Who we are

Our website address is: https://sari-safran.com

Sari Safran

Rodteggstrasse 10

6005 Luzern

Data protection declaration

This data protection statement provides information on processing personal data in connection with www.sari-safran.com and our other online services. For individual or additional offers and services, special, supplementary, or further data protection declarations and other legal documents such as general terms and conditions (GTC), terms of use, or participation needs may exist. Our online offer is subject to Swiss data protection law and any applicable foreign data protection law, particularly that of the European Union (EU) with the General Data Protection Regulation (GDPR). The EU recognizes that Swiss data protection law guarantees adequate data protection.

1. contact address
1.1 Responsibility for the online offer

Sari Safran Avocado Productions GmbH Rodteggstrasse 10 CH-6005 Lucerne urs(at)urswyss.com

1.2 Data protection officer

We have the following data protection officer as a point of contact for data subjects and as a contact for supervisory authorities in the event of queries relating to data protection law: Urs Wyss Avocado Productions GmbH Rodteggstrasse 10 CH-6005 Lucerne urs(at)urswyss.com

2 Processing of personal data
2.1 Terms

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes handling personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, collection, deletion, storage, modification, destruction, and use of personal data.

2.2 Legal basis

We process personal data under Swiss data protection law, particularly the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (FADP). We process personal data – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – under at least one of the following legal bases: – Art. 6 para. One lit. b DSGVO for the necessary processing of personal data for the performance of a contract with the data subject and the implementation of pre-contractual measures. – Art. 6 para. One lit. f DSGVO for the necessary processing of personal data to protect the legitimate interests of us or third parties unless the data subject’s fundamental freedoms, rights, and interests prevail. Legitimate interests are, in particular, our interest in being able to provide our online offer permanently, in a user-friendly, secure and reliable manner, as well as to be able to advertise for it as required, information security as well as protection against misuse and unauthorized use, the enforcement of our legal claims and compliance with Swiss law. – Art. 6 para. One lit. c DSGVO for the necessary processing of personal data to fulfill a legal obligation to which we are subject under any applicable law of the EU or member states in the European Economic Area (EEA). – Art. 6 para. One lit. e DSGVO for the necessary processing of personal data for performing a task that is in the public interest. – Art. 6 para. One lit. a DSGVO for processing personal data with the data subject’s consent. – Art. 6 (1) (d) of the GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another natural person.

2.3 Type, scope, and purpose

We process the personal data necessary to provide our online service in a permanent, user-friendly, secure and reliable manner. Such personal data may fall into the categories of inventory data and contact data, content data, usage data, marginal data, contract data, and payment data. We process personal data for the period necessary for the relevant purpose(s) or as required by law. Personal data whose processing is no longer necessary is anonymized or deleted. As a matter of principle, we only process personal data with the consent of the data subject unless the processing is permitted for other legal reasons, for example, to fulfill a contract with the data subject and for corresponding pre-contractual measures, to protect our overriding legitimate interests, because the processing is evident from the circumstances or after prior information. In this context, we process certain information that a data subject provides to us voluntarily and of their own accord when contacting us – for example, by letter, email, contact form, social media, or telephone – or when registering for a user account. For example, we may store such information in an address book, a customer relationship management system (a CRM system), or similar tools. Suppose you transmit personal data from third parties to us. In that case, you are obliged to guarantee data protection vis-à-vis such third parties and ensure such personal data’s accuracy. We also process personal data that we receive from third parties, obtain from publicly accessible sources or collect in the course of providing our online services, if and to the extent that such processing is permitted for legal reasons.

