Privacy Policy

This privacy policy informs you about how Grün Möbel, located at Altmoosstrasse 33, 8157 Dielsdorf/ZH, Switzerland (registered in the commercial register of the Canton of Zurich, under number CH-020.1.072.266-0), and other companies of Grün Möbel (hereinafter referred to as “Grün Möbel” or “We”) handle data processed about you, whether it is through the use of our websites and mobile applications (hereinafter also referred to as “Website” or “digital offerings”), or offline, as applicable, when providing information at Grün Möbel stores or in any other way.

We are responsible for the processing of your personal data and for ensuring the compatibility of data processing with applicable law. We comply with the data protection regulations of Switzerland and the EU.

You acknowledge that Grün Möbel, as well as all other companies of Grün Möbel, are joint owners of the data collections consisting of the collected personal data of you and other customers.

Scope and Purpose of Collection, Processing, and Use of Personal Data when visiting our Website and making purchases in our online shop

a. When visiting www.grunmobel.com, www.grunmobel.ch

During a visit to our website, our servers temporarily store each access. The following data is collected without your intervention:

The IP address of the requesting computer (anonymized)

The name of the owner of the IP address range (usually your internet access provider)

The date and time of access

The website from which the access originated (referrer URL), if applicable, with the search term used

The name and URL of the accessed file

The status code (e.g., error message)

The operating system of your computer

The browser you are using (type, version, and language)

The transmission protocol used (e.g., HTTP/1.1)

Your username from a registration/authentication, if applicable

The collection and processing of this data are carried out for the purpose of enabling the use of our website (establishing a connection), permanently ensuring the security and stability of the system, enabling the optimization of our internet offerings, as well as for internal statistical and advertising purposes. The aforementioned data is not assigned to specific individuals, nor is it merged and stored together with other personal data.

Only in the event of an attack on the website’s network infrastructure or suspicion of other unauthorized or abusive use of the website, the IP address is evaluated for clarification and defense, and if necessary, used within the framework of criminal proceedings for identification and civil and criminal action against the users concerned.

This represents our legitimate interest in data processing within the meaning of Art. 6(1)(f) of the General Data Protection Regulation (GDPR) of the European Union.

b. When registering for an online account

To place orders in the online shop and to be supplied with the services you requested, you can place an order as a guest or open an online account. When registering for an online account, we collect the following data:

Address type (private or company)

Salutation

First and last name

Mailing address

Phone number

Preferred communication language

Email address

Password

If you apply for a MyGrünMöbel membership when opening an online account, we require additional information for processing the application. The following data must also be provided:

Date of birth

Profession

Mailing address (including any previous addresses)

Nationality

Marital status

Annual gross income

Residence status

Hometown

Customer number (for registered customers)

Information about the owner of an additional card (name, first name, salutation, date of birth, mobile number)

The legal basis for processing the data for this purpose is your consent, our legitimate interest, and the performance of a contract, pursuant to Art. 6(1)(a), (b), and (f) of the GDPR.

c. When using the website

During the use of the website, we collect data for statistical purposes and to enable the smooth functioning of the portal. In particular, the following data is collected:

Type, frequency, and intensity of website usage

Duration of your membership

Payment and purchase history

Information related to payments (depending on the chosen payment method)

Location-based data from mobile devices

Session data and behavioral data (sessions, clicks, scrolling)

Customer service information (e.g., complaints, inquiries, etc.)

We use the aforementioned personal data for the administration of your online account and for managing your data.

The legal basis for processing the data for this purpose is your consent, our legitimate interest, and the performance of a contract, pursuant to Art. 6(1)(a), (b), and (f) of the GDPR.

d. When shopping in the online shop

If you wish to place orders as a guest in our online shop, we require the following data for the processing of the purchase contract:

Address type (private or company)

Salutation

First and last name

Billing address (and, if different, shipping address)

Phone number

Email address

Communication language

If you wish to place orders with an online account in our online shop, we require the following data for the processing of the purchase contract:

Shipping address (if different)

In connection with your purchase, we store the following data in our customer database:

Information about the ordered products

Information about the ordered services

Data related to your order, shopping, and payment behavior

Unless otherwise stated in this privacy policy or unless you have given separate consent, we will only use the aforementioned data to fulfill the contract, specifically to process your orders, deliver the ordered products, and ensure proper payment.

