Privacy policy
Privacy policy and consent to the use of data at CUORE of Switzerland GmbH
By agreeing to the following privacy policy, you consent to CUORE of Switzerland GmbH, Gerwigstraße 4, 79199 Kirchzarten, GERMANY (hereinafter referred to as CUORE) collecting, processing, and using your personal data in compliance with data protection laws and the following provisions.
1. Responsible authority
The responsible body for the collection, processing, and use of your personal data within the meaning of the EU General Data Protection Regulation (hereinafter referred to as GDPR) is CUORE of Switzerland GmbH, Gerwigstraße 4, 79199 Kirchzarten, GERMANY.
If you wish to object to the collection, processing, or use of your data by CUORE in accordance with these data protection provisions, either in whole or for individual measures, you can send your objection by email or letter to the following contact details:
CUORE of Switzerland GmbH,
Gerwigstraße 4,
79199 Kirchzarten, GERMANY
Phone: +49 7661 91 99 490
E-Mail: info_eu@cuore.ch
2. Basic information & legal basis for data processing
(1) Personal data is information about the factual or personal circumstances of an identified or identifiable natural person. This includes, for example, your name, telephone number, address, and all inventory data that you provide to us when registering and creating your customer account. Statistical data that we collect, for example, when you visit our online shop and that cannot be directly linked to you as a person is not included here. For example, this includes statistics on which pages of our shop are particularly popular or how many users visit certain pages of the CUORE shop.
(2) We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). This means that personal data is only processed if there is legal permission or consent:
a. Based on your consent (Article 6(1)(a) GDPR): If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent that has been given can be revoked at any time. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.
b. To fulfill contractual obligations (Article 6(1)(b) GDPR): If the processing of personal data is necessary for the performance of a contract to which the data subject is party, the processing is based on Article 6(1)(b) GDPR. The same applies to the implementation of pre-contractual measures taken at your request.
c. Due to legal requirements (Article 6(1)(c) GDPR): If CUORE is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Article 6(1)(c) GDPR.
d. Within the framework of balancing interests (Article 6 (1) (f) GDPR): The processing of personal data that is not covered by any of the above legal bases is based on this legal basis if the processing is necessary to safeguard a legitimate interest of CUORE or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not prevail. According to Recital 47 of the GDPR, a legitimate interest exists, for example, if there is a relevant and appropriate relationship between the data subject and the controller, e.g. if the data subject is a customer of the controller or is employed by the controller.
e. Applicant data: The legal basis for the processing of applicant data is Art. 88 GDPR in conjunction with § 26 BDSG.
(3) We process personal data that we receive through visits to our websites or that we receive from our prospects, customers, business partners, and users in the course of our business relationship. In addition, we process personal data that we receive from our business partners or other third parties in a permissible manner (e.g., for the execution of orders, the fulfillment of contracts, or on the basis of consent) to the extent necessary for the provision of our services.
(4) With regard to the terms defined in the GDPR, we refer to the other definitions in Article 4 of the General Data Protection Regulation (GDPR) in addition to the definitions listed above.
3. Type and purpose of personal data processing
(1) When visiting the website
When you visit our website https://eu.cuore.ch/, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a log file. The storage serves internal system-related and statistical purposes. In addition, the transmitted data is used to provide information. The following information is collected without your intervention and stored until it is automatically deleted:
• IP address of the requesting computer,
• date and time of access,
• name and URL of the file accessed,
• amount of data transferred,
• notification of successful retrieval,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer and the name of your access provider.
We process the aforementioned data for the following purposes:
• Ensuring smooth connection to the website,
• Ensuring convenient use of our website,
• Evaluating system security and stability, and
• For other administrative purposes.
The legal basis for data processing is Art. 6 (1) (f) GDPR, unless Art. 6 (1) (a) GDPR or Art. 6 (1) (b) GDPR already applies.
In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations on this in the sections “Cookies” and “Analysis tools” of this privacy policy.
(2) When registering for our newsletter
By subscribing to our newsletter, you agree to receive it and to the procedures described.
• Content and consent: Our newsletter contains information about current products, offers, and promotions from our company. We use the double opt-in procedure for registration for our newsletter. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. The purpose of this procedure is to verify your registration and, if necessary, to investigate any possible misuse of your personal data.
• Your name, email address, and preferred language are required to send you the newsletter. After your confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 (1) (a) GDPR.
• Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent, for example, via a link at the end of each newsletter, by emailing info_eu@cuore.ch, or by sending a message to the contact details provided in the legal notice. After revocation, your data will be deleted except for your email address. The email address will be stored in a block list and will only be used to ensure that we do not send any further emails to your email address.
• Use of the mailing service provider “MailChimp”: The electronic newsletter is sent using “MailChimp,” a newsletter mailing platform provided by the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
• The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp's servers in the US. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimize or improve its own services, e.g., for technical optimization of the sending and display of the newsletters or for economic purposes to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them itself or pass it on to third parties. MailChimp is therefore committed to complying with EU data protection regulations. Furthermore, we have concluded a “Data Processing Agreement” with MailChimp. This is a contract in which MailChimp undertakes to protect our users' data, to process it on our behalf in accordance with its data protection regulations, and, in particular, not to pass it on to third parties. You can view MailChimp's privacy policy here.
• Evaluation of usage data (tracking): We would like to point out that we evaluate your usage behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data mentioned in section 4 and the web beacons to your email address and an individual ID. Links contained in the newsletter are also enriched with this ID.
• Online access and data management: There are cases in which we direct newsletter recipients to the MailChimp website. For example, our newsletters contain a link that allows newsletter recipients to access the newsletter online (e.g., in case of display problems in the email program). Furthermore, newsletter recipients can subsequently correct their data, such as their email address. Likewise, MailChimp's privacy policy is only available on their website.
• In this context, we would like to point out that cookies are used on MailChimp's websites and that personal data is therefore processed by MailChimp, its partners, and service providers (e.g., Google Analytics). We have no influence on this data collection. Further information can be found in MailChimp's privacy policy. We would also like to point out the options for objecting to data collection for advertising purposes on the websites http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the European area).
• Our interest is in using a user-friendly and secure newsletter system that serves both our business interests and meets the expectations of users.
(3) When using our contact forms
If you have any questions, you can contact us using the form provided on the website. You will need to provide a valid email address and other personal data so that we know who the enquiry comes from and can respond to it.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of a legitimate interest on the part of CUORE.
The personal data collected by us for the use of the contact form is stored in Mailchimp and deleted within one year after your request has been processed.
(4) When registering and purchasing on our online portals
To order clothing, you can register in our online shop based on Shopify or our own CUORE Team Shop portal and create a password-protected customer account. Here you can view data about your completed, open, and recently shipped orders and manage your address details, bank details, and newsletter. The personal data processed for this purpose is determined by the respective input mask used for registration. The registration of the data subject with personal data serves to process the order. The personal data provided is processed for the purpose of carrying out the order.
Depending on the payment method, we collect data such as your name, address, email address, credit card number, credit card holder, and credit card expiration date. When paying with PayPal, the IP address is also recorded. We process this data in order to detect misuse of the credit card or payment method at an early stage and use the data after successful verification to process the agreed payment. The legal basis for the associated data processing is Art. 6 (1) b) GDPR, i.e., the processing of your data is necessary for the fulfillment of the payment agreement. We only store your data for as long as is necessary for the purchase transaction and invoicing, unless there are legal or contractual storage periods that prevent the deletion of your data.
Data processing is absolutely necessary in order to process your payment, which is why it cannot be waived. There is therefore no option to delete your data.
(5) For product development, market research, and advertising
Through our online offerings, you can consent to us processing the contact details stored in your account (such as name, address, email address, telephone number) and usage data (e.g., services used) stored in your account for market research and product development purposes and to inform you about personalized offers, products, services, and surveys via various channels, e.g., by email. The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time. You can declare your revocation at any later point in time without giving reasons, e.g. via the unsubscribe link contained in every email or by sending a message to the contact details provided in the imprint. The revocation applies to the future. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.
(6) For product recommendations by email
As a CUORE customer, you will receive regular product recommendations from us by email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In this way, we want to provide you with information about products from our range that may be of interest to you based on your recent purchases from us. In doing so, we strictly adhere to the legal requirements.
If you no longer wish to receive product recommendations or promotional messages from us, you can object to this at any time without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact details mentioned in section 1 (e.g., email, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every email.
(7) For competitions, market research, and opinion polls
In the case of competitions, we use your data for the purpose of notifying you of your winnings and advertising our offers. You can find detailed information in our terms and conditions of participation for the respective competition.
