Data Protection
Controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

WaserLiving
Baslerstrasse 122b
5222 Umiken

Phone: +41 76 741 88 60
Email: info@waserliving.com
Website: https://waserliving.com/

General Notice
Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Federal Act (Data Protection Act, FADP), every person is entitled to protection of their privacy as well as to protection against misuse of their personal data. The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.

We point out that data transmission over the Internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of the data from access by third parties is not possible.

By using this website, you agree to the collection, processing, and use of data as described below. This website can generally be visited without registration. In doing so, data such as accessed pages or names of retrieved files, date and time are stored on the server for statistical purposes, without these data being directly related to your person. Personal data, especially name, address, or email address, are collected on a voluntary basis wherever possible. Without your consent, no data will be passed on to third parties.

Processing of Personal Data
Personal data are all details that relate to a specific or identifiable person. A data subject is a person about whom personal data are processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, retention, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, we process personal data – insofar and to the extent that the EU GDPR is applicable – according to the following legal bases in connection with Art. 6 para. 1 GDPR:

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – The data subject has given consent to the processing of personal data concerning them for one or more specific purposes.
Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
Protection of vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) – Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
Application procedure as a pre-contractual or contractual relationship (Art. 9 para. 2 lit. b GDPR) – Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g., health data, such as disability status or ethnic origin) are requested from applicants during the application process, so that the controller or the data subject can exercise rights arising from employment law and social security and social protection law and fulfill their respective obligations, processing is carried out pursuant to Art. 9 para. 2 lit. b GDPR, in the case of protection of vital interests of applicants or other persons pursuant to Art. 9 para. 2 lit. c GDPR, or for purposes of preventive or occupational medicine, for the assessment of the employee’s working capacity, for medical diagnosis, the provision or treatment in the health or social sector, or for the management of systems and services in the health or social sector pursuant to Art. 9 para. 2 lit. h GDPR. In the case of voluntary communication of special categories of data based on consent, their processing is carried out on the basis of Art. 9 para. 2 lit. a GDPR.

We process personal data for the duration that is required for the respective purpose or purposes. In the case of longer retention obligations due to legal and other requirements to which we are subject, we restrict processing accordingly.

Applicable Legal Bases
Pursuant to Article 13 of the GDPR, we inform you of the legal bases for our data processing. Unless the legal basis is specified in the privacy policy, the following applies: the legal basis for obtaining consent is Article 6 para. 1 lit. a and Article 7 GDPR, the legal basis for processing for the fulfillment of our services and execution of contractual measures as well as responding to inquiries is Article 6 para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Article 6 para. 1 lit. c GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Article 6 para. 1 lit. d GDPR serves as the legal basis.

Security Measures
In accordance with the legal requirements, and taking into account the state of the art, the implementation costs, and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the threat to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access, input, disclosure, securing availability and separation thereof. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data, and responses to the endangerment of data. We also consider the protection of personal data already during the development or selection of hardware, software as well as procedures, according to the principle of data protection through technology design and through privacy-friendly default settings.

Transfer of Personal Data
In the course of processing personal data, it may happen that data is transmitted to other entities, companies, legally independent organizational units or individuals, or disclosed to them. Recipients of these data may include, for example, service providers entrusted with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and in particular conclude appropriate contracts or agreements that serve the protection of your data with the recipients of your data.

Data Processing in Third Countries
If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or if the processing takes place within the scope of the use of services by third parties or the disclosure or transmission of data to other persons, entities or companies, this is only done in accordance with legal requirements.

Subject to explicit consent or contractually or legally required transmission, we only process the data in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Articles 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

Privacy Policy for SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy Policy for Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

browser type and browser version,
operating system used,
referrer URL,
host name of the accessing computer,
time of the server request.

These data are not assignable to specific persons. A consolidation of these data with other data sources is not carried out. We reserve the right to subsequently check these data if we become aware of specific indications of unlawful use.

Privacy Policy for Contact Form
If you send us inquiries via the contact form, your details from the inquiry form including the contact details you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on these data without your consent.

Privacy Policy for Newsletter Data
If you wish to receive the newsletter offered on this website, we require from you an email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No further data are collected. We use these data exclusively for sending the requested information and do not pass them on to third parties.

You can revoke the consent granted for the storage of the data, the email address, and its use for sending the newsletter at any time, for example via the “unsubscribe link” in the newsletter.

Privacy Policy for Comment Function on this Website
For the comment function on this website, in addition to your comment, information regarding the time of the creation of the comment, your email address and, if you do not post anonymously, the username you selected will be stored.

Storage of the IP Address
Our comment function stores the IP addresses of users who write comments. Since we do not check the comments on our site before they are published, we need these data in order to be able to take action against the author in the case of violations of the law such as insults or propaganda.

Subscribing to Comments
As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify whether you are the owner of the specified email address. You can unsubscribe from this function at any time via a link in the information emails.

