Legal notice

Kanela AG
Staldenhof 17
6014 Lucerne
041 227 80 80
[email protected]
www.kanela.ch
Commercial register: CH -100.3.806.692-2 (excerpt), CHE-466.113.559 MWST (VAT)

USE OF PERSONAL DATA

a.) Which personal data we process

Kanela AG collects and processes personal data that you provide yourself or that arise through the use of our online shop or as part of your other contact with us, such as:

Personal Information:

• Name and first name
• Address (shipping and billing address)
• Phone number(s)
• Date of birth and age
• Sex
• Language preference(s)
• Customer Account Information

Order and payment information:

• Credit card and account information
• Shopping cart information (including order date, order time, type, quantity and value of goods ordered, shopping cart, abandoned cart, order history, etc.)
• Payment information (means of payment used, paying office, invoice date, payment history, information on any dunning and collection procedures, etc.)
• Information on newsletters you have subscribed to, advertising, etc.
• Customer account information (you can find an overview of the customer account information under the heading "My Account" in the online shop)
• Customer service information (contacts, complaints, returns, etc.)
• Customer service information (contacts, inquiries, interactions with helpdesk)

Usage-specific information:

Furthermore, Kanela AG collects and processes the IP address of your technical devices as well as the usage data that arise from your usage behavior or your stay in our online shop. This includes the date and time of your visits, the terms you are searching for and the preferences. Kanela AG also collects, stores, uses, transmits, archives and destroys other personal data that is required and collected to answer inquiries or process the business relationship.

b.) What we use personal data for

If you contact us via our contact addresses and channels (e.g. email, telephone or contact form), your personal data will be used. The data that you have made available to us, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request will be processed. In addition, the time of receipt of the request is documented.

We use this data exclusively in order to implement your request (e.g. providing information about a product, support in contract processing such as returning products, including your feedback in improving our services, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Article 6 (1) (f) EU GDPR in the implementation of your request or, if your request is aimed at the conclusion or processing of a contract, the need for the implementation of the necessary measures within the meaning of Art. 6 Para. 1 lit. b EUDSGVO.

c.) To whom we pass on personal data

Without the support of other companies, Kanela AG could not provide the service in the desired form. In order for us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such a transfer takes place insofar as this is necessary to fulfill the contract you have requested, i.e. for example to the logistics or transport companies that deliver the desired products, or to a manufacturer who is supposed to fulfill your guarantee claim. The legal basis for these transfers is the need to fulfill the contract within the meaning of Article 6 (1) (b) EU GDPR.

The data will also be passed on to selected service providers and only to the extent necessary to provide the service. Various third-party service providers are also explicitly mentioned in this data protection declaration, e.g. in the sections on marketing. Incidentally, these are e.g. IT service providers (e.g. providers of software solutions), advertising agencies, consulting firms. The legal basis for this data transfer is our legitimate interest within the meaning of Article 6 (1) (f) EU GDPR in obtaining third-party services.

In addition, your data may be passed on, in particular to authorities, legal advisers or collection agencies, if Kanela AG is legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from the relationship with you. Data may also be shared if another company intends to acquire Kanela AG or parts of it and such sharing is necessary to conduct due diligence or to complete the transaction. Our legitimate interest in protecting our rights and complying with our obligations or the sale of our company forms the legal basis for this data transfer.

d.) Transmission of personal data abroad

Kanela AG is entitled to transfer your personal data to third parties abroad, provided this is necessary to carry out the data processing mentioned in this data protection declaration. Of course, the legal regulations for the disclosure of personal data to third parties are complied with. If the country in question does not have an adequate level of data protection, Kanela AG guarantees through contractual regulations that your data is adequately protected with these companies.

e.) Retention periods

Kanela AG only stores personal data for as long as is necessary to carry out the processing explained in this data protection declaration within the scope of our legitimate interest. In the case of contract data, storage is prescribed by statutory retention requirements. Specifications that oblige us to store data result from the provisions on accounting and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be kept for up to ten years. If Kanela AG no longer needs this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfill the storage obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer a storage obligation and there is no longer a legitimate interest in storage.

Google Analytics

Kanela AG and the web domain kanela.ch use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA) ("Google").

The data described about the use of the website for the processing purposes explained (see Section 13.1) can be sent to the servers of Google LLC. be sent in the USA. The IP address is shortened by activating IP anonymization ("anonymizeIP") on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

Users can prevent the data generated by the cookie and related to the website usage by the user in question (including the IP address) being sent to Google and the processing of this data by Google by using the browser plug-in under the following link Download and install link: https://tools.google.com/dlpage/gaoptout?hl=en .

You can find more information about data protection at Google here.

Cookies

Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit kanela.ch. Cookies are assigned identification numbers that identify your browser and the information contained in the cookie can be read.