We also use your data for market and opinion research. Of course, we use this data exclusively in anonymized form for statistical purposes and only for CUORE. Your responses to surveys will not be passed on to third parties or published. We do not store the responses from our surveys together with your email address or other personal data.
You can object to the use of your data for market and opinion research at any time, either in whole or for specific measures, without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact details mentioned in section 1 (e.g., email, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey email.
(8) Credit check
In order to offer you the best possible options for choosing a payment method, we must protect you and ourselves from misuse. We therefore reserve the right to transfer the necessary personal data (first and last name, address details) to our partners, who will carry out an assessment based on mathematical and statistical methods. Your address details are also included in the calculation of the probability value. We use the information obtained about the statistical probability of payment default (“probability value”) to make a balanced decision about the payment options to be granted to you.
You can object to the transfer of your data at any time. A notification in text form (e.g., email, letter) is sufficient for this purpose. However, we would like to point out that in this case, only the prepayment method will be available to you.
4. Data transfer
(1) Data will only be disclosed to third parties within the scope of legal requirements. We will only disclose user data to third parties if:
• You have given your express consent to this in accordance with Art. 6 (1) (a) GDPR,
• the transfer is necessary for the assertion, exercise, or defense of legal claims pursuant to Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for the transfer pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and
• this is legally permissible and necessary for the performance of contractual relationships with you pursuant to Art. 6 (1) sentence 1 lit. b GDPR.
(2) During the ordering process, the data you enter will be transmitted to various third parties, e.g. to our production department or the shipping company, if this is necessary for the purpose of contract processing or billing, or if you have given your prior consent. As part of order processing, the service providers we use (such as transport companies, logistics companies, banks) receive the data necessary for order and contract processing. The data passed on in this way may only be used by our service providers to fulfill their tasks. Any other use of the information is not permitted and does not occur at any of the service providers we entrust with this task.
5. General storage periods
We store your personal data for as long as necessary to fulfill our contractual and legal obligations. Legal retention periods are stipulated in the German Commercial Code (HGB) and the German Fiscal Code (AO), among other sources.
Documentation periods range from two to ten years. The storage period for your data is also determined by statutory limitation periods regarding the preservation of evidence. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.
The personal data collected by us for the use of the contact form will be deleted within one year after your request has been processed.
6. Cookies
We use cookies on our website. Cookies are small files that are stored on your data carrier and save certain settings and data for exchange with our system via your browser. There are two different types of cookies: session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your data carrier for a longer period of time or indefinitely. This storage helps us to design our website and our offers for you accordingly and makes it easier for you to use, for example by storing certain entries you have made so that you do not have to repeat them constantly.
Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware. The cookie stores information that is related to the specific device used. However, this does not mean that we immediately obtain knowledge of your identity. No personal data is stored in the cookies used by CUORE. The cookies we use cannot be assigned to a specific person and therefore cannot be assigned to you. When the cookie is activated, it is assigned an identification number. It is not possible to assign your personal data to this identification number at any time, and this is not done. Your name, IP address, or similar data that would enable the cookie to be assigned to you are not collected at any time. Based on cookie technology, we only receive pseudonymized information, for example about which pages of our shop were visited, which products were viewed, etc.
The data processed by cookies may be necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
7. Analytical tools
(1) Google Analytics
· Purpose of processing: The tracking measures listed below and used by us may be carried out on the basis of your voluntary consent in accordance with Art. 6 (1) (a) GDPR. We use the tracking measures to ensure that our website is designed to meet your needs and to continuously optimize it. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. The respective data processing purposes and data categories can be found in the corresponding tracking tools.
For the purpose of designing our website in line with requirements and continuously optimising it, as well as to analyse the behaviour of visitors to our website, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
When using Google Analytics, personal data such as the number of users, session statistics, approximate location, or browser and device information such as the host name of the accessing computer (IP address) is processed and, if necessary, transferred by Google to a Google Inc. server in the USA and stored there. For more information on data collection using Google Analytics, please visit:
https://support.google.com/analytics/answer/11593727?hl=de&sjid=15621528227697783988-EU
The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of Google.
· Duration of data storage: Your data processed by Google Analytics can be viewed by us for 14 months.
· Transfer to a third country: Insofar as personal data is transferred to servers of Google Inc. in the USA and stored and further processed there, Google has concluded the standard contractual clauses adopted by the EU Commission, which allow the transfer of personal data to the USA in individual cases.
