Privacy Policy

of Pharmacies BENU SA, CH-3097 Liebefeld (hereinafter "BENU")

BENU is the controller within the meaning of the Data Protection Act ("DPA") and the EU General Data Protection Regulation ("GDPR"), which decides on the purposes and means of processing personal data. We comply with the aforementioned provisions regarding data protection. If you have questions about data protection or if you would like to exercise rights available to you under the DPA and GDPR, you can reach us at info{'@'}benu.ch; or by post at our registered office.

1. Data handling

BENU attaches great importance to data protection. The collection, processing and use of customer data takes place exclusively in compliance with applicable data protection regulations and for the purposes stated in this privacy policy.

We process your personal data in particular for the following purposes:

• Contact establishment
• Order processing (guest)
• Registration (user account)
• Sending personalised information (newsletter)
• Email dispatch as part of order processing
• Statistical analysis, abuse prevention, fraud prevention, credit checks, enforcement of legal claims

BENU processes collected personal data as follows:

• Storage, modification, transmission, blocking and deletion.

2. Personal data

Personal data is information relating to a specific (identified) or identifiable natural person.

3. Collection and use of personal data

3.1 Contact establishment: When you contact BENU, you may be asked to provide personal data. By providing such data, you give us your consent to exchange this data within our company and to use it in accordance with this privacy policy. We may also combine such data with other information to optimise our contact with you and to offer or improve our products, services, content and advertising. In the case of mere contact establishment, you are free to decide whether you wish to provide the requested personal data. However, without providing this data, it will often not be possible for us to inform you about our products or services or to answer or process your enquiries.

Data collected:

• Name, address, telephone number, email address, or the information communicated to us.

3.2 Order processing (guest): When you order products from us, the collection of personal data becomes necessary for contract conclusion and order processing as well as invoicing, whereby we send you corresponding communication regarding the order by email.

Data collected:

• Name, address (billing and delivery address), email address, payment data or bank and credit card information.

3.3 Registration (user account): You have the option to register with us using a user account. For the provision of your customer account, through which you can, amongst other things, place orders, view them, repeat them and manage your personal account (contact details, customer status, recommendations, privacy, etc.), we process the data you have stored.

Data collected:

• Name, address (billing and delivery address), email address, payment data or bank and credit card information.

3.4 Sending personalised information (newsletter): When you make a purchase in our online shop, you register for our free newsletter and thereby give your consent to its dispatch. For this purpose, we process your personal data as well as data about your purchasing behaviour and response data (e.g. opening and click rates of newsletters, reaction to campaigns, etc.). We use the data collected exclusively for sending our newsletter – therefore, in particular, it is not passed on to third parties. You can withdraw your consent at any time; you simply need to notify us of your withdrawal or click the unsubscribe link attached at the end of each newsletter. After your removal from the recipient list, your personal data may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters. Storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.

Data collected:

• Name, address (billing and delivery address), email address, data about purchasing behaviour, response data.

3.5 Email dispatch as part of order processing: As part of order processing, you receive a message from us at your email address (including order confirmation, information on shipping and shipment tracking).

Data collected:

• Name, address (billing and delivery address), email address, payment data or bank and credit card information.

3.6 Statistical analysis, abuse prevention, fraud prevention, credit checks, enforcement of legal claims: We also process your data for the aforementioned reasons. Statistics are created to improve our products and services, and data is analysed to ensure IT security and prevent abuse (criminal offences). For purchases on account, credit checks (including by third-party financing partners) may be carried out.

Data collected:

• Name, address (billing and delivery address), email address, accesses, referrer, data volume, browser, browser version, operating system, internet provider, IP address.

3.7 Miscellaneous: Occasionally, we may use personal data to send important communications, for example about changes to our terms and conditions and policies. Because this information is important and necessary for the relationship with BENU, it may not be possible to refuse receipt of this information. We may also use personal data for internal purposes, such as auditing, data analysis and research, to improve BENU's products and services and communication with customers. If you participate in promotions, we may use the information provided to manage these promotions. Occasionally, BENU may pass on certain personal data to partners who work with BENU to provide products and services, or who help BENU with marketing to customers (such as to our distributors and sales partners). In this case, personal data is only passed on to provide or improve our products, services or our advertising. Personal data is not passed on to third-party providers for their marketing purposes.

Data collected:

• Name, address (billing and delivery address), email address, payment data or bank and credit card information.