Cookies help, among other things, to make your visit to kanela.ch easier, more pleasant and more meaningful. We use cookies for various purposes that are necessary for the use of the website you want, i.e. are "technically necessary". For example, we use cookies to be able to identify you as a registered user after you have logged in, without you having to log in again when navigating to the various subpages. The provision of the shopping cart and ordering function is also based on the use of cookies. Furthermore, cookies also take on other technical functions required for the operation of the website, such as so-called load balancing, i.e. the distribution of the performance load of the site on different web servers in order to relieve the servers. Cookies are also used for security purposes, for example to prevent unauthorized posting of content. Finally, we also use cookies as part of the design and programming of our website, e.g. to enable scripts or codes to be uploaded.

The legal basis for this data processing is our legitimate interest in providing a user-friendly and up-to-date website within the meaning of Article 6(1)(f) EU GDPR.

Most internet browsers automatically accept cookies. When you access our website, however, we ask that you consent to the cookies we use that are not technically necessary, especially when using cookies from third parties for marketing purposes. You can use the corresponding buttons in the cookie banner to make the settings you want. Details on the services and data processing associated with the individual cookies can be found within the cookie banner and in the following sections of this data protection declaration. As part of retargeting and banner advertising, we use third-party services that set cookies on our site. These are the following providers: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA; https://www.facebook.com/privacy/center?helpref=privacycenter

You can also configure your browser in such a way that no cookies are stored on your computer or that a message always appears when you receive a new cookie. On the following pages you will find explanations on how to configure the processing of cookies in selected browsers.

• Google Chrome
• Apple Safari

Deactivating cookies may mean that you cannot use all the functions of our website.

Social Media

On our website we have integrated links to our profiles in the social networks of the following providers:

• Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA,
• Instagram Inc. 1601 Willow Road, Menlo Park, CA 94025, USA.

If you click on the social network icons, you will be automatically redirected to the Kanela profiles in the respective network. A direct connection is established between your browser and the server of the respective social network. This gives the network the information that you have visited our website with your IP address and clicked on the link.

If you click on a link to a network while logged into your user account with that network, the content of our website may be linked to your profile so that the network can directly attribute your visit to our website to your account . If you want to prevent this, you should log out before clicking on the relevant links. There is always a connection between your access to our website and your user account when you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Therefore, please note the information on the network's website.

The legal basis for any data processing that may be attributed to us is our legitimate interest within the meaning of Article 6 (1) (f) EU GDPR in the use and advertising of our social media profiles.

Social Media Plugins

You can use social plugins from the providers listed below on our website:

• Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA, Privacy Policy

The domain kanela.ch uses social plugins to make it easier for you to share content from our website. The social plugins help us to increase the visibility of our content in the social networks and thus contribute to better marketing.

The plugins are deactivated by default on our websites and therefore do not send any data to the social networks when you simply visit a website in the kanela.ch domain. To increase data protection, we have integrated the plugins in such a way that a connection to the network servers is not automatically established. Your browser only establishes a direct connection to the servers of the respective social network when you activate the plugins and thus give your consent to the data transmission and further processing by the providers of the social networks.

The content of the plugin is transmitted directly from the social network to your browser, which integrates it into the website. This gives the respective provider the information that your browser has accessed the corresponding page of our website, even if you do not have an account for this social network or are not currently logged in to it. This information (including your IP address) is sent directly from your browser to the provider's server (usually in the USA) and stored there. We have no influence on the amount of data that the provider collects with the plugin, although from a data protection point of view we can be regarded as jointly responsible with the providers up to a certain extent.

If you are logged into the social network, it can assign your visit to our website kanela.ch directly to your user account. If you interact with the plugins, the corresponding information is also sent directly to the provider's server and stored there. The information (e.g. that you like a Kanela AG product) may also be published on the social network and may be displayed to other users of the social network. The provider of the social network may use this information for the purpose of placing advertising and tailoring the respective offer to needs. For this purpose, usage, interest and relationship profiles could be created, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website and to provide other information related to the use of the social network to provide services. The purpose and scope of the data collection and the further processing and use of the data by the providers of the social networks as well as your rights in this regard and setting options for the protection of your privacy can be found directly in the data protection information of the respective provider.

If you do not want the social network provider to assign the data collected via our website to your user account, you must log out of the social network before activating the plugin. Your consent within the meaning of Article 6 (1) (a) EU GDPR forms the legal basis for the data processing described. You can revoke your consent at any time by declaring your revocation to the provider of the plugin in accordance with the information in their data protection information.

Privacy and data security

Kanela AG uses suitable technical and organizational security measures to protect your personal data stored by us against loss and unlawful processing, namely unauthorized access by third parties. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and data protection. In addition, these persons are only granted access to the personal data to the extent necessary to fulfill their tasks.

