We recognize the importance of your privacy and of transparency in our processing of your personal data.
We only process your personal data if we have a valid legal ground to do so.
1.2 We will only process your personal data if we have valid legal ground to do so. Depending on the processing activity carried out, we will therefore only process your personal data if:
- we have obtained your prior unambiguous consent;
- the processing is necessary to perform our contractual obligations towards you or to take pre-contractual steps at your request;
- the processing is necessary to comply with our legal or regulatory obligations; or
- the processing is necessary for our legitimate interests except where they’re overridden by your interests or fundamental rights and freedoms. Relevant ‘legitimate interests’ include: (i) to benefit from cost-effective services (e.g. we may opt to use certain Website offered by suppliers); (ii) to protect the security of our IT systems, architecture and networks; and (iii) to meet our corporate and social responsibility objectives.
2. How we collect your personal data
We collect the personal data which you provide.
2.1 We collect, directly or indirectly via our partners, the personal data you provide in your correspondence with us and/or our partners, or in your use of the Website, for example, when creating and/or managing your account. Such information includes your name, date of birth, gender, address (payment and/or shipping), email, telephone numbers, invoice and/or credit card information, and any other information which we and/or our partners may request from you.
Certain personal data are also collected in an automated manner.
2.2 We may also automatically collect personal data when you access and use the Website, including by means of tools, web forms, cookies and other active elements contained in our emails and/or those of our partners, such as the IP address or other user identifications on your devices, visiting date on the Website, the geolocation of your devices, the data contained in your device, the data contained in third party services (e.g. social plug-ins), your preferences, the internet sites that you visit before and after the Website, the links displayed on the Website which you select or other information related to your interaction with the Website, including with the emails sent in connection with the Website.
You can define certain authorizations and settings related to the automated collection of your personal data.
2.3 You may define certain authorizations related to data collection, in particular in connection with the geolocation and your device’s right to access data contained in your device, according to the available functionalities. You may also define certain settings for the automated collection of your personal data on your web browser or through the Website by clicking here.
3. How we process your personal data
We may process your personal data by automated means but take appropriate security measures in this respect.
We do not use any automated individual decision-making and/or profiling mechanisms on the Website.
4. Purposes of Data Processing
We process your personal data to operate the Website and to provide the related services.
4.1 Your personal data are collected so that Rayform may operate the Website and/or provide the services connected in accordance with the circumstances such as for fulfilling your purchases of the products sold or offered on the website, for interacting with you concerning the customization of the products and potential other services or for providing you with the requested information, or in the manner expressly indicated when the personal data concerned are collected.
We may process your personal data for advertising purposes.
We may process your personal data to improve the services and for statistical purposes.
4.3 Unless you object to such processing, we may process your data for statistical purposes, for internal analysis, for the ability to ensure the Website’s stability and security and/or for the improvement of the products and services available through the Website, in accordance with data protection laws.
We may process your personal data if we have a legitimate interest or a legal obligation to do so.
4.4 We may further process your personal data if we have a legitimate interest or a legal obligation to do so. This will for instance be the case if we need to disclose certain information to public authorities or retain such information for tax or accounting purposes, or the establishment, exercise or defense of legal claims.
5. Duration of Personal Data Storage
6. Communication to Third Parties
We may disclose your personal data to third parties in case this is necessary for the proper operation of the Website and the provision of the related services.
6.1 We may communicate your personal data to third parties as part of operating the Website and to subcontractors such as IT systems providers, cloud service providers, database providers, automated marketing solutions providers and consultants, including Swell (hosting and ecommerce services), Hubspot (customer relationship manager), Mailchimp (marketing), Facebook (marketing), Stripe (payments) and PayPal (payments). We may use automated marketing solutions to better target our promotional activities and in order to send you more interesting and customized information and advertising via the Internet. In this context, we may transfer some of your personal data, in particular the IP address and/or other user identifications for your devices, to the third-party suppliers of these solutions, who will process this data in accordance with their own internal data protection and privacy policies.
6.2 We may also enable you to use third-party services directly from the Website, namely through social plug-ins of Facebook, Instagram, and Google Analytics, in which case you recognize that the third-party operators of these services may access some of your personal data in connection with the Website.
We may also disclose your personal data to third parties when we have a legitimate interest or legal obligation to do so.
6.3 We may also disclose your personal data when we have a legitimate interest to do so, for instance to (i) any third party to whom we assign or transfer any of our rights or obligations; (ii) to competent courts or supervisory or regulatory bodies, when we must compellingly disclose your personal data, pursuant to any applicable law, regulation or order.
