We appreciate your interest in our website, gift portal and our company (hereinafter referred to as "Novadoo" or "we"). We value the trust placed in us and we are committed to handling your personal data with due care and protecting it from misuse.

We take the protection of your personal data very seriously and adhere strictly to data protection legislation (EU GDPR). We only collect personal data on this website and the gift portals of our customers to the extent necessary. We will, under no circumstances, sell or transfer the collected data to third parties without authorisation. The purpose of this privacy policy is to provide you with information about the handling of your data.

By using our website and our customers' gift portals and the content provided therein, you agree that we may store, process and use the data you share with us in compliance with this privacy policy.

We would like to point out in this context that any transfer of data over the internet (for example, when communicating by email) can pose a security risk. It is impossible to provide complete protection against unauthorised third-party access.

If you have any questions or comments about data protection, please contact our data protection officer:

Data protection officer
Marc Schmid
Novadoo AG
Zugerstrasse 8a
CH-6340 Baar
Email: info@novadoo.com

Your rights

You have the following rights with regard to your personal data:

• Right to information (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to processing (Article 21 GDPR)

If you believe that the processing of your personal data by us is unlawful, or that we may be in breach of data protection laws and regulations for other reasons, please contact us directly.

Scope of the processing of personal data

In principle, we only collect and use personal data of our users if this is necessary for the provision of our services and our website or online content.

The collection and use of personal data for other purposes is only lawful

1) If the user has given their consent.
2) If the processing is necessary for the performance of a contract, or
3) For the purpose of legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

This does not apply to cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.

Information (addresses, feedback, gift preferences, etc.), which you enter into the gift portal of the company that offers you a gift and for which we have built the gift portal to offer the specific corporate look & feel, and which can be viewed and used by your company in the context of the existing customer relationship.

Obtaining consent / right to withdraw

Consent in accordance with the Article 6 (1) (a) GDPR must be freely given and is usually obtained electronically. The consent is given by ticking the relevant box, which documents the granting of consent. When consent is given electronically, the so-called double opt-in procedure (https://www.onlinemarketing-praxis.de/glossar/double-opt-in) is used to identify the user (e.g. when subscribing to a newsletter). The content of the declaration of consent is recorded electronically.

Right to withdraw: Please note that once you have given your consent, you can withdraw it in full or in part at any time with effect for the future; the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Please use the contact details mentioned above (data protection officer) to send us any withdrawal requests.

Deletion of data

The data we process will either be erased or restricted in processing in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this privacy policy, the data we store will be erased as soon as the data are no longer necessary in relation to the purposes for which they were collected and this does not conflict with statutory retention requirements.

Where the data is not erased because it is necessary for other and legally permissible purposes, the processing of the data will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that has to be retained for business or tax reasons.

Under Article 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us and have the right to transmit those data to another controller.

Right to withdraw

Under Article 7 (3) GDPR, you have the right to withdraw your consent with effect for the future.

Right to object

Under Article 21 GDPR, you have the right to object to the future processing of data concerning you at any time.

Disclosure of data

Novadoo will not disclose your data or feedback to third parties for commercial purposes. This does not apply to information (addresses, feedback, gift preferences, etc.), which you enter into the gift portal of the company that offers you a gift and for which we have built the gift portal to offer the specific corporate look & feel, and which can be viewed and used by your company in the context of the existing customer relationship.

If your data is processed by our service providers who assist us in preparing the dispatch and delivery of our products, the scope of the disclosed data is limited to the minimum required and only for the purpose of sending the products.

We only use processors that have been carefully selected and are obliged to handle your data with due care and to observe our own data protection standards in accordance with the statutory provisions of Article 28 GDPR.

We regularly review technical and organisational measures. In particular, our processors are not permitted to disclose the data on to third parties for advertising purposes or to use the data for commercial purposes themselves.

