The responsible body within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:

ofinto ag
Jonas Romer
Bischofszellerstrasse 53
CH-9200 Gossau SG, Switzerland

E-mail: info@ofinto.co.uk
Website: www.ofinto.co.uk

Authorised representatives:
Jonas Romer, Christian Stiefel

Under the contact details provided, you can exercise the following rights at any time:

• Information about your data stored by us and their processing (Art. 15 GDPR),
• Correction of incorrect personal data (Art. 16 GDPR),
• Deletion of your data stored by us (Art. 17 GDPR),
• Restriction of data processing, if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR) and
• Data portability, if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g. to the competent supervisory authority of the federal state of your residence or to the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with address can be found at:

https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Personal data are all information that relates to a specific or identifiable person. A data subject is a person whose personal data are processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, deletion, storage, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. In addition, we process - to the extent and as far as the EU GDPR is applicable - personal data in accordance with the following legal bases in connection with Art. 6 para. 1 GDPR:

lit. a) Processing of personal data with the consent of the data subject.

lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.

lit. c) Processing of personal data to fulfil a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR is fully or partially applicable.

lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.

lit. e) Processing of personal data to safeguard the legitimate interests of us or third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests are in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration that is necessary for the respective purpose or purposes. In the case of longer retention periods due to legal and other obligations to which we are subject, we restrict the processing accordingly.

This website uses cookies. These are small text files that make it possible to store specific, user-related information on the user’s end device while he or she uses the website. Cookies enable us to determine the frequency of use and number of users of the pages, to analyze the behavior of page use, but also to make our offer more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when you visit the site again. If you do not wish this, you should set your Internet browser to refuse the acceptance of cookies.

A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by switching them off in the browser settings. Please note that in this case not all functions of this online offer can be used.

You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/accounts/answer/61416?hl=de

Opera: http://www.opera.com/de/help

Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

For more information on the cookies used on this website, please visit https://ofinto.co.uk/cookies.

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

The provider of this website collects and stores information automatically in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request

These data cannot be assigned to specific persons. These data are not merged with other data sources. We reserve the right to check these data subsequently if we become aware of concrete indications of illegal use.

This website may use Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube for embedding videos.

These services of the American Google LLC use, among other things, cookies and as a result, data is transferred to Google in the USA, whereby we assume that no personal tracking takes place solely by the use of our website.

Google has committed to providing an adequate level of data protection in accordance with the US-European and US-Swiss Privacy Shield.

Further information can be found in Google’s privacy policy

If you would like to receive the newsletter offered on this website, we need your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data will be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe link” in the newsletter.

For the comment function on this website, in addition to your comment, information on the time of creation of the comment, your email address and, if you do not post anonymously, the user name you have chosen will be stored.

Storage of the IP address

Our comment function stores the IP addresses of users who post comments. Since we do not check comments on our site before they are activated, we need this data to be able to take action against the author in case of legal violations such as insults or propaganda.

Subscribing to comments

As a user of the site, you can subscribe to comments after logging in. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info mails.

Right to confirmation

Every data subject has the right to request confirmation from the operator of this website as to whether personal data relating to them are being processed. If you wish to exercise this right of confirmation, you can contact our data protection officer at any time.

Right to information

Every data subject whose personal data are processed has the right to obtain information free of charge at any time from the operator of this website about the personal data stored about him or her and a copy of this information. Furthermore, information may be provided on the following:

• the purposes of the processing
• the categories of personal data that are processed
• the recipients to whom the personal data have been or will be disclosed
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
• the existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject: All available information on the origin of the data

Furthermore, the data subject has a right of access to information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information on the appropriate safeguards in connection with the transfer.

If you wish to exercise this right of access, you can contact our data protection officer at any time.

Right to rectification

Every data subject whose personal data are processed has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary declaration.

If you wish to exercise this right of rectification, you can contact our data protection officer at any time.

