Privacy policy

Pal’Alcarria SL, Ctra Sacedon, km 42, 16512 Buendia, Cuenca, Spain is the operator of the palolivo.com website and the services offered on it. It is therefore responsible for the collection, processing and use of your personal data, and for ensuring that such data processing complies with applicable data protection legislation.

Your trust is very important to us, which is why we take data protection very seriously and ensure appropriate security. We naturally comply with the legal provisions of the Federal Data Protection Act (DPA), the Ordinance on the Federal Data Protection Act (FDPA), the Telecommunications Act (TCA) and other data protection provisions from Swiss or EU legislation that may be applicable, in particular the General Data Protection Regulation (GDPR).

To find out what personal data we collect from you and how we use it, please read the information below carefully.

Visit our website

When you visit our site, our servers temporarily record each access in a log file. The following technical data is then recorded, in principle as with any connection to a web server, without any intervention on your part, and stored by us until it is automatically deleted after a maximum of 24 months:

– the IP address of the computer accessing the site,
– the name of the IP space owner (usually your ISP),
– date and time of access,
– the Internet site from which you accessed our site (original URL) and any search keywords used,
– the name and URL of the file consulted,
– the status code (e.g. error message),
– your computer’s operating system,
– the browser you are using (type, version and language),
– the communication protocol used (e.g. HTTP/1.1) and
– possibly your user name from registration/authentication.

The purpose of collecting and processing this data is to enable the use of our website (establishment of a connection), to guarantee the long-term security and stability of the system and to enable the optimization of our online offering, but is also for internal statistical purposes. Such processing is based on our legitimate interest pursuant to art. 6 para. 1 let. f RGPD.

Create a customer account

To place an order with our online store, you can create a customer account. When you register for a customer account, we collect the following data:

– first and last name
– postal address
– date of birth
– telephone number
– e-mail address
– password

This data is collected in order to provide the customer with direct, password-protected access to his basic data stored in our system. Here, customers can consult their completed and current orders, or manage/modify their personal data.

Your consent in accordance with Art. 6 para. 1 let. a RGPD constitutes the legal basis for the processing of data for this purpose.

Buy from our online store

If you wish to place an order in our online store, we require the following data for the execution of the contract:

– first and last name
– billing address (if different from delivery address)
– payment details (depending on chosen payment method)
– login details, i.e. e-mail address and password (for registered customers)

Except as otherwise provided in this Privacy Policy or in the absence of your separate consent, we will only use the above-mentioned data to perform this contract, in particular to process your orders, deliver the products ordered and ensure that payment is correctly made.

The performance of a contract in accordance with Art. 6 para. 1 let. b RGPD constitutes the legal basis for processing data for this purpose.

Transmission of data to third parties

We will only pass on your personal data if you have given your express consent, if we are under a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce our rights arising from the contractual relationship.

In addition, we pass on your data to third parties insofar as this is necessary for the use of the website and the execution of the contract (including outside the website), in particular for the processing of your reservations. This includes the carrier responsible for shipping the goods ordered. Our web host Infomaniak Network SA, Avenue de la Praille 26, 1227 Geneva, is a service provider to whom we transmit personal data collected via the website, or who has access or may have access to such data. The website is hosted on servers in Switzerland. The purpose of transmitting data is to provide and maintain the functionality of our website. This is our legitimate interest under Art. 6 para. 1 let. f RGPD.

Finally, we transmit your credit card information to the issuer and acquirer of your credit card when you pay by credit card on our site. If you choose to pay by credit card, you must enter all the necessary information. The legal basis for the transfer of data in this case is the performance of a contract in accordance with Art. 6 para. 1 let. b RGPD. With regard to the processing of your credit card information by these third parties, please also read the general terms and conditions as well as the privacy policy of your credit card issuer.

Data transmission abroad

We may also transfer your personal data to third-party companies (contracted service providers) abroad for the data processing purposes specified in this privacy policy. These companies are subject to the same level of data protection as we are. If the level of data protection in a given country does not correspond to the Swiss or European level, we draw up a contract to ensure that the protection of your personal data always corresponds to that of Switzerland or the EU.

Cookies

Cookies are used in various ways to make your visit to our site easier, more pleasant and more useful. Cookies are files containing information that your web browser automatically saves on your computer’s hard disk when you visit our site.

For example, we use cookies to offer you the shopping cart function on several pages and to temporarily store the information you enter when you fill in a form on our site, so that you don’t have to enter it again when you visit another page. Cookies can also be used to identify you as a registered user when you register on our site. This saves you having to log in again when you visit another page.

