Privacy policy
We, itesys AG ("we" or "itesys"), hereby inform you which personal data we process in which form and for whichGoogle Ads
We use the services of Google Ads, Google Ads Conversion and Remarketing to advertise our services on other websites with the help of advertising material (so-called Google Ads) ("advertising material"). We may be able to determine how successful the individual advertising media are. This is for the purpose of reaching specific persons for whom our offer is of interest.
The advertising material is delivered by Google via so-called ad servers. For this purpose, we use ad server cookies, through which certain parameters can be measured to record reach (e.g. display of the ads, clicks by users, etc.). If you reach our website via a Google Ad, Google Ads will store a cookie on your device. These cookies are erased after a certain time (usually after 30 days). These cookies are usually used to store analysis values such as the unique cookie ID, the frequency of ad impressions, and opt-out information (information that the respective user does not wish to be recorded). We do not collect and process any personal data in the advertising material itself. We only receive statistical evaluations from Google. These evaluations enable us to assess the reach and effectiveness of the advertising media used, but without being able to identify individual users.
Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad by us. If you are registered with a Google service, Google can assign such access to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address, save it and, at most, assign it to your account.
Within the scope of application of the GDPR, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR (safeguarding our legitimate interests or those of third parties) and, to a subsidiary extent, in accordance with Art. 6 para. 1 lit a GDPR (consent of the data subject). You can prevent the collection of data by Google in connection with such advertising material at any time by selecting the setting in your browser not to accept cookies (especially cookies from third parties) (see the section on 'Cookies' above), or by installing the plugin provided here. You can find further information on data protection at Google in general here and on data protection at Google Ads here. Google is certified under the CH-US Privacy Shield and under the EU-US Privacy Shield, so that an adequate level of data protection is ensured for the data concerned.
purpose in connection with our web shop at www.scansor.com and our further online presence. Our offer is subject to Swiss data protection law and, where applicable, other applicable data protection laws, in particular the EU General Data Protection Regulation ("GDPR").
Contact details and rights of data subjects
The responsibility for the processing of personal data is held by:
itesys AG, Langfeldstrasse 53a, 8500 Frauenfeld, Switzerland
You can contact us as follows for inquiries and to exercise your rights as a data subject:
E-mail: contact@scansor.com
For inquiries from the EU area, you can also contact our EU representative:
Address: itesys DE GmbH, Christian Manser, Viktualienmarkt 8, 80331 Munich, Germany
Persons whose personal data we process ("data subjects") have rights under Swiss data protection law, such as the right to information, correction, erasure or blocking of the personal data concerned. Insofar as the GDPR is applicable, data subjects may also exercise their rights to information (Art. 15 GDPR), correction (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data transmission (Art. 20 GDPR) and objection (Art. 21 GDPR). Data subjects can revoke a given consent at any time with effect for the future.
Data subjects have a right of appeal to a competent supervisory authority. The supervisory authority according to Swiss data protection law is the Federal Data Protection and Information Commissioner (EDÖB). An overview of the supervisory authorities for Germany can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information (BfDI).
Nature, purpose and basis
Basis
We process personal data in accordance with the Swiss Federal Act on Data Protection ("FADP") and associated ordinance ("OFADP") and - if and insofar as applicable - in accordance with the GDPR. "Personal data" means any information relating to an identified or identifiable person (the "data subject"). "Processing" includes any operation involving personal data, such as collection, storage, use, modification, disclosure and erasure.
Insofar as the GDPR is applicable, we process personal data in accordance with at least one of the following legal principles: Art. 6 para. 1 lit. b GDPR (fulfillment of contracts and pre-contractual measures); Art. 6 para. 1 lit. f GDPR (safeguarding our legitimate interests or those of third parties); Art. 6 para. 1 lit. c GDPR (fulfillment of legal obligations); Art. 6 para. 1 lit. e GDPR (performance of tasks in the public interest); Art. 6 para. 1 lit. a GDPR (consent of the data subject); Art. 6 para. 1 lit. d GDPR (protection of vital interests).
