bob invoice

1. Controller and data protection office

This data privacy statement explains how we collect and process personal information in connection with the service bob invoice.

"We" or "us" refers to bob Finance, Branch of Valora Schweiz AG, Hardturmstrasse 161, 8005 Zurich, Switzerland.

You can contact our company data protection officer by e-mail at dataprivacy@valora.com.

2. Categories of data and purposes of processing

Data in connection with the bob invoice service: If you choose the payment method bob invoice within the scope of concluding an online purchase contract, we receive the following personal data about you from the payment service payrexx: personal data (surname, first name, date of birth) and contact data (e-mail address and address), as well as transaction data (online merchant, purchased product, purchase amount). We first use this data to carry out a credit check (more details on this process under section 3), on the basis of which we decide whether we can offer you payment via bob invoice. In the event of a negative decision, we will delete your data immediately. If we offer you payment via bob invoice, we use the data received for the proper processing of our General Terms and Conditions, which you agreed to during the checkout process, i.e. for sending invoices and payment reminders. Invoices and payment reminders will be sent to you by e-mail and/or letter post.

Direct marketing: If you give us your consent, we will use your email address, shopping cart and transaction history to send you attractive offers and relevant information about our products.

3. Transfer of your personal data

• Transfer to employees and affiliated companies: If necessary for the processing purposes stated above, we may disclose your personal data to our own employees and to our affiliated companies (regularly within, and exceptionally outside, Switzerland).
• Transfer to third parties: If you request payment via bob invoice, we will send your personal data (name, address, date of birth) to credit agencies (e.g. ZEK, CRIF). The credit agencies carry out a credit check on the basis of the personal data. They send us the results of the checks, which we take into account when deciding whether we can offer you payment via bob invoice. In the course of the creditworthiness check, we will also check your data against existing customer and contract databases of bob Finance.
• Transfer to data processors: We have commissioned a processor to store your personal data in a secure database. We have entered into a data processing agreement with our data processor in order ensure that your personal data is adequately protected at all times.
• Disclosure in connection with financial transactions: If we are involved in a merger, joint venture, acquisition or sale of equity or assets, we may share your information with a transaction partner.
• Disclosure in connection with criminal proceedings: To the extent permitted by law, we may disclose information that is necessary or beneficial to investigate or prevent an actual or suspected criminal offense or other violation of our or a third party's rights.

4. Automated decisions

Based on the creditworthiness information, our systems use algorithms to determine the risk of a payment via bob invoice by you. Our systems will make a fully automated decision as to whether or not we can offer you this payment method.

5. Place of processing and onward-transfer to third countries

Your data will be processed in Switzerland and in member states of the European Union. Should it become necessary or appropriate to transfer your personal data to a country that does not have an adequate level of data protection, we will ensure appropriate guarantees: Either we will conclude the recognized standard contractual clauses with the recipient or the recipient can prove that it is self-certified under the Privacy Shield (EU-US/CH-US).

6. Duration of processing

We process your personal data only as long as it is necessary for the respective processing purpose or until the legal or contractual retention period for your personal data has expired.

• We store personal master data, contact data and creditworthiness data for a period of 10 years after you have paid the full purchase amount.
• We store electronic correspondence for a maximum period of 5 years, unless the correspondence is required in the context of a legal dispute.
• If you have consented to receive attractive offers and information about our products from us, we will use your e-mail address for this purpose until you revoke your consent, for example by clicking on the "Unsubscribe" link in our e-mail.

• Consent withdrawal: For those data processing operations to which you have given your consent, you have the right to revoke your consent at any time.
• Right to information: You also have the right to learn from us which data we process about you, on what legal basis and for what purposes, and to request a free copy of your personal data.
• Right of rectification: If your data is incomplete or incorrect, you have the right to request rectification of your personal data. Some information can be entered independently in your customer account.
• Right to deletion: You can demand that your personal data be deleted, especially if they are no longer needed for the purposes described.
• Right of limitation: You may request that your personal data be limited in its processing and/or disclosure.
• Automated decisions: Where decisions within the framework of this website are based exclusively on automated processing, you may request a manual review of a negative decision.

7. Your rights

You have the following rights in connection with your personal data:

If you wish to exercise your rights, please address your request to our data protection officer (contact information in Section 1).

Right of filing a complaint: If you have reason to believe that Valora is not processing your personal data in accordance with the applicable laws and regulations and/or if you do not agree with the response to your request to grant your rights, you can lodge a complaint with the supervisory authority.

8. Links to third party websites

We have not reviewed your online merchant's website and are not responsible for how other website operators process personal information. We recommend that you read the privacy statements of such websites in advance.

Last updated on: June, 2020