Privacy Policy of Made in Bern Ltd.

Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate safeguards. We are committed to handling your personal data responsibly. It goes without saying that we comply with the legal provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and, where applicable, other provisions of data protection law, in particular the General Data Protection Regulation of the European Union (hereinafter referred to as GDPR).

To help you understand what personal data we collect from you and for what purposes we use it, please read the information below.

In order to provide you with personalised services and information on our website (on-site targeting), we use and analyse the data that we collect about you when you visit the website. So-called cookies may also be used in the corresponding processing (see section 5 below). The analysis of your user behaviour may lead to the creation of a so-called usage profile. A combination of the usage data only takes place with pseudonymous, but never with non-pseudonymised personal data.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6(1)(f) GDPR in the optimisation and personalisation of our online offering and our advertising communication.

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and Made in Bern Ltd.
In addition, we pass on your data to third parties insofar as this is necessary in the context of the use of the website for the provision of the services you have requested and for the analysis of your user behaviour. The use of the data passed on for this purpose by the third parties is strictly limited to the aforementioned purposes. If the website contains links to third-party websites, Made in Bern Ltd. no longer has any influence on the collection, processing, storage or use of personal data by the third party after clicking on these links and accepts no responsibility for this.

A service provider, to whom the personal data collected via the website is transferred or who has or may have access to it is our web host XIAG AG, Archstrasse 7, 8400 Winterthur. The website is hosted on servers in Switzerland, the Netherlands and Finland. The data is transferred for the purpose of providing and maintaining the functionalities of our website. The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Cookies help in many ways to make your visit to our website easier, more enjoyable and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.

We use cookies, for example, to temporarily store your selected services and entries when you fill out a form on the website so that you do not have to repeat the entry when you call up another sub-page.

Most Internet browsers automatically accept cookies. However, you can configure your browser such that no cookies are stored on your computer or a message always appears when you receive a new cookie. On the following pages, you will find explanations of how you can configure the processing of cookies in the most common browsers:

• Microsoft's Windows Internet Explorer
• Microsoft's Windows Internet Explorer Mobile
• Mozilla Firefox
• Google Chrome for Desktop
• Google Chrome for Mobile
• Apple Safari for Desktop
• Apple Safari for Mobile

Deactivating cookies may mean that you cannot use all the functions of our website.

On our website, we use Google Ads from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Ads is an Internet advertising service that allows advertisers to place ads both in Google's search engine results and in the Google advertising network. Google Ads allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google's search engine results exclusively when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords.

The purpose of Google Ads is to promote our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine. If a data subject accesses our website via a Google ad, Google will place a so-called conversion cookie on the data subject's device. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages on our website have been called up. The conversion cookie enables both us and Google to track whether a data subject, who has accessed our website via an Ads ad, has generated a sale.

The legal basis for processing the data for this purpose is your consent pursuant to Art. 6(1)(a) GDPR. The consent can be revoked at any time with effect for the future.

You can deactivate the use of cookies by Google by following the link below and downloading and installing the plugin provided there: https://tools.google.com/dlpage/gaoptout.

You can find more information about Google and how Google processes data here.

You will find links to social media networks on our website. These are not plugins provided by the social media network, which already transmit data to the provider when the page is loaded, without the user having any influence. The buttons to the social media networks merely provide a link to our presence on the social media network. No user data is transmitted from the website to the social media network.

The links lead to our appearances on the following networks:

• Facebook, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, CA 94304, USA; and
• Instagram Inc., 1601 Willow Road, Meno Park, CA 94025, USA.
• Twitter by Twitter Inc., 795 Folsom St, Suite 600, San Francisco, CA 94107, USA; and
• YouTube operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you call up a link to one of our social media profiles, a direct connection is established between your browser and the server of the social network concerned. This provides the network with the information that you have visited our website with your IP address and called up the link. If you call up a link to a network while you are logged into your account with the network concerned, the content of our site may be linked to your profile with the network, which means that the network can assign your visit to our website directly to your user account. If you would like to prevent this, you should log out before clicking on the corresponding links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

