Privacy Statement

Oel-Brack AG, Rupperswilerstrasse 3, CH-5502 is the operator of the website www.midland.ch and the services offered on it, and is therefore responsible for the collection, processing and use of your personal data and the compatibility of data processing with applicable data protection law.

Your trust is important to us, which is why we take data protection seriously and ensure that appropriate security is provided. Of course, we observe the statutory provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).

Please take note of the information below so that you know what personal data we collect from you and for what purposes we use it.

Calling up our website

Our servers save each access temporarily in a log file when you visit our website. As with every connection to a web server, the following technical data is recorded without your intervention and stored by us until it is automatically deleted after 12 months at the latest:
The IP address of the requesting computer
The name of the owner of the IP address range (usually your internet access provider)
The date and time of accessing
The website from which access occurred (referrer URL), possibly with the search term used
The name and URL of the file retrieved
The status code (e.g. error message)
The operating system of your computer
The browser you are using (type, version and language)
The transmission protocol used (e.g. HTTP/1.1) and
possibly your user name from a registration/authentication

This data is collected and processed for the purpose of enabling use of our website (establishing a connection), ensuring system security and stability in the long term, enabling the optimisation of our website and for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 (1) f GDPR.

Use of our contact form

You have the option of using a contact form to get in touch with us. We require the following information for this purpose:
First and last name
Postal address (optional)
Email address
Phone number (optional)
Message

We only use this data and a telephone number provided voluntarily by you to answer your contact request in the best possible and personalised manner. Processing of this data is therefore required within the meaning of Art. 6 (1) b GDPR to implement pre-contractual measures or is in our legitimate interest pursuant to Art. 6 (1) f GDPR.

Opening a customer account

You can order as a guest or open a customer account in order to place orders in the online shop. We collect the following data during registration for a customer account:
First and last name
Postal address
Date of birth
Email address
Password

The data is collected for the purpose of providing the customer with password-protected direct access to the basic data we have stored. Customers can view their completed and outstanding open orders or manage or change their personal data.

The legal basis for processing data for this purpose is the consent you have given pursuant to Art. 6 (1) a EU GDPR.

Purchasing in the online shop

If you wish to place orders in our online shop, we require the following data to process the contract:
First and last name
Billing address (and delivery address if different)
Details in the context of payment (depending on the selected payment method)
Login data such as the email address and password (for registered customers)

Unless otherwise stated in this privacy statement, or where you have not given your separate consent, we shall only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment.

The legal basis for data processing for this purpose is fulfilment of a contract pursuant to Art. 6 (1) b EU GDPR.

Disclosing data to third parties

We only disclose your personal data to others if you have given your express consent, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims emanating from the contractual relationship.

Furthermore, we disclose your data to third parties insofar as this is necessary in the context of use of the website and contract processing (including outside the website), namely processing of your bookings. This includes the respective transport service provider commissioned with shipping of the ordered goods. One service provider to whom the personal data collected via the website is disclosed or who has or can gain access to it is our web host METANET AG, Josefstrasse 218, CH-8005 Zurich. The website is hosted on servers in Switzerland. The data is disclosed for the purpose of providing and maintaining the functionality of our website. This is our legitimate interest within the meaning of Art. 6 (1) f EU GDPR.

In circumstances where we make payment in advance (e.g. in the case of a purchase on account), we can obtain a credit report on the basis of mathematical/statistical methods from a credit agency in order to safeguard our legitimate interests. For this purpose, we transmit the personal data required for a credit check to the credit agency D&B Schweiz AG, Grossmattstrasse 9, CH-8902 Urdorf and use the information received on the statistical probability of a payment default to reach a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report can contain probability values (score values) that have been calculated on the basis of scientifically recognised mathematical/statistical methods and whose calculation includes address data. Your legitimate interests are taken into consideration in accordance with statutory provisions. For the purposes described above, our legitimate interest in data processing exists within the meaning of Art. 6 (1) f EU GDPR.

Finally, in the event of payment by credit card on the website, we forward your credit card information to your credit card issuer and the credit card acquirer. If you decide to pay by credit card, you will be asked to enter all absolutely necessary information in each case. The legal basis for the disclosure of data is the fulfilment of a contract pursuant to Art. 6 (1) b EU GDPR. With regard to the processing of your credit card information by these third parties, please also read the general terms and conditions and the privacy statement of your credit card issuer.

Transmission of data abroad

We are entitled to transmit your personal data to third-party companies (contracted service providers) abroad for the purpose of the data processing described in this privacy statement. These third parties are obliged to ensure data protection to the same extent as us. If the level of data protection in a country does not correspond to that in Switzerland or Europe, we shall contractually ensure that the protection of your personal data corresponds at all times to that in Switzerland or the EU.

Cookies

Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically saves on the hard drive of your computer when you visit our website.

