PRIVACY POLICY

1. SCOPE AND CONSENT

1.1 This privacy policy ("Privacy Policy") is applicable to the website www.ilmia.com (the "Website") and refers to the processing of personal data during both the Website navigation by users who only consult the Website and the interaction with the services and features offered through the Website (including the online store) by users who freely provide their information by filling in specific forms and/or via email in order to access reserved sections within the Website or receive newsletter and/or commercial and promotional information.If the user is purchasing as a guest customer we will not process his data for profiling purposes.

1.2 The Privacy Policy specifies the identity of the data controller that controls and manages the personal data collected and processed through the Website, and indicates which personal information is to be collected, the purposes and ways of processing and communicating to third parties the user's personal data, the security measures adopted in order to protect said data and the ways in which the user may check the data processing regarding his/her person and exercise his/her rights.

1.3 By using the Website the user consents to our collection, use, disclosure, retention, storage and transfer of his/her personal information as described in this Privacy Policy, in the General Terms and Conditions of Sale and General Terms and Conditions of Use. We may amend this Privacy Policy and the new terms shall be effective as of the date of publication on the Website.

1.4 This information is provided solely for the Website and does not extend to other websites which the user may be able to consult via a link and/or activities offered by third parties.

2. THE DATA CONTROLLERS

2.1 The data controller of the Website is ilmia AG, with registered office in Niklaus-Konrad-Strasse 24, 4500 Solothurn (Switzerland) ("ilmia", "we", or "us").

2.2 As indicated in the General Terms and Conditions of Sale, the online store of the Website is managed by the company ilmia AG, with registered office in Hans Huber-Strasse 38, 4500 Solothurn, Switzerland. ilmia deals with managing sales and transactions carried out through the Website, such as processing orders, sale and delivery of products, processing returns and warranties and other activities necessary for the sale of products through the Website. For the managing and the implementation of activities required for the sale of products through the Website, ilmia AG. processes users data (including name and surname, address and user credit card details) acting as data processor.

3. COLLECTION OF PERSONAL INFORMATION

3.1 User can browse our Website without telling us who he/she is or revealing any personal information about himself/herself. If user chooses to provide us with personal information in order to use our services and features offered through the Website, he/she will no longer be anonymous to us.

3.2 We collect the following types of personal information (collectively "Data") in order to provide you with the use of and access to our Website and/or the relevant e-commerce services and to help us to personalize and to improve your experience on the Website:

(a) Information we collect automatically: the computer systems and processing programs required to run the Website log, during their normal operation, certain data whose acquisition is automatic and inevitable (whenever Internet protocols are used) and which, by their nature, may allow the identification of the users if they are processed and associated with other data held by third parties, including, but not limited to, device ID or unique identifier, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from the Website, referral URL, IP address, and standard web log information, and anonymous information collected through our use of cookies and web beacons (collectively, " Surfing Data"). ilmia collects Surfing Data exclusively for statistical purposes and in anonymous form in relation to the access of the Website and for purposes of monitoring the correct functioning of the Website and of enhancing the Website functioning and content.

(b) data provided voluntarily by users: personal information provided voluntarily by users via email, user interaction with the Website's features, requests for services offered by the Website, completion of specific forms to access reserved sections of the Website and to be provided with e-commerce service offered through the Website, including name, gender, email address, phone number, physical contact information, (depending on the service used) sometimes financial information, such as credit card and/or or bank account numbers, postage, billing and other information user provides to purchase products through the Website, as well as additional personal information we may ask you for to provide our services.

4. COOKIES AND AUTOMATIC DATA COLLECTION TOOLS

4.1 The Website uses automatic systems of data collection such as cookies. A cookie is a device transmitted to the hard disk of an Internet user: it does not contain intelligible information but it allows linking between an Internet user and his/her personal data (such as, by way of example, user's IP address and other information about user's experience on the Website and his/her preferences expressed while choosing services and purchasing products offered by the Website) provided by the user on the Website. Cookies are disseminated by servers and no one may gain access to information contained therein. These information and data are gathered directly and automatically by the Website and are processed in a collective and anonymous way.

4.2 The acceptance of automatic data collection procedure and the use of cookies are necessary for using the Website and its services. In case a user starts the procedure of blocking cookies ilmia cannot ensure that all web pages of the Website will be displayed or that certain services will be supplied. You can review our Cookie Policy for more information.

5. DATA SUBMISSION

5.1 The submission of Data by the user is necessary to subscribe to the Website and to access the services and features offered by the Website and in the reserved areas, including the online store and the relevant e-commerce services. Failure to provide Data will prevent the user from accessing and using said services and features.

5.2 The submission of Data for marketing purposes is always voluntary and optional. Any non-submission of Data for such activities will have no consequence on the user's ability to use the services and features offered by the Website.

6. PROCESSING METHODS AND PURPOSES

6.1 Data shall be processed manually or with the aid of electronic tools for the following purposes:

(a) operations management of Website navigation and relevant access data;

(b) data security and Website security management;

(d) to provide other services requested by users as described when we collect the information;

(e) to prevent, detect, and investigate fraud, security breaches, potentially prohibited or illegal activities, and to enforce our General Terms and Conditions of Sale and General Terms and Conditions of Use;

(f) for market research and statistical processing;

(g) to contact users for other purposes authorized by the applicable law.

