PRIVACY POLICY
General note and mandatory information
Name of responsible body
The body responsible for processing data in accordance with the General Data Protection Regulation (“GDPR”) on this website is:
billbox AG
Limmatquai 58
CH-8001 Zürich
CONTACT
Tel +41 44 250 6070
Fax +41 44 250 6079
welcome@billbox.com
Supervisory Board: Dr. Roland Schaub, lic. phil. Rosa Käch, lic. oec. Florian Beckmann
The responsible body will decide on its own or with others about the objective and method for processing personal data
(for example names, contact details, etc.).
CANCELLATION OF YOUR CONSENT TO DATE PROCESSING
Some data processing procedures are only possible with your express consent. You can cancel the consent you have granted
at any time. Informal notification by email is sufficient for cancellation. The legality of the data processing which took
place before cancellation will not be affected by the cancellation.
RIGHT TO COMPLAIN TO THE RESPONSIBLE MONITORING AUTHORITY
As the affected person, you are entitled to complain to the responsible monitoring authority in the event of a data
protection breach.
RELEVANT MONITORING AUTHORITY
For data protection matters, the relevant monitoring authority is the state data protection officer of the federal
state in which our company’s registered office is located.
RIGHT TO DATA TRANSFERABILITY
You are entitled to have data which we automatically process on the basis of your consent or in order to fulfil a
contract issued to yourself or to third parties. The data must be supplied in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done if it is technically feasible.
RIGHTS OF DATA SUBJECTS
You have the right
• pursuant to Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. This has the consequence that we may
no longer continue the data processing based on this consent for the future;
• to request information about your personal data processed by us in accordance
with Art. 15 GDPR (right of access by the data subject). In particular, you may request information about
the processing purposes, the category of personal data, the categories of recipients to whom your data have been
or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction
of processing or objection, the existence of a right of complaint, the origin of your data if it
has not been collected by us, and the existence of automated decision-making, including profiling, and,
if applicable, meaningful information about its details;
• pursuant to Art. 16 GDPR, to request the correction of incorrect or incomplete personal data stored by us
without undue delay (right to rectification);
• pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing
is necessary for the exercise of the right to freedom of expression and information,
for compliance with a legal obligation, for reasons of public interest or for the performance of the contract
or request (right to erasure);
• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data,
insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its
erasure and we no longer require the data, but you need it to carry out the order or request,
or you have objected to the processing pursuant to Art. 21 GDPR (right to restriction of processing);
• complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact
the supervisory authority of your usual place of residence or
the above address for this purpose (see “RELEVANT MONITORING AUTHORITY”)
RIGHT TO OBJECT
Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) para. 1 lit. f GDPR,
you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR,
insofar as there are grounds for doing so that arise from your particular situation.
If you wish to exercise your right of objection, an message to the above mentioned contact data is sufficient.
SSL OR TLS ENCRYPTION
For security reasons and to protect the transfer of confidential content which you send to us,
the website operator, our website uses SSL or TLS encryption. This means that the data which you send using the website
cannot be read by third parties. You can identify an encrypted connection by the “https://” address line in your browser
and the padlock symbol in the browser line.
SERVER LOG FILES
The provider of the website automatically collects and saves information in server log files
which your browser automatically sends to us. This includes the following:
• Browser type and browser versionOperating system used
• Referrer URL
• Host name of accessing computer
• Time of server query
• IP address
This data is not merged with other data sources. Art. 6 para. 1 lit. b GDPR,
which allows data to be processed to fulfil a contract or for pre-contractual action,
forms the basis for the data processing in addition to any other legal basis such as, among others,
consent, Art. 6 para. 1 lit. a GDPR, and the existence of a legitimate interest according to Art. 6 para. 1 lit f GDPR.
Personal data collected will only be processed for as long as is necessary within the framework of the aforementioned
legal basis and will be deleted thereafter,
unless there are statutory retention obligations (e.g., retention obligations under tax and commercial law). In this case,
this data will be stored accordingly exclusively for this purpose and deleted after the retention period has expired.
