Sign in
Menu

Privacy Policy

The German text is legally binding. This translation is for convenience.

SaisonBox GmbH, 9200 Gossau, operates the website www.saisonbox.ch and offers the services shown there. It is responsible for the collection, processing and use of your personal data and has this privacy policy, which is made available to the customer (hereinafter "customer" or "buyer") before completed registration on app.saisonbox.ch or app.abobox.ch.

We use the data you provide to fulfill and process an order via app.saisonbox.ch or the customer app «SaisonBox».

1. Collection, processing and use of personal data

1.1. Visit to our website (server log files)

When you visit the website www.saisonbox.ch or another domain of SaisonBox GmbH (e.g. tobisbiobox.abobox.ch), we collect access data such as the name of your internet service provider, the page from which you visit us or the name of the requested file as personal information.

The collection and processing of this data is for the purpose of enabling use of our website (establishing the connection), ensuring system security and stability on an ongoing basis, enabling optimization of our internet offering, and for internal statistical purposes. This constitutes our legitimate interest in data processing within the meaning of Art. 13 para. 2 lit. e of the Federal Act on Data Protection (FADP) and Art. 6 para. 1 lit. f of the General Data Protection Regulation of the European Union (GDPR).

1.2. Creation of a customer account and purchase

If you wish to place orders in our online shop, we need the following data for contract processing, which are collected on registration of the customer account:

Unless otherwise stated in this privacy policy, we will use the above data only to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment. The legal basis for data processing for this purpose is the performance of a contract under Art. 13 para. 2 lit. a FADP Art. 6 para. 1 lit. b GDPR.

1.3. Disclosure of data to third parties

Disclosure of data to third parties takes place among others to producers (farms) entrusted in the course of contract processing, namely the processing and delivery of the order. Disclosure of the data is for the purpose of providing and maintaining the services of our website and of performing the contract within the meaning of Art. 13 para. 2 lit. a FADP and Art. 6 para. 1 lit. b GDPR.

In addition, data are forwarded to the following third-party service providers: DigitalOcean, LLC for hosting in Germany (Frankfurt), Bugsnag for bug logging, Mailgun to send emails (Germany, Frankfurt), and Keptago Ltd. (Geoapify) for route optimization on delivery. Disclosure of the data is solely for the purpose of providing and maintaining the functionalities of our website and of performing the contract. This constitutes our legitimate interest within the meaning of Art. 13 para. 2 lit. a FADP and Art. 6 para. 1 lit. f GDPR.

Furthermore, in the course of using and developing the website and the software we work closely with the IT service company Folleon GmbH, Flurhofstrasse 10, 9000 St. Gallen. Disclosure of personal data is for the purpose of system security and stability and optimization of the technical means. This constitutes our legitimate interest in data processing within the meaning of Art. 13 para. 2 lit. e FADP and Art. 6 para. 1 lit. f GDPR.

If we perform in advance, e.g. in the case of a purchase on invoice, we may, to safeguard our legitimate interests, obtain a credit report on the basis of mathematical-statistical methods from a credit agency. For this we transmit the personal data required for a credit check to the credit agency CRIF AG, Hagenholzstrasse 81, 8050 Zurich and use the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods and in whose calculation address data among other things are included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The purposes described above constitute our legitimate interest in data processing within the meaning of Art. 13 para. 2 lit. c FADP and Art. 6 para. 1 lit. f GDPR.

In the case of credit card payment, payment via Twint or PayPal, data that are strictly required for payment processing are forwarded to the corresponding providers or credit card company as well as to Bexio AG. To safeguard our legitimate interests, in the event of debt enforcement proceedings to be initiated we forward the data strictly necessary for that purpose to the competent debt enforcement office. The legal basis for disclosure of the data is the performance of a contract under Art. 13 para. 2 lit. a FADP and Art. 6 para. 1 lit. b GDPR.

Finally, we may disclose your personal data if we are legally obliged to do so.

We secure our website and other systems by technical and organizational measures against loss, destruction, access, alteration or dissemination of your data by unauthorized persons. Despite regular checks, complete protection against all risks is not possible. For questions about the collection and processing of your personal data and for information and correction requests, contact info@saisonbox.ch.

2. Cookies

Cookies help in many respects to make your visit to our website easier, more pleasant and more useful. Cookies are information files that your web browser automatically stores on the hard drive of your computer when you visit our website. You can configure your browser so that no cookies are stored on your computer. Disabling cookies may however mean that you cannot use all functions of our website.

3. Social media plugins

Plugins from Instagram are integrated on our website. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking the Instagram button. Instagram can thereby associate the visit to our pages with your user account. We have no knowledge of the content of the transmitted data or of their use by Instagram.

Further information can be found in Instagram's privacy policy at https://instagram.com/about/legal/privacy/.

Plugins from YouTube are integrated on our website. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

Via the YouTube plugin a connection to YouTube's servers is established. The YouTube server is thereby told which of our pages you have visited. If you are logged into your YouTube account, YouTube can associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube user account.

Further information can be found in YouTube's privacy policy at https://www.google.de/intl/de/policies/privacy and YouTube's terms of use at https://www.youtube.com/static?gl=DE&template=terms.

4. Transfer of data abroad

We are entitled to transfer your personal data for the exclusive purpose of the data processing described in this privacy policy also to third companies (commissioned service providers) abroad. A transfer of your personal data to other countries takes place only if data protection comparable to Swiss law exists there or suitable arrangements have been made.

5. Data security

We use suitable technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological development.

6. Your rights

You have the right at any time to assert your data protection rights and, upon proof of your identity, to obtain free information about your stored personal data, to have them corrected, supplemented, to object to the processing of your personal data or to request the deletion of your personal data. Personal data are as a rule retained for evidential purposes until expiry of the limitation period of underlying claims or for the duration of the statutory retention obligation. Information and deletion requests can also be addressed in electronic form to the competent office. If you wish your data to be deleted, you can no longer use our services.

Personal data that may only be collected with the consent of the data subject (Art. 6 para. 1 lit. a GDPR) are deleted without delay after withdrawal of consent.

Personal data in the course of contract performance (Art. 6 para. 1 lit. b GDPR) are deleted without delay on request if they are no longer necessary for the purpose for which they were collected or were processed unlawfully.

You may object to the processing of personal data that were collected only in connection with a legitimate interest (Art. 6 para. 1 lit. f GDPR). If the objection is justified, the data are deleted without delay.

The right to deletion does not apply if a legal obligation or a public interest requires the processing of the data.

You can reach us for the above purposes at the email address [email protected]. To process your request we may, at our own discretion, require proof of identity.

You have the right to lodge a complaint with a data protection supervisory authority at any time.

7. Changes to the privacy policy

SaisonBox GmbH reserves the right to adapt, supplement or otherwise change this privacy policy at any time and without stating reasons. The privacy policy current at the time as published on the website applies. SaisonBox GmbH Gossau, October 2022

Terms: Terms. Provider: Imprint. Questions: Contact.