This privacy policy explains how YOTAVIS AG collects and processes personal data when you visit yotavis.ch, buy from our shop, request a quote or contact us. We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Controller
YOTAVIS AG
Aarbergstrasse 46, CH-2503 Biel/Bienne, Switzerland
Email: info@yotavis.ch
Phone: +41 (0)31 312 48 48
For all questions about data protection, please contact us at the address above.
2. Data we process
Visiting the website
When you open our website, our server and our content delivery network automatically process technical data such as your IP address, date and time of access, the pages requested, the referring website, browser type and operating system. We need this data to deliver the website, to keep it secure and to detect misuse. Log files are deleted after a short period, unless we need them to investigate an incident.
Customer account and orders
When you create an account or place an order, we process your name, company, billing and delivery address, email address, phone number, order details, payment method and, for business customers, your customer-specific prices. We use this data to process your order, deliver the products, issue invoices, provide support and manage your account.
Quote requests and contact form
When you request a quote or send us a message, we process the information you enter (name, company, email, phone, product, quantity and message) to answer your request and, if you wish, to prepare an offer. To protect our forms against spam we use hCaptcha (see section 4).
Newsletter
If you subscribe to our newsletter, we process your email address to send you news about products, services and offers. We use a double opt-in: your subscription only becomes active after you confirm it through the link in our email. You can unsubscribe at any time using the link in every newsletter or by writing to us.
Search statistics
To improve our product search, we count which search terms are used and which results are clicked. This statistic is anonymous: it uses a random session identifier stored only as an encrypted value, and it stores no IP addresses and no link to your customer account. The data is deleted after 13 months.
3. Purposes and legal basis
We process personal data to operate the website and the online shop, to conclude and perform contracts, to communicate with you, to meet legal obligations (for example accounting and tax law), to improve our offer and to protect our systems. Where the GDPR applies, the legal bases are the performance of a contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR), our legitimate interests (Art. 6(1)(f) GDPR) and, for the newsletter and optional cookies, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. Service providers
We work with carefully selected service providers who process data on our behalf and only according to our instructions:
- Hosting: our website and shop are operated on servers of our hosting provider.
- Cloudflare (Cloudflare, Inc., USA): delivery of images and product videos through a content delivery network.
- Stripe (Stripe Payments Europe Ltd., Ireland): processing of card payments, TWINT and Klarna. Your payment details are entered directly with Stripe; we do not store full card numbers. Klarna AB (Sweden) and TWINT AG (Switzerland) receive the data needed for the respective payment method.
- hCaptcha (Intuition Machines, Inc., USA): spam protection for our forms. hCaptcha may process your IP address and technical browser data.
- Axonaut (France): customer, quote and invoice management.
- Shipping companies such as Swiss Post: name, delivery address and, where needed, phone number for the delivery of your order.
- Google Analytics and Google Ads (Google Ireland Ltd., Ireland / Google LLC, USA): anonymised usage statistics and measurement of our advertising campaigns, only with your consent.
We do not sell personal data. We only disclose it to authorities if we are legally required to do so.
5. Cookies
We use cookies and similar technologies. Necessary cookies are required for the shop to work (cart, login, currency, payment). Other cookies are only used for statistics or marketing.
| Cookie | Purpose | Duration |
|---|---|---|
| woocommerce_*, wp_woocommerce_session_* | Cart and checkout | Session up to 2 days |
| wordpress_logged_in_*, wordpress_sec_* | Login to your customer account | Session or 14 days |
| yay_currency_* | Selected currency | Up to 1 year |
| __stripe_mid, __stripe_sid | Secure payment and fraud prevention (Stripe) | 30 minutes to 1 year |
| yi_v, yi_a | Anonymous search statistics | Session, 7 days |
| sbjs_* | Source of an order (for example search engine or campaign) | Session up to 6 months |
| _ga, _ga_* | Google Analytics statistics (only with consent) | Up to 2 years |
You can delete cookies or block them in your browser settings at any time. If you block necessary cookies, the shop may not work properly.
6. Data transfer abroad
Some of our service providers are located in the EU/EEA or in the USA. The EU/EEA offers an adequate level of data protection. For transfers to the USA we rely on the Swiss-U.S. Data Privacy Framework where the provider is certified, or on the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission.
7. Retention
- Order, invoice and accounting records: 10 years, as required by Swiss law.
- Customer account: until you delete it or ask us to delete it.
- Quote and contact requests: as long as needed to handle the request and any resulting business relationship.
- Newsletter: until you unsubscribe.
- Anonymous search statistics: 13 months.
8. Your rights
Within the scope of the applicable law, you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive your data in a common format and to withdraw your consent at any time. To exercise these rights, write to info@yotavis.ch. We may ask you to confirm your identity.
You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).
9. Data security
We protect your data with appropriate technical and organisational measures, including encrypted transmission (HTTPS), access restrictions and regular updates. Please note that data transmission over the internet can never be completely secure.
10. Changes
We may update this privacy policy at any time. The version published on this website applies.