Transfer to third countries

Where we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA) or Switzerland) or in the context of the use of third-party services or disclosure or transmission of data to third parties, processing will only take place if it is necessary to meet our pre-contractual or contractual obligations, you have given consent to processing, for compliance with a legal obligation or for the purpose of our legitimate interests. Without prejudice to legal or contractual permits, we process the data or have the data processed in a third country only if the requirements of Article 44 et seq. GDPR have been met. This means that processing is carried out, for example, on the basis of special guarantees, such as the officially recognised assessment of the adequacy of the level of data protection (e.g. the "Privacy Shield" in the US) or in compliance with officially recognised contractual obligations (so-called "standard contractual clauses").

Use of cookies

We use cookies to make the use of our application more attractive and to enable the use of certain functions. We use cookies on the basis of Article 6 (1) (f) GDPR.

Our interest in tailoring the application as best as possible to your needs and in optimising it from a business point of view is to be regarded as legitimate in the sense of the aforementioned provision. Cookies are small data files that are stored on your terminal equipment. Some of the cookies used by us will be deleted at the end of the browser session, i.e. after you close your browser (session cookies).

Other cookies will remain on your end device and enable us to recognise your browser when you next visit (persistent cookies). You can set your browser to notify you every time before storing cookies and decide on a case-by-case basis, whether to accept them. You can also limit the acceptance of cookies to certain cases or block the acceptance of cookies altogether.

If cookies are not accepted, the functionality of our website may be limited.

Which cookies are used in detail on this website, for what purpose and for how long they are stored on your device, You can see under "Settings" and "?" by clicking on the following cookie icon on the left-hand side in this browser window:

Google Analytics

We use the website analysis service "Google Analytics" from Google (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") to analyse website usage. Google Analytics uses cookies which enable analysis of the use of the website by our customers based on pseudonymous and / or anonymous information.

The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the USA. If IP anonymisation is activated on this website, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be truncated. Google will use this information to evaluate the use of this website on our behalf, compile reports on website activity and provide us with other services relating to the use of the website and the internet. Google will not associate your IP address transmitted by your browser with any other data held by Google. You can prevent cookies from being stored on your computer by setting your browser not to accept cookies. Please note that if you if you do this, some features of the website may no longer function properly.

If you do not wish to have your website usage analysed by Google Analytics, you have the following options:

You can prevent the data generated by the Google Analytics cookie concerning your use of the website (including your IP address) from being collected and sent to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: (http://tools.google.com/dlpage/gaoptout?hl=de).

We use Google Analytics to analyse data from AdWords and the double click cookie for statistical purposes. If you do not want this, you can opt out using the ad personalisation manager (http://www.google.com/settings/ads/onweb/?hl=en).

Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

To do this, your browser has to connect to Google's servers. Google will thus learn that our website was accessed by your IP address. We use Google web fonts to ensure a consistent and appealing presentation of our website. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

If your browser does not support web fonts, your computer will use the standard font.

Further information about Google Web Fonts is available at https://developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.

LeadForensics

We use products and services from LeadForensics (http://www.leadforensics.com) on this website for marketing and optimisation purposes. LeadForensics's registered office is located at Communication House, 26 York Street, London, W1U 6PZ, United Kingdom.

LeadForensics identifies the details of your organisation, including telephone numbers, web addresses, SIC codes, and company descriptions. LeadForensics shows the actual history of your visit to this website, including all pages you have visited and viewed and how long you spent on them. Under no circumstances will the data be used to identify any particular visitor. As far as IP addresses are collected, they are anonymised immediately after collection. LeadForensics will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet use.

If you use our services, we will usually only collect data that we need to provide the services requested, such as sending the gift or answering your inquiries. All the data you provide will be stored in encrypted form on secure servers. If we ask you for any additional data, this will be treated as voluntary information, and marked as such.

Changes to this privacy policy

Novadoo AG reserves the right to change this privacy policy at any time to the extent permissible by law.