1. The security of user data comes first
upyuu respects the privacy of all users of the website or online shop (hereinafter referred to as "the customer" or "the customers"). These data protection regulations form the basis for the processing of personal data and provide information on what type of customer user data is collected by upyuu, how upyuu uses this data and what rights the customer is entitled to. upyuu complies with applicable data protection laws and only processes personal data for the purposes for which the data was transmitted.
Should there be any contradictions between this data protection declaration and the other applicable contract or terms and conditions of upyuu, the provisions of this data protection declaration shall take precedence.
2. Nature and Purpose of Data Collected
The processing of personal data means any handling of personal data, such as collecting, using, storing, disclosing, transmitting or deleting the data.
On the one hand, upyuu automatically collects personal data when the customer interacts with the website or uses the online shop. On the other hand, personal data provided by a customer (e.g. by making contact, creating a user profile or customer account) is recorded automatically or manually.
2.1. Data that is collected automatically
When visiting the upyuu website, statistical visitor data is automatically collected on which parts of the website the customer visits. Each time a website is called up, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, the customer's IP address, the date and time of the call, the browser used, the operating system, the amount of data transferred and the requesting provider (access data). contains and documents the retrieval. In this context, it is sometimes necessary for so-called cookies (see Section 4 below) to be used.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer.
2.2. Data when interacting with upyuu, for contract processing, contact and opening a customer account
upyuu does not automatically collect personal data from customers, such as name, address, telephone number or e-mail address.
On the other hand, personal data is collected from customers if a customer voluntarily provides this as part of an order or when contacting upyuu (e.g. via contact form or e-mail). Mandatory fields are marked as such, because in these cases upyuu needs the data to process the contract or to process the contact and without this information the order or the contact cannot be sent. Which data is collected can be seen from the respective input forms.
If a customer decides to open a customer account, upyuu uses the personal data for the purpose of opening a customer account. The mandatory information requested during registration must be provided in full, otherwise upyuu can refuse the registration. upyuu only uses the personal data recorded for the purpose of using the online shop or the respective offer or service for which the customer has registered. In addition, upyuu can use the customer's e-mail address to inform them about important changes, such as the scope of the offer, or technically necessary changes.
After the contract has been fully processed or after the customer account has been deleted, the customer's data will be restricted for further processing and deleted after the retention periods under tax and commercial law have expired, unless the customer has expressly consented to further use of the data or upyuu has not consented to further use Data use reserved, which is permitted by law. The customer account can be deleted at any time and can be done either by sending a message to the contact details given below (see Section 9 below) or using a function provided for this purpose in the customer account.
3. Legal basis for collecting and processing personal data
The legal basis for the collection and processing of the customer's personal data depends on the respective purpose of the data processing in each individual case. In particular, the following come into question:
- the protection of upyuu's legitimate interests, provided that the interests of the customer or fundamental rights or fundamental freedoms are not unreasonably affected;
- the conclusion or performance of a contract; or
- The customer's consent at the time the personal data was recorded. The customer can revoke his consent at any time. For this purpose, the customer can send a corresponding notification to the contact details described below. The legality of the data processing that has already taken place remains unaffected by the revocation.
Some of the cookies used by upyuu are deleted after the end of the browser session, i.e. after closing the web browser (so-called session cookies). Other cookies remain on the end device and enable upyuu to recognize the customer's web browser on the next visit (so-called persistent cookies). The duration of storage can be found in the overview in the cookie settings of the web browser.
Most web browsers automatically accept such cookies, but web browsers can be configured not to accept or store cookies. However, if cookies are deactivated, the functionality of the website may be restricted. Details on this can be found in the operating instructions or the help function of the web browser.
4.2. use of the data
The anonymous data, which is recorded by means of cookies when the upyuu website is accessed, can be used for web analysis purposes, to optimize the website and to measure performance. upyuu can use third-party providers for this purpose, some of whom have their own data protection regulations over which upyuu has no influence.
upyuu uses functions of the following web analysis services:
The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google evaluates the use of the website in order to compile reports on website activity and to provide upyuu with other services related to website activity and internet usage. The IP address transmitted by the customer's web browser as part of Google Analytics is not merged with other Google data.
The information generated by cookies about the use of the website is usually transmitted to a Google server in the USA and stored there. Google complies with the data protection provisions of the "Swiss-US Privacy Shield" agreement and has registered with the US Department of Commerce for the "Swiss-US Privacy Shield" (information on the Swiss-US Privacy Shield can be found at https://www.privacyshield .gov/Swiss-US-Privacy-Shield-FAQs).