2.4 Processing of personal data by third parties, including abroad

We may have personal data processed by third parties, in particular by order processors, or process it jointly with third parties or with the help of third parties, or transmit it to third parties. Such third parties are, in particular, providers and other service providers. We also ensure appropriate data protection for such third parties. Third parties are generally located in Switzerland, the European Union (EU), or the European Economic Area (EEA). However, such third parties may also be found in other countries on earth and elsewhere in the universe, provided that their data protection laws guarantee adequate data protection in the opinion of the Federal Data Protection and Information Commissioner (FDPIC) and – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – in the opinion of the European Commission, or if adequate data protection is guaranteed for other reasons, such as through a corresponding contractual agreement, in particular, based on standard contractual clauses, or related certification. Certification under the Privacy Shield may ensure adequate data protection for third parties in the United States of America (USA). Exceptionally, such a third party may be located in a country without proper data protection, provided that the requirements under data protection law, such as the explicit consent of the data subject, are met.

3. rights of data subjects

Data subjects whose personal data we process have rights under Swiss data protection law. These include the right to information and correction, deletion, or blocking of the personal data processed. Data subjects whose personal data we process may – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – request confirmation free of charge as to whether we are processing their data and, if so, request information about the processing of their data, have the processing of their data restricted, exercise their right to data portability and have their data corrected, deleted (“right to be forgotten”), blocked or completed. Data subjects whose personal data we process may – if and insofar as the GDPR applies – revoke the consent they have given at any time with effect for the future and object to processing their data at any time. Data subjects whose personal data we process have a right of appeal to a competent supervisory authority. Switzerland’s supervisory authority for data protection is the Federal Data Protection and Information Commissioner (FDPIC).

4 Data security

We take appropriate and suitable technical and organizational measures to ensure data protection and, in particular, data security. However, despite such efforts, personal processing data on the Internet can always have security gaps. We cannot, therefore, guarantee absolute data security. Access to our online offer takes place via transport encryption (SSL / TLS with HTTPS). Access to our online offer is subject – as is all Internet use – to mass surveillance without cause and suspicion, as well as other management by security authorities in Switzerland, the European Union (EU), the United States of America (USA), and other countries. We cannot directly influence the corresponding processing of personal data by secret services, police agencies, and other security authorities.

5 Use of the website
5.1 Cookies

We may use cookies for our website. Cookies – including those from third parties whose services we use (third-party cookies) – are data – often in the form of text files – stored in your browser. Cookies cannot run programs or transmit malware such as Trojans and viruses. Cookies can be stored temporarily in your browser as so-called “session cookies” when you visit our website or for a certain period as so-called permanent cookies. “Session cookies” are automatically deleted when you close your browser. Permanent cookies make it possible to recognize your browser the next time you visit our website and, thus, for example, to measure the reach of our website. Permanent cookies can also be used for online marketing, for example. You can deactivate or delete cookies in whole or in part at any time in your browser settings. Without cookies, our online offer may no longer be fully available. We ask you – if and to the extent necessary – for your consent to using cookies. In the case of cookies used for analytics or advertising, a general objection (“opt-out”) is possible for many services via the Networking Advertising Initiative, YourAdChoices (Digital Advertising Alliance), and Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

5.2 Log files

We may record the following information for each access to our website, provided that this information is transmitted by your browser to our server infrastructure or can be determined by our web server: Date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), the operating system including user interface and version, browser including language and understanding, individual page accessed and amount of data transferred, the last website accessed (referer or referrer). We store such information in log files, which may also constitute personal data. This information is necessary to provide our online service in a permanent, user-friendly and reliable manner and to ensure data security and, thus, in particular, the protection of personal data – also by third parties or with the help of third parties.

5.3 Tracking pixels

We may use tracking pixels on our website. Tracking pixels are also referred to as web beacons. Tracking pixels – including those from third parties services – are small images retrieved when you visit our website. Tracking pixels can collect the same information as server log files.

6 Social media

We are present on social media and other online platforms to communicate with interested persons and provide information about our online offer. The General Terms and Conditions (GTC), data protection declarations, and other provisions of the individual operators of such online platforms also apply in each case. For our social media presence on Facebook, if and to the extent that the GDPR is applicable, we are jointly responsible with Facebook for the so-called Page Insights, which provide information on how visitors interact with our Facebook presence. We use Page Insights to offer our social media presence on Facebook in an effective and user-friendly way. Facebook has published an addendum regarding the responsibility for Page Insights.