We use social plugins ("plugins") from social networks on our website. In order to increase the protection of your data when visiting our website, the plugins are integrated in such a way that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of the provider of the respective social network. Only when you activate the plugins and thus give your consent to the transmission of data, does your browser establish a direct connection to the servers of the respective social network. The content of the respective plugin is then transmitted directly to your browser by the associated provider and integrated into the page. If you click the relevant social network icons, you will be linked to the relevant social network to exercise the selected functionality, e.g. to share a content on Facebook. To do this, however, you must log in to your user account or already be logged in.

We provide you with plugins from the following social networks:

• Facebook, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, CA 94304, USA; and
• Instagram Inc., 1601 Willow Road, Meno Park, CA 94025, USA.
• Twitter by Twitter Inc., 795 Folsom St, Suite 600, San Francisco, CA 94107, USA; and
• YouTube operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you select one of the functionalities provided and click on the icon of the relevant social network, a direct connection is established between your browser and the server of the relevant social network. This provides the network with the information that you have visited our website with your IP address and called up the link. If you call up a link to a social network while you are logged into your account with the social network in question, the content of our website may be linked to your profile with the social network. This means that the social network can assign your visit to our website directly to your user account. If you want to prevent this, you should log out before clicking on the corresponding links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

For the purpose and scope of the data collection and the further processing and use of the data by the respective social network, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of the social network.

We use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
You should always keep your payment information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.
We also take internal company data protection very seriously. Our employees and the service companies we commission have been obliged by us to maintain confidentiality and to comply with the provisions of data protection law.

Some of the third-party service providers mentioned in this privacy policy are based in the USA. For the sake of completeness, we would like to point out for users, who are resident of or domiciled in Switzerland or the EU that there are surveillance measures in place in the USA by US authorities, which generally allow the storage of all personal data of all persons, whose data has been transmitted from Switzerland or the EU to the USA. This is done without any differentiation, limitation or exception based on the objective pursued and without any objective criterion that would make it possible to limit the access of the US authorities to the data and its subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated with both the access to and the use of this data. Furthermore, we would like to point out that in the USA, data subjects from Switzerland or the EU do not have any legal remedies that allow them to obtain access to the data concerning them and to obtain its correction or deletion, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw the attention of data subjects to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.

We would like to point out to users residing in Switzerland or a Member State of the EU that the USA does not have a sufficient level of data protection from the perspective of the European Union and Switzerland – among other things, due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google, Facebook or SharpSpring) are based in the USA, we will ensure that your data is protected at an appropriate level with our partners through contractual arrangements with these companies as well as any additional appropriate guarantees required, which protect the rights of individuals, whose personal data is transmitted to a third country.

You can object to data processing at any time. You also have the following rights:

Right of access: You have the right to request access to your personal data stored by us at any time and free of charge when we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with applicable data protection regulations.

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, the right to erasure may be excluded.

Right to restriction of processing: You have, under certain conditions, the right to request that the processing of your personal data be restricted.

Right to data portability: Under certain circumstances, you have the right to obtain from us, free of charge, the personal data you have provided to us in a machine-readable format.

Right to complain: You have the right to complain to a competent supervisory authority about the way your personal data is processed.

Right of revocation: In principle, you have the right to revoke your consent at any time with effect for the future. Processing activities based on your consent in the past do not become unlawful as a result of your revocation.

We only store personal data for as long as is necessary,

• to use the above tracking, advertising and analysis services within the scope of our legitimate interest or based on your consent;
• to carry out services to the above-mentioned extent that you have requested or to which you have given your consent (e.g. to newsletters);
• to comply with our legal obligations.

We retain contractual data for a longer period of time because this is required by statutory retention obligations. Retention obligations that oblige us to retain data result from accounting regulations and tax regulations. According to these regulations, business communication, concluded contracts and accounting vouchers must be retained for up to 10 years or, in relation to users residing in France, for up to 5 years. As far as we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.