7. International Transfers
Your personal data may be disclosed outside of your country of residence, including to countries that do not guarantee the same level of data protection and privacy as Switzerland and the European Union.
7.1 The personal data that we collect from you may be stored and processed in your region, or transferred to, stored at or otherwise processed outside your country of residence, including, in respect of residents of a country within the European Economic Area (the “EEA”) or Switzerland, in a country outside the EEA or Switzerland, including without limitation the U.S., or any other country which do not necessarily offer an adequate level of data protection as recognized by the European Commission or Switzerland. Your personal data may also be processed by staff operating inside or outside your country of residence, including staff located outside of the EEA or Switzerland, who work for us or our service providers.
7.2 Where we transfer your Personal Data outside the EEA or Switzerland, we will ensure that suitable safeguards are in place to help ensure that our third party service providers provide an adequate level of protection to your Personal Data, for instance by relying on the EU-U.S. Privacy Shield Framework, the Swiss-U.S. Privacy Shield Framework, or on standard contractual clauses adopted by the European Commission.
We maintain physical, technical and procedural safeguards to keep secure your personal data.
8.2 Although we take appropriate steps to protect your personal data, no website is completely secure. Therefore, we cannot guarantee that data you provide to us is safe and protected from all unauthorized third-party access and theft. We waive any liability in this respect.
8.4 If we have reasonable reasons to believe that your personal data have been acquired by an unauthorized person, and applicable law requires notification, we will promptly notify you of the breach by email (if we have it) and/or by any other channel of communication (including by posting a notice on the Website).
9. Cookies and Similar Technologies
9.2 We use various types of cookies or other similar technologies some of which are likely to automatically process data directly on your devices and/or to transfer data personal concerning you to us.
You may manage the cookies and similar technologies via the settings of the Website, your browser and/or your devices.
9.3 If you do not want cookies to be stored on your device, you can configure your cookie settings on the Website by clicking here, in your browser or your device to refuse and/or restrict the cookies. Certain cookies are however essential to the functioning of the Website itself and its use may be altered or prevented by refusing these cookies.
9.4 If you do not refuse or restrict the cookies, you consent to their use and to the processing of your personal data collected in this manner.
9.5 For more information, please visit http://www.allaboutcookies.org/. Please check
the user help sections of your internet browser or electronic devices for specific instructions on the
management of cookies.
9.7 Some cookies are retained in your electronic device for only as long as you access and use the Website, while others persist for a longer specified or unspecified period. Please see the Cookie Declaration section below for a description of the cookies we use and the ability to change your preferences.The Website uses third party services or software. Many of these services may set cookies on your electronic device. You can block or remove cookies yourselves by altering the settings in the Cookie Declaration below, your electronic device or browser. Blocking these cookies is unlikely to impact on your experience of the Website.
9.8 In particular, the Website uses the Cookie Google Analytics which collects information and reports website usage statistics without personally identifying individual visitors to Google. You can opt out of providing us with this information if you wish, with no impact on your experience of the Website. To opt out of being tracked by Google Analytics when using the Website: see https://tools.google.com/dlpage/gaoptout.
10. Your Rights
You have the right to access your personal data processed by us and may request without limitation that they be removed, updated, or rectified.
10.1 Except as otherwise provided by law, you are entitled at all times to know if we are processing personal data concerning you. You may contact us to know the content of such personal data, verify their accuracy and request that they be supplemented, removed, updated, or rectified. You also have the right to ask us to cease processing any personal data that may have been obtained in breach of applicable law, and to object to the processing of your personal data for any other legitimate reason provided for under applicable data protection laws.
10.2 By accessing your user account (if any), you can review, update, correct or delete the personal data available within your user account. If you would like us to delete your personal data from our system, please send a request to the contact details below and your request will be accommodated unless we have a legal obligation to retain the record. Please note that any information that we have copied may remain in back-up storage for some period of time after your deletion request.
10.3 Where we rely on your consent to process your personal data, we will seek your freely given and specific consent by providing you with informed and unambiguous indications relating to your personal data. You may revoke at any time such consent.
10.4 You may also have the right to request your personal data’s portability, i.e. that the personal data you have provided to you be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to our confidentiality obligations, subject to applicable data protection laws.
You have the right to lodge a complaint
10.5 If you are not satisfied with how we process your personal data, you may file a complaint with the competent supervisory authority, in addition to your rights outlined above.
If you believe your personal data has been used in a way that is not consistent with this policy, or if you have any questions or a request in relation to the processing of your personal data by us, please contact us at https://therayy.com/contact-us/.
Date last updated: 19.10.2021