1. Person responsible and content of this privacy policy

We, Intertabak AG, are the operator of the website lacasadelhabano.intertabak.com (hereinafter referred to as the "website") and are responsible for the data processing specified in this data protection declaration, unless otherwise stated.

So that you know what personal data we collect from you and for what purposes we use it, please take note of the information below. When it comes to data protection, we are guided primarily by the legal requirements of Swiss data protection law, in particular the Swiss Federal Data Protection Act (DSG). As we only offer our services in Switzerland and the Principality of Liechtenstein, this website is only intended for persons who access our website from these states.

Please note that the following information may be reviewed and amended from time to time. We therefore recommend that you consult this data protection declaration regularly. Furthermore, other companies are responsible under data protection law for individual data processing operations listed below or are jointly responsible with us, so that in these cases the information provided by these providers is also authoritative.

2. Contact person for data protection

If you have any questions about data protection or wish to exercise your rights, please contact our data protection contact by sending an email to the following address:
datenschutz@intertabak.com

We have appointed a data protection officer for our company:
Raphael Behr (IT Coordinator)
Intertabak AG, Salinenstrasse 61, CH-4133 Pratteln
Phone: +41 (0) 61 337 88 11
E-mail: datenschutz@intertabak.com

3. Your rights

Provided that the legal requirements are met, you have the following rights as a person affected by data processing:

Right of access: You have the right to request access to your personal data stored by us at any time and free of charge when we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with applicable data protection regulations.

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure: You have the right to have your personal data deleted under certain circumstances. In individual cases, especially in the case of legal retention obligations, the right to deletion may be excluded. In this case, the deletion may be replaced by a blocking of the data if the conditions are met.

Right to restrict processing: You have the right to request that the processing of your personal data be restricted.

Right to data transfer: You have the right to receive from us, free of charge, the personal data you have provided to us in a readable format.

Right to object: You can object to data processing at any time, especially for data processing in connection with direct advertising (e.g. advertising emails).

Right of withdrawal: In principle, you have the right to withdraw your consent at any time. However, processing activities based on your consent in the past do not become unlawful as a result of your revocation.

To exercise these rights, please send us an email to the following address:
datenschutz@intertabak.com

Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way your personal data is processed.

4. Data security

We use appropriate technical and organisational security measures to protect your personal data stored with us against loss and unlawful processing, namely unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and data protection. Furthermore, these persons are only granted access to the personal data to the extent necessary for the fulfilment of their tasks.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and even we cannot provide an absolute guarantee for the security of information transmitted in this way.

5. Contact us

If you contact us via our contact addresses and channels (e.g. by e-mail or telephone), your personal data will be processed. The data you have provided us with, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request will be processed. In addition, the time of receipt of the request is documented.

We process this data exclusively in order to implement your request (e.g. to provide information about a product, to support you in the processing of a contract, to incorporate your feedback into the improvement of our service, etc.).

6. Use of your data for marketing purposes

If it is possible to clearly identify you, we will store and link the data described in this data protection declaration, i.e. in particular your personal details, your contact details, your contract details and your surfing behaviour on our websites, in a central database. This serves the efficient administration of customer data and allows us to adequately respond to your requests and enables the efficient provision of the services you have requested and the processing of the associated contracts.

We evaluate this data in order to further develop our offers in a needs-oriented manner and to display and suggest the most relevant information and offers to you. We also use methods that predict possible, interests and future orders based on your website use.

7. Disclosure to and access by third parties

Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such a transfer takes place by name, insofar as this is necessary for the fulfilment of the contract requested by you.

Furthermore, data is passed on to selected service providers and only to the extent necessary for the provision of the service. Various third party service providers are also explicitly mentioned in this privacy policy, e.g. in the sections on marketing. These are, for example, IT service providers (such as providers of software solutions), advertising agencies and consulting companies.

In addition, your data may be disclosed, in particular to authorities, legal advisors or debt collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from our relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carry out due diligence or to complete the transaction.

8. Transfer of personal data abroad

We are also entitled to transfer your personal data to third parties abroad, insofar as this is necessary to carry out the data processing mentioned in this data protection declaration (see esp. sections 12-14). In doing so, the legal provisions on the disclosure of personal data to third parties will of course be complied with. If the country in question does not have an adequate level of data protection, we guarantee through contractual regulations that your data is adequately protected at these companies.

9. Retention periods

We only store personal data for as long as is necessary to carry out the processing explained in this data protection declaration within the scope of our legitimate interest. In the case of contractual data, storage is required by statutory retention obligations. Requirements that oblige us to retain data arise from the provisions on accounting and from tax law regulations. According to these regulations, business communication, concluded contracts and accounting vouchers must be stored for up to 10 years. As far as we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer any obligation to retain the data and no longer any legitimate interest in retaining it.

10. Log file data

No log files are stored on the web server.

11. Cookies

Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.

Among other things, cookies help to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes that are necessary, i.e. "technically required", for your desired use of the website. For example, we use cookies to identify you as a registered user after you have logged in, without you having to log in again each time you navigate the various sub-pages. The provision of the shopping basket and order function is also based on the use of cookies. Furthermore, cookies also perform other technical functions required for the operation of the website, such as so-called load balancing, i.e. the distribution of the performance load of the page to different web servers in order to relieve the servers. Cookies are also used for security purposes, for example to prevent the unauthorised posting of content. Finally, we also use cookies as part of the design and programming of our website, e.g. to enable the uploading of scripts or codes.

