We operate our websites according to the following principles:
We are committed to complying with the statutory data protection provisions and always strive to observe the principles of data avoidance and data minimisation.
1. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection provisions is:
Hardmeier Electronics AG
Weststrasse 115
8408 Winterthur
Switzerland
Tel.: +41 52 224 41 41
Email: cyclotest@hardmeier-electronics.ch
Website: https://www.cyclotest.ch
2. Definitions
We have designed our privacy policy according to the principles of clarity and transparency. Should there nevertheless be any uncertainty regarding the use of various terms, the corresponding definitions can be viewed here.
3. Legal basis for the processing of data
a) Processing of personal data under the GDPR
We only process your personal data, such as your first and last name, your email address and IP address etc., if there is a legal basis for doing so. Under the General Data Protection Regulation, the following provisions in particular come into consideration:
- Art. 6(1)(a) GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
- Art. 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- Art. 6(1)(c) GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject
- Art. 6(1)(d) GDPR: processing is necessary in order to protect the vital interests of the data subject or of another natural person
- Art. 6(1)(e) GDPR: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- Art. 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
At the relevant points in this privacy policy, we will always point out to you again on which legal basis the processing of your personal data takes place.
b) Processing of information under Section 25(1) TTDSG
We also process information in accordance with Section 25(1) TTDSG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This can be both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any equipment directly or indirectly connected to the interface of a public telecommunications network for sending, processing or receiving messages, Section 2(2) no. 6 TTDSG.
As a rule, we process this information on the basis of your consent, Section 25(1) TTDSG.
Insofar as an exception under Section 25(2) nos. 1 and 2 TTDSG applies, we do not require consent. Such an exception applies if we access or store the information exclusively in order to transmit a message via a public telecommunications network, or if this is strictly necessary so that we can provide a telemedia service expressly requested by you. You can revoke your consent at any time.
We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
4. Disclosure of personal data
The disclosure of personal data also constitutes processing within the meaning of the preceding section 3. However, we would like to inform you separately at this point about the topic of disclosure to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
Disclosure to third parties therefore only takes place if there is a legal basis for the processing. For example, we pass on personal data to persons or companies who act as processors for us in accordance with Art. 28 GDPR. A processor is anyone who processes personal data on our behalf, in particular in a relationship of instruction and control with us.
In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus to grant your data comprehensive protection.
5. Storage period and erasure
We erase your personal data as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed, and the processing is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
6. SSL and TLS encryption
For reasons of security and to protect the transmission of confidential content, such as enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Cookies
We use cookies on our website. Cookies are small data packets that your browser automatically creates and that are stored on your device when you visit our website. These cookies are used to store information related to the device being used.
When using cookies, a distinction is made between technically necessary cookies and 'other' cookies. Technically necessary cookies are those that are strictly required to provide an information society service expressly requested by you.
a) Technically necessary cookies
To make the use of our services more pleasant for you, we use technically necessary cookies; these can be so-called session cookies (e.g. language and font selection, shopping cart etc.), consent cookies, cookies to ensure server stability and security or similar. The legal basis for these cookies follows from Art. 6(1)(f) GDPR, our legitimate interest in the error-free operation of the website and the interest in providing you with our services in an optimised manner.
b) Other cookies
The other cookies include cookies for statistical purposes, analysis, marketing and retargeting purposes.
We use these cookies for you on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You can revoke your consent to the use of cookies at any time. We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
To do this, you can either edit your cookie settings on our website, deactivate the use of cookies in your browser settings (although this may also restrict the functionality of the online offering) or set an opt-out for the respective service in individual cases.
For the respective services within this privacy policy, we point out on which legal basis this data is processed.
Change cookie settings:
8. Cookie banner
To obtain consent for the cookies we use, we use the cookie banner of the service provider Borlabs GmbH, Rübenkamp 32, 22305 Hamburg.
This itself sets a so-called consent cookie in order to query and process the respective consent status. This consent cookie is technically necessary and is therefore used on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, Section 25(1) TTDSG.
