Data privacy

We take the protection of your personal data very seriously. We respect your personal data and your privacy. Bubble Box AG (hereinafter "Bubble Box") is committed to protecting your privacy in accordance with Swiss law and this Privacy Policy.

By using our website and our offers, you acknowledge that Bubble Box collects and uses your information in accordance with this policy.

1. SCOPE OF APPLICATION
   This privacy policy defines which data we collect and for which purposes this data is used when you use a service from us, purchase products or contact us. They describe what rights you have as a user, what the data is collected and/or processed for.
   
   If you do not want us to use your personal data in the future, you can cancel the user agreement or revoke your consent in whole or in part at any time. You can find more information in section 12 "Your rights".
   
   If you do not agree with how we collect and process your personal data, please do not use Bubble Box services and products and do not provide us with your personal data.
   The owner and responsible for this data is Bubble Box AG, Widenholzstrasse 6, 8304 Wallisellen. You can find the contact details in section 14 "Contact".




2. WHAT DATA IS COLLECTED?
   We collect personal data that relates to specific or identifiable individuals.
   a. Data about your person
   - Personal contact details for contacting: e.g. name, address, telephone number, email address
   - Access data for the user account: e.g. creation date, email address and password
   - Demographic contact data: e.g. place of residence, location, date of birth, gender, language
   - Purchasing behavior: e.g. information on products and services
   - Consent to receive advertising as well as information on subscribed advertising measures
   - Photo and video recordings of visits to our stores or other premises
   
   b. Data about your customer activity
   - Contract data: e.g. information about orders
   - Process information about actions on our website: e.g. activities in the customer account
   - Customer service information: e.g. correspondence between you and Bubble Box customer service
   - Location-based data: e.g. your IP address and your location
   - Session-related data in relation to our website: e.g. pages and subpages you visit on our website




3. WHEN DO WE COLLECT PERSONAL DATA?
   Your information is collected in the following circumstances (non-exhaustive list):
   a. You use our website or web applications
   b. You visit our stores or other premises
   c. You purchase our products and services, sign a contract with us or register for our services (online and offline)
   d. You contact us by e-mail, phone or chat or use services of our customer service
   e. You use or communicate with us or through third-party providers (e.g. on websites, social media, by mail, or our call center)
   f. You participate in contests, surveys and direct marketing campaigns
   g. You get in touch with us on special events such as trade fairs, events and cultural events




4. WHY DO WE COLLECT PERSONAL DATA?
   Personal information is collected by Bubble Box to provide you with the best possible service. This allows us to improve our services, suggest personalized recommendations, improve communication with you and simplify our operations.




5. WHY DO WE PROCESS PERSONAL DATA?
   Bubble Box processes your personal data for one or more of the following purposes:
   a. Order processing: e.g. for processing the contract incl. any credit checks and collection procedures
   b. Customer communication: e.g. to send information about your order
   c. Analysis of customer behavior offline and online: e.g., to improve our offering
   d. Maintenance of user accounts on the website and for marketing tools: e.g. for analysis purposes or for contact purposes
   e. Marketing communications and automated or personalized marketing activities: e.g. for sending newsletters.
   
   For the named purposes, we may partially rely on automated processes for the processing.




6. TO WHOM DO WE DISCLOSE PERSONAL DATA?
   Bubble Box will not share your information with third parties for direct marketing purposes unless you have expressly consented to this.
   However, Bubble Box reserves the right to disclose your personal information to third parties, both within and outside of Switzerland, for other purposes, but only under the following circumstances:
   a. Authorities or official agencies
   Bubble Box is permitted to disclose your personal information when required to do so by law, such as to comply with applicable regulations, in legal proceedings, at the request of public authorities or courts, or when we believe it is necessary to protect our rights.
   b. Partners and external service providers
   We may share data with partner companies and service providers in Switzerland and abroad (worldwide) that support us in contract processing and fulfillment as well as information provision and service provision (e.g. IT services or for marketing campaigns). These companies are contractually obligated to comply with data protection regulations and applicable data protection law and to process the data exclusively on our behalf and according to our instructions. Insofar as contractually or legally provided, they may in turn involve third parties under the same conditions.
   c. Furthermore, with your permission, Bubble Box may pass on personal data to Baloise Insurance Ltd for the purpose of providing insurance advice