Right to erasure (right to be forgotten)

Every data subject whose personal data are processed has the right to request the controller of this website to erase the personal data concerning them without delay, provided that one of the following reasons applies and insofar as the processing is not necessary:

• The personal data have been collected or otherwise processed for purposes for which they are no longer necessary
• The data subject withdraws their consent on which the processing was based and there is no other legal basis for the processing
• The data subject objects to the processing for reasons arising from their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling
• The personal data have been processed unlawfully
• The erasure of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject
• The personal data have been collected in relation to information society services offered directly to a child

If one of the above reasons applies and you wish to request the deletion of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will arrange for the deletion request to be complied with without delay.

Right to restriction of processing

Every data subject whose personal data are processed has the right to request the controller of this website to restrict the processing if one of the following conditions is met:

• The accuracy of the personal data is contested by the data subject, for a period of time that allows the controller to verify the accuracy of the personal data
• The processing is unlawful, the data subject refuses the erasure of the personal data and requests instead the restriction of the use of the personal data
• The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the assertion, exercise or defence of legal claims
• The data subject has objected to the processing for reasons arising from their particular situation and it is not yet clear whether the legitimate grounds of the controller outweigh those of the data subject

If one of the above conditions is met and you wish to request the restriction of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will arrange for the restriction of the processing.

Right to data portability

Every data subject whose personal data are processed has the right to receive the personal data concerning them in a structured, common and machine-readable format. They also have the right to have these data transferred to another controller, provided that the legal requirements are met.

Furthermore, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, as far as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.

To assert the right to data portability, you can contact the data protection officer appointed by the operator of this website at any time.

Right to object

Every data subject whose personal data are processed has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.

The operator of this website will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or if the processing serves the assertion, exercise or defence of legal claims.

To exercise the right to object, you can contact the data protection officer of this website directly.

Right to revoke consent under data protection law

Every data subject whose personal data are processed has the right to revoke consent to the processing of personal data at any time.

If you wish to exercise your right to revoke consent, you can contact our data protection officer at any time.

The use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

For the provision of paid services, we will ask you for additional data, such as payment details, to be able to execute your order or assignment. We store these data in our systems until the legal retention periods have expired.

This website uses the offer of Google Maps. This allows us to display interactive maps directly on the website and enable you to use the map function conveniently. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged in to, or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. For more information on the purpose and scope of data collection and processing by Google, as well as further information on your rights and settings options to protect your privacy, please visit www.google.de/intl/de/policies/privacy.

This website uses Google Conversion Tracking. If you have reached our website via an advertisement placed by Google, Google Adwords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advertisement placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not want to participate in tracking, you can refuse the setting of a cookie required for this - for example, by changing your browser setting that generally deactivates the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”.

Please note that you must not delete the opt-out cookies as long as you do not want any recording of measurement data. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

This website uses the remarketing function of Google Inc. The function is used to present website visitors with interest-based advertisements within the Google advertising network. A so-called “cookie” is stored in the website visitor’s browser, which makes it possible to recognize the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor may be presented with advertisements that relate to content that the visitor has previously accessed on websites that use the remarketing function of Google.

According to its own statements, Google does not collect any personal data in this process. However, if you do not wish to use the remarketing function of Google, you can generally deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

This website uses the service reCAPTCHA of Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland “Google”). The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and used there. However, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other data from Google. Your data may also be transferred to the USA. For data transfers to the USA, an adequacy decision of the European Commission, the “Privacy Shield”, is available. Google participates in the “Privacy Shield” and has submitted to the requirements. By activating the query, you consent to the processing of your data. The processing is based on Art. 6 (1) lit. a DSGVO with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
For more information about Google reCAPTCHA and the associated privacy policy, please visit: https://policies.google.com/privacy?hl=en.

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller for data processing on this website is located outside the European Economic Area or Switzerland, then Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.

The statistics obtained allow us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under “My data”, “personal data”.