9. Collection and storage of personal data as well as the nature and purpose of its use
a) External hosting and shop system
Our website is hosted by Timme Hosting GmbH & Co. KG, Ovelgönner Weg 43, 21335 Lüneburg. For this reason, all personal data collected on our website is stored on our host's servers, unless an external service of a third party is integrated. This may include the IP address, your email address, communication data or similar. You will find out which specific personal data is involved below in the individual functions and services we explain. Should we use an external service of a third party, this is made clear in the description of the respective service or tool.
The host processes your data only on our instructions and insofar as this is necessary to fulfil the services on the website. The host does not process the data for its own purposes. We have concluded a data processing agreement with them.
In addition, we use the WooCommerce plug-in on our website to support our online shop, which is operated by Automattic Inc. (60 19th Street #343, San Francisco, CA 94110, USA).
b) When visiting the website
When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated erasure:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
The data mentioned is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
Data that allows conclusions to be drawn about your person, such as the IP address, is erased after 7 days at the latest. Should we store the data beyond this period, this data is pseudonymised so that it can no longer be attributed to you.
The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
c) Contractual relationship
(1) Conclusion of contract
When establishing the contractual relationship, only the personal data strictly required for the performance of the contract is processed in accordance with Art. 6(1)(b) GDPR.
Insofar as you provide additional voluntary information, this is only processed on the basis of the consent you have given pursuant to Art. 6(1)(a) GDPR. We use this voluntary information to offer a customer-friendly service and to constantly improve it.
(2) Disclosure of data for shipping
We pass on the data necessary for the shipping of our goods (first and last name, address, email address, telephone number where required due to freight forwarding) to the relevant shipping service provider for notification/coordination regarding the delivery of the goods and for their delivery. The address of our shipping service provider is:
Die Schweizerische Post AG
Wankdorfallee 4
3030 Bern
The legal basis for the disclosure follows from Art. 6(1)(b) GDPR.
(3) Disclosure of data when using online payment service providers
If you decide to pay with one of the online payment service providers we offer during your order process, your contact details will be transmitted to them as part of the order thus initiated. The lawfulness of the disclosure of the data follows from Art. 6(1)(b) GDPR, for the execution of the payment method you have chosen, as well as our legitimate interests pursuant to Art. 6(1)(f) GDPR to enable user-friendly and uncomplicated payment processing.
The personal data transmitted to the online payment service provider is usually first name, last name, address, telephone number, IP address, email address or other data required for order processing, as well as data related to the order, such as number of items, item number, invoice amount and taxes in per cent, invoice information, etc.
This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship.
Please note, however: personal data may also be passed on by the online payment service provider to service providers, subcontractors or other affiliated companies, insofar as this is necessary to fulfil the contractual obligations arising from your order or the personal data is to be processed on their behalf.
Depending on the selected payment method, the personal data transmitted to the provider may be transmitted by the provider to credit agencies. This transmission serves to verify identity and creditworthiness in relation to the order you have placed. To find out which credit agencies these are and which data is generally collected, processed, stored and passed on by the respective provider, please refer to the respective privacy policies of the providers.
The address of our online payment service provider is:
Postfinace AG
Mingerstrasse 20
3030 Bern
d) Contact form
We provide a form on our website so that you have the opportunity to contact us at any time. To use the contact form, it is necessary to provide a name for a personal salutation and a valid email address for contacting you, so that we know who the enquiry comes from and can also process it.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there and your IP address, are processed in accordance with Art. 6(1)(b) and (f) GDPR to carry out pre-contractual measures taken at your request or to pursue our legitimate interest, namely the exercise of our business activities.
The enquiries and the associated data are deleted no later than 3 months after receipt, provided they are not required for a further contractual relationship.
e) Blog
If you wish to comment on a blog post, your name, your email address, your IP address and the date and time of the post are collected and stored. The legal basis here follows from Art. 6(1)(f) GDPR for the pursuit of legitimate interests, as the storage of this data is necessary for our security, since we can be held liable for unlawful content on our website.
Other visitors to our website will see the date and time of the comment as well as your name as the author of your comment.
f) Google Tag Manager
We use the Google Tag Manager from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The Google Tag Manager is an administration and management tool in which other tracking and/or statistics tools can be centrally managed and deployed.
