https://www.ionia-azure.ch as a registered user or make a purchase as a guest.
Personal data that you provide to us when purchasing an item is used for the correct processing of orders and invoicing. When you send this information to us, you declare that the data you have entered is correct.
Various parts of the order process (e.g. parcel delivery, payment processing) are carried out by service providers such as Swiss Post, banks, etc. on our behalf. These providers receive your data in order to successfully complete the order. Some service providers (such as credit card companies, Klarna or PayPal) are located outside Switzerland and your data is therefore transferred abroad.
 
If you choose an electronic payment method (e.g. credit card), the details of the payment method (e.g. card number) are also required. The collection and use of data for the electronic payment method are carried out by external payment processors (Worldline Schweiz AG, Hardturmstrasse 201, 8005 Zurich). As soon as you place an order in our online shop that requires payment , a secure page will open where you can select the electronic payment method of your choice and transmit your card or account details to the payment processor (Worldline Schweiz AG) using highly secure SSL encryption. These details are not visible to us and are not stored in our system or your account. Please note that the data protection declaration of Worldline Schweiz AG applies in addition to our data protection declarations.
 
If you, as a registered user or guest, put items on the watch list or in the shopping cart, the contents of the watch list or shopping cart are then stored in our system in connection with your account or guest registration information.
 
Klarna payment option.
In order to offer you Klarna's payment options, assess whether you are eligible for them and tailor the payment options for you, we may share your personal data in the form of contact and order data with Klarna during the checkout process. Your personal data will be handled in accordance with the applicable data protection laws and in accordance with the information in the data protection declarations of Klarna.
 

6. Data transfer and transmission abroad

As part of our business activities and for the purposes set out in Section 3, we also disclose data, to the extent permitted and as we deem appropriate, to third parties, either because they process it for us or because they wish to use it for their own purposes. This particularly concerns the following parties:
 
our service providers (within the IONIA AZURÉ AG group and external, such as banks and insurance companies), including processors (such as IT providers);
dealers, suppliers, subcontractors and other business partners.
customers.
Domestic and foreign authorities, agencies or courts.
Media.
The public, including visitors to websites and social media.
Competitors, industry organisations, associations, organisations and other bodies.
Acquirers or parties interested in acquiring business units, companies or other parts of IONIA AZURÉ AG.
Other parties in possible or actual legal proceedings.
All recipients together.
 
These recipients are sometimes in Switzerland, but may be anywhere in the world. In particular, you must expect your data to be transferred to all countries in which IONIA AZURÉ AG is represented by branches or other offices (the only currently active branch is IONIA AZURÉ AG Niederlassung Deutschland, DE-797 61, Waldshut - Tiengen) as well as in other countries in Europe and the USA where the service providers we use are located (such as Microsoft, Amazon, Forterro Myfactory, Klarna, Wordline, PayPal, etc.).
 
If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection (for this we use the revised standard contractual clauses of the European Commission, which can be found here: https://eur-lex .europa.eu/eli/dec_impl/2021/914/oj? An exception may apply in the case of legal proceedings abroad, but also in cases of overriding public interests or if a contract requires such disclosure, if you have consented or if the data in question is data that you have made generally accessible and the processing of which you have not objected.
 

7. Duration of the storage of personal data

We process and store your personal data for as long as is necessary to fulfil our contractual and legal obligations or otherwise for the purposes for which the data is processed, i.e. for the duration of the entire business relationship (from the initiation and execution to the termination of a contract), for example, as well as beyond that period in accordance with the statutory retention and documentation obligations. In this context, it is possible that personal data may be stored for the period during which claims can be asserted against our company and insofar as we are otherwise legally obliged to do so or if legitimate business interests require it (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymised as far as possible. For operational data (e.g. system logs, logs), shorter retention periods of twelve months or less generally apply.
 

8. Data security 

We take appropriate technical and organisational security precautions to protect your personal data from unauthorised access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymisation, and controls.
 

9. Obligation to provide personal data

In the context of our business relationship, you must provide the personal data necessary for us to establish and conduct a business relationship and to fulfil the associated contractual obligations (you are not generally subject to any legal obligation to provide us with data). Without this data, we will generally not be able to conclude or process a contract with you (or the entity or person you represent). Furthermore, the website cannot be used if certain information to ensure data traffic (such as IP address) is not disclosed.
 

10. Profiling and automated decision-making

We process your personal data in a partially automated manner with the aim of evaluating certain personal aspects (profiling). We use profiling in particular to provide you with targeted information and advice about products. To do this, we use evaluation tools that enable us to provide needs-based communication and advertising, including market and opinion research.
 

11. Rights of the data subject

Within the scope of the data protection law applicable to you and to the extent provided therein (as in the case of the GDPR), you have the right to information, correction, deletion, the right to restriction of data processing and otherwise to object to our data processing, in particular for the purposes of direct marketing, profiling operated for direct advertising and other legitimate interests in processing, as well as the right to surrender certain personal data for the purpose of transmission to another location (so-called data portability). Please note, however, that we reserve the right to enforce the restrictions provided by law on our part, for example if we are obliged to store or process certain data, have an overriding interest in it (insofar as we may invoke it) or need it to assert claims. If you incur costs, we will inform you in advance. We have already informed you about the possibility of withdrawing your consent in Section 3. Please note that the exercise of these rights may conflict with contractual agreements and that this may have consequences such as the premature termination of the contract or cost implications. We will inform you of this in advance if it is not already contractually regulated.
The exercise of such rights generally requires that you clearly prove your identity (e.g. by providing a copy of your ID where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in section 1.
In addition, every data subject has the right to enforce their claims in court or to file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
 

12. Amendments

We may amend this privacy policy at any time without notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will notify you of the change by email or other appropriate means in the event of an update.
 

13. Consent

By entering or modifying your data on our portals, you fully accept this data protection declaration and authorise the use of your data for the purposes stated in this data protection declaration.
 

14. Appendix: Detailed list of cookies currently used on this device