Nature and purpose
We process those personal data which are necessary to make our web shop, our online offer and the associated fulfillment of contracts possible. We process the personal data for the duration that is necessary for the respective purpose (or purposes) or as required by law. Unless expressly noted below, personal data whose processing is no longer required will be erased or made anonymous.
In particular, we process information that we receive directly from you. If you provide us with personal data of third parties, you are obliged to ensure data protection towards such third parties and to ensure the correctness of such personal data. We also process personal data that we receive from third parties or obtain from publicly accessible sources, provided that such processing is legally permissible.
Processing by third parties
We may process personal data through third parties, jointly with third parties and with the help of third parties and may transmit personal data to third parties for this purpose. Such third parties are, in particular, providers whose services we use to provide our own services (such as the provision of this website).
Such third parties may be located in Switzerland, the European Economic Area (EEA) including the European Union (EU) and the Principality of Liechtenstein, as well as in other third countries. If such a third country is not a third country which, in the opinion of the EDÖB or, within the scope of application of the GDPR, in the opinion of the European Commission, guarantees adequate data protection, we will implement the necessary measures to ensure adequate data protection (such as contractual agreements based on standard contractual clauses, or appropriate certification). With respect to third parties in the USA, such certification may be obtained by means of the CH-US or EU-US Privacy Shield.
Use of the website in general
Access data and web beacons
When using our website, we may collect the following information ("access data") each time it is accessed, insofar as this is transmitted by the browser of the data subject: Date; time; time zone; IP address; operating system; browser recognition and language; pages called up on our website; website from which access was made (referrer URL). Access data can also be recorded by so-called "web beacons" (small image elements that are automatically loaded when the website is called up).
The access data can represent personal data and is used by us to provide our website and our Internet presence, to enable smooth use of our website, to ensure system and data security and for statistical evaluation. Within the scope of application of the GDPR, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our justified interest in improving the stability and functionality of our website.
Access data may also be processed by or with the assistance of third parties, such as technical service providers who act for us as contractors for the operation and maintenance of our website. We do not use the access data to draw conclusions about individual persons, and the access data is erased as soon as it is no longer required for the purpose of collection. For access data collected for the provision of the website, this is always the case after the end of the respective session.
Cookies
We may use cookies for our website, both our own and those of third parties whose services we use (so-called "third-party cookies"). Cookies are data in text form that are stored on the terminal device (computer, tablet, smartphone, etc.) of the data subject when they access our website through their browser. Cookies can only be stored temporarily (so-called "session cookies") or for a longer period of time (so-called "permanent cookies"). Session cookies are automatically deleted at the end of the respective session. Permanent cookies make it possible, in particular, to recognize the browser the next time the website is called up, in order to call up certain settings again (e.g. language settings) or to measure the reach of our website. Thus permanent cookies can also be used for online marketing.
You can completely or partially deactivate the use of cookies in your browser settings and erase existing cookies. Please refer to the help function in your browser or the explanations of the cookie settings for the most common browsers such as Internet Explorer, Firefox, Chrome, Safari, Opera. Please note that without cookies, not all functions of our website may be available.
Registration and web shop use
Personal data is collected during registration for our web shop and its use. These contain, in particular, name, company, address and communication data (such as telephone number, e-mail, etc.) as well as the orders, inquiries, payment details, etc. made in the web shop (collectively the "web shop data").
The web shop data are used by us to process order inquiries, prepare and execute the conclusion of the contract, and to provide the contractual services. Within the scope of application of the GDPR, processing pursuant to Art. 6 para. 1 lit. b GDPR is carried out for the purpose of implementing pre-contractual measures as well as for the fulfillment of the contract and, if the data subject is not himself a contractual party, pursuant to Art. 6 para. 1 lit. a GDPR on the basis of the consent of the data subject.