Scope and purpose of collection, processing, and use of personal data related to the MyGrünMöbel Card

a. When applying for the card

When applying for a MyGrünMöbel Card, we require various information for processing the application for a card with credit function. The following data must be provided:

Address type (private or company)

Salutation

First and last name

Postal address (including any previous addresses)

Phone number

Communication language

Date of birth

Profession

Nationality

Marital status

Annual gross income

Residence status

Hometown

Information about the owner of an additional card (name, first name, salutation, date of birth, mobile number)

The provision of additional data is voluntary. We use the aforementioned personal data for the administration of your MyGrünMöbel customer account.

The legal basis for processing the data for this purpose is your consent and the performance of a contract, pursuant to Art. 6(1)(a) and (b) of the GDPR.

b. When shopping with the MyGrünMöbel Card

When using your MyGrünMöbel Card in connection with your purchase, we associate the following data with your MyGrünMöbel Card:

Information about the ordered products

Information about the ordered services

Data related to your order, shopping, and payment behavior

Unless otherwise stated in this privacy policy or unless you have given separate consent, we will only use the aforementioned data to fulfill the contract, specifically to deliver the ordered services, process your orders, deliver the ordered products, and ensure proper payment.

Please note that these data, along with the personal data collected in connection with the card application and card transactions, will be included in our customer database. They will be treated in the same manner as personal data collected in the context of your use of our website. The provisions mentioned below apply to this personal data mutatis mutandis, to the extent that they are not limited exclusively to data acquisition and processing related to the use of the website.

Please also review our terms and conditions (AGB) in connection with the MyGrünMöbel Card.

The legal basis for processing the data for this purpose is your consent and the performance of a contract, pursuant to Art. 6(1)(a) and (b) of the GDPR.

Acquisition and processing of personal data in connection with in-store purchases or telephone sales

When making an in-store purchase or placing a telephone order, we collect the following personal data from you:

First name and last name

Residential address and, if applicable, a different delivery address for the purchased goods

Phone number (for contact during delivery)

Email address

Payment information, such as credit card information

The aforementioned data is primarily processed for the performance of the purchase contract, delivery of the purchased goods, and processing of the payment of the purchase price.

Please note that the aforementioned personal data will be included in our customer database. They will be treated in the same manner as personal data collected in the context of your use of our website. The provisions mentioned below apply to this personal data mutatis mutandis, to the extent that they are not limited exclusively to data acquisition and processing related to the use of the website.

Please also review our terms and conditions (AGB) in connection with your purchases.

The legal basis for processing the data for this purpose is the consent you have given, according to Article 6(1)(a) of the GDPR.

Acquisition and processing of personal data when purchasing gift cards

You can purchase gift cards through our website. The following information is required during the purchase:

Salutation

First and last name

Mailing address (or any alternative delivery address)

Email address or mobile number

The legal basis for processing your data for this purpose is the fulfillment of a contract, according to Article 6(1)(b) of the GDPR.

Acquisition and processing of personal data when contacting us via the contact form

On our website, you have the option to contact us through a contact form. The following information is required for contacting us:

Salutation

First and last name

Mailing address

Phone or mobile number

Email address

We require this data for the purpose of processing your inquiry. The phone number is needed for contact and efficient customer support.

The legal basis for processing your data for this purpose is our legitimate interest, according to Article 6(1)(f) of the GDPR.

Acquisition and processing of personal data upon receipt of your application

You have the opportunity to apply with us spontaneously or in response to a specific job posting, either by mail or online. Typically, we require the following information and documents in such cases:

Salutation

First and last name

Mailing address

Phone or mobile number

Email address

Date of birth

Nationality

Cover letter

Curriculum vitae

We use these and other voluntarily provided data to process your application. Application documents from unsuccessful applicants in connection with a specific application for an open position will be deleted no later than six (6) months after the position has been filled, as our company may have to comply with legal requirements by that time (e.g., compliance with SECO regulations).