4. Collection and use of non-personal data

We also collect data in a form that, taken alone, does not allow direct reference to a specific person. We may collect, use, share and disclose non-personal data for any purpose.

We may collect data such as profession, language, postcode, area code, individual device identifiers, referrer URL as well as location and time zone used when visiting BENU's online shop, so that we can better understand the behaviour of our customers and improve our products, services and marketing measures.

It may also happen that we collect information about customer activities on our websites. This data is aggregated and used as a tool to provide our customers with more useful information and to understand which parts of our websites, products and services are most interesting to our customers. The aggregated data is considered non-personal data within the framework of this privacy policy.

We may collect and store more detailed information about how you use our services, including search queries. This information enables us to improve the relevance of the results provided by our services. Such information is generally not linked to your IP address.

In the event that we link non-personal data with personal data, this linked data, as long as it remains linked, is treated as personal data.

5. Cookies and other technologies

BENU's websites, online services, email messages and advertising may use "cookies" and other technologies such as pixel counters (pixel tags) and web beacons. These technologies allow us to better understand user behaviour, inform us which parts of our websites have been visited, and simplify and measure the effectiveness of advertising and web search. We treat data collected by cookies and other technologies as non-personal data. Insofar as internet protocol addresses (IP addresses) or similar identifiers are concerned, we treat these as personal data. Accordingly, insofar as non-personal data is linked with personal data, we will treat the linked data as personal data for the purposes of this privacy policy.

As with most internet services, certain data is automatically collected by us and stored in log files. This data includes internet protocol addresses (IP addresses), browser type and language, internet service provider (ISP), referring and exit websites and programmes, operating system, date/time stamps and clickstream data. We use this information to evaluate and analyse trends, to manage the website, to obtain information about user behaviour on the website, to improve our products and services, and to collect demographic data about our user base as a whole. BENU may use the collected data in its marketing and advertising services.

In some of our email messages, we use a so-called "click-through URL" that leads directly to content on a BENU website. When customers click on these URLs, they are routed through a separate web server before reaching the destination page on our website. We track this "click-through" data to determine interest in specific topics and to measure the effectiveness of communication with our customers. If you do not want such data to be collected and tracked, do not click on text or graphic links in emails or use the unsubscribe function in our newsletters so that we do not send you emails with "click-through URLs".

With the help of "pixel tags", we can send email messages in a format readable by the customer. We can also use them to check whether emails have been opened. We may use this information to reduce the messages sent to a customer or to stop sending messages.

Information on individual services can be found below under section 11.

6. Data processors

BENU may pass on personal data to group companies and, where appropriate, to selected service providers, namely to

• Group companies: The companies affiliated with us receive your data so that we can provide you with all services and offers. The legal basis is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.
• Third-party service providers and data processors: To fulfil contractual and legal obligations, we also use external service providers. Your data may be passed on to the following recipients, amongst others:
  • Third-party service providers, e.g. for fulfilling orders, shipping packages and letters; delivery of goods by logistics companies;
  • Data processors within the meaning of Art. 28 GDPR, e.g. to ensure our IT operations and to send our newsletter;
  • Payment service providers (e.g. Ideal Payment AG, PayPal, Apple Pay).
    In the case of credit card payment, a transaction-based security check is carried out by Worldline Schweiz AG to prevent credit card fraud. When making payments, we do not collect or store payment information such as credit card numbers or bank details. You provide this exclusively directly to the respective payment service provider. Insofar as these companies act within the framework of data processing for us, acting on our behalf, they may only process the personal data made available exclusively according to our instructions and for the purposes specified by us, Art. 28 GDPR.
    The legal basis is Art. 6 para. 1 lit. c and f GDPR.
• Other third parties (e.g. authorities): We will pass on your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so due to official or court orders, or if we are entitled to do so, e.g. because this is necessary for the prosecution of criminal offences or for the assertion and enforcement of our rights and claims. The legal basis is Art. 6 para. 1 lit. c and f GDPR.

Any data processors we use will process personal data in accordance with this privacy policy (or BENU's contractual obligations) as well as legal provisions and ensure the protection of your data and your rights. Upon your request, we will disclose all data processors we use to whom your personal data is passed on for processing.

7. Disclosure of personal data to other third parties

For the following reasons, it may be necessary for BENU to disclose personal data to third parties:

• to enforce our terms and conditions (e.g. in the collection of outstanding payments and in case of contractual disputes);
• if processing is necessary to fulfil a legal obligation to which we are subject;
• if processing is necessary to protect vital interests (of you or another natural person);
• if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
• if processing is necessary to protect our legitimate interests (or those of a third party), unless your interests or fundamental rights and freedoms prevail.

