Privacy policy

We, Crazycat Media GmbH, Spinnlerstrasse 2, 4410 Liestal, operate the website zigarren.zone and origin-of-cigar.com (launch 01.01.26) and are the provider of the services and content offered on the website.

Data protection is an important concern for us. We only process your data in compliance with the relevant legal provisions. The following information refers to the Swiss Data Protection Act (DSG) - where applicable - while at the same time taking into account the GDPR (EU General Data Protection Regulation). We are subsequently deemed to be responsible for the collection, use and processing of your data.

You can contact us at any time by e-mail and post:

Crazycat Media GmbH

Spinnlerstrasse 2

4410 Liestal

info@crazycat-media.com

+41 79 305 21 45

In the following, we will show you whether and how we process your data:

1. overview

2. data processing, storage and deletion

We only process personal data that we collect directly via our website, the associated applications, via our platforms, via so-called «landing pages» or as part of the business relationship with our customers and other business partners. Processing only takes place with consent or if there is a corresponding legal basis.

Within the scope of the consent you have given, we will only process your data within the limits of this consent, unless one of the following legal bases applies. We expressly point out that you can revoke the consent you have given at any time, although this does not affect any - lawful - processing that has already taken place.

The following reasons are possible legal bases:

• Consent of the data subject;
• Fulfilment of the contract with the data subject as a contracting party or necessary pre-contractual measures at the request of the data subject;
• Fulfilment of necessary legal obligations of our company;
• Performing or exercising a task in the public interest;
• Legitimate interests of our company, provided that the interests of the data subject or their fundamental rights do not prevail.

The personal data collected will be deleted as soon as we no longer need it for the stated purpose or the purpose for which it was stored no longer applies. On the other hand, data must be stored if the Swiss or European legislator stipulates a corresponding obligation in the respective laws or regulations. Such obligations arise, among other things, from contract and tax law as well as from the provisions on commercial accounting. Business documents, contracts or accounting records require a retention period of 10 years. This data, which also includes personal data but which we no longer need to provide our services, is blocked and subsequently used solely for accounting and tax purposes.

3. disclosure to third parties

In the course of order processing, it may be necessary to utilise the services of third parties. In this case, it may be necessary to pass on data to these external service providers in order to provide services in accordance with the contract. The legal basis for passing on data is identical to the legal basis for lawful processing and can be viewed under section 2. In any case, we contractually ensure that third parties commissioned to process your data comply with the data protection requirements. Finally, under certain circumstances we may also be obliged by official or court order to disclose data to third parties or government agencies.

4. provision of our services and creation of log files

As soon as you access our website, our system automatically collects and stores information in so-called log files. These are

• Browser type and version
• Operating system
• IP address
• Internet service provider
• Date and time

The aforementioned data cannot be directly assigned to any person. The data collected and stored in this way is not merged and stored with other personal data about you, but is stored in our system. The legal basis for the aforementioned collection and storage in log files is the legitimate interests of our company.

Storage in log files serves exclusively to ensure the functionality of our services. It also supports the optimisation of our services and ensures the security of our information technology systems. In any case, the log files are only stored for as long as is necessary to fulfil the purpose for which they were collected. Deletion takes place automatically after each session.

The collection of your data and its storage in log files is absolutely necessary for the operation of our website; there is no option to object to this.

5. cookies

We use cookies on our website. These are small text files that your browser stores on your computer (in the corresponding browser folder or under the programme data).

This makes it possible to uniquely identify the browser the next time you visit our website. The display settings and login information are stored and transmitted in the cookies. We use cookies for the user-friendly and secure design of our website. The legal basis for this is the legitimate interests of our company. In addition, you can decide for yourself in the cookie banner whether you only want to allow the necessary cookies.

Due to the fact that cookies are stored on your computer system, you have full control over their use. By changing the settings in your browser, you have the option of deactivating or restricting the transmission of cookies. You can also delete stored cookies at any time via your browser settings; this can also be done automatically. We would like to point out that deactivating cookies may mean that you can no longer use all the services on our website.

6. matomo

We use Matomo (formerly Piwik), a web analysis service, on our website. On our behalf, Matomo will use the information received from you to analyse your use of our website, to compile reports on our website activity and to provide us with other services relating to website activity and internet usage. The basis for data processing is your consent; you can revoke this consent at any time via the banner.

Further information about Matomo can be found at: https://matomo.org/privacy/.