Rights of Data Subjects
Right to Confirmation
Every data subject has the right to obtain confirmation from the operator of the website as to whether personal data concerning the data subject are being processed. If you wish to exercise this right of confirmation, you may contact the data protection officer at any time.

Right to Access
Every data subject affected by the processing of personal data has the right to obtain, at any time and free of charge, information from the operator of this website about the personal data stored about him or her and to receive a copy of this information. Furthermore, information may be provided, if applicable, on the following:

the purposes of the processing,
the categories of personal data that are processed,
the recipients to whom the personal data have been disclosed or are still being disclosed,
if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria used to determine this duration,
the existence of a right to rectification or erasure of the personal data concerning the data subject or to restriction of processing by the controller or a right to object to such processing,
the existence of a right to lodge a complaint with a supervisory authority,
where the personal data are not collected from the data subject: all available information about the source of the data.

Furthermore, the data subject has the right to be informed whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to be informed about the appropriate safeguards in connection with the transfer.

If you wish to exercise this right of access, you may contact our data protection officer at any time.

Right to Rectification
Every data subject affected by the processing of personal data has the right to demand the immediate rectification of inaccurate personal data concerning him or her. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data – including by means of a supplementary statement.

If you wish to exercise this right of rectification, you may contact our data protection officer at any time.

Right to Erasure (Right to be Forgotten)
Every data subject affected by the processing of personal data has the right to demand from the controller of this website that personal data concerning them be erased without undue delay, provided that one of the following grounds applies and insofar as the processing is not necessary:

The personal data were collected or otherwise processed for purposes for which they are no longer necessary.

The data subject withdraws the consent on which the processing was based, and there is no other legal ground for the processing.

The data subject objects to the processing based on reasons arising from their particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for direct marketing purposes and related profiling.

The personal data have been processed unlawfully.

The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.

The personal data have been collected in relation to services offered by the information society to a child.

If any of the above grounds apply and you wish to request the deletion of personal data stored by the operator of this website, you may contact our data protection officer at any time. The data protection officer will ensure that the deletion request is acted upon without delay.

Right to Restriction of Processing
Every data subject affected by the processing of personal data has the right to request the restriction of processing by the controller of this website if one of the following conditions is met:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.

The processing is unlawful, the data subject opposes the erasure of the personal data and instead requests the restriction of their use.

The controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise, or defense of legal claims.

The data subject has objected to processing for reasons related to their particular situation, and it is not yet determined whether the legitimate grounds of the controller override those of the data subject.

If any of the above conditions apply and you wish to request the restriction of processing of personal data stored by the operator of this website, you may contact our data protection officer at any time. The data protection officer will arrange for the restriction of processing.

Right to Data Portability
Every data subject affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format. They also have the right, where legally applicable, to transmit those data to another controller.

Furthermore, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

To assert the right to data portability, you may contact the data protection officer appointed by the operator of this website at any time.

Right to Object
Every data subject affected by the processing of personal data has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them.

In the event of an objection, the operator of this website will cease processing the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

To exercise the right to object, you may contact the data protection officer of this website directly.

Right to Withdraw Data Protection Consent
Every data subject affected by the processing of personal data has the right to withdraw consent given for the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you may contact our data protection officer at any time.

Privacy Policy – Objection to Advertising Emails
We hereby object to the use of contact data published within the scope of the legal notice obligation for the purpose of sending unsolicited advertising and informational material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.

Fee-Based Services
To provide fee-based services, we collect additional data, such as payment information, in order to process your order or assignment. We store this data in our systems until the legally required retention periods have expired.

Privacy Policy for Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller responsible for data processing on this website is located outside the European Economic Area or Switzerland, then the data processing for Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are collectively referred to as “Google”.

The statistics obtained through Google Analytics help us improve our offering and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor traffic, which is carried out using a user ID. If you have a Google user account, you can disable the cross-device analysis of your usage in your account settings under “My Data” > “Personal Information”.

The legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We note that this website uses Google Analytics with the extension “_anonymizeIp();” to ensure anonymized collection of IP addresses. This means that IP addresses are processed in a shortened form, and personal identification is excluded. If the collected data can be related to a person, this is immediately excluded and the personal data is promptly deleted.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. For exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Analytics Uses Cookies
Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case, you may not be able to fully use all features of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Disable Google Analytics.

Furthermore, you can prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. An opt-out cookie will then be stored on your device, which prevents the collection of your data by Google Analytics. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted and must be reactivated if you wish to continue to prevent data collection. Opt-out cookies must be set separately for each browser, device, or terminal.