The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f DS-GVO. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. We would like to point out that on this website Google Analytics has been extended by the code “_anonymizeIp();” to ensure an anonymized collection of IP addresses. This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. As far as the data collected about you is personal, it is therefore immediately excluded and the personal data is deleted immediately.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet use to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Google Analytics deactivate.

You can also prevent the use of Google Analytics by clicking on this link: Google Analytics deactivate. This will store a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your end device, these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you want to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.

This website uses the online marketing tool Google Ads from Google (“Google Ads”). Google Ads uses cookies to serve relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser and can prevent them from being displayed multiple times. In addition, Google Ads can use cookie IDs to track so-called conversions that relate to ad requests. This is the case, for example, when a user sees a Google Ads ad and later visits the advertiser’s website with the same browser and buys something there. According to Google, Google Ads cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and store your IP address.

You can prevent participation in this tracking process in various ways:

by adjusting your browser software accordingly, in particular, suppressing third-party cookies will prevent you from receiving ads from third-party providers; by deactivating the cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://adssettings.google.com, whereby this setting will be deleted if you delete your cookies; by deactivating the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link https://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; by permanently deactivating them in your browsers Firefox, Internetexplorer or Google Chrome under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

The legal basis for the processing of your data is a balancing of interests, according to which the processing of your personal data described above does not conflict with any overriding contrary interests on your part (Art. 6 para. 1 sentence 1 lit. f DSGVO). For more information about Google Ads from Google, please visit https://ads.google.com/intl/de_DE/home/, as well as general privacy policy at Google: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org.

This website uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a standard font from your computer will be used.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and Google’s privacy policy: https://www.google.com/policies/privacy/

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data of the users. With regard to the processing of the personal data of the users, reference is made to the following information on the Google services. Terms of use: https://www.google.com/intl/de/tagmanager/use-policy.html.

On our website, functions of the service Instagram are integrated. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit of our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or their use by Instagram.

You can find out more in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

We use the marketing services of the social network LinkedIn of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”) within our online offer.

These use cookies, i.e. text files, that are stored on your computer. This enables us to analyze the use of the website by you. For example, we can measure the success of our ads and show users products that they were previously interested in.

This collects, for example, information about the operating system, the browser, the previously visited website (referrer URL), which websites the user visited, which offers the user clicked on, and the date and time of your visit to our website.

The information generated by the cookie about your use of this website is pseudonymized and transferred to a server of LinkedIn in the USA and stored there. LinkedIn does not store the name or email address of the respective user. The above-mentioned data is rather only assigned to the one who generated the cookie. This does not apply if the user has allowed LinkedIn to process without pseudonymization or has a LinkedIn account.

You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also object to the use of your data directly at LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We use LinkedIn Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. All LinkedIn companies have adopted the standard contractual clauses to ensure that the data traffic necessary for the development, implementation and maintenance of the services takes place in a lawful manner to the USA and Singapore. If we ask the user for consent, the legal basis for the processing is Art. 6 para. 1 lit. a DSGVO. Otherwise, the legal basis for the use of LinkedIn Analytics is Art. 6 para. 1 sentence 1 lit. f DSGVO.

Information of the third party provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2 Ireland: User Agreement and Privacy Policy.

On this website, we use social plugins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). When you access a page that contains such a plugin, your browser establishes a direct connection to the servers of Pinterest. The plugin transmits log data to the server of Pinterest in the USA. This log data may include your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your usage of Pinterest, and cookies.

For more information about the purpose, scope and further processing and use of the data by Pinterest, as well as your rights and options to protect your privacy, please refer to the privacy policy of Pinterest: https://about.pinterest.com/de/privacy-policy

During the ordering process in our online shop, you have the possibility to choose a payment method. The processing of the payments is done via the payment service provider Adyen (Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands). We have concluded an agreement with Adyen for order processing according to Article 28 DSGVO. For the purpose of prevention and detection of fraud cases, we transmit your IP address to Adyen. All data are transmitted encrypted. Adyen collects and stores the data and passes them on only to the companies involved in the payment process. A collection or storage of the payment data by us does not take place.