Furthermore, in the event of reorganisation, merger or sale of our company, we transmit all personal data we collect to the relevant third party. BENU will, where possible, inform in advance about any disclosure of personal data, although you have no corresponding legal claim.

8. Protection of personal data

BENU places great value on the security of your personal data. Our online services protect your personal data during transmission through encryption methods such as Transport Layer Security (TLS). When your personal data is stored by BENU, we use computer systems in facilities where access is restricted by physical security measures.

We value processing your data within Switzerland or the EU. However, it may happen that we use service providers in the administration, development and operation of IT systems as well as marketing and customer communication who process data outside the EU ("third countries"). In these third countries, despite careful selection and commitment of service providers, the high European data protection level cannot necessarily be guaranteed. If data transmission to the USA takes place, for example, there is a risk that this data may be processed by US authorities for control and surveillance purposes, without effective legal remedies being available or all data subject rights being enforceable. If any data transmission is based on your consent, this also includes your consent according to Art. 49 para. 1 lit. a GDPR for data processing outside the EEA, e.g. in the USA. You can withdraw your consent to us at any time.

9. Integrity and duration of retention of personal data

BENU enables you to keep your personal data accurate, complete and up to date through your user account.

We retain personal data for as long as necessary to fulfil the purposes described in this privacy policy, unless a longer retention period is required or permitted by law, namely:

• while you remain registered for our newsletter;
• for order processing (guest) for two years after completion of the order (or complete mutual fulfilment of the contract), whereby your data remains stored for repeated guest orders with the same email address and is only automatically deleted two years after the last guest order made;
• while you maintain an active user account, whereby inactive user accounts are automatically deleted after 5 years;

for the legally prescribed duration of at least 10 years, if they are accounting documents.

10. Your rights regarding personal data

Regarding your personal data, you have the following rights:

• Right to information and access: You can obtain information about the personal data collected from you, as well as about their processing and processing purposes, from us at any time.
• Right to rectification: You can demand immediate rectification of incorrect personal data. You can help us ensure that your contact details and settings are correct, complete and up to date by keeping your user account current. Regarding other personal data we store about you, we provide you with access for any purposes.
• Right to erasure: You can demand immediate deletion of your personal data if BENU is not obliged by law or for legitimate business purposes (e.g. if processing of personal data remains necessary to complete the business relationship) to retain it.
• Right to restriction of processing: You can demand restriction of processing of personal data if you dispute the accuracy of this data; the processing is unlawful (and we refuse deletion); the data is no longer needed for the purposes of processing; you have objected to processing.
• Right to data portability: You have the right to receive your personal data in a structured, common and machine-readable format.
• Right to object: You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, particularly at your place of residence, workplace or the place of the alleged infringement of your rights.

We may refuse the assertion of rights if they are offensive or harassing, endanger the personal rights of others, are extremely impractical, or if disclosure of information is otherwise not provided for under the respective legal system.

You can assert your rights at info{'@'}benu.ch; or by post at our registered office

11. Information on individual services

General linking to profiles with third-party providers

We use linking to the social networks listed below on the website.

The legal basis here is Art. 6 para. 1 lit. f GDPR. The legitimate interest of the provider consists in improving the quality of use of the website. The integration of the plugins takes place via a linked graphic. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective social network. After the customer is forwarded, information about the user is collected by the respective network. This initially includes data such as IP address, date, time and page visited. If the user is logged into their user account of the respective network at the same time, the network operator may be able to assign the collected information from the specific visit of the user to the user's personal account. If the user interacts via a "share" button of the respective network, this information can be stored in the user's personal user account and possibly published. If the user wants to prevent the collected information from being directly assigned to their user account, the user must log out before clicking on the graphic. There is also the possibility to configure the respective user account accordingly. The following social networks are linked by us:

• facebook
  Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
  Privacy policy: https://www.facebook.com/policy.php
• Instagram
  Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
  Privacy policy: https://help.instagram.com/519522125107875
• twitter
  Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
  Privacy policy: https://twitter.com/privacy

Google Analytics
We use Google Analytics, a web analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043 USA; "Google"), to analyse the usage behaviour of our website. Art. 6 para. 1 lit. a GDPR serves as the legal basis.

