Privacy Policy
Version 1.0.0
In the following, we inform you, among other things, about who is responsible for processing your data, what data we collect in connection with visiting our website and using our services, for what purposes we process this data, and to whom we may disclose this data. We also inform you about the duration of data processing, the legal basis for processing (if such is necessary), and what rights you have with regard to the processing of your data. This privacy policy applies to all your data that we already have or that we will have in the future. Please note that we may adjust the privacy policy from time to time. The current version published on our website applies.
Personal data means all information that relates to an identified or identifiable person (hereinafter 'personal data'). This includes information such as name, address, telephone number, email address, and in some cases IP addresses and device IDs. The term data in this privacy policy includes not only personal data but also non-personal and anonymized data. Processing means any handling of data, regardless of the means and procedures used, in particular the collection, storage, use, modification, disclosure, archiving, or deletion of data (hereinafter 'processing').
If you provide us with personal data of other persons, please ensure that these persons are aware of this privacy policy and only share their personal data with us if you are authorized to do so under applicable data protection law.
2. Name and Address of the Controller
Responsible for data processing according to this privacy policy is:
Beauty - Corner
Eggstrasse 3, Wettswil am Albis, 8907, Switzerland
jacqueline.pfenninger@bluewin.ch
3. Categories of Data Processed
When you visit our website, use our services, and contact us, we collect certain data. In principle, we collect this data directly from you. The personal data we process may include the following data:
- Data that is determined or disclosed when visiting our website or using our services. This includes, among other things, the IP and MAC address or device ID of the device used, cookies, pages you have accessed and search terms you have entered, entries in dialog boxes, ratings, time and duration of visits, clicks, referrer/exit URL, information about the time of use, browser and device type and operating system and Internet service provider used, amount of data transferred.
- Data exchanged in or in relation to contact with us, e.g., communication by letter, telephone, email, contact form, etc. (in particular name, contact details, gender, marital status, date of birth, job title, photo, employees, language, payment information).
- Data disclosed when registering for a newsletter or for file download (e.g., software) (in particular email address and name).
- Data provided when creating a customer account for online shopping and in connection with orders placed (in particular username, password, selected payment method and delivery address).
- Data concerning offers and concluded contracts (e.g., contract date, type, content, product, parties, term, value, adjustments, payment details, contact details, contact persons, billing and correspondence addresses, customer feedback, terminations, disputes, etc.).
- Data disclosed in the context of the comment function (in particular email address, the username you have chosen, unless you post anonymously, and your IP address).
- Data that you disclose when participating in competitions, surveys, and the like.
The above data does not always constitute personal data. As a rule, we cannot assign data that arises when using our services without registration (e.g., for a newsletter or online shop) to a specifically identified person. However, in individual cases, this may be possible in combination with other data.
We would like to point out that the information provided in connection with the use of the contact form or comment function may include particularly sensitive data (such as health data) and that you provide this to us voluntarily.
4. Processing Purposes
We will process personal data, to the extent permitted by applicable law, in particular for the following purposes:
- Initiation, conclusion, fulfillment, and processing of contracts;
- Offering, further development, and improvement of our offers, development of new services, operation, maintenance, optimization, and ensuring the security of our services and infrastructure;
- Management of users of our services, identity verification, logins, and other authentication;
- Maintenance, administration, and development of our customer relationships, communication with customers and third parties, promotions, advertising and marketing, offering of tailored services and relevant content;
- Quality control, creation of statistics;
- Compliance with legal and regulatory obligations and internal rules, law enforcement, civil, administrative and criminal proceedings, complaints, combating abuse, investigations, and responding to inquiries from authorities and agencies.
5. Legal Basis
We use personal data for the above purposes based on the following legal bases, to the extent such is required under applicable data protection law:
- Contract fulfillment;
- Fulfillment of legal obligations;
- Consent given to us or third parties;
- Legitimate interests of us and third parties, in particular: Offering and providing services; Advertising and marketing; Maintaining contact and communication with users; User management, identity verification, logins; Compliance with legal and regulatory obligations, law enforcement, civil, administrative and criminal proceedings, complaints, investigations, and responding to inquiries from authorities.