We offer the following payment methods:

1. Payment by credit card
   1. When selecting the payment method “credit card”, personal data are automatically transmitted to Adyen. By selecting this payment option, you consent to the transmission of personal data necessary for payment processing as well as for identity and credit checks to our payment service provider.
   2. The personal data transmitted to Adyen are usually card type (Mastercard or VISA), name of the cardholder, card number, check digit and validity period.
   3. For credit card payments, the “3-D Secure” procedure is used to confirm the identity of the buyer via a two-factor authentication.
   4. You have the possibility to revoke your consent to the handling of personal data at any time with effect for the future towards us.
   5. Notes on data protection at Adyen can be found at https://www.adyen.help/hc/en-us/categories/360002679940-Adyen-on-my-bank-statement
2. Klarna invoice purchase
   1. When selecting the payment method “Klarna invoice purchase”, personal data are automatically transmitted to Klarna (Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden). By selecting this payment option, you consent to the transmission of personal data necessary for payment processing as well as for identity and credit checks.
   2. The personal data transmitted to Klarna are usually first and last name, title, address, date of birth, gender, email address, IP address, telephone number, mobile phone number, as well as data that are necessary for the processing of the invoice purchase and data that are related to the order, such as number of items, item number, invoice amount and taxes in percent, invoice information, bank details, card number, validity date, CCV code, information about goods/ services, historical information, information about your previous purchases, payment history, possible rejections, financial information, information about possible credit obligations and payment notes, information about the interaction between you and the Klarna Checkout, page load times, download errors and methods used to leave the displayed page, information about electronic communication, receipt confirmations, device information, geographic information.
   3. The transmission of the data is necessary for the processing of your purchase with the invoice processing you have chosen at Klarna, in particular for the confirmation of your identity, for the administration of your payment and the customer relationship, for customer analysis, for the administration of Klarna’s services and for internal processes, including troubleshooting, data analysis, internal testing, development, statistical purposes, to ensure that the necessary information for you and your device is displayed as effectively as possible, to prevent misuse or improper use of Klarna’s services, as part of Klarna’s efforts to make the services as secure as possible, to assess which payment methods we can offer you through Klarna, to carry out internal credit assessments, to carry out risk analysis and risk management, to business development and to comply with applicable law. Klarna has a legitimate interest in the transmission of the personal data of the buyer and requires them to obtain information from credit agencies for the purpose of identity and credit checks. In addition, Klarna may provide your personal data to other companies within the Klarna Group, service providers and subcontractors, to the extent necessary to fulfil the contractual relationship with you or with them. A list of the credit agencies used by Klarna can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
   4. As part of the decision on the establishment, execution or termination of the contractual relationship, Klarna collects and uses information on the buyer’s previous payment behaviour and probability values for this behaviour in the future. The calculation of this scoring by Klarna is based on scientifically recognised mathematical-statistical methods.
   5. You have the possibility to revoke your consent to the handling of personal data at any time with effect for the future towards Klarna. The applicable data protection provisions of Klarna can be accessed at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
3. Invoice Purchase through ofinto
   1. For processing payments via invoice purchase directly through ofinto, your data (first name, last name, address, email address) will be used solely for the purpose of handling this payment method.
   2. The data is stored in our accounting system. Access to this data is restricted to employees who require it to fulfill contracts.

Further links to partly used payment processors:

• PostFinance (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)
• Visa (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)
• Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)
• American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html)
• Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full) Bexio AG (https://www.bexio.com/de-CH/datenschutz)
• Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)
• Apple Pay (https://support.apple.com/de-ch/ht203027)
• Stripe (https://stripe.com/ch/privacy)
• Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/)
• Giropay (https://www.giropay.de/rechtliches/datenschutzerklaerung) etc.