7 AWeber

We use the AWeber tool from the company of the same name AWeber Systems Inc, 4275 County Line Rd #20, PMB 186, Chalfont, PA 18194, USA, for our newsletter. Our newsletter is used to contact you, whereby the legal basis for the use of AWeber is your consent as a data subject when you register for it.

The processing activities may take place in the USA and/or be transferred to the USA for this purpose. The basis for data processing and data transfer to the USA are so-called standard contractual clauses (see Art. 46 para. 2 and para. 2 GDPR). Through these clauses, AWeber undertakes to comply with applicable European law and the level of data protection.

Further information on the standard contractual clauses and/or the data that AWeber processes can be found at https://www.aweber.com/dpst.htm and https://www.aweber.com/privacy.htm.

8. contact form

Our website has various electronic contact forms. These are used to enable you to contact us. Depending on the form, the following data provided by you will be transmitted to us and stored: first and last name, telephone number, e-mail address, subject and message. In the careers section, you also have the option of uploading your CV, which will then also be saved by us.

The information you provide us with is used solely to process your enquiry/message. By sending the enquiry/message, you consent to the data processing described. The legal basis for this is your consent. You can revoke your consent at any time. Data processing that has already taken place is not affected by such a cancellation.

9. right to information

As a data subject, you can request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have the right to access the following information:

• The purposes for which the personal data is processed;
• The categories of personal data that are processed;
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• The planned duration of the storage of personal data concerning you or, if this is not possible, the criteria for determining this duration;
• The existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing;
• The existence of a right of appeal to a supervisory authority;
• All available information about the origin of the personal data that was not collected from you;
• The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You also have the right to request information as to whether personal data concerning you is transferred to a third country or an international organisation; in this case, you have the right to be informed of the appropriate guarantees in connection with the transfer.

10. right to rectification

You have the right to obtain from us without undue delay the rectification and/or completion of inaccurate and/or incomplete personal data concerning you.

11. right to cancellation

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You withdraw your consent and there is no other legal basis for the processing;
• You object to the processing on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing or you object to the processing for direct marketing purposes;
• Your personal data has been processed unlawfully;
• The deletion of your personal data is necessary to fulfil a legal obligation;
• The personal data concerning you was collected in relation to information society services offered.

12. right to restriction of processing

You - as the data subject - have the right to demand that we restrict processing if one of the following conditions is met:

• The accuracy of the personal data is contested. The restriction may be requested for the period of time that enables us to verify the accuracy of the personal data;
• The processing is unlawful and you request restriction instead of erasure;
• We no longer need the personal data for processing, but you need it for the assertion, exercise or defence of legal claims;
• You object to the processing.

If the processing of personal data concerning you is restricted, we may, with the exception of storage, only process the data with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of public interest.

If you have obtained a restriction of processing in accordance with the aforementioned conditions, you will be informed by us before this restriction is lifted.

13. information and notification obligation towards third parties

If we have made the personal data concerning you public and we are obliged to delete it, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the data controller responsible for data processing who processes the personal data that you have requested the deletion of all links to the personal data concerning you.

We will notify all recipients to whom personal data has been disclosed of any rectification or erasure of personal data and any restrictions on processing, unless this proves impossible or involves disproportionate effort.

14 Exceptions to the right to erasure

The right to erasure does not exist if the processing is necessary for the exercise of the right to freedom of expression and information and/or for the establishment, exercise and/or defence of legal claims.

15. right to data portability

You - as the data subject - have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us to which the personal data have been provided, where the processing is based on consent or on a contract and the processing is carried out by automated means.

You also have the right to obtain that the personal data concerning you be transmitted directly by us to another controller, insofar as this is technically feasible. This must not adversely affect the rights and freedoms of other persons.

16. right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. An additional exception is processing for the establishment, exercise or defence of legal claims.

If we process personal data concerning you for the purpose of direct marketing, you have the right to object at any time to the processing for the purpose of such marketing. If you object to the processing for the aforementioned purpose, we will no longer use your personal data for this purpose.

17. revocation of consent

You have the right to withdraw your consent at any time. This revocation does not affect the legality of the - lawful - processing that has already taken place.

18. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular at your place of residence (EU/CH), your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for us is: Federal Data Protection and Information Commissioner, Feldweg 1, 3003 Bern

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.

Version 1.0 / Crazycat Media GmbH, August 2023