The legal basis for processing your data for this purpose is the performance of a contract (pre-contractual phase) and our legitimate interest, according to Article 6(1)(b) and (f) of the GDPR.

Acquisition and processing of personal data during creditworthiness checks

If we provide goods or services in advance, such as purchases on invoice, we may obtain a creditworthiness report from a credit agency, based on mathematical-statistical procedures, to protect our legitimate interests. For this purpose, we transmit the personal data required for a creditworthiness check to a credit agency and use the received information about the statistical probability of payment default to make a well-balanced decision regarding the establishment, execution, or termination of the contractual relationship. The creditworthiness report may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which also incorporate address data, among other factors. Your legitimate interests will be considered in accordance with legal requirements.

When examining the application for a MyGrünMöbel Card, we or our authorized partner company also obtain a creditworthiness report (from the credit and economic information agency, the population control office, debt enforcement offices, etc.). Furthermore, we are entitled to register any information regarding the rejection of the card application, payment arrears, as well as card misuse. To prevent over-indebtedness, the Consumer Credit Act (KKG Grün Möbel) obligates us to exchange information about creditworthiness with the Credit Information Office (IKO).

The legal basis for processing the data for this purpose is the performance of a contract and our legitimate interest, according to Article 6(1)(b) and (f) of the GDPR.

Use of your data for advertising purposes

a. Newsletter, print or SMS advertising

You will only receive a newsletter, print or SMS advertising from us upon explicit request, i.e., if you have given your consent to receive advertising either on our website under the “Newsletter” section, in the application form for the MyGrünMöbel Card, during in-store purchases, when placing a telephone order, or when participating in competitions.

The following information is mandatory for receiving advertising:

Salutation

First and last name

Mailing address

Mobile number

Email address

You can unsubscribe from receiving advertising at any time. Additionally, the option to unsubscribe is provided in every newsletter or SMS.

We are authorized to commission third parties for the technical processing of advertising measures and to disclose your data for this purpose.

The legal basis for processing the data for this purpose is the consent you have given and our legitimate interest, according to Article 6(1)(a) and (f) of the GDPR.

b. Cookies

Cookies help make your visit to our website easier, more enjoyable, and more meaningful in many ways. Cookies are information files that your web browser automatically stores on the hard drive of your computer when you visit our website. Cookies do not damage the hard drive of your computer, nor do they transmit personal data of the users to us.

We use cookies, for example, to offer you the shopping cart function across multiple pages and to temporarily store your entries when filling out a form on the website so that you do not have to repeat the input when accessing another subpage. Cookies may also be used to identify you as a registered user after registration on the website, so that you do not have to log in again when accessing another subpage.

Most internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice appears whenever you receive a new cookie. On the following pages, you will find explanations on how to configure the processing of cookies in the most common browsers:

Microsoft Windows Internet Explorer

Microsoft Windows Internet Explorer Mobile

Mozilla Firefox

Google Chrome for Desktop

Google Chrome for Mobile

Apple Safari for Desktop

Apple Safari for Mobile

Disabling cookies may prevent you from using all the functions of our website.

c. Tracking, Re-Targeting, and Re-Marketing

We use the web analysis service Google Analytics provided by Google Inc. (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA on our website. We use Google Analytics to continuously optimize our offer and tailor it to the needs of users. For this purpose, Google Analytics uses cookies (see below), which are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website, in particular:

The navigation path a visitor takes on the site

The duration of stay on the website or subpage

The next website accessed after visiting the website

The country, region, or city from which access is made

The end device (type, version, color depth, resolution, width, and height of the browser window)

Returning or new visitors

The type and version of the internet browser used

The operating system used

The website from which the access is made (referrer URL)

The IP address of the accessing computer (anonymized)

The time of the server request

Actions on the website (clicks, downloads, purchases)

are transmitted to and stored on servers of Google in the USA. Google will use this information to evaluate the use of the website, compile reports on website activity for us, and provide other services related to website use and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with any other data held by Google. IP addresses are anonymized, so that allocation to you as an individual is not possible. Google is listed as a Privacy Shield participant. The Privacy Shield agreement between the EU and the USA guarantees minimum standards in data protection.