Most web browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer, or so that a message appears each time you receive a new cookie. The following pages explain how to configure cookie handling for the most commonly used browsers:

Disabling cookies may prevent you from using the full functionality of our site.

Tracking tools

a. General

We use the Google Analytics audience analysis service to help us present our website in an appropriate way and optimize it on an ongoing basis. In doing so, we create pseudonymized usage profiles and use small text files stored on your computer (“cookies”). The information generated by the cookie about your use of this site is transmitted to the servers of the providers of these services, then stored and processed for us. In addition to the data specified in section 1 below, we may receive the following information:

– navigation path taken by a visitor on the site,
– duration of the visit to the site or page,
– the page from which the visitor leaves the site,
– the country, region or city from which access is gained,
– device (type, version, color depth, resolution, width and height of the browser window) and
– recurring or new visitor.

The information is used to analyze the use of the website, to compile reports on website activities and to provide other services related to website and Internet use, for the purposes of market research and the appropriate presentation of this website. This information may also be passed on to third parties in the event of a legal obligation or when such third parties are mandated to process the data.

b. Google Analytics

The provider of Google Analytics is Google Inc, an Alphabet Inc. holding company based in the USA. Before the data is transmitted to the provider, the IP address is abbreviated by activating IP anonymization (“anonymizeIP”) on this website within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Google does not combine the anonymized IP address transmitted by your browser within the framework of Google Analytics with other data. In exceptional cases, the full IP address is transmitted to a Google server in the USA and then abbreviated. In this case, we provide contractual guarantees that Google Inc. complies with an adequate level of data protection. Google Inc. does not associate the IP address with any other user data.

Further information on the web analytics service used by Google Analytics can be found on the Google Analytics website. To find out how to prevent your data being processed by the web analytics service, please visit http://tools.google.com/dlpage/gaoptout?hl=fr.

Note on data transmissions to the United States

For the sake of completeness, we inform users domiciled or headquartered in Switzerland that the USA is subject to surveillance measures by the US authorities. These measures generally allow the recording of all personal data of persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, limitation or exception based on purpose, and without any objective criterion for limiting the US authorities’ access to and subsequent use of the data to very specific and strictly limited purposes that justify the harm involved in accessing and using the data. Furthermore, we would like to inform you that in the USA, there is no legal remedy available to data subjects from Switzerland for accessing, correcting or deleting their personal data, nor is there any effective legal protection against general access rights by the US authorities. We explicitly draw the attention of the data subject to this legal and factual situation, so that he or she can make an informed decision about consenting to the use of his or her data.

We would like to point out to users domiciled in EU member states that, according to the EU, the USA does not offer a sufficient level of data protection, particularly in view of the issues raised in this section. To the extent that we have explained in this privacy policy that certain data recipients (e.g. Google) are headquartered in the USA, we will ensure either through contractual regulations towards these companies, or through their certification under the EU-US or Swiss-US Data Protection Shield, that your data receives a reasonable level of protection from our partners.

Right to information, rectification, erasure and restriction of data; right to data portability

Upon request, you have the right to obtain information about the personal data we store about you. In addition, you have the right to have incorrect data corrected and your personal data deleted, provided there is no legal obligation to store the data or any legal basis for processing the data.

You also have the right to request the return of the data you have transmitted to us (right to data portability). On request, we will also forward your data to a third party of your choice. You have the right to obtain your data in a standard format.

You can contact us for the above-mentioned purposes at the following e-mail address info@green-shop.ch. At our discretion, we may ask you to provide proof of identity in order to process your requests.

Data security

We use appropriate technical and organizational security measures to protect your personal data stored by us against manipulation, partial or total loss and against unauthorized access by third parties. Our security measures are constantly being improved in line with technological advances.

You should always keep your access data confidential and close the browser window when you have finished communicating with us, especially if you are not the only person using the computer.

We also take data protection within our company very seriously. Our employees and the service providers we commission are bound by confidentiality and data protection legislation.

Data retention

We store personal data only for as long as is necessary for the use of the above-mentioned tracking and analysis services and for further processing based on our legitimate interest. We retain contractual data for a longer period as required by legal retention obligations. The retention obligations that require us to retain data derive from financial accounting regulations and tax law. In accordance with these provisions, commercial communications, contracts concluded and accounting documents must be kept for a maximum of 10 years. As soon as we no longer need this data to perform our services, it will be blocked. This means that the data will only be used for tax and accounting purposes.

Right to lodge a complaint with a data protection supervisory authority

You have the right to lodge a complaint with a supervisory authority responsible for monitoring data protection.

Back to store