Google AdWords and Google Conversion Tracking
The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
As part of Google AdWords, upyuu uses so-called conversion tracking. When the customer clicks on an ad served by Google, a conversion tracking cookie is set. These cookies lose their validity after 30 days at the latest and are not used to identify the customer. If the customer visits the upyuu website and the cookie has not yet expired, Google and upyuu can recognize that the customer clicked on the ad and was redirected to this page.
upyuu learns from Google the total number of users who clicked on the ad and were redirected to a website with a conversion tracking tag. However, upyuu does not receive any information with which the customer can be personally identified.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
upyuu uses Google Maps to visually display geographic information. When using Google Maps, Google transmits or processes data about the use of the Maps functions by website visitors, which may include in particular the IP address and location data. upyuu has no influence on this data processing.
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the "Swiss-US Privacy Shield".
In order to deactivate the Google Maps service and thus prevent data transmission to Google, a customer must deactivate the Java Script function in the web browser. In this case, Google Maps cannot be used or can only be used to a limited extent.
4.3 Social Media Content
upyuu can use social media plugins from social networks such as Facebook, Instagram or Twitter on the website.
If the customer calls up a website that contains such a plugin, the web browser establishes a direct connection to the servers of the respective social network. The content of the plugin is transmitted directly to the web browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that the customer's web browser has accessed the corresponding upyuu website, even if the customer does not have a profile on the corresponding social network or is not currently logged in. This information (including the IP address) is transmitted directly from the customer's web browser to a server of the respective provider (possibly in the USA) and stored there. If the customer is logged into one of the services, the providers of the social network can directly assign the visit to the upyuu website to the profile in the respective social network. If the customer interacts with the plugins, for example by pressing the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed there to the customer's contacts.
These social network platforms have their own data protection regulations over which upyuu has no influence.
The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and the related rights of the customers and setting options for the protection of privacy can be found in the data protection information of the providers:
If the customer does not want any of these plugins to be loaded, it is recommended to log out of the relevant social network. Furthermore, various web browsers can be set up or supplemented with add-ons (e.g. Facebook blocker) so that the social media plugins are not loaded.
If the customer would like to receive a newsletter offered by upyuu, upyuu needs an e-mail address from the customer and other information that allows verification that the customer is the owner of the e-mail address provided and agrees to receive the newsletter (so-called “double opt-in” procedure). If the customer would like to register for a newsletter as a registered customer, he can give his consent at the time of registration or later via the registration function in the customer account.
With the newsletter, the customer regularly receives recommendations and offers that might interest them. To do this, upyuu collects and processes personal data relating to the customer's usage behavior on the website, orders placed with upyuu and how the customer uses the newsletter (e.g. whether the newsletter is opened or which web URL links are clicked). upyuu can evaluate this data for statistical purposes in order to better tailor the content of the newsletter to the interests of customers.
The personal data entered in the newsletter registration form is processed based on the customer's consent, which the customer can revoke at any time for the future. The revocation takes place either via the “unsubscribe” link in the newsletter, written notification by the customer to upyuu at the address listed below or deregistration in the customer account. upyuu uses the personal data collected to design the content and send the newsletter. It will not be passed on to third parties for their own (advertising) purposes.
upyuu stores the personal data stored by the customer for the purpose of subscribing to the newsletter until the customer unsubscribes from the newsletter.
6. Sharing of your information
upyuu will not disclose customers' personal data to third parties. An exception to this is if the customer has consented to the transfer of data to companies that are not affiliated with upyuu or if upyuu is legally, officially or judicially obliged to do so. In addition, if service providers who support upyuu in data processing, website administration or in any other way and in providing the products and services requested by the customer are called in (e.g. parcel or newsletter delivery service providers). These third parties are required to maintain the same level of security and privacy as upyuu.
7. Data Security
Unfortunately, the transmission of data via the Internet is not completely secure. upyuu works with service providers and Internet providers who take appropriate technical and organizational security precautions to protect the personal data of customers. However, upyuu cannot guarantee the security of the data transmitted by the customer. Any data transmission is therefore at your own risk.
8. Your information and cancellation rights
Of course, every customer is free to inform upyuu at any time - for example in an e-mail - that the personal data should not be used to contact them in the future. Participation in the special services of the upyuu website, such as the newsletter service, can also be revoked at any time.
There is also the option of obtaining information on the processing of the data or requesting a copy of the personal data collected via the upyuu website.
Customers with questions about this data protection declaration or data protection at upyuu can contact upyuu using the following contact details:
PO Box 62
10. Final Provisions
Should individual provisions or parts of these data protection provisions prove to be void or ineffective, this will not affect the validity of the rest of the data protection provisions.
The place of jurisdiction and the applicable law are based on the General Terms and Conditions.
(Revision June 25, 2022)