Privacy Policy for Facebook
This website uses functions provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages that contain Facebook plugins, a connection is established between your browser and Facebook’s servers. In doing so, data is already transmitted to Facebook. If you have a Facebook account, this data may be linked to it.
If you do not want this data to be linked to your Facebook account, please log out of Facebook before visiting our website. Interactions such as using the comment function or clicking on a “Like” or “Share” button are also transmitted to Facebook.
You can find more information at: https://de-de.facebook.com/about/privacy

Privacy Policy for Twitter
This website uses functions of Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you visit our pages that contain Twitter plugins, a connection is established between your browser and Twitter’s servers. In doing so, data is already transmitted to Twitter. If you have a Twitter account, this data may be linked to it.
If you do not want this data to be linked to your Twitter account, please log out of Twitter before visiting our website. Interactions, particularly clicking a “Re-Tweet” button, are also transmitted to Twitter.
More information can be found at: https://twitter.com/privacy

Privacy Policy for Instagram
Functions of the Instagram service are integrated on our website. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account.
Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Instagram.
Further information can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

Privacy Policy for Pinterest
This website uses social plugins from the Pinterest social network, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”). When you access a page containing such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s server in the USA. These log data may include your IP address, the address of the visited websites that also contain Pinterest functions, browser type and settings, date and time of the request, your use of Pinterest, and cookies.

Further information on the purpose, scope, and further processing and use of the data by Pinterest, as well as your rights and options for protecting your privacy, can be found in Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy

Privacy Policy for YouTube
This website includes features of the “YouTube” service. “YouTube” is owned by Google Ireland Limited, a company incorporated and operated under Irish law, headquartered at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with “YouTube” consists of the terms and conditions found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms form a legally binding agreement between you and “YouTube” regarding the use of its services. Google’s privacy policy explains how “YouTube” handles your personal data and protects your data when you use the service.

Order Processing in the Online Shop with Customer Account
We process our customers’ data in accordance with the data protection provisions of the Federal Act on Data Protection (DSG) and the EU GDPR, in the context of order processes in our online shop, to enable them to select and order the selected products and services, as well as to pay for and receive or execute them.

The processed data include basic data (master data), communication data, contract data, payment data, and the persons affected by the processing include our customers, prospects, and other business partners. The processing takes place for the purpose of providing contractual services within the operation of the online shop, billing, delivery, and customer services. We use session cookies (e.g., for storing cart contents) and permanent cookies (e.g., for saving login status).

The processing is based on Art. 6 para. 1 lit. b (execution of order processes) and lit. c (legally required archiving) GDPR. The information marked as required is necessary for establishing and fulfilling the contract. We disclose the data to third parties only within the scope of delivery, payment, or within legal permissions and obligations. Data is processed in third countries only if it is necessary for the fulfillment of the contract (e.g., at the customer’s request during delivery or payment).

Users can optionally create a user account, where they can view their orders. Required mandatory information will be communicated to users during registration. User accounts are not public and cannot be indexed by search engines, such as Google. If users terminate their user account, their data will be deleted unless its retention is required for commercial or tax law reasons pursuant to Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until it is deleted, followed by archiving in case of a legal obligation. It is the responsibility of users to back up their data before the end of the contract upon termination.

In the context of registration, repeated logins, and the use of our online services, we store the IP address and the time of each user action. The storage is based on our legitimate interests as well as those of users to protect against abuse and other unauthorized use. This data is not passed on to third parties unless necessary for asserting claims or there is a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.

Deletion takes place after the expiration of statutory warranty and comparable obligations, and the necessity for retention is reviewed at irregular intervals. In the case of legal archiving obligations, deletion takes place after their expiration.

Copyrights
The copyright and all other rights to content, images, photos, or other files on the website belong exclusively to the operator of this website or to specifically named rights holders. For reproduction of any files, written consent from the copyright holder must be obtained in advance.

Anyone who infringes copyright without the consent of the respective rights holder may be subject to criminal liability and may be required to pay damages.

General Disclaimer
All information provided on our website has been carefully checked. We strive to offer our information services in a current, accurate, and complete manner. However, the occurrence of errors cannot be entirely ruled out, and we do not guarantee the completeness, accuracy, or timeliness of the information, including journalistic or editorial content. Claims for damages of a material or immaterial nature caused by the use of the provided information are excluded unless there is proven intent or gross negligence.

The publisher may, at their discretion and without prior notice, modify or delete texts and is not obligated to update the content of this website. The use or access to this website is at the visitor’s own risk. The publisher, its clients, or partners are not responsible for damages, whether direct, indirect, incidental, foreseeable, or consequential, that are allegedly caused by visiting this website, and therefore assume no liability for them.

The publisher also assumes no responsibility or liability for the content and availability of third-party websites that are accessible via external links from this website. The operators of the linked sites are solely responsible for the content. The publisher explicitly distances itself from any third-party content that may be legally or morally questionable.

Changes
We can adjust this privacy policy at any time without prior notice. The most current version, published on our website, applies. If the privacy policy is part of an agreement with you, we will inform you of any changes via email or other suitable means.

Questions to the Data Protection Officer
If you have any questions regarding data protection, please email us or contact the person responsible for data protection listed at the beginning of the privacy policy within our organization.