Version: 1. April 2022
-- In case of any differentiating interpretation of the German and English version, the German version will be the determining version of this agreement. --
In cooperation with our hosting providers, we make every effort to protect the databases as well as possible from unauthorized access, loss, misuse or falsification.
We point out that data transmission over the Internet (eg communication by e-mail) security gaps. A complete protection of the data against access by third parties is not possible.
Why do we collect and how do we process your data
As a matter of principle, we process personal data of our users only insofar as this is necessary for the provision of functional services. Personal data is only processed with the consent of the users, unless the processing of the data is permitted by law. We ask you for personal data when you visit our websites, use our online store, place an order to rent from us, make payments, register for marketing material such as a newsletter or when you contact us in general.
- fulfill contractual obligations that we have with you
- to enable the processing of an order for rent
- to process inquiries and contact forms
- send you information regarding our services
- provide you with information regarding updates to standard agreements such as privacy policies or terms and conditions
- send you invoices and payment reminders
- send you newsletters (if you have confirmed this via opt-in)
- provide you with information about the status of an order for rent
- answer your inquiries
- process applications
- maintain or improve the usability, operation and performance of our services
- diagnose problems, errors and security risks in services
- prevent misuse of our services or systems and illegal activities through or with them
- Comply with applicable laws and regulations
- analyze our services and improve the user experience
Before using our services, you always have the option to refuse the disclosure of personal data and other information. However, parts of our services require certain personal data (for example, for the proper execution of an order to rent or use the features). Therefore, if you refuse to provide us with the necessary personal information, you will unfortunately not be able to take full advantage of all of our services.
Type of data and time of collection
The type of data we need from you depends on the service you use. We therefore process the following personal data in particular:
- first and last name
- phone number
- billing address
- Payment information for external payment service providers (e.g..: Account number or credit card number, passwords, TANs and checksums, as well as the contract, totals and recipient-related information).
- E-mail address
- IP address
- SIP address
- shoe size
- t-shirt size
- body shape
- wearing habit
- Eventtyp and date
- chest size, belly size, waist size, step length
Server log files. As the operator of the website, adretto automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes browser type and version, operating system used, referrer URL, host name of the accessing computer and time of the server request. This data cannot be assigned to specific persons. A combination of this data with other data sources is not made. We reserve the right to check this data retrospectively if we become aware of concrete indications of illegal use.
IP address. Within the scope of registering a customer account and renewed registrations as well as the use of our services, we store the IP address and the time of the respective user action of the users. The storage is based on our legitimate interests, as well as those of the users in protection against abuse and other unauthorized use.
Online store. When you place an order for rent with us, you must fill in the marked mandatory fields such as first and last name, email address, home address, height, weight, age, shoe size, t-shirt size, body shape, wearing habit, event type, date and payment information. This information is absolutely necessary for us to fulfill our obligations to you when you place an order to rent from us. We use this information solely to provide you with the functionality of the online store and to fulfill the orders placed.
Contact form. If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provide there, will be processed and stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
Newsletter. If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. For this purpose, we follow a strict "double-opt-in" procedure. No other data is collected. We use this data exclusively for sending the requested information and for sending you regular recommendations and offers by e-mail. The data will not be passed on to third parties. It is possible to unsubscribe from receiving our newsletter at any time. For this purpose, the user can either click on the "Unsubscribe" link in the newsletter or send us a written message to adretto AG, Riedstrasse 1, 6343 Rotkreuz, Switzerland.
Comment function. Users have the option of using the comment function on our website. In addition to the comment itself, information on the time of creation of the comment, as well as the e-mail address and, if not anonymized, the user name are stored. Our comment function also stores the IP addresses of users who post comments. Since we do not check comments on our site before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.
Registration. If a user decides to open a customer account with us, we use the personal data provided exclusively for opening the customer account in a strict "double-opt-in" process. The data is not public and cannot be indexed by search engines, e.g. Google. All mandatory fields are clearly marked and must be filled in before we can open an account for you. adretto reserves the right to reject incomplete registrations. The information collected will be used exclusively to provide you with the functionality of the online store or the particular offer or service for which you have registered. Notwithstanding the foregoing, adretto may use the email address provided to inform the user of important changes, e.g. changes in the scope of an offer, updates of standard agreements or in case of technically necessary changes.