Most internet browsers automatically accept cookies. However, when you access our website, we ask for your consent to the cookies we use that are not technically necessary, especially when using third-party cookies for marketing purposes. You can use the corresponding buttons in the cookie banner to make your desired settings. Details of the services and data processing associated with the individual cookies can be found within the cookie banner and in the following sections of this data protection declaration.

You may also be able to configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in selected browsers.

• Google Chrome
• Apple Safari

Deactivating cookies may mean that you cannot use all the functions of our website.

12.1 General information on tracking

For the purpose of demand-oriented design and continuous optimisation of our website, we use the web analysis services listed below. In this context, pseudonymised usage profiles are created and cookies are used (please also note section 11). The information generated by the cookie about your use of this website is generally stored together with the data collected under section 10 The information generated by the cookie about your use of this website is usually transmitted to a server of the service provider together with the log file data listed in section 10, where it is stored and processed. This may also involve transmission to servers abroad, e.g. in the USA (cf. on this, in particular on the guarantees taken, section 8).

By processing the data, we obtain the following information, among others:

• Navigation path followed by a visitor on the site (incl. content viewed),
• Dwell time on the website or sub-page,
• the sub-page on which the website is left,
• the country, region or city from where access is made,
• End device (type, version, colour depth, resolution, width and height of the browser window) and
• Returning or new visitor.

On our behalf, the provider will use this information to evaluate the use of the website, to compile reports on website activities for us and to provide other services related to website and internet use for the purposes of market research and demand-oriented design of these internet pages. For these processing operations, we and the providers may be considered joint data controllers up to a certain extent.

You can refuse processing by rejecting or switching off the relevant cookies in the settings of your web browser (for this, see section 11) or by making use of the service-specific options described below.

For the further processing of the data by the respective provider as the (sole) responsible party under data protection law, in particular also any forwarding of this information to third parties such as authorities on the basis of national legal regulations, please refer to the respective data protection information of the provider.

12.2 Google Analytics

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").

In doing so, the data described about the use of the website for the explained processing purposes (see section 13.1) may be transmitted to the servers of Google LLC. in the USA. The IP address is shortened by activating IP anonymisation ("anonymizeIP") on this website before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Users can prevent the collection of the data generated by the cookie and related to the website use by the user concerned (incl. the IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection at Google can be found here.

13. Social media and third party services

On our website we have included links to our profiles in the social networks of the following providers:

• Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA;
• Instagram Inc. 1601 Willow Road, Menlo Park, CA 94025, USA;
• Twitter Inc. with its registered office at 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
• Linkedin Unlimited Company, Wilton Place, Dublin 2, Ireland.

When you click on the icons of the social networks, you are automatically redirected to our profile in the respective network. This establishes a direct connection between your browser and the server of the respective social network. This provides the network with the information that you have visited our website with your IP address and clicked on the link.

If you click on a link to a network while you are logged into your user account with the network in question, the content of our website may be linked to your profile so that the network can assign your visit to our website directly to your account. If you want to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account takes place in any case if you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Please therefore note the information on the network's website..

13.2 Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website.

Further information on Google's data protection can be found here. You can reject or switch off the relevant cookies in the settings of your web browser (see section 11). Further options for blocking advertising can be found here.

13.3 Google Fonts

This site uses Google Fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required Google Fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers.

Further information on Google's data protection can be found here. You can reject or deactivate the relevant cookies in the settings of your web browser (see section 11). Further options for blocking advertising can be found here.

14.1 In general

We use services from various companies to provide you with interesting offers online. In the process, your user behaviour on our website and websites of other providers is analysed in order to subsequently be able to show you online advertising that is individually tailored to you.

Most of the technologies used to track your user behaviour ("tracking") and to display targeted advertising ("targeting") work with cookies (see also section 11), with which your browser can be recognised via various websites. Depending on the service provider, it may also be possible for you to be recognised online even when using different end devices (e.g. laptop and smartphone). This may be the case, for example, if you have registered for a service that you use with several devices.

In addition to the data already mentioned, which is collected when websites are called up ("log file data", see section 10) and the use of cookies (section 11) and which may be passed on to the companies involved in the advertising networks, the following data in particular is used to select the advertising that is potentially most relevant to you:

• Information about you that you provided when registering or using a service from advertising partners (e.g. your gender, age group);
• User behaviour (e.g. search queries, interactions with advertising, types of websites visited, products viewed and purchased, newsletters subscribed to).

We and our service providers use this data to identify whether you belong to the target group we address and take this into account when selecting the advertisements. For example, after you have visited our site, you may be shown advertisements of the products you have consulted when you visit other sites ("re-targeting"). Depending on the scope of the data, a user's profile may also be created, which is evaluated automatically, and the ads are selected according to the information stored in the profile, such as membership of certain demographic segments or potential interests or behaviours. Such ads may be presented to you on various channels, which include, in addition to our website or app (as part of onsite and in-app marketing), ads served through the online advertising networks we use, such as Google.

The data may then be analysed for the purpose of billing the service provider and assessing the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the taking of an action (e.g. visiting certain sections of our websites or sending information) is due to a particular advertising ad. We also receive aggregated reports from service providers of ad activity and information about how users interact with our website and ads.

You can reject or switch off the relevant cookies in the settings of your web browser (see Section 11). You can also find further options for blocking advertising in the information provided by the respective service provider, such as Google.

14.2 Google Ads

This website does not use Google Ads.

You can find more information about Google's privacy policy here.
However, you can still reject or switch off the cookies in question in the settings of your web browser (for more information, see section 11). Further options for blocking advertising can be found here.