TRANSMISSION
Personal data is not transferred to third parties unless they are authorized contractual partners
within the scope of Art. 6 Para. 1 lit. b GDPR or processors within the meaning of Art. 28 para. 3 GDPR.
Such parties are contractually obligated to comply with the GDPR and may process personal data on behalf of
third parties exclusively for the aforementioned purposes. NEWSLETTER DATA To send our newsletter,
we require an email address from you. The entered email address must be verified and
you must grant your consent to receive the newsletter. No additional data will be collected or it is voluntary.
The data will be used exclusively to send the newsletter. The details provided when registering for the newsletter
will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can cancel the consent
you have granted at any time. Informal notification by email is sufficient to cancel your consent
or you can use the “Unsubscribe” link in the newsletter. The legality of the data processing
processes which have already been completed will not be affected by the cancellation. The data entered
to set up the subscription will be deleted when you unsubscribe. If this data has been sent to us
for other purposes and to another body, it will remain stored by us.
GOOGLE ANALYTICS
Our website uses Google Analytics, a website analysis service by Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4, Irland. Google Analytics uses so-called “cookies”, text files that are stored on your computer
to analyze your use of the website. The information generated by the cookie about your use of this website
(including your IP address) is sent to and stored at a Google server in the U.S.A.
Google will use this information to evaluate your use of the website, to compile reports on website activities
for website operators and to provide other website and internet activity related services.
Google may also transfer this information to third parties if required by law or if third parties process the
information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
You may prevent the installation of cookies by adjusting the settings of your browser; however, if you do so,
you may be unable to use all features of this website. Further, you may prevent the collection of data
generated by cookies and related to the use of this websites by downloading and installing the the plug-in
under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
YOUTUBE
Our website uses plug-ins from YouTube to integrate and display video content. The provider of the video portal
is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, parent company: Google LLC, 1600
Amphitheatre Parkway, Mountain View, CA 94043, USA;. If you open a page with an integral YouTube plug-in,
a connection will be established with YouTube servers. YouTube therefore finds out which pages you have opened.
YouTube can assign your surfing habits directly to your personal profile if you have logged into your YouTube account.
You can prevent this by logging out beforehand. YouTube is used to provide an attractive presentation of our online
offerings. This constitutes a justified interest as described in Art. 6 para. 1 lit. f of the GDPR. Details of how your
user data is used can be found in YouTube’s privacy policy at:
https://www.google.de/intl/de/policies/privacy.
COOKIES
Our website uses cookies. These are small text files which your web browser saves on your device. Cookies help us to
make our offering more user-friendly, effective and safe. Some cookies are “session cookies”.
These cookies are deleted automatically at the end of your browser session. However, some cookies
remain on your device until you delete them yourself. These cookies help us to recognise you when
you return to our website. Using a modern web browser you can monitor, restrict or prevent cookies being set.
Many web browsers can be configured so that the cookies are automatically deleted when the program is closed.
Disabling cookies may result in our website having restricted functionality. Cookies, which are required to carry
out electronic communication procedures or to provide certain functions required by you (for example a shopping cart),
are set on the basis of Art. 6 para. 1 lit. f of the General Data Protection Regulation. As the operator of this website,
we have a justified interest in saving cookies to ensure that our services can be provided smoothly and in technically
perfect form. If other cookies are set (for example for analysis functions), these are dealt with separately in this
privacy policy.
CONTACT FORM
In case if you send us an email your contact details including the personal details (contact data, etc.) are being
stored in our systems to answer your inquiry and future inquiries.
PROHIBITION TO UNSOLICITED ADVERTISEMENT
Providers are obliged to publish contact information in the Legal Notice. The use of such contact information by
third parties for the purpose of distributing unsolicited advertisements or other commercial information is prohibited.
The operators of this web page reserve the right to take legal measures in case of being sent unsolicited commercial
information, e.g. spam mails etc.
FINAL NOTICE
We reserve the right to adapt the above mentioned legal notice incl. the legal information given in the Legal
Notice section of this website according to the technical development of the internet and changes of legal regulations.
With the publication on this website legal notices come into effect.