WANDER Privacy Notice

Welcome to our websites. We hope that you will enjoy learning more about WANDER and our products here. 

WANDER respects your right to privacy. This means that you can expect us to treat your data sensitively and care-fully, and to ensure a high level of data security. 

We process your personal data solely within the scope of the applicable data protection regulations, which we in-form you about in this privacy policy for natural persons. Information about cookies that are placed via our web-sites, about the use of social media and about particular online tools is available in our special Cookie Guidelines.

Our websites are:
www.wander.ch
www.ovomaltine.ch
www.ovomaltine.de
www.ovomaltine.com
www.ovomaltine.at
www.caotina.ch
www.caotina.com
www.twinings.ch
www.twinings.de
www.twinings.at
www.isostar.ch
www.modifast.ch
www.jemalt.ch
www.dawa.ch
www.shop.wander.ch

1. Contacts

1.1 Name and address of the responsible entity and the data protection coordinator
The responsible entity within the meaning of the General Data Protection Regulation (GDPR) and national data protection legislation is:

WANDER AG
Data protection coordinator
Fabrikstrasse 10
3176 Neuenegg
Switzerland
Tel.: +41 31 377 21 11
Email: datenschutz@wander.ch 
Website: www.wander.ch

1.2 Processor
You can contact our processor at the following email address: datenschutz@wander.ch.

2. Purposes of processing

We process your personal data for the following purposes:

  • To display and optimise website content
  • At your request, to get in touch with you and/or provide regular information about our activities and offers 
  • Presentation
  • To communicate in relation to WANDER products
  • To know your needs so that we can tailor our offers of WANDER products to you
  • To run competitions
  • Application process
  • Web analytics and remarketing
  • To respond to your enquiries via our contact form
  • To send replacements  

3. Types of personal data

We process the following types of personal data:

  • Basic data (e.g. names and addresses)
  • Contact data (e.g. email addresses and telephone numbers)
  • Content data (e.g. text inputs)
  • Usage data (e.g. websites visited, access times)
  • Metadata/communication data (e.g. IP addresses, device information)

4. Legal basis for processing

The following regularly provide us with the legal basis for processing your personal data:

  • The performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (e.g. the use of your address details to send replacement goods), Article 6(1)(b) GDPR
  • Balancing of interests (e.g. if your professional contact details are recorded when you make contact with us on behalf of your employer), Article 6(1)(f) GDPR
  • A legal obligation (e.g. our obligation to retain documents), Article 6(1)(c) GDPR

5. Recipients of personal data

Your data will only ever be disclosed to third parties if this is necessary to perform the contract with you, if disclo-sure is lawful based on the balance of interests, if we are legally obligated to disclose it, or if you have given your consent for this to happen. However, your data is never sold on.

Regular recipients of personal data can fall into the following categories:

  • Companies affiliated with WANDER 
  • IT service providers (e.g. email mailing platforms or providers of the customer relationship management system or online tools)
  • Commercial partners, such as licensees
  • Government authorities
  • Agencies

6. Type and duration of processing

We process personal data for as long as is required for the respective purpose and will store your details in a customer relationship management system (CRM system) if you have consented to this.

Insofar as statutory retention obligations exist, the respective data is stored for the duration of the retention obligation (for orders and invoices, for example, there is a statutory retention period of 10 years). After expiry of the retention obligation, we review whether a further necessity for processing exists. If a necessity no longer exists, the data is deleted.

7. Your rights as an affected person

You are entitled to request information about which of your personal data we process. Insofar as the relevant legal requirements are met, you may also request the transfer, correction or deletion of data or restriction of processing.

Please be aware that we may request proof to make sure that you are the person you claim to be.

In addition, you are free at any time to withdraw the consent you have given for the processing of personal data with future effect. Under the statutory provisions, you also have the right to object to certain types of processing, such as processing on the basis of a public interest or a balance of interests. In particular, you have a right to object to the processing of your data in connection with direct advertising, if this is done on the basis of a balance of interests.

If you have any questions, suggestions or requests, please contact datenschutz@wander.ch.

8. Right of appeal

You have the right to lodge a complaint about the processing with the supervisory authority responsible for data protection.

9. Data security

We take all reasonable technical and organisational measures to protect your personal data from manipulation, loss, destruction, unauthorised access or other misuse and to guarantee the protection of your rights and compli-ance with the applicable data protection provisions.

The measures taken are designed to guarantee the confidentiality and integrity of your data and to ensure the ongoing availability and capacity of our systems and services when processing your data. They are also designed to ensure the restoration of availability of your data and access to it in a timely manner in the event of a physical or technical incident.