7. third party services

We may use third-party services to provide our online services in a durable, user-friendly, secure, and reliable manner. Such services are also used to embed content in our online offering. Hosting and storage services, video services, and payment services – require your Internet Protocol (IP) address, as such services cannot otherwise transmit the corresponding content. Such services may be located outside Switzerland and the European Union (EU) or the European Economic Area (EEA), provided that adequate data protection is guaranteed. For security-related, statistical, and technical purposes, third-party services may also process data in connection with our online offering and from other sources in aggregated, anonymized, or pseudonymized form – including cookies, log files, and counting pixels. Such data will not be used to target data subjects with our online offering directly.

7.1 Maps

We use Google Maps to embed maps on our website. Cookies are also used for this purpose. Google Maps is a service provided by the American company Google LLC. The Irish company Google Ireland Limited is responsible for users in the European Economic Area (EEA) and Switzerland. Further information on the nature, scope, and purpose of data processing can be found in Google’s data protection and security principles and its privacy policy, in the guidelines on data protection in Google products (including Google Maps), in the information on how Google uses data from websites on which Google services are used and in the information on cookies at Google. In addition, there is the possibility of objecting to personalized advertising.

7.2 Music and videos

We use YouTube and Vimeo to embed videos on our website. Cookies are also used in this process. YouTube is a service of the American Google LLC for users in the European Economic Area (EEA), and in Switzerland, the Irish Google Ireland Limited is responsible. Further information on the nature, scope, and purpose of data processing can be found in Google’s data protection and security principles and privacy policy, in the guidelines on data protection in Google products (including YouTube), in the information on how Google uses data from websites on which Google services are used and in the information on cookies at Google. In addition, there is the possibility of objecting to personalized advertising.

7.3 Fonts

We use Google Web Fonts to embed selected fonts in our website. Cookies are also used in this process. This is a Google service that specializes in digital font design, among other things. Further information on the type, scope, and purpose of data processing can be found on the page as to how Google uses data from websites.

7.4 Performance and reach measurement

We use Google Analytics to analyze how our website is used, including, for example, measuring the reach of our website and the success of third-party links to our website. This is a service provided by the American company Google LLC; for users in the European Economic Area (EEA), and in Switzerland, the Irish company Google Ireland Limited is responsible. Google also attempts to record individual visitors to our website when they use different browsers or devices (cross-device tracking). Cookies are also used for this purpose. Google Analytics requires your Internet Protocol (IP) address, but this is not merged with other Google data. In any case, we have your Internet Protocol (IP) address anonymized before analysis by Google. As a result, your complete IP address will not be transmitted to Google in the USA. Further information on the nature, scope, and purpose of data processing can be found in Google’s privacy and security policy and data protection statement in each case, in the guide to data protection in Google products (including Google Analytics), in the information on how Google uses data from websites on which Google services are used and in the information on cookies at Google. Furthermore, it is possible to use the “Browser Add-on to deactivate Google Analytics” and object to personalized advertising. We use Google Tag Manager to integrate and manage services for analytics or advertising from Google and third parties on our website. This is a service provided by the American company Google LLC; for users in the European Economic Area (EEA), and in Switzerland, the Irish company Google Ireland Limited is responsible. No cookies are used, but they may be used as part of the integrated and managed services. We provide information about processing personal data by such services in this privacy policy.

8. extensions for the website

We use jQuery, a free JavaScript library from the JS Foundation. We integrate the library with the help of jQuery.com so that we can improve the speed of our website. jQuery is delivered in this context via the Content Delivery Network (CDN) StackPath, a service of the American StackPath LLC. Cookies may also be used in this process. Further information on the type, scope, and purpose of data processing can be found in the StackPath privacy policy.

9. final provisions

We may amend and supplement this privacy policy at any time. We will inform you about such adjustments and additions in an appropriate form by publishing the respective current privacy policy on our website.