1. Information about the collection of personal data and the controller’s contact details

1.1 General information

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website.

1.2 Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Name: Malio GmbH
Address: Thalerstrasse 19, 9424 Rheineck, Switzerland

Email: info@malio.ch
Telephone: 044 592 57 17

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 SSL or TLS encryption

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock symbol in your browser’s address bar.

2. Data collection when visiting our website

When using our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”).

• Our website that you visited
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

3. Cookies

To make visiting our website attractive and enable the use of certain functions, we use so-called cookies on various pages.

These are small text files that are stored on your device.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4. Contact

When you contact us (e.g. via the contact form or by email), personal data is collected.

This data is stored and used exclusively for the purpose of responding to your request or contacting you, and for the associated technical administration.

5. Data processing when opening a customer account and for contract processing

Pursuant to Article 6(1)(b) GDPR, personal data continues to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account.

6. Use of your data for direct advertising (newsletter)

If you subscribe to our email newsletter, we will regularly send you information about our offers.

7. Data processing for order processing

To process your order, we work with various service providers.

7.1 Use of PayPal

When paying via PayPal, we pass your payment data on to PayPal as part of payment processing.

7.2 Use of Stripe

If you choose a payment method from the payment service provider Stripe, payment processing is handled by Stripe Payments Europe Ltd.

7.3 Use of PostFinance

If you have chosen credit card (PostFinance) as your payment method, payment processing is handled by PostFinance AG.

7.5 Use of POWERPAY creditworthiness checking

Your personal data is disclosed to POWERPAY only for the purpose of checking your creditworthiness.

7.6 Use of Twint

If you have chosen Twint as your payment method, payment processing is handled by Twint AG.

8. Web analytics services

8.1 AWStats

To statistically analyze our website, we use the AWStats program. The program is free web analytics software.

8.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

8.3 Google AdWords

This website uses Google AdWords and conversion tracking. Google AdWords places a cookie for conversion tracking on your computer's hard drive.

8.4 Facebook Pixel

This website uses the Facebook Custom Audience pixel function. The Facebook pixel is provided by the Facebook social network.

9. Data subject rights

Applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller.

10. Right to object

If we process your personal data as part of a balancing of interests based on our overriding legitimate interest, you have the right to object at any time.

11. Retention period for personal data

The retention period for personal data is determined based on the applicable statutory retention period.

Zurich, February 21, 2019