The web shop data can also be processed by third parties or with the help of third parties, such as technical service providers who, for example, are responsible for the operation and maintenance of the web shop or for payment processing for us as order processors. The web shop data will be used as long as necessary for the corresponding purpose and to fulfill legal retention requirements and to protect our legitimate interests (e.g. with regard to legal enforcement). Within the scope of application of the GDPR, processing is carried out in this case in accordance with Art. 6 para. 1 lit. c GDPR to fulfill legal obligations and in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interests of the controller.
Newsletter
We may send you notifications and communications (collectively, "newsletters") via e-mail and other forms of communication (e.g. instant messaging) to your contact details (especially e-mail address). Within the scope of application of the GDPR, this processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the fulfillment of the contract, in accordance with Art. 6 para. 1 lit. f for the protection of the legitimate interests of the controller and, to a subsidiary extent, in accordance with Art. 6 para. 1 lit. a GDPR on the basis of the consent of the data subject.
Data subjects must always expressly consent to the use of their contact details (particularly e-mail address) unless their use is already permitted for other legal reasons under applicable law (e.g. in the case of an existing customer relationship). In order to prevent abuse by third parties, such consent is given by means of a "double opt-in" procedure, i.e. you receive an e-mail with a web link which you must confirm by clicking on it. For reasons of security and evidence, we may log the IP address and the date and time of confirmation. You can always unsubscribe from the newsletter at any time. We reserve the right to make notifications and communications that are absolutely necessary for our web shop.
The newsletter can also be sent by or with the help of third parties, such as technical service providers who, for example, are responsible for address administration, dispatch and reach recording of the newsletter for us as order processors. The newsletters may contain web links as well as web beacons which serve to record the reach of the newsletter, i.e. to record whether an individual message or certain web links have been opened or clicked on ("reach recording"). This reach recording can also be carried out on a personalized basis. We use reach recording to ensure the security and reliability of our newsletters and to tailor communications to the needs and habits of recipients.
We use Sendinblue to send out newsletters and manage contact details. Sendinblue is a service by Sendinblue GmbH (Germany) and also uses cookies. Sendinblue's servers send and manage contact details exclusively within the EU. SendinBlue also performs the reach recording and usage analysis for us and provides us with this information. If you do not wish to be recorded by such reach and usage analyses, you can unsubscribe from the corresponding newsletter at any time. The data you provide for the purpose of receiving the newsletter will be erased from our list of newsletter recipients as well as from Sendinblue's servers once you have unsubscribed. Data that have been stored by us for other purposes (e.g. e-mail addresses for your access to our website, as contact details, etc.) remain unaffected by this.
Contact and support form
Our website contains a freely accessible contact form, as well as a support form for registered customers in the customer area. In connection with contact and support requests, in addition to the information you enter (e.g. name, contact details, description of the request or problem, etc.), we also collect certain technical data (e.g. date, time, time zone, IP address, operating system, browser recognition and language) in order to process the contact or support request (collectively "form data").
The form data are used for the purpose of processing your contact or support request, for individual communication with you and for possible follow-up questions. The form data are stored until the inquiry is completed and thereafter, where applicable, during the statutory retention periods.
Form data may also be processed by or with the assistance of third parties, such as technical service providers who, for example, are responsible for operating the contact or support form, website or support ticketing tool for us as order processors.
Within the scope of application of the GDPR, processing takes place in accordance with Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or implementation of pre-contractual measures), Art. 6 para. 1 lit. f GDPR (safeguarding our legitimate interests or those of third parties), Art. 6 para. 1 lit. c GDPR (fulfillment of legal obligations) and, to a subsidiary extent, Art. 6 para. 1 lit. a GDPR (consent of the data subject). Form data from inquiries via the contact form which are not related to an existing or subsequently concluded contract will be erased after processing the inquiry.
Third-party services
Google Analytics
We use Google Analytics and Google Remarketing, services by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). On our behalf, Google uses cookies to analyze the use of our website, compiles reports on website activity for us and provides us with other services related to website use. The access data collected by Google for this purpose are transferred to a Google server in the USA, where they are stored, analyzed and the result is made available to us in anonymized form. Your access data will therefore not be connected to the full IP address: We have activated the IP anonymization function offered by Google for our website, so that the information collected is made anonymous by shortening the IP address.