Within the scope of fulfilling contracts, we use the payment service providers on the basis of the Swiss Data Protection Ordinance and, if necessary, Art. 6 para. 1 lit. b. EU-DSGVO. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with the Swiss Data Protection Ordinance and, if necessary, in accordance with Art. 6 para. 1 lit. f. EU-DSGVO, in order to offer our users effective and secure payment options.

The data processed by the payment service providers include inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, amount and recipient-related information.

The information is required to carry out the transactions. However, the data entered are only processed and stored by the payment service providers. We as the operator do not receive any information about (bank) account or credit card, but only information about the confirmation (acceptance) or rejection of the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. This transmission aims at the identity and credit check. For this purpose, we refer to the terms and conditions and data protection notices of the payment service providers.

For the payment transactions, the terms and conditions and the data protection notices of the respective payment service providers apply, which can be accessed within the respective website or transaction applications. We also refer to these for further information and assertion of withdrawal, information and other rights of the data subjects.

The newsletters are sent by the shipping service provider ‘MailChimp’, a newsletter shipping platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the shipping service provider here. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection (PrivacyShield). The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO and an order processing agreement pursuant to Art. 28 para. 3 sentence 1 DSGVO.

The shipping service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for technical optimization of the shipping and presentation of the newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

This website uses features of the service “YouTube”. “YouTube” is owned by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with “YouTube” consists of the terms and conditions that can be found at the following link: https://www.youtube.com/static?gl=en&template=terms&hl=en. These terms form a legally binding agreement between you and “YouTube” regarding the use of the services. Google’s privacy policy explains how “YouTube” handles your personal data and protects your data when you use the service.

On our pages, we use the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This means that Microsoft Bing Ads places a cookie on your computer if you have reached our website via a Microsoft Bing ad. Microsoft Bing and we can thus recognize that someone has clicked on an ad, has been redirected to our website and has reached a previously defined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the identity of the user is disclosed.

If you do not want Microsoft to use information about your behavior as explained above, you can refuse the setting of a cookie required for this - for example, by a browser setting that generally deactivates the automatic setting of cookies.You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by declaring your objection under the following link:

https://account.microsoft.com/privacy/ad-settings/signedout?lang=en-US.

For more information on privacy and the cookies used by Microsoft and Bing Ads, please visit Microsoft’s website at https://privacy.microsoft.com/en-us/privacystatement.

On our website, we use technologies of Bing Ads to collect and store data, from which usage profiles are created using pseudonyms. This is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service allows us to track the activities of users on our website when they have reached our website via ads from Bing Ads. If you reach our website via such an ad, a cookie is set on your computer. A Bing UET tag is integrated on our website. This is a code that, in connection with the cookie, stores some non-personal data about the use of the website. These include, among other things, the duration of stay on the website, which areas of the website were accessed and via which ad the users reached the website. Information about your identity is not collected.

The collected information is transferred to servers of Microsoft in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by disabling the setting of cookies. This may limit the functionality of the website.

In addition, Microsoft may be able to track your usage behavior across multiple of your electronic devices through so-called cross-device tracking and is thus able to display personalized advertising on or in Microsoft websites and apps. You can deactivate this behavior at 1.

For more information on the analysis services of Bing, please visit the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). For more information on privacy at Microsoft and Bing, please see Microsoft’s privacy policy (https://privacy.microsoft.com/en-us/privacystatement).

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity (hereinafter “Clarity”).

Clarity is a tool for analyzing user behavior on this website. Clarity collects, among other things, mouse movements and creates a graphical representation of which part of the website users scroll to most frequently (heatmaps). Clarity can also record sessions, so we can view the page usage in the form of videos. Furthermore, we receive information about the general user behavior within our website.

Clarity uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). Your personal data will be stored on the servers of Microsoft (Microsoft Azure Cloud Service) in the USA.

