Privacy Policy

1. Scope

This privacy policy governs how Lista Office LO, LOG Produktions AG, Alfred Lienhard Strasse 2, 9113 Degersheim, Switzerland (“LO”, “we”) handles the personal data of its customers, visitors to its website and mobile apps (“website”), regardless of whether the data originates from the data subject themselves or via a third party, and regardless of whether the personal data is transmitted to LO through the website or through another route.

2. Contact

You can contact us as follows:

Lista Office LO
LOG Produktions AG
Alfred Lienhard Strasse 2
9113 Degersheim

LO is represented by

Christian Mehling, CEO
info@lista-office.com

 

In the European Union, LO is represented by:

LOG Produktions AG
Alfred Lienhard Strasse 2
9113 Degersheim

LO is represented by

Christian Mehling, CEO
info@lista-office.com

3. General information

LO operates in the home & office furniture sector and its website provides information about the company's business activities, products and services, a platform for online purchases, and ways to contact the business.

LO complies with legal data protection requirements. All personal data collected during login or use of the website and protected under Swiss data protection law (the Swiss Datenschutzgesetz, “DSG”) or the European General Data Protection Regulation (“EU GDPR”) is used solely for the performance of a contract, unless we have your express permission, in particular in accordance with this privacy policy, for additional use, or the applicable laws permit such use. Our staff are required to treat personal data as confidential.

Since we process most personal data electronically, we have established suitable organisational and technical measures (e.g., IT security measures) to ensure that your personal data is protected. We furthermore provide regular training to our staff on the themes of data protection and information security.

4. What personal data is collected, and for what purposes?

We may collect your key data (company name (if applicable), surname, address, email address), personal data relating to the services provided to you, financial transaction data, your online preferences and your customer feedback.

We use this personal data for communication with you; for evaluation; for agreement of and processing of our business transactions with you (e.g., through our online shop); for operating our website; for billing; we also use it for market research and marketing, e.g. for analysing our customer base or for contacting you by post, email or text message. We may associate your key data in our database with industry information and interests.

Input fields for personal data that is essential for you to use our services are marked accordingly. Supplying us with your personal data in any other input fields is entirely voluntary. You can inform us at any time that you no longer want us to process this voluntarily provided personal data (see Section 11, Your rights).

We may collect data about your credit rating, in order to protect ourselves against payment defaults.

In addition, data about your browsing behaviour and website usage is collected. This includes, for example, information about the web browser and browser version you use to visit the website, when you visit the website, the operating system you are running, the referring website if you clicked on a link to reach our website, which elements of the website you use, and how you use them. This personal data is stored together with the IP address of the device you used to access our website. We use this data to display our website correctly and to optimise it; for protection against attacks or other infringements of rights; and to customise the website for you. We do not use this browsing and usage data to draw any conclusions about the data subjects and we evaluate the personal data anonymously on an individual basis, except where we need the personal data to clarify an infringement of rights.

5. Retention period

We only process personal data for as long as either it is needed for its respective purpose, or it is legally required for us to do so.

if you have created an account with us, we store the key data you provided for your account for an unlimited period of time. However, you can request deletion of your account at any time (see Section 13, Your rights). We will delete your key data, providing and to the extent that we are not required by law to retain it.

If you order from us without using an account, the key data you supply for this purpose will be deleted following the end of the guarantee period or conclusion of the service, if and to the extent that we are not required by law to retain the data. The deletion may take place immediately, or may be done in the course of regular batch deletions.

If we want to avoid further business interactions with a data subject due to misuse, payment default or for other legitimate reasons, we will store the relevant personal data for a period of five years, or ten years in cases of repeat offences.

6. Processing by third parties and abroad

We may employ other companies in our Group or third parties to process the personal data for the purposes specified.

These companies are marketing and market research companies, companies who handle the technical operation of our information technology (outsourcing partners), companies who provide analysis services (see Section 7), financial service providers, debt collection agencies, or legal services and public authorities. When we employ other companies in our Group or third parties to process personal data, these third parties are selected carefully and required to have suitable security measures in place to ensure the confidentiality and security of your personal data.

Processing by us or by the aforementioned third parties may also take place abroad, in European or non-European countries. Where this is the case, we ensure adequate contractual guarantees that any such third party uses the personal data in compliance with legal requirements and solely in the interests of LO. These guarantees are aligned with the standards of the European Commission, which are also recognised in Switzerland. You have a right to view the relevant guarantees in the respective contracts.

We have engaged the following third parties to process personal data:

  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, UK
  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  • Ops One, Weststrasse 77, 8003 Zürich
  • Snowflake Productions GmbH, Birmensdorferstrasse 94, 8003 Zürich, Schweiz
  • SuperOffice AS (HQ), Wergelandsveien 27, N-0167 Oslo, Norway

7. Analysis services

We use third-party services to analyse browsing behaviour. We also integrate some content from other websites.

We use the analysis services to measure and evaluate usage of the website.

The personal data collected in this way is transmitted anonymously to the servers of the third parties employed for the analysis services, which are located abroad, including in the USA.

8. Integration of third-party elements on the LO website

We integrate content from various third-party providers into our website – for example, videos from platforms such as YouTube or Vimeo, or Google Maps embeds. This integration makes it possible for you to consume content from these platforms on our website.