With your consent, Google sends user and usage-related information, such as your IP address, location, time or frequency of your visit to our website to a server in the USA and stores the data there. However, we have activated the IP anonymisation function in Google Analytics. This means that your IP address is shortened by Google within member states of the EU or in other contracting states of the EEA agreement before transmission to the USA. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and shortened there. We would like to point out that our website only uses Google Analytics after prior consent has been given and with a shortened version of IP addresses to exclude direct personal reference.

Google uses this information to provide us with an evaluation of your visit to our website as well as your activities. This information can also be used to provide further services associated with the use of our website and the internet. The IP address transmitted by your browser is not connected with other Google data.

We have also concluded a contract for commissioned data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. The personal data of website visitors is retained for 38 months. After this period, the information is deleted or anonymised. Through the settings in your browser, you are able to delete previously set cookies again.

If you do not want your data to be processed, Google offers a deactivation add-on. This add-on can be installed in current browsers and offers control over the data that Google collects when accessing our internet presence. The add-on prevents data about visits to our website from being sent to Google Analytics. However, this add-on does not prevent the transmission of data to us or to other services. You can find this add-on at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As the basis for data processing with recipients based in third countries or data transmission there, Google uses standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are intended to ensure that your data complies with European data protection standards even when it is transmitted to third countries and stored there. Through these clauses, Google commits to maintaining the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. You can find the implementing decision of the EU Commission and the corresponding standard contractual clauses at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More information on handling user data with Google Analytics can be found in Google's privacy policy: https://www.google.com/intl/de/policies/privacy/partners

You can withdraw your consent at any time according to Art. 7 para. 3 GDPR using our opt-out function.



Google Ads Conversion Tracking with conversion tracking
We use Google AdWords and within this framework the conversion tracking (visit action analysis) of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043 USA; "Google") to advertise our offer. Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When you click on an advertisement placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity of 30 days, contain no personal data and therefore cannot be used for personal identification. If you visit our website and the cookie has not yet expired, Google and we can recognise that you clicked on the advertisement and were forwarded to this website.

Each Google Ads customer receives a different cookie. Therefore, there is no possibility that cookies can be tracked across the websites of Ads customers. The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. We learn the total number of users who clicked on one of our advertisements and were forwarded to a page provided with a conversion tracking tag. Neither we nor third parties receive information with which users can be personally identified. If you want to prevent tracking, you can object to this use by deactivating the Google conversion tracking cookie via your browser in the settings. You will then not be included in the conversion tracking statistics.

You can set your browser to inform you about the setting of cookies and only allow cookies in individual cases. You can also exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be restricted.

As the basis for data processing with recipients based in third countries or data transmission there, Google uses standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are intended to ensure that your data complies with European data protection standards even when it is transmitted to third countries and stored there. Through these clauses, Google commits to maintaining the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. You can find the implementing decision of the EU Commission and the corresponding standard contractual clauses at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More information on handling user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

You can withdraw your consent at any time according to Art. 7 para. 3 GDPR using our opt-out function.



Google Remarketing / Google Tag Manager
On our website, we use the functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043 USA; "Google"). We use this function to place interest-based and personalised advertising on websites of third parties who also participate in Google's advertising network. Art. 6 para. 1 lit. a GDPR serves as the legal basis.

During your visit to our website, Google stores a cookie with a sequence of numbers via the browser on your device. This cookie anonymously records both your visit and the use of our website. Personal data is not passed on. If you subsequently visit websites of third parties who also use Google's advertising network, it is possible that advertising displays appear that relate to our website or to our offers there.

Google Analytics also collects google-authenticated IDs of users, which are temporarily linked with our data in Google Analytics to define and create audiences for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

The compilation of collected data in your Google account takes place exclusively on the basis of your consent, which you can give or withdraw at Google. Art. 6 para. 1 lit. a GDPR serves as the legal basis here. For data collection processes that are not compiled in your Google account because you do not have a Google account or have objected to compilation, the collection of data is based on Art. 6 para. 1 lit. f GDPR.

With the help of cross-device marketing, Google can track your usage behaviour across multiple devices, so that interest-based and personalised advertising is also displayed to you when you change devices. The condition for this is that you have consented to linking your browser histories with your existing Google account.
As the basis for data processing with recipients based in third countries or data transmission there, Google uses standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are intended to ensure that your data complies with European data protection standards even when it is transmitted to third countries and stored there. Through these clauses, Google commits to maintaining the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. You can find the implementing decision of the EU Commission and the corresponding standard contractual clauses at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More information on Google Remarketing can be found at http://www.google.com/privacy/ads/

You can withdraw your consent at any time according to Art. 7 para. 3 GDPR using our opt-out function.