Furthermore, we use Google Remarketing (DoubleClick by Google) and Google AdWords for online advertising and to analyze the use of our website. By using first-party cookies and third-party cookies (e.g., DoubleClick cookies) in combination, it is possible to analyze how ad impressions are related to website visits. Third parties, including Google, have the ability to serve ads on websites and target and optimize them based on previous visits to the website (e.g., based on age, gender, or interests). The data may be obtained from Google or from visitor data from third parties.

We also use Google Tag Manager to manage the services within the context of usage-based advertising. The Google Tag Manager tool itself is a cookie-less domain and does not collect personal data. Rather, the tool triggers other tags that may, under certain circumstances, collect data. If you have deactivated at the domain or cookie level, this deactivation remains in effect for all tracking tags implemented with Google Tag Manager.

By using our website, you consent to the processing of the data collected about you by Google in the manner and for the purposes described above.

You have the option to prevent your data from being analyzed by Google Analytics. If you wish to do so, please follow this link, where you can download and install a browser plugin.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6(1)(f) of the General Data Protection Regulation (GDPR).

d. Creating User Profiles

In order to provide you with personalized services and information, we use and analyze the data we collect about you. Analyzing your user behavior can lead to the creation of a so-called user profile.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.

e. Facebook Custom Audience

We use Facebook Custom Audience, a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In general, when using Custom Audience, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes.

We also use Facebook Pixel, which is also a service provided by Facebook. With its help, we can track the actions of users after they have seen or clicked on a Facebook advertisement. This allows us to measure the effectiveness of Facebook advertisements for statistical purposes. The data collected in this way is anonymous to us but may be stored and processed by Facebook. Facebook can link this data to your respective Facebook account and also use it for its own advertising purposes.

For more information on how Facebook Pixel works and Facebook ads in general, please refer to Facebook’s Privacy Policy.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.

f. Microsoft Bing Ads

We use conversion tracking from Bing Ads (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). When you click on a Bing ad, a cookie is set on your computer. Both Bing and we can recognize that you were redirected to our website via the Bing ad. This allows us to measure the effectiveness of Bing advertisements for statistical purposes. The data collected in this way is anonymous to us but may be stored and processed by Bing. We also use the data for remarketing. If you do not wish to participate in the described tracking procedure, you can reject the setting of a cookie required for this purpose via browser settings. You can also disable it using this link.

g. LinkedIn Custom Audience

We use features and content from LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In general, when using Custom Audience, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to LinkedIn for analysis and marketing purposes.

We also use the LinkedIn Insight Tag, which is also a service provided by LinkedIn. This may include content such as images, videos, or texts and buttons that allow you to express your interest in content, subscribe to the authors of the content, or our posts. If you are a member of the LinkedIn platform, LinkedIn can associate the access of the above-mentioned content and functions with your profiles. We can also include scripts and measures that allow us to use marketing and statistical functions in LinkedIn. The data collected in this way is anonymous to us but may be stored and processed by LinkedIn. LinkedIn can link this data to your respective account and also use it for its own advertising purposes.

For more information on how the LinkedIn Insight Tag works and LinkedIn ads in general, please refer to LinkedIn’s Privacy Policy.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.

Social Media

On our website, we have included links to our social media profiles. The links lead to the following networks:

Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA

Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA

Twitter, Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA

Google+, operated by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043

YouTube, operated by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

By clicking on the respective symbols of the social networks, you will be automatically redirected to our profile on the respective network. In order to use the functions of the respective network, you may need to log into your user account. When you access a link to one of our social media profiles, a direct connection is established between your browser and the server of the respective social network. As a result, the network receives information that you are visiting our website with your IP address and that you have accessed the link. If you access a link to a network while you are logged into your account on that network, the contents of our website may be linked to your profile on the network, which means that the network can directly associate your visit to our website with your user account. If you want to prevent this, you should log out before clicking on such links. An association is always made if you log into the respective network after clicking on the link.