When you browse our website and such integrated content is displayed as an element of our website, a connection is automatically established with the third-party provider’s server. This means that personal data relating to your visit to the website, and in particular your IP address, is transmitted to the third-party provider. If you are logged in to the third-party provider when you visit our website (e.g., with a Google account), or if the third-party provider has placed cookies on your computer, it is possible that this third-party provider can determine that you have visited our website. You authorise us to transmit this information to third-party providers with whom you have an account.

Information about the purpose and extent of data processing by these third-party providers and your rights and configuration options in this respect can be obtained from the respective third-party providers.

9. Cookies and pixel tags

We use cookies and pixel tags on our website.

Cookies are small parcels of data that are sent by the webserver hosting our website to your browser. They are stored on your device and can be accessed by our webserver when you visit the website at a later time. Cookies store information about your browsing preferences and we can use them to improve your browsing experience. We distinguish between two types of cookie: session cookies and permanent cookies.

Session cookies are used during a single browsing session (e.g., browsing our online shop) to associate data stored by our server with you/your internet browser (e.g., to keep track of items you’ve added to your shopping cart). Session cookies are deleted when you close your web browser.

Permanent cookies are used to store your preferences or keep you logged in between separate visits to our website (e.g., the website language). They remain on your computer when you close your web browser. Whether and when permanent cookies are deleted is determined by your web browser settings (for example, some browsers delete permanent cookies if you have not visited the website for a month). When you use our website, you consent to the use of permanent cookies.

You can delete active session cookies or permanent cookies from your web browser at any time, and disable the use of cookies in your browser settings. However, if you disable cookies, the functionality of our website may be affected.

When you visit our website, you will be offered the opportunity to disable all cookies other than those necessary for the operation of the website.

Pixel tags (sometimes known as tracker pixels, web beacons, clear GIFs, or 1x1 pixels) are tiny images that are loaded when your web browser accesses our website. When your web browser loads the pixel tag, the server hosting the pixel tag collects and stores information in its log files – this may include the date and time of your visit, and information about your end device such as its screen resolution or IP address.

10. Legal basis for the processing

The legal basis for the processing of personal data by us is in most cases Article 31(2)(a) of the Swiss DSG (processing directly related to conclusion or performance of a contract; corresponds to Article 6(1)(b) of the EU GDPR), or Article 31(1) of the DSG (consent of the data subject or a legal requirement for the processing; corresponds to Article 6(1)(a) of the EU GDPR).

In cases where we wish to refuse to conclude any contracts with a data subject due to misuse, payment default or for other legitimate reasons, we reserve the right, supported by Article 31(1) of the DSG (corresponds to Article 6(1)(f) of the EU GDPR), to store the surnames, first names, address and email address of a data subject along with personal data concerning the circumstances of the particular case, in our own interest.

Processing of your personal data by other companies in our Group is likewise done on the basis of Article 31(1) of the DSG (corresponds to Article 6(1)(f) of the EU GDPR).

11. Your rights

On request, we will provide any data subject with information concerning whether and which personal data we process regarding that subject (right to confirmation; right to access).

At your request:

  • we will stop, entirely or partially, processing your personal data (right to withdraw consent to processing of personal data unless strictly necessary; right to be forgotten) We will also transmit your request to be forgotten to third parties to whom we have previously transmitted your personal data.
  • we will rectify the corresponding personal data (right to rectification);
  • we will restrict our processing of the relevant personal data (right to restriction of processing; in this case, we will store your personal data without processing it, or use it only to protect our legal rights or the rights of another person or legal entity);
  • we will provide you with the personal data we hold about you in a structured, commonly used and machine-readable format (right to data portability).

To submit a request to exercise one of the rights described in this section (for example, if you want to stop receiving our email newsletter, or delete your account), please use the form provided on our website or contact our data protection officer or another contact person using the details given under Section 2, Contact.

If we are not able to comply with your request, we will inform you of the reasons for this. For example, we may lawfully refuse to delete data if your personal data is still needed for the original purposes (e.g., we are still providing a service to you), if the processing is mandatory on legal grounds (e.g., statutory accounting regulations), or if we have an overriding interest (e.g., in the case of a legal dispute with the data subject).

If we invoke an overriding interest in processing personal data, you have the right to nonetheless object to the processing, if and to the extent that your particular situation yields a different balance of interests to that of other data subjects (right to object). For example, this may be the case if you are a person of public interest, or if there are reasonable grounds to believe that the processing of your data could result in a risk of you being harmed by third parties.

If you are not satisfied with our response to your request, you have the right to lodge a complaint with a competent supervisory authority, e.g. in your country of domicile or within the jurisdiction where the LO headquarters are located (right to lodge a complaint).

12. Severability clause and alterations

If individual provisions of this privacy policy should be or become invalid, incomplete, or unenforceable, the remaining provisions of this privacy policy shall continue to apply.

It may be necessary to make changes to this privacy policy due to updates to our website and portfolio, or due to changes in legal or official requirements. You will be informed about such changes.

13. Applicable law and place of jurisdiction

This privacy policy and the contracts concluded on the basis of or in relation to this privacy policy are governed by Swiss law, unless it is mandatory to apply the law of another country. The place of jurisdiction is the location of the LO headquarters, unless another place of jurisdiction is mandated by law.