· Revocation of consent: You can revoke your consent at any time with future effect in our cookie consent tool by clicking on the cookie settings button at the bottom of our website, which will take you to our cookie consent tool Consentmo GDPR. Then deselect the checkbox for the data processing for which you wish to revoke your consent.
8. Integration of third-party content
We have integrated third-party content into our website. This includes videos, map services, images, fonts, and reCAPTCHA to prevent spam. In connection with the integration of this content, it is technically necessary for us to provide the third-party provider with your IP address so that they can display the content to you. We do not store your IP address for the purpose of integrating third-party content. Third-party providers may use your IP address, cookies, and other technologies (e.g., pixel tags, i.e., invisible graphics) to track your surfing behavior and process technical information in addition to your IP address (including browser type/version, operating system used, the page you previously visited, the host name of the accessing device and the time, as well as further information on the use of our online offer).
The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. We have a legitimate interest in optimizing our website and improving our offering to you by also integrating third-party content and in protecting this website from bots and spam.
A more detailed description of who we embed content from and how your data is processed in the process can be found below in the respective description of the embedded content.
• Google Fonts (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) Privacy policy: https://policies.google.com/privacy
Opt-out: https://adssettings.google.com/authenticated
• Google reCAPTCHA (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). reCAPTCHA is a free service that protects websites from spam and abuse. By using reCAPTCHA, data is transmitted to Google, which Google uses to determine whether the visitor is a human or a (spam) bot. You can read about what data Google collects and what this data is used for at https://policies.google.com/privacy?hl=de-DE. You can read the terms of use for Google services and products at https://policies.google.com/terms?hl=de-DE.
9. Use of marketing services
We collect and process data on our website in order to display more relevant advertising on this and other websites (re-marketing/re-targeting) and to measure the success of our advertising measures. In doing so, we work with providers who help us to track whether users come to us via specific advertising measures (so-called conversion tracking). In this context, pseudonymized usage profiles are also created. The legal basis for the processing of your data is Article 6(1)(f) GDPR. We have a legitimate economic interest in presenting our website users with advertisements that are tailored to their interests and in measuring the success of the advertisements placed.
You can object to the use of these services by opting out. Please note, however, that you may then not be able to use all the functions of our website.
(1) Google Marketing Services
We use marketing services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on these websites.
The services used include:
· Google Ads: We also use Google Conversion Tracking to statistically record the use of our website and evaluate it for the purpose of optimizing our website for you. Google Ads sets a cookie on your computer if you have accessed our website via a Google ad.
· Google Tag Manager: The use of the Google service Tag Manager only enables us to integrate the listed services by implementing the other cookies/tags.
As part of the aforementioned services, Google uses cookies and cookie-like technologies such as pixel tags (i.e. small transparent graphics, also known as web beacons) and processes your personal data, in particular information about your browser type/version, operating system, the page you previously visited, the host name of the accessing device, IP address, and time of the request, as well as offers, search terms, and content that you were interested in. This data is transmitted to Google. Usage profiles are created on a pseudonymized basis. This means that we cannot identify you on this basis. You can find more information on this at https://policies.google.com/technologies/types
The cookies are automatically deleted after 30 days. You can object to or adjust the use of interest-based advertising here: https://www.google.com/ads/preferences/?hl=de
Further information and Google's applicable privacy policy can be found at https://policies.google.com/privacy The functioning of Google's marketing services is explained in more detail at this link: https://policies.google.com/technologies/ads
(2) Facebook Custom Audience
We use the so-called “Facebook pixel” from Facebook (for the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; internationally: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) on this website. This is a small, invisible pixel that establishes a connection to Facebook servers when you visit our website. Personal data such as your IP address and other information such as browser type/version, operating system used, the page you previously visited, the host name of the accessing device, IP address, and the time of the request may also be transmitted. This enables Facebook to identify users of our website and display targeted advertising to users who are interested in our website. In addition, the Facebook pixel allows us to track whether our Facebook ads are effective.
Facebook's privacy policy can be found here: https://www.facebook.com/policy.php.
You can object to the collection of data by the Facebook pixel and the use of your data here: https://www.facebook.com/settings?tab=ad.
(3) LinkedIn Insight
We use the LinkedIn Insight Conversion Tool from LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, which allows us to obtain information about the use of our website and to present you with advertising content tailored to your interests on other websites. To do this, a cookie with a validity of 120 days is set in your browser, which enables LinkedIn to recognize you when you visit a website. LinkedIn uses this data to create anonymous reports for us on advertising activities and information about how you interact with our website.
