Data protection
Data protection policy compliant with the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR).
Personal data of our customers
Cambois SA, Chemin des Emetaux 1, CH-1131 Tolochenaz, Switzerland (hereinafter “the Company”) takes its responsibilities seriously when handling personal data. This policy describes how we process the personal data of customers, including the representatives and governing bodies of legal entities, and our procedures for collecting, using, transferring, disclosing and otherwise managing that data.
Types of personal data collected
Personal data includes first name, last name, role or function, contact details and other personal information whose processing is necessary in the following cases:
- The processing is necessary for the performance of a contract.
- The processing is permitted or required by applicable law.
- The processing is permitted for marketing purposes such as newsletters and advertising. Consent may be withdrawn at any time.
- When a customer account with payment on invoice is opened, the Company is entitled to obtain an extract from the debt enforcement register at any time and, where applicable, to request and exchange creditworthiness information with credit agencies (for example Creditreform Switzerland) and debt collection companies. Where the customer uses the account to purchase from third parties such as suppliers, the Company is entitled to exchange creditworthiness information with those suppliers and, if applicable, to inform them of the closure or suspension of the account.
Browsing data and cookies
When you visit cambois.ch we automatically collect certain information about your device: browser, IP address, time zone and the cookies installed. We use:
- Technical cookies necessary for the shopping cart and the session.
- Analytical cookies to measure traffic anonymously.
- Marketing cookies only with your explicit consent.
Order data
When you place an order we collect your name, email address, delivery and billing addresses, telephone number, cart contents and payment information. This data is necessary to perform the contract of sale.
Purposes of processing
- Processing and delivering your orders
- Answering your requests for quotations, samples and other enquiries
- Sending our newsletter, with consent only
- Improving the website and our services
- Complying with our Swiss legal obligations in accounting and tax matters
Retention periods
- Order data: 10 years, Swiss statutory accounting obligation.
- Marketing data: until consent is withdrawn.
- Account data: for as long as the account remains active.
Security of your personal data
We have put in place appropriate legal, organisational and technical measures to protect your data. Where we engage a third-party provider, that provider must take appropriate measures to protect the confidentiality and security of personal data, and must process it in compliance with the applicable legal requirements.
Processing and transfer of your personal data
In order to make our offering effective and easy to use, we rely on technical tools and analysis systems when processing personal data, such as customer relationship management (CRM) systems.
Employees and agents of the Company have access to customer personal data in order to carry out their duties. Access, use and any other processing of personal data is likewise reserved to authorised persons, for example staff working in IT, legal and compliance, finance and internal audit.
Personal data is occasionally made available to third parties such as courts and supervisory authorities, external professional advisers (lawyers, auditors and the like) and service providers, including logistics providers, IT systems and support, and other third parties that assist the Company in conducting its business. It may be necessary to transfer personal data to countries outside Switzerland and the European Economic Area. In that case we ensure that the data is processed in accordance with the applicable legal provisions and that an adequate level of data protection is guaranteed.
Data sharing
We share your data only with the service providers required to deliver our services: our web host (Shopify), payment providers, carriers and logistics partners, and, with your consent, our newsletter tool (Brevo).
Your rights
In relation to the processing of your personal data you have certain rights, including the right to access your data, to have it corrected, updated, restricted or erased, to object to its use, to receive it in a portable form, to be informed of the basis on which it is processed, and, where processing is based on your consent, to withdraw that consent at any time.
Please note that under applicable law certain personal data, or certain uses of it, may be exempt from these rights.
To exercise these rights, write to shop@cambois.ch or to Cambois SA, Chemin des Emetaux 1, CH-1131 Tolochenaz, Switzerland.
Hosting
The website is hosted by Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada. Data may pass through Shopify servers located in the European Union and in Canada, a country benefiting from an adequacy decision of the European Commission.
Contact
Cambois SA
Chemin des Emetaux 1, CH-1131 Tolochenaz, Switzerland
Phone: +41 21 802 5245
Email: shop@cambois.ch