Facebook Pixel
On our website, we use the "Facebook Pixel" of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") for conversion measurement. This function allows tracking the behaviour of website visitors after they have been forwarded to the provider's website by clicking on a Facebook advertisement. Art. 6 para. 1 lit. a GDPR serves as the legal basis.

This procedure is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help to optimise future advertising measures for you. The collected data is anonymous for us and accordingly offers us no conclusions about the identity of users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible. Meta can use the data for its own advertising purposes, according to the Facebook data usage policy (https://www.facebook.com/about/privacy/). This data can enable Meta and its partners to place advertisements on and outside Facebook. The use of data cannot be influenced by us as the provider of the page. For these purposes, a cookie may be stored on your computer.
You also have the option to deactivate the remarketing function "Custom Audiences" in the settings area for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook for this.

You can withdraw your consent at any time according to Art. 7 para. 3 GDPR using our opt-out function.



Affiliate Network Awin
On our website, we use Awin. Awin is a German affiliate network of Awin AG, Landsberger Allee 104 BC, 10249 Berlin, hereinafter referred to only as "Awin".

Affiliate marketing is a specific form of distribution that enables commercial operators of internet sites ("Merchant" or also called "Advertiser") to display advertising, which is usually remunerated via commissions, on internet sites of distribution partners ("Affiliate" or "Publisher"). The merchant thereby releases advertising material, e.g. in the form of an advertising banner, via the affiliate network, which can then be integrated by an affiliate on their own internet sites.

In addition to our own content, we are also interested in displaying advertising that is as interesting as possible for you. Therefore, we also make our website available as advertising space for third parties and receive many contacts with advertisers via the Awin affiliate network. This enables us to place topic-specific advertisements on our website and receive a commission for successful transactions (leads, sales).

In case of consent given by you for this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis can also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in optimising our online offers and our marketing measures as well as processing commission payments with Awin AG.

For this purpose, Awin stores cookies via your internet browser on your device. The cookies set by Awin do not store any personal data. Only the identification number of the affiliate is stored, as well as the serial number of the visitor to an internet site and the clicked advertising material. This data then serves to process commission payments between a merchant and the affiliate, which are settled via the affiliate network, i.e. Awin.

You can prevent the setting of such cookies at any time through appropriate settings of your internet browser and thereby permanently object to the setting of cookies. More detailed information on this can be found above under "Cookies".

Such settings of your internet browser prevent Awin from setting a cookie on your system. There is also the possibility to delete cookies already set by Awin via the settings of your internet browser.
You can access Awin's privacy information at https://www.awin.com/de/datenschutzerklarung.



Criteo
In our internet presence, we use Criteo for analysis as well as for individual display of advertising. Criteo is a service of Criteo SA, 32 Rue Blanche, 75009 Paris, hereinafter referred to only as "Criteo".

In case of consent given by you for this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis can also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our internet presence.

Via so-called tracking cookies and similar storage technologies, information about your visit to our internet presence and your activities on the internet sites of our advertising partners is collected. This information includes, for example, the number of sub-pages, advertisements and products you have viewed, the search function you have used, information about your device (device type, operating system, version) or about your location, to advertise, for example, only regionally available products or services. For this purpose, Criteo uses a technical ID that records the products you have viewed and your search behaviour. According to Criteo's information, however, identification of your person is not possible – only anonymous information about your possible interests is determined.

After evaluating the collected information, Criteo places individual advertisements in our internet presence or on the internet sites of our advertising partners (so-called publishers).

The advertising partners can recognise, based on cookies stored via your internet browser on your device, whether an advertisement from the Criteo advertising network should be displayed when you access an internet site.

Criteo processes your complete IP address exclusively for the following purposes:

• Detection of fraudulent crimes, e.g. to determine visits that cannot be attributed to human behaviour,
• Attribution of sales;
• Marketing reports with aggregated data.

Criteo offers further privacy information as well as information about analysis and advertising displays at
https://www.criteo.com/de/privacy/

If you do not agree with this processing, you have the option to prevent the storage of cookies through a setting in your internet browser. More detailed information on this can be found above under "Cookies".