Disclosure of Data to Third Parties

We only disclose your personal data if you have expressly consented to it, if there is a legal obligation to do so, or if it is necessary to enforce our rights, especially to enforce claims arising from the contractual relationship.

Furthermore, we disclose your data to third parties to the extent necessary for the use of the website and the processing of the contract. The use of the data disclosed for this purpose by the third parties is strictly limited to the specified purposes.

If you choose to pay by credit card, you will be redirected to the payment provider’s application. Regarding the processing of your credit card information by these third parties, we ask you to also read the terms and conditions as well as the privacy policy of your credit card issuer.

When reviewing the application for a MyGrünMöbel Card or for purchase on account, we or our authorized partner company also obtain credit information (from credit and business information agencies, residents’ registration offices, debt enforcement offices, etc.). Furthermore, we are entitled to register any information regarding the rejection of the card application, payment arrears, as well as card misuse. In order to prevent over-indebtedness, the Consumer Credit Act (KKG) requires Grün Möbel to exchange additional information about creditworthiness with the Credit Information Agency (IKO).

The legal basis for the processing of data for this purpose lies in our legitimate interest, partly in your consent, or in the performance of a contract according to Art. 6(1)(a), (b), and (f) of the GDPR.

Transfer of Personal Data to Foreign Countries

Grün Möbel is authorized to transfer your personal data to third-party companies abroad if this is necessary for the purposes mentioned above. The legal provisions for the transfer of personal data to third parties are, of course, complied with. They are obliged to comply with data protection to the same extent as the provider itself. If the level of data protection in a country does not correspond to Swiss or EU data protection law, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the European Economic Area (EEA) at all times.

For the sake of completeness, we would like to inform users residing or domiciled in Switzerland that surveillance measures by US authorities exist in the USA, which, in general, enable the storage of all personal data of all persons whose data has been transmitted from Switzerland to the USA. This is done without differentiation, limitation, or exception based on the objective pursued and without an objective criterion that would make it possible to limit access by US authorities to the data and its subsequent use to very specific, strictly limited purposes that could justify the interference associated with both access to and use of the data. Furthermore, we would like to point out that affected persons from Switzerland have no legal remedies available in the USA that would allow them to access the data concerning them and to obtain their correction or deletion, nor is there any effective judicial protection against general access rights of US authorities. We explicitly inform the affected parties about this legal and factual situation so that they can make an appropriately informed decision regarding the consent to the use of their data.

We would like to inform users residing in a member state of the EU that, from the point of view of the European Union – among other things due to the topics mentioned in this section – the USA does not have an adequate level of data protection. As far as we have explained in this privacy policy that recipients of data (e.g., Google) are based in the USA, we will either ensure, through contractual arrangements with these companies or by ensuring the certification of these companies under the EU or Swiss-US Privacy Shield, that your data is protected at our partners with an appropriate level of protection.

Right to Information, Deletion, Correction, and Retention of Data

You can request information about your personal data stored by us at any time or view and modify it by logging into our website with your login data. A formal request for information must be made in writing. You can download the form here.

You can request at any time that your data or your user profile be deleted or corrected. This can be done by sending a corresponding request by email to info@grunmobel.ch. Please note that, in this case, we reserve the right to demand proof of identity, and that in the event of the deletion of your data, the use of our services may not be possible or may only be possible to a limited extent.

Consents to specific data processing can be revoked at any time with effect for the future.

Please note that certain data are subject to legal retention periods. These data must be stored by us until the expiration of the period. If you have requested their deletion, we will block these data in our system and use them exclusively to fulfill our legal obligations.

Data Security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

When you register with us as a customer, access to your customer account is only possible after entering your personal password. You should treat your payment information as confidential and log out of your online account and close the browser window when you have finished communicating with us, especially if you share the computer with others.

We also take internal data protection very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and to comply with the data protection regulations.

Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to new circumstances from time to time. The respective changes take effect upon publication of the changes. Therefore, we recommend that you regularly review this privacy policy.

Contact

If you have any questions about data protection on our website, would like to request information, or request the deletion of your data, please contact our data protection officer by sending an email to info@grunmobel.ch.

www.grunmobel.ch www.grunmobel.com

As of: August 13, 2021