If consent (consent) has been obtained, the use of the above-mentioned service is based exclusively on Art. 6 para. 1 lit. a DSGVO and § 25 TTDSG; the website operator has a legitimate interest in an effective user analysis. The consent can be revoked at any time.

For more details on privacy and opt-out options (opt-out) from Clarity, please visit: https://docs.microsoft.com/en-us/clarity/faq.

For the purchase of products via our online shop, personal data is requested that is necessary for processing your order. As part of the checkout process, we store your following data that is necessary for the conclusion and fulfillment of the contract:

First name Last name Billing, company and delivery address Email address

In addition, voluntary information can be provided (e.g. phone number etc.). Mandatory information that is made for the purpose of registration is marked with an asterisk in the input mask as a mandatory field.

This data is passed on to our ERP and order systems as well as to our deliverers and sub-suppliers, processed and stored in order to fulfill your order.

These include:

Our ERP, Orderdesk: https://www.orderdesk.com/privacy-policy/ Our shop system, BigCommerce: https://www.bigcommerce.com/privacy/, https://www.bigcommerce.com/gdpr/ and https://support.bigcommerce.com/s/article/General-Data-Protection-Regulation?language=en_US Our fulfillment partners WKS(https://wksgruppe.de/datenschutz/) and Sieber Transport AG (https://www.sieber.ch/datenschutz/)

The storage of this data is necessary for the fulfillment of the contract or for the provision of the desired services. The legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO. Even after the conclusion of the contract, personal data of our contractual partners remain stored in order to comply with contractual or legal obligations. The data will be deleted when the data is no longer required for the execution of the contract. An early deletion of the data is only possible if there are no contractual or legal obligations that prevent deletion.

We use the CRM system Reamaze, of the provider Lantirn, Inc., 920 Saratoga Ave, Suite 213, San Jose, CA 95129, USA, to process customer inquiries faster and more efficiently (legitimate interest according to Art. 6 para. 1 lit. f. DSGVO). There is an order processing contract according to Art. 28 para. 3 sentence 1 DSGVO. Inquiries to our public email address info@ofinto.co.uk our live chat, our customer support and inquiries via our Facebook page are processed with Reamaze.

Lantirn Inc. is a US-based provider certified by Privacy Shield and thus commits to comply with the data protection law of Switzerland and the EU. Lantirn uses the collected data only for the technical processing of your inquiries and does not pass them on to third parties.

To use Reamaze via our live chat, pseudonymous use is possible, for communication via our email channels, at least the indication of a correct email address is necessary. In the course of processing service requests, it may be necessary to collect additional data (e.g. name, address).

For more information, please see the privacy policy of Reamaze:

: https://www.reamaze.com/privacy

The copyright and all other rights to content, images, photos or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. For the reproduction of any files, the written consent of the copyright holder must be obtained in advance.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and possibly liable for damages.

All information on our website has been carefully checked. We make every effort to offer our information offer up-to-date, correct and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, which means that we cannot guarantee the completeness, correctness and timeliness of information, including journalistic and editorial information. Liability claims arising from material or immaterial damage caused by the use of the information offered are excluded, unless there is evidence of intentional or grossly negligent fault.

The publisher can change or delete texts at his own discretion and without notice and is not obliged to update the contents of this website. The use or access to this website is at the visitor’s own risk. The publisher, his clients or partners are not responsible for any damages, such as direct, indirect, incidental, pre-determined or consequential damages, allegedly caused by visiting this website and therefore assume no liability.

The publisher also assumes no responsibility and liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher expressly distances himself from all third-party content that may be relevant to criminal or liability law or that violates good morals.

We may change this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of the change by email or in another appropriate manner in the event of an update.

If you have any questions about data protection, please write us an email or contact the person responsible for data protection listed at the beginning of the privacy policy in our organization.

Gossau SG, 04.12.2023