6. Publication and Disclosure of Data
We may publish and disclose data as follows:
Data Processors
We may commission third parties to provide certain services (e.g., in the field of IT, operation of applications, administration, shipping, etc.) and to process and store data (so-called 'data processors'). Data processors may have access to personal data and process it on our behalf. In doing so, we oblige the processors to comply with data protection law and to process data only as we ourselves do. Data processors who may receive personal data may be located in any country, in particular in Switzerland, Germany, Israel, and the USA.
Contractual Partners
We may disclose data to contractual partners (e.g., sales partners, service providers, financial companies, etc.). This is done, for example, to fulfill contractual obligations, to offer certain services, for collection and marketing purposes, to analyze the use and operation of our services, systems, and infrastructure, and for payment processing. Possible recipients may also be acquirers or those interested in acquiring business areas, companies, or parts thereof. Contractual partners may have access to personal data and process it for their own purposes (e.g., to fulfill contracts or their own legal obligations). They are themselves obliged to comply with applicable data protection laws. Contractual partners who may receive personal data may be located in any country, in particular in Switzerland, in EU and EEA countries, and in the USA.
Disclosures to Authorities
In certain situations, we may disclose data to authorities, agencies, and other third parties. We do this in cases where we are officially requested to do so or where we believe we are obliged to do so.
7. Retention Period
We store personal data for as long as is necessary for the purpose for which we collected it. Certain personal data is also subject to legally binding retention obligations of ten or more years, which we observe. We may also store personal data for at least the duration of applicable limitation periods, which in many cases is five or ten years. Personal data arising in connection with the use of our services (e.g., logs, analyses, etc.) and which is not subject to such retention or limitation periods is usually deleted earlier as soon as we no longer have an interest in processing it. Data may also be retained in anonymized form for longer periods. Subject to an express contractual agreement, we are not obliged to retain data for a specific period.
8. Data Security
We apply appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
9. Your Rights (Data Subject Rights)
Every data subject has the right to access personal data concerning them. In addition, they have the right to request correction, deletion, and restriction of personal data concerning them, and to object to such processing of personal data. The exercise of such rights generally requires that the data subject can clearly prove their identity. If the processing of personal data is based on consent, the data subject may revoke consent at any time. In certain cases, the data subject has the right to receive data generated when using online services in a structured, common, and machine-readable format that enables further use and transmission. Requests in connection with these rights should be addressed to the address given above. We reserve the right to restrict the rights of the data subject within the framework of applicable law and, for example, not to provide complete information or not to delete data. We also point out that deletion of your personal data may result in services being wholly or partially unavailable or unusable.
Every data subject has the right to lodge a complaint with the competent data protection authority. In the case of a controller in Switzerland, this is the Federal Data Protection and Information Commissioner. In the case of a controller in the Principality of Liechtenstein, it is the Data Protection Office of Liechtenstein.
10. Cookies, Web Analysis and Tracking Tools
We use various common technologies to collect, store, and evaluate data when you visit our website and use our services.
These include cookies, which can be used to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser used. When you visit a service again, it can recognize your browser or device using the cookie. Cookies can store user settings and other information. We use session cookies. These are necessary to be able to perform the basic functionalities of the services and are automatically deleted again after using our services. In addition, we also use temporary and permanent cookies, which are stored on your computer or mobile device for longer periods. The information collected by cookies enables us to improve our website and services in accordance with customer wishes and to offer you tailored offers.
You can block the use of cookies in your browser settings or delete them there. Please note that if cookies are not allowed, not all functions of a service may be fully usable, and that if you delete cookies, any opt-out cookies you have set will also be deleted. Such opt-out cookies would then have to be activated again when you next visit the relevant service. Otherwise, you will be recognized as a new user and your data will be collected again.
In addition to cookies, we use web analysis and tracking tools to measure and evaluate the use of our website and services, to personalize services, and to display offers and advertising tailored to you. The terms of use and privacy policies of these third parties apply to data processing by such tools, which are usually provided by third parties.
According to the law, we can store cookies if they are absolutely necessary for the operation of this site. For all other types of cookies, we need the user's permission. This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages. Consent can be changed or revoked at any time on our website.
11. Integration of Third-Party Services
We integrate services and content from third parties on our websites that may enable you to interact with third parties (e.g., YouTube video or online payment via a payment service provider). Any data provided is forwarded to these third parties for processing and execution of the corresponding service or processed directly by them. Please note that the terms of use and privacy policies of these third parties apply to their data processing.
Contact
For privacy-related inquiries, please contact us at:
jacqueline.pfenninger@bluewin.ch