7. CRM (CUSTOMER-RELATIONSHIP-MANAGEMENT)
   Bubble Box uses the customer relationship management tool Pipedrive, a service provided by Pipedrive OÜ, based in Estonia, to process and store personal data.
   Data processing on Pipedrive is carried out on the basis of our legitimate interests in the fast and efficient processing of user inquiries, existing customer management and new customer business, in accordance with Art. 6 para. 1 lit. f GDPR.
   Further information about Pipedrive and Pipedrive's privacy policy can be found under the following link:https://www.pipedrive.com/en/privacy




8. SSL ENCRYPTION
   Bubble Box uses SSL encryption for your security and to protect confidential content during transmission. SSL, also known as Secure Socket Layer, is an encryption protocol for the transmission of data on the Internet and an encrypted network connection between server and browser. You can recognize an encrypted connection by the fact that the URL starts with "https" also "HyperText Transfer Protocol Secure" instead of "http" and the small lock right next to it in the URL line. An SSL connection ensures that transmitted data cannot be intercepted or read by third parties at any time.




9. COOKIES
   We use cookies on our Internet pages. These are short text files that are assigned to your browser and temporarily stored on your device. They do not contain any personal data and can be deleted by you at any time in your browser settings.
   Cookies initially serve to ensure the functionality of our website. Furthermore, they ensure that your browsing experience on our website is as comfortable as possible and that you can benefit from the full functionality of the site.
   Some cookies are used to analyze user behavior and to optimize marketing measures. Cookies from third-party providers, so-called third-party cookies, may be used for this purpose.
   
   Most of them are so-called session cookies, which are deleted from your hard drive after you end your session. Temporary or permanent cookies remain on your end device even after you end your session. As mentioned above, you can delete these cookies. You can find more information about this in the help center of your browser.
   
   If you do not want this, you can deactivate cookies in your browser settings or set them so that you are informed about the setting of cookies and can allow them in individual cases. Please note, however, that this may mean that not all functions on our pages are available to you.




10. LOG-FILES
    The providers of this site automatically collect and store information in log files, so-called server log files, each time you visit our pages. These are automatically transmitted to us. The log files contain data such as the IP address of your device, browser name and version, date and time of access, the website (referrer URL) from which you came to our pages and the amount of data transferred. The collected data is used exclusively for the technical improvement of this website and our offer, to provide you with the best possible user experience, as well as for statistical analysis.




11. TRACKING
    In order to constantly improve and optimize our website and our offering, we use tracking solutions and browser plug-ins. These allow us to analyze the use of our website using statistics and graphics.
    
    
    a. Google Analytics
    This website uses the web analytics service "Google Analytics" by Google LLC ("Google"). Google Analytics uses cookies that allow an analysis of user behavior on this website. Within the scope of this anonymized user data collection, for example, the type of device, browser, session duration and number of your sessions are passed on to Google together with a shortened IP address. The transmitted IP address is not merged with other data from Google. A transfer of this data by Google to third parties only takes place due to legal regulations or in the context of order data processing.
    The information collected by the cookies is usually passed on to a Google server in the USA and stored there. The user can refuse the installation of cookies by selecting the appropriate settings on his browser software. In case of a refusal, however, this website cannot be used to its full extent. You can use a browser plug-in to prevent Google Analytics from collecting and processing your data through cookies. The corresponding plugin can be installed under the following link:
    https://tools.google.com/dlpage/gaoptout?hl=en
    Here you can find more information about Google's data usage: https://support.google.com/analytics/answer/6004245?hl=en
    
    
    
    b. Google Ads
    This website uses Google conversion tracking from "Google Ads" by Google LLC ("Google"). If you have reached this website via an ad from Google, Google Ads will set you a cookie. These cookies expire after 30 days and are not used to personally identify you. If you visit certain pages of this website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page.
    