You can deactivate the LinkedIn Insight Conversion Tool and interest-based advertising by opting out at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
If you are a LinkedIn member, click on the “Decline on LinkedIn” field. Other visitors should click on “Decline.”
Further information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy#choices-oblig.
(4) LinkedIn Lead Gen Forms
• Purpose and legal basis of data processing: We use lead generation tools to attract new customers and provide information about our products and services. A lead is a prospective customer who provides contact details to a company whose products or services they are interested in for the purpose of being contacted. For this purpose, we use the LinkedIn Lead Gen Forms service provided by LinkedIn Ireland Unlimited Company, 2 Wilton Place, Dublin, D02 AD98.
When you fill out and submit a LinkedIn Lead Gen Forms form, LinkedIn stores your personal data and transmits it to us. Depending on the information provided and the form, we may process the following data in particular:
o Contact details: first and last name, email address, LinkedIn profile URL, telephone number, city, state/province, country/region, postal code, business email address, business telephone number
o Qualification data: education, degrees, subjects studied, university/vocational school, start and end dates
o Employer details: Company name, company size, industry
o Information about your profession: Job title, areas of activity, career level
On LinkedIn, the personal data you provide is stored in the LinkedIn Campaign Manager. We process this data in order to contact you (e.g. by email) and send you targeted information about our services and products. We use LinkedIn Lead Gen Forms for our public relations work and to communicate with interested parties. The legal basis for processing your personal data is the consent you voluntarily give when you submit the form.
In addition, we export and process the personal data stored in LinkedIn Campaign Manager in our customer relationship management system.
• Duration of data storage: The data stored in LinkedIn Campaign Manager is automatically deleted after 365 days. For more information on data storage in LinkedIn Campaign Manager, please visit https://www.linkedin.com/help/lms/answer/a1444756/linkedin-marketing-solutions-und-die-datenschutz-grundverordnung-dsgvo. We store the data you submit to us via LinkedIn Lead Gen Forms for a period of two years from receipt of the form. Unless there are further processing purposes (e.g. due to a business relationship that has arisen in the meantime or statutory retention periods), the personal data will be deleted after two years.
• Transfer to a third country: Insofar as personal data is transferred to LinkedIn servers in the USA and stored and further processed there, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, has concluded the standard data protection clauses adopted by the EU Commission with the LinkedIn companies based in the USA, which allow the transfer of personal data to the USA in individual cases. In addition, the EU Commission's adequacy decision for the US serves as the basis for third-country transfers. This certifies that the US has a level of data protection equivalent to the EEA standard. LinkedIn Corporation is certified under the EU-US Data Privacy Framework.
• Withdrawal of consent: You can withdraw your consent at any time with effect for the future. As a LinkedIn member, you have the option of withdrawing the submission of the lead form and having LinkedIn delete the data at any time within the 365-day period during which LinkedIn stores the lead data. In addition, you can exercise your right of revocation by contacting us at the above address by email or post. The revocation does not affect the legality of the data processing that has already taken place.
10. Rights of affected persons
You have the right:
(1) to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details;
(2) to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;
(3) to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for fulfilling a legal or contractual obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims;
(4) to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, However, you need it to assert, exercise, or defend legal claims, or you have objected to the processing in accordance with Art. 21 GDPR;
(5) in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller
(6) in accordance with Art. 7 (3) GDPR, to revoke your consent to us at any time. As a result, we will no longer be allowed to continue processing data based on this consent in the future; and
(7) in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
11. Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to give reasons.
If you wish to exercise your right to object, simply send an email to info_eu@cuore.ch.
12. Data security
When you visit our website, we use the widely used SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We only store personal data for as long as is necessary for the purposes for which it was collected or to comply with legal requirements regarding reporting or document retention.
We only employ staff and subcontractors who are bound by data secrecy obligations.
13. Links and third-party content
Despite careful content control, we cannot accept any liability for external links to third-party content. CUORE has no influence whatsoever on the design and content of the linked pages and expressly does not endorse this content.
14. Current status and changes to this privacy policy
This privacy policy is currently valid as of August 2025.
Due to the further development of our website and the offers made on it, or due to changes in legal or official requirements, it may become necessary to amend this privacy policy. You can access and print out the latest privacy policy at any time on our website at www.cuore.ch.