Personal data and cookies policy

1. What personal data does Algorigin collect?

Algorigin collects the personal data that you make available. This includes, on the one hand, data that you provide to Algorigin yourself and, on the other, data recorded automatically or manually during contact with Algorigin.

1.1 Customer data:

• first name and surname;
• year of birth;
• purchasing habits;
• delivery address;
• billing address;
• payment method (card, PayPal, PostFinance, QR-bill);
• language preferences;
• telephone number(s);
• email address(es) and password for your Algorigin customer account;
• customer numbers;
• information on subscriptions to newsletters or other advertising channels;
• consent to receive advertising;
• information on the online customer account (including opening date and username);
• membership of groups within Algorigin’s field of business;

1.2 Customer activity data:

• contract data (including date, nature and content of the contract, contracting parties, contract term and value, and claims asserted under the contract);
• purchase information (including date, place and time of purchase, type, quantity and value of goods or services purchased, cart, abandoned cart, payment methods used, paying office, purchase history);
• customer service information (including returns, complaints, warranty cases and delivery information);
• session data relating to visits to our web pages, mobile apps or offers on online platforms, multimedia portals or social networks (including duration and frequency of visits, preselected languages and countries, information on your computer’s browser and operating system, IP addresses, search terms and results, ratings submitted);
• location data when mobile devices are used;

2. For what processing purposes does Algorigin collect your personal data?

Algorigin collects and records personal data in order to carry out the following processing:

• management of the customer account, shopping cart and orders;
• management of payment and credit transactions;
• management of deliveries;
• customer relationship management (telephone / chat / email), order tracking, after-sales service, product returns and refunds;
• recording of exchanges between customer service and the customer by telephone or chat, in order to improve the service;
• customer satisfaction management (collecting customer reviews of products and of customer service performance);
• fraud prevention when orders are paid for and management of unpaid orders;
• fraud prevention when orders are paid for and management of unpaid orders;
• statistical operations, analysis, selection and segmentation of customers in order to better understand them;
• sending targeted commercial offers by email, mobile notifications, on social networks, on other websites or via any other medium;
• personalisation of websites (mobile and desktop) and apps according to customers’ interests;
• measurement of traffic on websites (mobile and desktop) and mobile apps;
• provision of social media sharing tools;
• running competitions and promotional games;
• sharing information with business partners.

Where processing requires consent, the data subject may withdraw their consent at any time by sending a request by email to info@algorigin.com.

3. Who collects the personal data?

The company that collects the personal data and carries out the data processing is:

Algorigin SA, Place Ruth Bosiger 6 1201 Genève, Switzerland, tel. +41 (0)22 552 01 25, info@algorigin.com, www.algorigin.com, UID: CHE-456.417.288

4. Why does Algorigin collect and process your personal data?

Algorigin processes your personal data for a variety of purposes, in particular for one or more of the purposes listed below:

4.1 Purposes relating to our range of goods and services:

• preparation and sale of our goods and services;
• processing of orders and contracts, namely sending order confirmations, shipping and delivery, as well as delivery and invoicing operations;
• organising and running courses, seminars or training sessions;
• organising and providing customer services;
• organising and conducting market research and opinion polls.

4.2 Purposes relating to customer communication:

• preparing, managing and carrying out customer communication by post or by electronic means;
• commercial communication by post and by telephone, fax, email, voice messages, text messages (SMS), multimedia messages (MMS), video messages or instant messaging;
• evaluating the use of our offers by telephone, fax, email, voice messages, text messages (SMS), multimedia messages (MMS), video messages or instant messaging, covering aspects such as type, frequency, duration and exact place of use.

4.3 Purposes relating to special activities and events:

• organising and running competitions or prize draws, namely informing winners and publishing their names on our web pages and mobile apps and via our offers on online platforms, multimedia portals or social networks;
• organising and running special events such as promotional activities, sponsorship activities or cultural and sporting events.

4.4 Purposes relating to the analysis of customer behaviour:

• individualised and personalised, as well as anonymous and group-based, recording and analysis of customers’ past and current behaviour and purchasing habits when using the offers on our web pages, mobile apps, online platforms, multimedia portals and social networks;
• individualised and personalised – as well as anonymous and group-based – identification, classification and analysis of customers’ current and potential needs and interests;
• individualised and personalised – as well as anonymous and group-based – classification and analysis of customer behaviour and customer potential;
• statistical evaluation of customer behaviour on the basis of anonymised customer data;
• linking your newly collected personal data with data previously collected by Algorigin;

4.5 Purposes relating to direct marketing:

• simplifying processes, in particular purchasing or booking processes, and using the findings of customer behaviour analysis with a view to continuously improving our entire range of goods and services;
• avoiding unnecessary advertising by using the findings of customer behaviour analysis for individualised and personalised direct marketing;
• sending individualised and personalised advertising by post or by telephone, fax, email, voice messages, text messages (SMS), multimedia messages (MMS), video messages or instant messaging;
• individualised and personalised adaptation of the offers and advertising displayed on our web pages or mobile apps or on our channels on online platforms, multimedia portals and social networks.