    Each Google Ads customer receives a different cookie. The cookies cannot be tracked across Google Ads customers' websites. The information collected using the conversion cookie is used to create conversion statistics for Ads customers who use conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.
    
    If you do not want Google to set such a cookie for you, you can disable the cookies required for this in your browser settings.
    Here you can find the privacy policy of Google Ads:
    https://policies.google.com/technologies/ads
    
    
    
    c. Google Remarketing
    This website uses "Google Remarketing", by Google LLC ("Google"). Google Remarketing is used to display interest-based advertisements to website visitors within the Google advertising network. A cookie is stored in your browser that enables Google to recognize you when you visit websites that belong to Google's advertising network. On these pages, you may be presented with advertisements that relate to content you have previously viewed on websites that use Google Remarketing.
    
    These cookies do not store any personal data. If you do not want Google to set such a cookie for you, you can disable the cookies for interest-based advertising in your browser.
    Here you can find the privacy policy of Google:
    https://policies.google.com/privacy?hl=en
    
    
    
    d. Google Tag Manager
    This website uses the Google Tag Manager, a service provided by Google LLC ("Google"). The Google Tag Manager does not use cookies and does not collect any personal data. The Tag Manager triggers other tags, which in turn may set cookies and collect personal data. If you have deactivated cookies or domains, this will remain the case for all tracking tags that are integrated via the Google Tag Manager.
    Here you can find the privacy policy of Google Tag Manager:
    https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
    
    
    
    e. Google Maps
    This website uses Google Maps, a service provided by Google LLC ("Google"). With the help of Google Maps, maps are displayed and directions can be created. By using Google Maps on our website, you consent to the collection and use of the data you provide and automatically collected by Google or its representatives.
    Here you can find the privacy policy of Google Maps:
    https://policies.google.com/privacy?hl=en
    
    
    
    f. Google Web Fonts
    This website uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser fetches the required web fonts into your browser cache in order to display text and fonts correctly. If your browser does not support web fonts, a standard font is used by your computer.
    Here you can find more information about Google Web Fonts:
    https://developers.google.com/fonts/faq as well as Google's privacy policy:
    https://policies.google.com/privacy?hl=en
    
    
    
    g. Google reCAPTCHA
    This website uses "Google reCAPTCHA", an offer from Google LLC.
    reCAPTCHA enables us to determine whether data entries on our website (e.g. in the contact form) are made by a human or a bot (automated program). reCAPTCHA checks this by analyzing the behavior of website visitors based on various characteristics. The analysis starts automatically when entering this website.
    For analysis, reCAPTCHA evaluates various information, such as IP address, time spent by the website visitor on the website or mouse movements made by the user. The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
    
    The data processing is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in protecting our web offers from abusive automated spying and from SPAM. You can find more information about Google reCAPTCHA and Google's privacy policy under the following links:
    https://www.google.com/intl/en/policies/privacy/ and https://policies.google.com/terms?hl=en
    
    
    
    h. YouTube
    On this website, functions of YouTube are integrated, an offer of Google LLC. This content is only displayed by this website. The use of this content creates a legally binding agreement between you and YouTube regarding the use of the services.
    You can find information about YouTube's terms of use here:
    https://www.youtube.com/static
    You can find the privacy policy for YouTube at the following link:
    https://policies.google.com/privacy?hl=en
    
    
    
    i. Social Plugins
    Our website uses social plugins, e.g. from Meta (e.g. Facebook or Instagram) or LinkedIn. When you visit our website, your browser establishes a direct connection to the servers of the providers. By integrating the plugins, the social network provider receives the information that the user has visited the corresponding web pages. If you are logged in to the provider at the same time, the provider receives the information that you have visited our website and assigns this to your user account. If you interact with the plugins, for example by clicking the "Like" button, the corresponding information is transmitted from your browser directly to the provider and stored there. If you do not want the provider to collect data about your visit to this website, you must log out of the corresponding accounts before visiting the website. If you visit our site while logged out of the social network providers, the provider sets a cookie and collects anonymized data. If you log in to the provider again at a later time, the collected data can be assigned to your profile by the provider.
    Further information on the purpose and scope of the data collection can be viewed directly at the provider.
    – Meta (Facebook & Instagram): https://www.facebook.com/policy.php?locale=en_EN
    – LinkedIn: https://de.linkedin.com/legal/privacy-policy
    