The encryption of your data also forms part of our security measures. Data that you enter on our website is encrypted during transmission using HTTPS. All information that you provide online is transmitted via an encrypted transmission route. This means that the information cannot be viewed by unauthorised third parties at any time. 

Our data processing and security measures are updated continually in accordance with technological advances.

If you register with us as a user, access to your customer account is only possible after entering your personal password each time. You should always keep payment and access information confidential and close the browser window when you have finished your communication with us, in particular if other people use the same comput-er. 

We also take our own internal corporate data protection seriously. Our employees and the service providers who work on our behalf are obliged to maintain secrecy and comply with data protection provisions. Furthermore, ac-cess to personal data is only granted to these parties to the extent required.

Information we collect about your use of our Website is transferred to, and stored in, Switzerland. The European Commission considers that Switzerland offers adequate protection for personal data. Otherwise, we do not trans-fer your personal data to any country outside the European Economic Area.

10. Links to other providers’ websites

Our websites may contain links to other providers’ websites which this privacy policy does not cover. After you click on a link, we no longer have any influence on the processing of any data that may be transmitted to the third party by clicking on the link (e.g. IP address or URL of the link), since the conduct of third parties is naturally outside of our control. As a general rule, we are therefore unable to take any responsibility for the processing of your data by third parties. Insofar as the processing of personal data is connected with the use of other providers’ websites, please take note of the data protection information supplied by the provider concerned.

If you still would like to know more about the topic, we hope you will find the following detailed information useful:

11. Visiting our websites

When you visit our websites, our servers temporarily store the following data in a server log file: 

  • IP address of the requesting computer
  • Date and time of the access/retrieval
  • Name and URL of the data retrieved
  • Your computer’s operating system and the browser you use
  • Country from which our website is accessed
  • Name of your internet service provider
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Volume of data transmitted in each case
  • Website last visited
  • Browser settings
  • Language and version of browser software
  • Activated browser plug-ins

We have a legitimate interest in temporarily storing your personal data and log files in order to

  • deliver the contents of our website correctly, ensure its security and optimise the advertising for it
  • provide prosecuting authorities with the necessary information for prosecution in the case of a cyber attack
  • further improve what we offer and our internet presence
  • collect statistical data

We will only store information about your visit to our website for as long as is necessary for the specified purposes. We typically delete our browser information every 26 months.

11.1 Getting in touch / interaction
You have the option of contacting us via the contact form on our website and via our social media channels and you can interact with us, such as by sharing comments and posts (e.g. photos, videos and personal stories). The mandatory details (*) are required, and the others are voluntary. This makes it possible for you to communicate with us, and vice versa, so that you can draw our attention to something or we can become aware of your needs.
Personal data collected in this context will be processed for the purpose of handling your request or interacting with you. You and we both have a shared legitimate interest in the processing of your enquiries and in enabling interaction with you.  

You may object to this processing at any time. Please send your objection to datenschutz@wander.ch.

Your personal data will be deleted once the request you submitted has been resolved. Deletion will take place if it is evident from the circumstances that the subject matter of the request has been conclusively clarified and there is no statutory retention period that prevents deletion. 
 
11.2 Competitions
When running competitions, we use your personal data to notify prize winners and to promote our offers. Further details can be found in our conditions of participation for each competition.
Your personal data will be processed for the purpose of running the competition and to fulfil legal obligations, as well as to serve our legitimate interests in connection with competitions and prizes. If you have consented to the processing of your personal data, we will process your data for the purpose specified in the declaration of consent. You may withdraw your consent at any time. Please send your withdrawal of consent to datenschutz@wander.ch.


11.3 Online applications
If you apply for a job with us, we need your details to process your application. During the application process, the standard correspondence data such as postal address, email address and telephone number is stored in the applicant database along with your title, name and first name. In addition, all the documents submitted by you in connection with the application are recorded. This data is stored, evaluated, processed or forwarded internally solely in the context of your application. The data may be used for statistical purposes (e.g. reporting). It is not possible to identify any individual from this process.

Processing may also be carried out electronically. This is the case in particular if you transmit the corresponding application documentation by electronic means. Your data is then processed on the systems of our software partner www.abacus.ch/en. All of the information you send us in connection with an application for employment will be stored within the European Economic Area (EEA) and will not be transmitted outside of this area.
The basis for the processing of application data is our legitimate interest in conducting the application process. 

If we enter into an employment agreement with you, the transmitted data is stored for the purpose of executing the employment relationship in accordance with the legal requirements. If the application process ends without employment, your personal data is stored for three more months for documentation purposes and then deleted, provided that you have not given us your consent to retain your details for further application processes for a specific period.

12. Amendments to the privacy policy

WANDER reserves the right to amend this privacy policy at any time. Please review this policy regularly. The policy was last updated on 12 March 2021.