The security measures of Kanela AG are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot guarantee the security of information transmitted in this way.

Log file data (log files)

When you visit our website, the servers of kanela.ch temporarily store each access in a log file (so-called log file). The following data is recorded without your intervention and stored by us until it is automatically deleted:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the retrieved file,
• the website from which access was made, possibly with the search term used,
• the operating system of your computer and the browser you are using (incl. type, version and language setting),
• Device type in case of mobile access,
• the city or region accessed from
• the name of your internet access provider.

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability over the long term, analyzing errors and performance, and enabling us to optimize our website.

In the event of an attack on the network infrastructure of the website or if there is suspicion of other unauthorized or abusive use of the website, the IP address and the other data will be evaluated for reconnaissance and defense and, if necessary, as part of criminal proceedings for identification and for civil - and criminal proceedings against the users concerned.

In the purposes described above, we have a legitimate interest in data processing within the meaning of Article 6 (1) (f) EU GDPR.

Finally, when you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. In this context, the data described here can also be processed. See the section below for more information.

Owner of the data collection

The owner of the data collection is Kanela AG, Staldenhof 17, 6014 Lucerne.

Data security

a.) Security Precautions

Kanela AG takes appropriate technical and organizational measures to protect your personal data against unauthorized processing and to ensure the confidentiality, availability and integrity of your personal data. These measures are intended to protect personal data on Kanela AG systems against the following risks in particular:

Unauthorized or accidental destruction, accidental loss, technical failure, counterfeiting, theft, misappropriation, unauthorized modification, copying, access or other manipulations. When disclosing your personal data to affiliated companies or service providers in Germany and abroad, Kanela AG ensures appropriate protection and security of personal data.

In particular, Kanela AG uses SSL encryption (Secure Socket Layer) as a standard security measure. If you place an order for goods in our online shop, personal data will be transmitted to us. The SSL procedure protects data that a customer sends to a company's server over the Internet. SSL provides triple protection

• The input to be transmitted will be encrypted;
• Ensuring that the form is only sent back to the server that opened it; and
• It is checked whether the data reaches its respective recipient completely and unchanged.

You can recognize the SSL-protected areas by the lock symbol in your browser. Secured connections are usually recognizable by their address, which begins with "https://". If you double-click the lock symbol, you will get more information about the security certificate.

b.) Notice of general risks

Please note that the Internet is generally not considered a secure environment and data transmitted via the Internet can be accessible to unauthorized third parties, which can lead to the disclosure of this data, changes to the information content or technical faults. Despite extensive technical and organizational security precautions, data may be lost or intercepted and/or manipulated by unauthorized persons. As a user, it is your responsibility to find out about the necessary safety precautions and to take appropriate measures in this regard. If you send us confidential information, you do so at your own risk. If you consider this appropriate in a specific case, we ask that you contact us via a secure data transmission channel instead of via the Internet.

c.) Public Posts

Publicly provided contributions in any discussion forums or guest books operated by us on our websites are accessible to everyone. You should carefully review your Contributions prior to publication to ensure that they do not contain any information that is not intended for the public. You must expect that your contributions will be recorded in search engines, for example, and will be accessible worldwide even without specifically calling up our offer. We cannot guarantee or assume any liability for whether and to what extent such entries are stored, used or disseminated by third parties.

d.) Harmful Components

Kanela AG assumes no responsibility and provides no guarantee that its website and other components used to access the website are free of viruses, worms, Trojan horses or other harmful elements. In addition, Kanela AG rejects any liability for manipulation of the Internet user's IT system by unauthorized persons. Kanela AG expressly points out the danger of targeted hacking attacks.

In order to combat viruses, we recommend using current browser versions and installing continuously updated anti-virus software. You should generally avoid opening e-mails of unknown origin and unexpected attachments to an e-mail.

Your rights

If the legal requirements are met, you as the person affected by data processing have the following rights:

Right to information: You have the right to request access to your personal data stored by us at any time and free of charge if we are processing it. This gives you the opportunity to check which personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, especially in the case of statutory retention requirements, the right to erasure may be excluded. In this case, if the conditions are met, the data can be blocked instead of being deleted.

Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.

Right to data transfer: You have the right to receive from us the personal data that you have provided to us free of charge in a readable format.

Right to object: You can object to data processing at any time, in particular for data processing in connection with direct advertising (e.g. advertising e-mails).

Right of withdrawal: In principle, you have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your revocation.

To exercise these rights, please send us an email to the following address: [email protected]

Right of appeal: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the manner in which your personal data is processed.

External links

External links may be content of our websites. Kanela AG is not responsible for the content and data protection regulations of those sites that you reach via these links. Please find out more about how data protection is handled on the external websites.