Under the above link, you can also prevent the analysis of your visit by means of a so-called opt-out cookie. A cookie is stored via your internet browser on your device that prevents further analysis. Please note, however, that you must set this cookie again if you delete the cookies stored on your device.



Partner Programme Profity
On our website, we use the Profity partner programme. Profity is a Swiss partner programme of adfocus GmbH, Blegistrasse 9, 6340 Baar, Switzerland.

More about the data processed through the use of Profity can be found in the privacy policy at https://www.profity.ch/about/privacy.



Cleverpush
You can register to receive so-called push notifications. For this, we use the "CleverPush" service, which is operated by CleverPush GmbH, Brauhausstrasse 15A, 22041 Hamburg ("CleverPush").

To register for push messages, you must confirm your browser's or device's request to receive notifications. This process is documented and stored by CleverPush. For this purpose, the registration time as well as a push token or device ID is stored. This data serves on the one hand to be able to send you push notifications and on the other hand as proof of your registration. The legal basis for this processing is your consent and thus Art. 6 para. 1 lit. a GDPR.

CleverPush also statistically evaluates our push notifications. CleverPush can thus recognise whether and when our push notifications were displayed and clicked. This enables us to determine which push notifications interest recipients in order to tailor future messages to the presumed interests of all recipients and thereby increase interest in our offer. Additionally, we store, besides the push token or device ID, the thematic focus of the app on which push notifications were activated (e.g. business, sports, etc.). We also use this information to send push notifications to the corresponding subscribers that are in their presumed interests. The legal basis for processing is Art. 6 para. 1 lit. f GDPR in each case. The assignment of a push token or device ID to a specific person only takes place if we should be legally obliged to do so, to defend against claims against us, if this is necessary as evidence, as well as for the possible prosecution of legal violations.

You can withdraw your consent to the storage and use of your personal data for receiving our push notifications at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent until withdrawal. Furthermore, you can object to the above-described use of personal data based on Art. 6 para. 1 lit. f at any time. Please withdraw your consent for this purpose. You can withdraw consent in the designated settings for receiving push notifications in the settings of your device or browser.

Your data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. Your data will therefore be stored as long as the subscription to our push notifications is active.

The unsubscription process is explained in detail at the following link: https://cleverpush.com/faq.

For accelerating content retrieval (e.g. images) as well as for defending against attacks, CleverPush uses the services of cloudflare.com, an offer from Cloudflare, Inc., within the framework of commissioned processing based on standard contractual clauses.

CleverPush does not store any data on Cloudflare's servers that contain personal data, but only general content such as texts or images. When retrieving this content, the device you are using establishes a connection to Cloudflare, which results in processing of the IP address of the device you are using.



Freshchat
We use third-party providers such as Freshworks Inc ("Freshworks") to enable your interaction with our website and our customer service. As a data processor acting on our behalf, Freshworks automatically receives and stores certain information from you such as device model, IP address, browser type used and usage behaviour through cookies and browser settings. Freshworks performs analyses of this data on our behalf, which helps us improve our service for you. You can activate/deactivate the cookies that Freshworks sets via consent management. Details about the processed data can be found in Freshworks' cookie policy at https://www.freshworks.com/list-of-cookies/.



Price comparison Toppreise
On our website, we use the Toppreise widget. Toppreise is a price comparison platform of Toppreise Preisvergleich GmbH & Co.KG, Siebenbrunnen 1, D-89287 Bellenberg. Through the integration of the widget, Toppreise receives information from you such as device model, IP address, browser type used and usage behaviour through cookies and browser settings. You can activate/deactivate the loading of the widget via consent management.

12. Websites and services of third-party providers

BENU's websites, products and services may contain links to websites, products and services of other companies. The data collected by these third-party providers, which may contain location data or contact details, is governed by their privacy practices. We therefore recommend that you enquire with these companies about their privacy practices. We are not responsible for the privacy arrangements of third parties.

13. Changes to the privacy policy

BENU reserves the right to change this privacy policy at any time at its own discretion. We will inform you in good time about such changes and announce the date when the changes come into effect. Changes are considered accepted by you if you continue to use the website after the changes come into effect. In case of substantial changes to the privacy policy, you will be informed at least 30 days before they come into effect. If you do not object to the new privacy policy within 30 days, this is considered express consent to the changes and adjustments. Corresponding communications from BENU will be sent to the email address stored in the respective account (or provided to us).