We use cookies for purposes such as providing you with the shopping cart function across several web pages and to temporarily save your entries when a form on the website is filled out so that you do not have to repeat the entry when calling up another subpage. Cookies may also be used to identify you as a registered user after registering on the website without the need for you to log in again when you access another subpage.

Most internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. The following pages contain explanations on how you can configure the processing of cookies in the most common browsers:
Microsoft's Windows Internet Explorer
Microsoft's Windows Internet Explorer Mobile
Mozilla Firefox
Google Chrome for Desktop
Google Chrome for Mobile
Apple Safari for Desktop
Apple Safari for Mobile

Deactivating cookies may mean that you cannot use all the functions of our website.

Tracking tools

General information

We use the Google Analytics web analysis service for the purpose of needs-based design and continuous optimisation of our website. Pseudonymised usage profiles are created and small text files that are stored on your computer (cookies) are used in this context. The information about your use of this website generated by the cookie is transmitted to the server of the provider of these services, stored there and processed for us. In addition to the data listed under 1, we may receive the following information as a consequence:
Navigation path taken by a visitor on the website
Length of stay on the website or subpage
The subpage on which the website is exited
The country, region or city from which accessing occurs
The end device (type, version, colour depth, resolution, width and height of the browser window)
Whether a returning or new visitor is involved.

The information is used to evaluate use of the website, compile reports on website activities and provide other services related to website and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transmitted to third parties if this is required by law or if third parties process this data on behalf of us.

Google Analytics

Google Analytics is provided by Google Inc., an enterprise of the Alphabet Inc. holding company based in the United States. Before the data is transmitted to the provider, the IP address is shortened by activating IP anonymisation (anonymizeIP) on this website within the member states of the European Union or in other states party to the Agreement on the European Economic Area. The anonymised IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The full IP address is only transmitted to a Google server in the United States and shortened there in exceptional cases. In these cases, we ensure that Google Inc. maintains an adequate level of data protection through contractual guarantees. According to Google Inc., under no circumstances will the IP address be associated with other data relating to the user.

You can find more information about the web analysis service used on the Google Analytics website. Instructions on how to prevent processing of your data by the web analysis service can be found at http://tools.google.com/dlpage/gaoptout?hl=de.

Information on data transmissions to the United States

For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that US authorities have surveillance measures in place in the United States that generally enable the storing of all personal data of all persons whose data has been transmitted from Switzerland to the United States. This occurs without differentiation, restriction or exception based on the respective goal and with no objective criteria that enable access to the data by the US authorities and its later use to be restricted to very specific, strictly limited purposes that would justify the access to this data and intervention related to its use. We would also like to point out that there are no means of legal remedy in the United States for data subjects from Switzerland that would enable them to gain access to their data and request its rectification or erasure, and that there is no effective judicial protection against the general access rights of US authorities. We explicitly point out this legal and factual situation in order to enable users to make an informed decision concerning the provision of consent to the use of their data.

We would like to point out to users residing in a member state of the EU that the United States does not have an adequate level of data protection from the perspective of the European Union, based among other things on the issues mentioned in this section. Insofar as we have explained in this privacy statement that recipients of data (e.g. Google) are based in the United States, we shall endeavour to ensure by means of contractual arrangements with these companies or certification of these companies under the EU - US or Swiss - US Privacy Shield framework that your data is adequately protected by our partners.

Right to information, rectification, erasure, restriction of processing and right to data portability

You have the right to obtain information on personal data stored by us that relates to you upon request. In addition to this, you have the right to request the rectification of inaccurate data or the erasure of your personal data, provided the data concerned is not subject to a legal retention obligation or permit that allows us to process the data.

You also have the right to request that the data you provided us with be returned to you (right to data portability). On request, we shall also pass the data on to a third party of your choice. You have the right to receive the data in a standard file format.

You can contact us regarding the aforementioned purposes via the email address [info@oelbrack.ch]. We may, at our own discretion, request proof of identity to process your requests.

Data security

We take appropriate technical and organisational security measures to protect your personal data stored by us against manipulation, partial or complete loss and unauthorised accessing by third parties. Our security measures are continuously improved in line with technological developments.

You should always handle your access data with the utmost confidentiality and close the browser window when you have finished communicating with us, especially if you share the computer with others.

We also take internal data protection within the company very seriously. Our employees and the service providers engaged by us are under a contractual obligation to maintain confidentiality and comply with data protection regulations.

Retention of data

We only store personal data for as long as it is necessary to use the tracking and analysis services mentioned above and for further processing within the scope of our legitimate interest. We store contract data for longer, as this is an obligation under statutory retention requirements. Retention obligations that oblige us to retain data arise from accounting and fiscal regulations. According to these regulations, business communications, concluded contracts and accounting documents must be retained for up to 10 years. If we no longer need this data to provide services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

Right to complain to a data protection supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Status: [17.03.2020]