References in this privacy policy to “REWIND”, “we” or “us” are references to Boost Holding AG that operates the website http://rewind-outdoor.com/ (herein after referred to as „website“).
We’re serious about the security of the data on our servers and the protection of the privacy of our customers. We deploy state of the art technical and organizational security controls during our business operations, to provide our services and products to our customers. We continually protect your information against loss, misuse, unauthorized access, unauthorized disclosure, manipulation and/or destruction. We apply applicable data protection laws to the processing of your Personal Data.
LAST UPDATED: 20 NOVEMBER 2018
We’re serious about the security of the data on our servers and the protection of the privacy of our customers. We deploy state of the art technical and organizational security controls during our business operations, to provide our services and products to our customers. We continually protect your information against loss, misuse, unauthorized access, unauthorized disclosure, manipulation and/or destruction. We apply applicable data protection laws to the processing of your Personal Data.
The controller of your Personal Data is:
Boost Holding AG
Hinterbergstrasse 20
CH-6312 Steinhausen
(see further contact information under Contact Person, at the bottom of this page)
References in this privacy policy to “REWIND”, “we” or “us” are references to Boost Holding AG. All other legal entities in the Boost Group are data processors with which we internally share Personal Data, to provide services to our customers and their customers. Data processor agreements are in place between the legal entities.
As a customer of us, you use one or more of the following services:
Thus, REWIND obtains your Personal Data among others when you purchase a product at REWIND, fill out and submit a contact form and when, for example, you send REWIND an email. This Personal Data can be:
When you provide us your information, we make it clear to you what the purpose is of collecting and processing that Personal Data. Where we ask for your consent, you are always able to, later, revoke that consent at any time.
We use your Personal Data:
You are generally under no obligation to disclose Personal Data to us, unless you have a contractual relationship with us that foresees such obligation. Yet, in order to conclude and perform a contract, we must collect and process the Personal Data which is necessary for such conclusion and for the fulfilment of the contractual and associated obligations as well as for the fulfilment of legal obligations. Moreover, when using a website, it is necessary to process log data and certain other data. Also, in relation to communications between you and us, we must process at least the Personal Data that you provide to us or that we provide to you.
We may assign other companies to perform tasks on our behalf and may share your Personal Data, like your address, with them. The trusted third parties we will share your Personal Data will include:
With such companies we have a long-term agreement that includes a data processor agreement, which is in line with the data-privacy and protection requirements that we maintain ourselves on all the Personal Data we receive and process. We certainly do not sell your data to third parties.
We are entitled to transfer your Personal Data abroad, including to third party companies (designated service providers as listed in section “Sharing with Third Parties” above) insofar as this is expedient for the Data Processing described in this Privacy Statement. The recipients will be obliged to protect this data to the same extent as we do.
Our databases are located on servers in Switzerland and Holland, both on-premise and with an external housing partner, or on hosting platforms within the EU where our IT employees have full control of the hardware, virtual servers, software and the data. The only cloud-app solution we use is our US-based customer relation management tool (CRM), which has a EU-approved Binding Corporate Rules (BCR) to facilitate storing of Personal Data in the cloud globally (see below).
If we transfer data to a country where the level of data protection is lower than in Switzerland, we will ensure under contract that the level of protection for Personal Data is equivalent to that applicable in Switzerland. We shall ensure this through one or more of the following measures:
When you use our website, we automatically collect metadata about your browsing session such as your browser, the IP address of your computer, your internet service provider, the site from which you navigated to our website, the duration of your visit to our website and what type of device you are using (e.g. a computer, a smart phone or a tablet) and the respective operating system. We also keep a record of the pages that you view during your visit. This information is used to improve the way in which our website operates, for statistical and systems administration purposes.
Our websites and online portals use cookies. Cookies are little pieces of data that can help identify your browser and that can store information for future visits, e.g. your language preferences. We use cookies to track usage and to improve your overall user experience when using the service. Our website uses Google Analytics, a service provided by Google, Inc. that tracks and reports on the manner in which our websites are used. Google Analytics does this by placing small text files called “cookies” on your computer or other device. Cookies collect information about the number of visitors to the websites, the pages visited, and the time spent on the websites. This information is aggregated and is not personally identifiable. Most Internet browsers automatically accepts cookies. However, you always have the choice to configure your browser at any time in such a manner that no cookies are saved on your computer or that an indication always appears when you receive a new cookie.