Within the scope of application of the GDPR, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR (safeguarding our legitimate interests or those of third parties) and, to a subsidiary extent, in accordance with Art. 6 para. 1 lit. a GDPR (consent of the data subject). You can prevent the installation of cookies by Google Analytics through appropriate browser settings. You can also prevent Google from collecting and processing the information generated by the cookies about your user behavior by installing the Browser plugin available here. Further information about Google Analytics can be found in the Google Analytics privacy policy and security policy, and in the Google privacy policy. Google is certified under the CH-US Privacy Shield and under the EU-US Privacy Shield, so that an adequate level of data protection is ensured for the data concerned.
Google Ads
We use the services of Google Ads, Google Ads Conversion and Remarketing to advertise our services on other websites with the help of advertising material (so-called Google Ads) ("advertising material"). We may be able to determine how successful the individual advertising media are. This is for the purpose of reaching specific persons for whom our offer is of interest.
The advertising material is delivered by Google via so-called ad servers. For this purpose, we use ad server cookies, through which certain parameters can be measured to record reach (e.g. display of the ads, clicks by users, etc.). If you reach our website via a Google Ad, Google Ads will store a cookie on your device. These cookies are erased after a certain time (usually after 30 days). These cookies are usually used to store analysis values such as the unique cookie ID, the frequency of ad impressions, and opt-out information (information that the respective user does not wish to be recorded). We do not collect and process any personal data in the advertising material itself. We only receive statistical evaluations from Google. These evaluations enable us to assess the reach and effectiveness of the advertising media used, but without being able to identify individual users.
Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad by us. If you are registered with a Google service, Google can assign such access to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address, save it and, at most, assign it to your account.
Within the scope of application of the GDPR, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR (safeguarding our legitimate interests or those of third parties) and, to a subsidiary extent, in accordance with Art. 6 para. 1 lit a GDPR (consent of the data subject). You can prevent the collection of data by Google in connection with such advertising material at any time by selecting the setting in your browser not to accept cookies (especially cookies from third parties) (see the section on 'Cookies' above), or by installing the plugin provided here. You can find further information on data protection at Google in general here and on data protection at Google Ads here. Google is certified under the CH-US Privacy Shield and under the EU-US Privacy Shield, so that an adequate level of data protection is ensured for the data concerned.
Google Maps
We use Google Maps from Google on our website to display interactive maps on our website and to enable you to use the map function. For users in the EEA and Switzerland, this service is provided by Google Ireland Limited, and for users in other countries by Google Inc. (USA). Information on the type, purpose and scope of data processing can be found in the Google privacy policy, the information about how Google uses data from websites that use Google's services and the information on Google cookies.
Google is certified under the CH-US Privacy Shield and under the EU-US Privacy Shield, so that an adequate level of data protection is ensured for the data concerned. Within the scope of application of the GDPR, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR (safeguarding our legitimate interests or those of third parties) and, to a subsidiary extent, in accordance with Art. 6 para. 1 lit. a GDPR (consent of the data subject).
YouTube
We may use YouTube on our website to embed videos in our website. Cookies are used for this purpose ("YouTube cookies"). For users in the EEA and Switzerland, this service is provided by Google Ireland Limited, and for users in other countries by Google Inc. (USA). Information on the type, purpose and scope of data processing can be found in the Google privacy policy, the information about how Google uses data from websites that use Google's services and the information on Google cookies.
Google is certified under the CH-US Privacy Shield and under the EU-US Privacy Shield, so that an adequate level of data protection is ensured for the data concerned. Within the scope of application of the GDPR, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR (safeguarding our legitimate interests or those of third parties) and, to a subsidiary extent, in accordance with Art. 6 para. 1 lit. a GDPR (consent of the data subject).