What is covered in this data protection declaration?

etimoni11223344

Data protection is a matter of trust, and your trust is important to us. That is why we have published this data protection declaration. In view of the new European General Data Protection Regulation (" GDPR "), it explains which personal data we process, how we process it and for what purposes. Although the GDPR is a regulation of the European Union, it is important to us. Swiss data protection law (" DPA ") is strongly influenced by Phone Number List European law and the upcoming revision of the DPA will take over many provisions of the GDPR. In addition, companies located outside the European Union must comply with the GDPR in certain circumstances. However, we want to guarantee the high protection of the GDPR to all persons whose personal data we process and have therefore decided to align this data protection declaration globally with the GDPR. You can view the GDPR here .

We want you to be informed in detail about the processing of your personal data. Therefore, we inform you with this data protection declaration about how and why we collect, process and use your personal data. It is important to us that you understand:

what personal data about you we collect and process;
when we collect your personal data;
for what purpose we use your personal data;
how long we keep your personal data;
who has access to your personal data; and
what are your rights regarding your personal data.
Below you will find appropriate remarks and explanations. Please do not hesitate to contact us if you have any questions. You will find our contact details under Who are we? .



2. Who are we?
For all data processing, a specific company is responsible for data protection. This is the company that determines whether a specific processing operation – e.g. processing within the scope of a service, when using a website, etc. – should take place, for what purposes it takes place and which principles should apply (if these decisions are made jointly by several companies, they may also be jointly responsible). For data processing operations according to this data protection declaration, the following company is responsible in principle ("we" or derivatives):

Migros France
Site Nord
Archamps Technopôle
CS 15111
74162 Saint Julien en Genevois Cedex

We have appointed a data protection officer; you can contact him by email at the following address: protection.donnees@migros.fr

In some cases we are not responsible, but another company is:

If you are in contact with another company of the Migros Group, e.g. if you contact a customer service, it is this company that is responsible for the data processing, unless this data protection declaration provides otherwise for the processing in question.
In some cases, we transmit your personal data to another company of the Migros Group or to third parties, so that these recipients can process personal data for their own purposes (i.e. not on our behalf). This may also concern authorities. In such cases, the recipient in question is considered to be the controller. You will find information about these controllers in the recipient's corresponding data protection declaration; this is usually available on the recipient's website.
3. What are “personal data” and what does “processing” mean?
Data protection law regulates the processing of personal data. Personal data (or “ personal data ”) is any data that can be associated with a specific natural person, i.e. a human being. This includes, in particular, the following information:

contact details, e.g. name, postal address, email address, telephone number;
other personal information, e.g. gender, date of birth and age, marital status, nationality;
professional information, e.g. occupation, title, function, education, former employers, skills and experience, authorisations, approvals and affiliations;
purchase information, e.g. information regarding purchases, orders, purchase histories, preferred shopping locations and times, product baskets, preferences and affinity with certain types of products;
financial information, e.g. credit card number, account information, creditworthiness, assets and income;
health data, e.g. information on physical and mental disabilities, treatments and medication;
image, sound and video recordings;
records of your website visits and application usage.
In Switzerland, personal data also includes information relating to a specific legal entity (e.g. information relating to a contract with a company).

Certain personal data are subject to special protection by the legislator. These include in particular " particularly sensitive personal data " (also called "special categories of personal data"). This concerns, for example, data indicating race or ethnic origin, political opinions, religious or ideological beliefs or trade union membership, as well as genetic data, biometric data for unambiguous identification, health data and data concerning sex life or sexual orientation, and finally also data concerning criminal convictions and offences and, where applicable, data relating to social welfare measures.

We generally collect your personal data directly from you, e.g. when you behave in a certain way, in particular when you communicate with us, when you visit a website or when you take advantage of an online offer or via an app or when you buy from us in an online shop and/or using a customer card. However, they can also be collected indirectly, e.g. when goods are delivered to another person (e.g. as a gift), when other persons are mentioned during communication with us or through the purchase of additional information from third-party data sources (e.g. from social networks or address resellers).