When you visit our website and give your consent pursuant to Art. 6(1)(a) GDPR, the Google Tag Manager collects and processes your IP address, which may also be transferred to the USA. However, the Google Tag Manager itself does not create a user profile or any analyses.
You can find the Google privacy policy at here. [https://www.google.com/policies/privacy/?hl=de]
10. Analysis and tracking tools
We use the analysis and tracking tools listed below on our website. These serve to ensure the continuous optimisation of our website and to design it in line with requirements.
We use these tools on the basis of the consent you have given pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time by changing the cookie settings. The processing up to the revocation remains lawful.
The respective data processing purposes and data categories can be found in the corresponding tools. We point out that we have no influence on whether and to what extent the service providers carry out further data processing.
a) Google Analytics
We use Google Analytics on our website, a web analysis service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter 'Google').
Google Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website, such as
- Name and version of the browser used
- Operating system of your computer
- Website from which the access takes place (referrer URL)
- IP address of the requesting computer
- Time of the server request
is usually transferred to a Google server in the USA and stored there.
Your IP address is automatically anonymised by Google before it is recorded via EU domains and servers. Therefore, your IP address is not logged or stored.
On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activities and to provide us with further services associated with website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
We have concluded a data processing agreement with Google.
Please click here for an overview of data protection at Google. [https://support.google.com/analytics/answer/6004245]
11. Video embedding
YouTube
Our website uses the YouTube plugin, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
If you activate the YouTube plugin during your visit, a connection to the YouTube servers is established and the YouTube server is informed which of our pages you have visited. This allows YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your member account before visiting our website.
Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy
The legal basis follows from the consent you have given pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time by changing the cookie settings on our website.
12. Rights of the data subject
You have the following rights:
a) Access
Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right of access includes information about
- the purposes of the processing
- the categories of personal data
- the recipients or categories of recipients to whom your data has been or will be disclosed
- the envisaged storage period or at least the criteria for determining the storage period
- the existence of a right to rectification, erasure, restriction of processing or objection
- the existence of a right to lodge a complaint with a supervisory authority
- the origin of your personal data, insofar as it was not collected by us
- the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details
b) Rectification
Pursuant to Art. 16 GDPR, you have the right to the immediate rectification of inaccurate or incomplete personal data stored by us.
c) Erasure
Pursuant to Art. 17 GDPR, you have the right to request the immediate erasure of your personal data by us, insofar as further processing is not necessary for one of the following reasons:
- the personal data is still necessary for the purposes for which it was collected or otherwise processed
- for exercising the right of freedom of expression and information
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right mentioned under section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
- for the establishment, exercise or defence of legal claims
d) Restriction of processing
Pursuant to Art. 18 GDPR, you can request the restriction of the processing of your personal data for one of the following reasons:
- You contest the accuracy of your personal data.
- The processing is unlawful and you oppose the erasure of the personal data.
- We no longer need the personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims.
- You object to the processing pursuant to Art. 21(1) GDPR.
e) Notification
If you have requested the rectification or erasure of your personal data or a restriction of processing pursuant to Art. 16, Art. 17 or Art. 18 GDPR, we will communicate this to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You can request that we inform you of these recipients.
f) Data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to request the transmission of this data to a third party, provided that the processing was carried out with the aid of automated procedures and is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) or on a contract pursuant to Art. 6(1)(b) GDPR.
g) Revocation
Pursuant to Art. 7(3) GDPR, you have the right to revoke your given consent to us at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.
h) Complaint
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR.
i) Objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we implement without you stating a particular situation. If you wish to make use of your right of revocation or objection, an email to cyclotest@hardmeier-electronics.ch is sufficient.
j) Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for entering into, or performance of, a contract between you and us
- is authorised by Union or Member State law to which we are subject and which lays down suitable measures to safeguard your rights and freedoms and legitimate interests
- is based on your explicit consent
However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures have been taken to protect your rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in 1 and 3, we take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.
13. Changes to the privacy policy
Should we change the privacy policy, this will be made known on the website.
Last updated: 19.12.2023