Deletion. Deletion of the customer account is possible at any time and can be done either by sending a message to adretto AG, Riedstrasse 1, 6343 Rotkreuz, Switzerland or via a function provided for this purpose in the customer account. It is the user's responsibility to back up his data upon termination.
External payment service providers
Technical and organizational measures
We take all reasonable steps to protect your personal data from misuse, interference and loss, as well as from unauthorized access, alteration or disclosure. However, the transmission of data via the Internet is not absolutely secure. adretto cooperates with service providers and Internet providers who take appropriate technical and organizational security measures to protect the personal data of users. Nevertheless, adretto cannot guarantee the security of the data transmitted by the user. Any data transmission is therefore at the user's own risk.
SSL/TLS encryption. adretto uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the operator of the website. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Additional information can be requested here at any time: firstname.lastname@example.org
Disclosure of data
Personal data will not be disclosed to third parties unless this is necessary to fulfill the purpose for which the data was collected, for example, to fulfill contractual obligations, to respond to your inquiries, for our professional or legitimate business purposes, or as required by law. To the third parties listed below, personal data may be disclosed to or processed by them for the above-mentioned purposes, if absolutely necessary:
Employees: All employees are bound to secrecy. We keep your personal information secure and follow standard practice when choosing our technical and organizational measures.
- Affiliated companies: The relationship and handling of personal data is governed by intra-group agreements that provide for compliance with the legal requirements of applicable laws.
- Authorities: if required by applicable laws or if a court order exists.
- Internal business infrastructure: for example, for backup, storage, payments, support tools, or delivery services.
When we share your personal data with such third party providers, reasonable precautions are taken to ensure accurate and secure data processing in compliance with applicable data protection laws (e.g., EU standard contractual clauses, data processing contracts). We do not allow our third-party providers to use the personal data we provide to them for their marketing purposes or for purposes other than in connection with the services they provide to us.
Place of processing
Data is generally processed in Switzerland or in the European Union or the European Economic Area. Switzerland has been approved by the EU Commission as a country outside the EU and the EEA that ensures sufficient safeguards for the protection of personal data (adequacy decision of the EU Commission pursuant to Art. 45 GDPR).
adretto may transfer personal data outside the European Economic Area (EEA) or Switzerland under certain circumstances. In such a case, adretto will, wherever possible and reasonable, anonymize such personal data so that it is no longer classified as personal data under applicable data protection laws. If such anonymization is not possible, adretto will ensure that a transfer is made in accordance with applicable laws (e.g. EU standard contractual clauses; risk assessments).
EU/EEA Representative (Art. 27 GDPR): Andreas Wiegel, email@example.com
Data deletion and storage period
Users' personal data will be deleted as soon as the original purpose of the processing ceases to apply, unless adretto is obliged as a commissioned data processor to store the personal data in question for a longer period of time in accordance with applicable law or further processing of the personal data is permitted by law. Deletion of the personal data will take place as soon as the retention period provided for in the applicable law expires. Any other arrangement may be provided for between you and adretto in the respective contracts.
Rights of users
Right to Information. You have the right to request information regarding your personal data at any time. You have the right to request this information in electronic form and, where necessary, to request rectification of personal data should it be inaccurate.
Right to erasure. You have the right at any time to request that we securely and permanently delete the personal information you have provided to us. Please note that if you request the deletion of personal data that is necessary for us to provide the Services, you may no longer be able to use the Services. If your personal data is not strictly necessary for the provision of the Services, you may request that such personal data be permanently and securely deleted. This is subject to statutory retention periods.
Legal Restrictions. In some cases, your ability to access or control your personal information will be limited to the extent required or permitted by applicable law.
Access. If you would like to request information about the personal data we hold about you, or if you would like to have your personal data deleted, please send an email to firstname.lastname@example.org for the attention of the Data Protection Officer with the subject line "Request Data Subject" and your company reference and/or name. Your request will be processed within one month of receipt. If adretto is only the data processor of your personal data, adretto will forward your request to the data controller as soon as possible.
You have the right to file a complaint with the competent supervisory authority:
Switzerland: Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern; For more information, please visit: https://www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/adresse.html
Germany: The Federal Commissioner for Data Protection and Freedom of Information, Graurheindorfer Str. 153, 53117 Bonn; For further information please visit: https://www.bfdi.bund.de/DE/Home/home_node.html.
Data Protection Officer of adretto AG:
Applicable law and jurisdiction