6.2 Furthermore, with the user's consent that is free and optional, ilmia may also process Data for purposes of defining individual or group profiles (user profiling) and for marketing purposes, notably to send to user, also through newsletters, emails or text messages, information and updates on ilmia products or initiatives, offers, exclusive sales, promotional campaigns and on the events, shows and similar events organized by ilmia or in which ilmia takes part, including invitations to such events. The user always has the right to object to the processing of his/her Data for marketing purposes and/or the delivery of promotional information through email.

6.3 We do not sell users' Data to third parties for their marketing purposes without users' explicit consent. We may combine users' Data with information we collect from other sources and use it to improve and personalize our advertising and marketing to users.

7. STORING AND PROTECTING DATA

7.1 Data collected will be stored and processed via an electronic system located in ilmia and elsewhere in the world.

We retain your personal data for 7 years from the subscription date for the purposes specified in the paragraph 6. However, in some circumstances, we may retain personal data for longer periods of time, for instance where we are required to do so in accordance with legal, tax and accounting requirements. After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way.

7.2 We protect users' Data using technical and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. Some of the safeguards we use are firewalls and data encryption, physical access controls to our data centres, and information access authorization controls.

7.3 We take steps to ensure that the users' Data we collect is accurate and up to date, and we provide users with the opportunity to update their information as specified in this Privacy Policy.

8. DATA COMMUNICATION AND DISCLOSURE

8.1 Data will be accessible within ilmia organization by the internal and external personnel.

8.2 We may also share users' Data with:

(a) ilmia located in countries inside and/or outside of the European Economic Area ("EEA"). All security and privacy measures have been put in place at ilmia in order to ensure an adequate level of data protection irrespective of the geographical location of ilmia company that is the receipt of the above mentioned Data. Members of ilmia may use users' Data to send marketing communications only if users have consented to their services and will use users' Data in compliance with their respective privacy policies and applicable law;

(b) professionals, independent consultants, credit bureaus, banks and financial institutions, third party companies to which ilmia may revert in relation to performance of technical and organizational services as well as service providers under contract who help with our business operations (such as, but not limited to, Website operations, payment services, shipments, fraud investigations, bill collection, affiliate and rewards programs);

(c) other third parties to whom users explicitly ask us to send their information (or about whom users are otherwise explicitly notified and consent to when using a specific service);

(d) law enforcement or regulatory agencies, or authorized third-parties, in response to a verified request relating to a criminal investigation or alleged illegal activity or any other activity through the Website that may expose us and/or the user to legal liability;

(e) other business entities, should we plan to merge with or be acquired by that business entity. Should such a combination occur, we will require that the new combined entity follow this Privacy Policy with respect to users' Data.

8.3 The aforementioned subjects that receive user's Data will process them as data controllers or co-data controllers, data processors and/or persons in charge of processing Data as the case may be, for the same purposes above specified and according to applicable data law protection. The list of data processors and the subjects to which Data may be communicated will remain at user disposal upon request at ilmia.

8.4 If users' Data will be used or disclosed for any purposes not set out in this notice, they shall receive prior notification. Data will be transferred to extra EEA companies of ilmia with the user's consent which is optional.

9. DATA SUBJECT'S RIGHTS

9.1 User is entitled to obtain, at any time, a copy of their information and to have any inaccuracies corrected. Where appropriate, the user may have their personal information erased, rectified, amended or completed. Please write to us at ilmia AG, Niklaus-Konrad-Strasse 24, 4500 Solothurn, Switzerland or send an email to shop@ilmia.com.

9.2 User may revoke, at any time, consent to the delivery of commercial and promotional material via email by clicking the "unsubscribe" link in every commercial communication sent by ilmia.

9.3 Google Analytics: It is possible that some or all of the Websites use Google Analytics, an internet site analysis service supplied by Google Inc. (“Google”). Google Analytics uses cookies which are text files placed on your computer to help to analyse the use made of the Websites by its users. The data generated by the cookies concerning your use of the Websites (including your IP address) will be forwarded to, and stored by, Google on servers located in the United States. Google will use this information to evaluate your use of the Websites, compile reports on site activity for its publisher and provide other services relating to the activity of the Websites and the use of the internet. Google may release these data to third parties if there is a legal obligation to do so or when the third parties process these data for the account of Google including, in particular, the publisher of the Websites. Google will not cross-reference your IP address with any other data held by Google.As mentioned under clause 3 above, you may deactivate the use of cookies by selecting appropriate parameters on your navigator. However, deactivation of this kind might prevent the use of certain functions of the Websites. By using the Websites, you specifically consent to the processing of your personal data by Google under the conditions and for the purposes described above.If you do not want Google Analytics to be used in your browser, you can install the Google Analytics browser add-on at https://tools.google.com/dlpage/gaoptout.