Privacy policy

This privacy policy provides information on the processing of personal data in connection with our website keenonsports.ch and our other online services.

For individual or additional offers and services, there may exist special, supplementary or further privacy policies as well as other legal documents, such as general terms and conditions (GTC), terms of use or conditions of participation.

Our online offer is subject to Swiss data protection law and any applicable foreign data protection law, in particular that of the European Union (EU) with the General Data Protection Regulation (GDPR). The EU recognises that Swiss data protection law ensures adequate data protection.

1. Contacts

Responsibility for the online offer:

KEEN on Sports GmbH
Buochserstrasse 44
6370 Stans | Switzerland
info@keenonsports.ch

2. Processing of personal data

2.1 Terms

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, collection, deletion, storage, modification, destruction and use of personal data.

2.2 Legal basis

We process personal data in accordance with Swiss data protection law, such as in particular the Federal Data Protection Act (FADP) and the Ordinance to the Federal Data Protection Act (FDPA).

We process – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – personal data in accordance with at least one of the following legal bases:

• Art. 6 Abs. 1 lit. b GDPR for the necessary processing of personal data for the performance of a contract with the data subject as well as for the implementation of pre-contractual measures.
• Art. 6 Abs. 1 lit. f GDPR for the necessary processing of personal data in order to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject are overridden. Legitimate interests are, in particular, our interest in being able to provide our online offer permanently, in a user-friendly, secure and reliable manner, as well as to be able to advertise for it as required, information security as well as protection against misuse and unauthorised use, the enforcement of our own legal claims and compliance with Swiss law.
• Art. 6 Abs. 1 lit. c GDPR for the necessary processing of personal data to comply with a legal obligation to which we are subject under any applicable law of Member States in the European Economic Area (EEA).
• Art. 6 Abs. 1 lit. e GDPR for the necessary processing of personal data for the performance of a task carried out in the public interest.
• Art. 6 Abs. 1 lit. a GDPR for the processing of personal data with the consent of the data subject.
• Art. 6 Abs. 1 lit. d GDPR for the necessary processing of personal data to protect vital interests of the data subject or another natural person.

2.3 Art Type, scope and purpose

We process the personal data that is required to provide our online service in a permanent, user-friendly, secure and reliable manner. Such personal data can fall into the categories of inventory data and contact data, content data, meta data or marginal data as well as usage data, location data, contract data and payment data.

We process personal data for the duration that is required for the respective purpose(s) or by law. Personal data whose processing is no longer required is anonymised or deleted.

Wir bearbeiten Personendaten grundsätzlich As a matter of principle, we only process personal data with the consent of the data subject, unless the processing is permitted for other legal reasons, for example for the performance of a contract with the data subject and for corresponding pre-contractual measures, in order to protect our predominantly legitimate interests, because the processing is evident from the circumstances or after prior information.

In this context, we process in particular information that a data subject voluntarily and himself or herself provides to us when contacting us – for example, by letter, email, contact form, social media or telephone – or when registering for a user account. We may store such information, for example, in an address book or with comparable tools. If you transmit personal data to us via third parties, you are obliged to guarantee data protection towards such third parties and to ensure the accuracy of such personal data

We also process personal data that we receive from third parties, obtain from publicly accessible sources or collect in the course of providing our online services, if and to the extent that such processing is permitted for legal reasons.

Personal data from applications are only processed insofar as they are required for the assessment of suitability for an employment relationship or for the subsequent implementation of an employment contract. The personal data required for the application procedure is derived from the information requested or provided, for example in the context of a job description. Applicants have the option of voluntarily providing further information for their respective applications.

2.4 Processing of personal data by third parties, also abroad

We may have personal data processed by third parties, such as order processors in particular, or process it jointly with third parties or with the help of third parties, or transmit it to third parties. Such third parties are in particular providers whose services we use. We also ensure appropriate data protection for such third parties.

Such third parties are generally located in Switzerland as well as in the European Economic Area (EEA) including the European Union (EU) and the Principality of Liechtenstein. Such third parties are generally located in Switzerland as well as in the European Economic Area (EEA) including the European Union (EU) and the Principality of Liechtenstein. However, such third parties may also be located in other states on earth and elsewhere in the universe, provided that their data protection law ensures adequate data protection in the opinion of the Federal Data Protection and Information Commissioner (FDPIC) and – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – in the opinion of the European Commission, or if adequate data protection is ensured for other reasons, such as through a corresponding contractual agreement, in particular on the basis of standard contractual clauses, or through a corresponding certification. For third parties in the United States of America (USA), certification in accordance with the Privacy Shield can ensure adequate data protection. Exceptionally, such a third party may be located in a country without adequate data protection, provided that the requirements under data protection law, such as the explicit consent of the data subject, are met. Einschätzung des Eidgenössischen Datenschutz- und Öffentlichkeitsbeauftragten (EDÖB) und – sofern und soweit die Datenschutz-Grundverordnung (DSGVO) anwendbar ist – nach Einschätzung der Europäischen Kommission – einen angemessenen Datenschutz gewährleistet, oder wenn aus anderen Gründen, wie beispielsweise durch eine entsprechende vertragliche Vereinbarung, insbesondere auf Grundlage von Standardvertragsklauseln, oder durch eine entsprechende Zertifizierung, ein angemessener Datenschutz gewährleistet ist. Bei Dritten in den Vereinigten Staaten von Amerika (USA) kann die Zertifizierung gemäss dem Privacy Shield einen angemessenen Datenschutz gewährleisten. Ausnahmsweise kann sich ein solcher Dritter in einem Land ohne angemessenen Datenschutz befinden, sofern dafür die datenschutzrechtlichen Voraussetzungen wie beispielsweise die ausdrückliche Einwilligung der betroffenen Person erfüllt werden.

3. Rights of persons concerned

Data subjects whose personal data we process have the rights under Swiss data protection law. These include the right to information as well as the right to correction, deletion or blocking of the personal data processed.

Data subjects whose personal data we process may – if and to the extent that the General Data Protection Regulation (GDPR) applies – request confirmation free of charge as to whether we are processing their personal data and, if so, request information about the processing of their personal data, have the processing of their personal data restricted, exercise their right to data portability and have their personal data corrected, deleted (“right to be forgotten”), blocked or completed.

Data subjects whose personal data we process may – if and insofar as the GDPR applies – revoke consent given at any time with effect for the future and object to the processing of their personal data at any time.

Data subjects whose personal data we process have a right of appeal to a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).