Some of our online services may in principle be used without accepting cookies, although individual functions may thereby be limited. You can choose to disable cookies by selecting the appropriate settings on your browser, but this may limit your ability to use our services. We may use your name and e-mail address(es) to send you alerts, updates, event invitations and other information by email, but will ask for consent first unless we have obtained your contact details from you in the context of our services. If you receive marketing communications from us and no longer wish to do so, you may unsubscribe at any time by following the link included in these e-mails. Note that we use Personal Data to understand if you read our e-mails or click on links included in them. We use social media plugins. They are displayed on our website with the logo of the corresponding social network (such as the “like” button by Facebook). If you are logged into a social network (with your user credentials) when you visit our website, the respective network will automatically be notified of your visit to our website. The data processing associated with social media plugins is in the responsibility of the respective social media network, is subject to their privacy policies and outside of our control.
REWIND records certain requests and transactions in log files. This log data is used for troubleshooting, statistics, analytics, quality assurance, and to monitor system security and can be analyzed to that end. REWIND can process and share anonymous statistics on log data, under the condition that no personally identifiable information can be derived from such statistics.
We have implemented, and we maintain appropriate organizational and technical security controls, to prevent unauthorized access to Personal Data and other sensitive data. We make sure that only access is granted to employees of REWIND f it is necessary and appropriate to their work.
Your Personal Data and other sensitive data is stored and transferred over our company network encrypted and we use SSL-certificates to verify the identity of the data requester’s device, and also all forms through which you submit your Personal Data are SSL-protected.
REWIND implements several mechanisms to prevent unauthorized access to our services and portals. User-accounts are protected by passwords. You should choose a secure password and ensure its confidentiality to prevent unauthorized access to your account.
We shall only retain your Personal Data for as long as is legally necessary or in accordance with the purpose for which they were collected and processed. Afterwards we delete your Personal Data. If we store your Personal Data on the basis of a contractual relationship with you, this will remain stored for at least the duration of the contractual relationship and at most for the duration of the limitation periods within which any claims may be brought by or against us, or for the duration of legal or contractual duties of retention, such as archiving purposes, fiscal or tax regulations.
REWIND can delete or render inactive such user-accounts that remain inactive (i.e. not accessed) for a longer period.
We process Personal Data on the following grounds:
You have the right to exercise your data privacy rights subject to applicable data protection law at any time and to request information as to whether, how and which Personal Data relating to you has been processed by us and to receive a copy. You may also arrange for your Personal Data to be corrected, blocked or deleted. Subject to applicable data protection law, you may also restrict our processing of your information, and object to the processing of your Personal Data.
You may also choose to withdraw your consent. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your Personal Data to the
extent required or permitted by law.
We reserve the right to exchange correspondence with you in this regard and request appropriate proof of your identity where necessary to prevent unauthorized access by another person.
Please note that we may be required to retain your Personal Data in part even after a request for blocking or cancellation under the terms of our statutory or contractual retention requirements (such as for warranty, accounting and/or tax purposes) and in such an eventuality will only block your Personal Data insofar as necessary for this purpose. In addition, the cancellation of your Personal Data may have the effect that you are no longer able to acquire or use the services registered by you. Under certain circumstances and subject to applicable data protection law, you have the right to require us to provide you, or a third party specified by you, with your Personal Data in a commonly used format.
In addition, you have the right to make a complaint concerning the data processing in question with the competent supervisory authority. You can do this with the supervisory authority in your country of residence or at the place of the alleged data breach.
If you have questions regarding data protection, need information or want to request access
to your Personal Data or want your Personal Data to be corrected, blocked or deleted please
contact us via email (see below). The contact details for your data privacy questions are:
For Switzerland:
Boost Holding AG
c/o Enterprise Security Officer
Hinterbergstrasse 20
CH-6312 Steinhausen
Switzerland
+41 58 201 97 99
For Europe:
Boost Services BV
c/o Enterprise Security Officer
Klompenmaker 2
NL-5253 RH Nieuwkuijk
Netherlands
+31 114 381 600
dataprivacy@boostgroup.eu
REWIND reserves the right to update this Privacy Policy at any time, without prior notice.