    If you do not want the social network providers to collect data about your visit to this website, you can block third-party cookies in the help section of your browser. This means that no more data will be passed on to third-party providers when you visit websites. Please note that this may result in limited usability of our website.
    
    
    
    j. Hotjar
    This website uses Hotjar, a service provided by Hotjar Ltd. based in Malta. Hotjar is used to optimize the website and improve the user experience. The service uses a cookie to record mouse clicks, mouse movements, scrolling movements and keystrokes. No personalized data is collected. Data collection starts automatically when you enter this website. The recorded activities are automatically stored on the servers of Hotjar. Further information on the purpose and scope of the data collection as well as the privacy policy can be found at the following link at Hotjar:
    https://www.hotjar.com/privacy
    
    If you don't agree to Hotjar collecting your data, you can disable it here:
    https://www.hotjar.com/opt-out




12. LINKS TO EXTERNAL SITES
    This website contains links to other websites and embeds image and video material from external third-party sites. Bubble Box takes no responsibility for the content of the third-party sites and their privacy policies. Likewise, Bubble Box has no responsibility for the timeliness, accuracy and completeness of the information provided on these sites.




13. YOUR RIGHTS
    In accordance with the Swiss Data Protection Law, you have the following rights regarding the processing of your data when using this website and our services.
    a. Information about your data
    You have the right to request information about the personal data collected about you at any time. Please contact us for this purpose (contact details in section 14 "Contact"). In order for us to be able to provide you with information, we need an official identification document (passport, ID). The request must be made in writing.
    b. Completion/correction of your data
    You have the right to have your personal data completed or corrected/added at any time. To do so, please contact our customer service (contact details in section 14 "Contact").
    c. Restriction
    You have the right to request that the processing of personal data is restricted. For example, if they are no longer needed for the purpose of processing. To do so, contact our customer service (contact details in section 14 "Contact").
    d. Deletion of your data
    You have the right to have your data deleted at any time and without giving reasons, insofar as it is no longer required for the purposes for which you have given your consent and the legal obligation to retain it has expired. Please contact us for this purpose (contact details in section 14 "Contact").
    e. Transfer your data
    You have the right to request your data in a common machine-readable format. To do so, contact our customer service (contact details in section 14 "Contact").
    f. Revocation/objection
    You have the right to partially or completely revoke your consent to the processing of personal data and to the use of your data for marketing purposes at any time or to object to such use (so-called opt-out). Contact us (contact details in section 14 "Contact"),for example:
    - delete your account
    - unsubscribe from the newsletter. You can also unsubscribe from the newsletter by clicking on the unsubscribe link in each newsletter.
    Please note that the revocation does not affect the lawfulness of the data collected and processed on the basis of the consent until the revocation.
    g. Right to complain
    You have the right to file a complaint with the competent supervisory authority, the Swiss Federal Data Protection and Information Commissioner (FDPIC), in accordance with the law.
    
    Please note that even if you withdraw your consent, Bubble Box still has the right to send you administrative communications. This includes, for example, notifications and order confirmations regarding your orders or information about account activities (password changes, etc.).




14. CHANGES
    Bubble Box has the right to change these Data Policy at any time. Any changes will be published on our website. Registered persons (e.g. with a user account or customers registered for the newsletter) will be informed of changes by e-mail.




15. CONTACT
    If you, as an interested party or visitor, have questions about this privacy statement or our measures for collecting, processing and using personal data, you can reach us here:
    
    Bubble Box AG
    Data privacy
    Widenholzstrasse 6
    8304 Wallisellen
    
    058 255 48 48
    hello@bubblebox.ch



Wallisellen, 26.04.2024