5. On what legal basis does Algorigin collect and process your personal data?

Users’ privacy is protected by law. Under data protection legislation, Algorigin may only use its users’ personal data if it has a valid legal basis. Algorigin must ensure that it has one or more of the following legal bases:

• performance of a contract (for example, to process and fulfil an order for goods or to open and manage an Algorigin account), or;
• compliance with a legal obligation (e.g. retention of invoices), or;
• where it is in Algorigin’s legitimate interest, or;
• where the user has given their consent.

A “legitimate interest” of Algorigin must not override the rights and freedoms of users. Examples of legitimate interests mentioned in the GDPR include fraud prevention, direct marketing and data sharing within a group of companies.

6. Who is your personal data shared with?

Your data may be shared with Algorigin’s partners, who may process the data on their own behalf (third-party recipients) or solely on behalf of and according to the instructions of Algorigin (third-party processors).

The recipients of the data are:

• banks;
• police authorities, in connection with judicial requests relating to fraud prevention;
• business partners, in particular marketing and advertising agencies.

Algorigin also uses processors for the following operations:

• secure payment on websites and mobile apps;
• fraud prevention and collection of unpaid debts;
• shipping your orders and parcels;
• managing chat and telephone calls, any recordings thereof, and sending postal mail;
• personalising website content;
• carrying out technical maintenance and development of the website, internal applications and the Algorigin information system;
• collecting user reviews;
• sending marketing emails and mobile notifications.

Algorigin may also share personal data if the structure of the Algorigin group changes in the future, in the event of a sale, transfer or merger of all or part of the business, or if Algorigin acquires or merges with another company.

If such a transaction takes place, Algorigin will ensure that the other party complies with data protection legislation.

7. What are your rights regarding your data?

Any natural person using the service may exercise the following rights:

• the right of access,
• the right to rectification,
• the right to object to the processing of their data and to have it erased,
• the right to object to profiling,
• the right to restriction of processing,
• the right to data portability.

Finally, if Algorigin detects a personal data breach likely to result in a high risk to your rights and freedoms, you will be informed of the breach as soon as possible.

These rights may be exercised with Algorigin, the company that collected the personal data, as follows:

Electronically, by sending an email to info@algorigin.com.

The request must be accompanied by proof of identity.

Algorigin will reply as quickly as possible after the right has been exercised.

If you exercise your right to object to marketing profiling, please note that you will continue to receive commercial communications, but these will be less relevant and will no longer be targeted to your interests.

8. How long does Algorigin keep your data?

8.1 Data retention

Algorigin keeps your personal data for as long as it appears necessary or appropriate to ensure compliance with applicable laws, or for as long as it is needed for the purposes for which it was collected. Algorigin deletes your personal data as soon as it is no longer needed and, in any event, when the maximum retention period set by law expires.

8.2 In the event of death

You may issue instructions regarding the retention, erasure and communication of your personal data after your death in accordance with Article 40-1 of Law 78-17 of 6 January 1978. These instructions may be general or specific.

9. Is data sent outside Switzerland?

Please note that personal data concerning you may be transferred, for the purposes defined above, to companies located in countries outside Switzerland that offer an adequate level of personal data protection.

Before any transfer outside Switzerland, and in accordance with the applicable regulations, Algorigin implements all the procedures required to obtain the necessary safeguards to secure such transfers.

10. Holder of the collected data file

The holder of the collected data file is: Shopify Inc., Ottawa, Ontario.

11. What marketing communications may be sent to you?

11.1. Principles applicable to Algorigin

Algorigin uses your contact details to send you targeted advertising, in particular by email, post, SMS, mobile notification, on social networks or on third-party websites.

In this context, Algorigin undertakes to comply with the rules applicable to each marketing channel.

11.2. Marketing by email and SMS

Algorigin complies with the rules laid down by federal law, which require your prior express consent before marketing communications are sent electronically (email or SMS).

Accordingly, when you create your account on the website, you are expressly asked for your consent:

• to receive offers from Algorigin by email;
• to receive offers from Algorigin by SMS.

Algorigin will not send you personalised communications by email or SMS if you have not consented to them.

There is one exception: a User who has not given prior consent may nevertheless be contacted if they are already an Algorigin customer and the purpose of the communication is to offer similar products or services.

In all cases, the User can opt out of receiving these communications by:

– when creating the account, ticking “no” in the boxes relating to marketing;

– for email, clicking the unsubscribe link included in every email or going to the newsletter section of their Algorigin account;

– for SMS, replying STOP to the number indicated in the message or going to the newsletter section of their Algorigin account;

– contacting customer service.

11.3. Email retargeting

After browsing the Algorigin website, you receive an email even though you have not given your email address to Algorigin. How is this possible?

Algorigin uses the services of companies whose role is to identify internet users who have already visited its website and send them personalised emails.

These companies use cookies to distinguish between users and then personalise the advertising they receive according to their browsing history.

11.4. Who collected my email address?

This processing involves partners who have already collected your email address, as well as your consent to receive advertising.

You can object to this type of processing by sending an email to info@algorigin.com.

11.5. Telephone marketing

Algorigin may contact you by telephone to offer you products or services.

If you do not wish to be contacted, you can exercise your right to object with Algorigin by sending an email to info@algorigin.com.

12. What security measures are taken to protect my data?