Datenschutzerklärung

Privacy Policy for Galito Bracelets Shop

Principle and Scope This privacy policy pertains to the processing of personal data related to visiting the websites under galitobracelets.ch. In order to utilize our websites and the associated online services or applications (collectively referred to as "Services"), we process your personal data (hereinafter also referred to as "Data"). Please note that this privacy policy does not apply to websites of other providers to which our website may link.

Personal data refers to information relating to a specific or identifiable natural person. Certain categories of particularly sensitive personal data, such as health data, are protected by special legal provisions. The term "processing" encompasses all operations related to your data, including collection, storage, use, disclosure, archiving, or deletion. In processing data, we adhere to the Federal Data Protection Act (DSG), the corresponding implementing ordinance (DSGV), as well as other applicable data protection laws (e.g., the European General Data Protection Regulation, GDPR), where applicable.

In the following sections, we would like to explain to you what data we collect, for what purposes we use it, and what rights you have regarding your data. If you provide us with data about third parties, we assume that you are authorized to do so and that the data provided is correct. Therefore, we ask you to inform the relevant third parties about the processing of their data by us and to provide them with a copy of this privacy policy or the relevant product information. If we point you to an updated version of these documents, we ask you to also pass on these new versions.

Our employees receive regular training on data protection issues and are subject to confidentiality obligations. Furthermore, compliance with data protection regulations is monitored by our data protection office.

Responsible Parties and Contact Responsible for the data processing described in this privacy policy is: Galito Bracelets Shop

Address: Ringstrasse 12, 3066 Stettlen

For questions and concerns regarding the processing of your data and your data protection rights towards us, please contact:

Email: shop@galitobracelets.ch

Processed Data We attach great importance to the protection of your personal data. When using our website and services, we primarily process the data necessary for use that you transmit to us as well as the information collected directly by us (see below).

In the course of using our website and services, we collect metadata, such as information about your browser (type and version), your device type (e.g., smartphone or tablet), and your IP address. Furthermore, we collect access data, also known as log data. This includes the name of the accessed website, date and time of access, amount of data transmitted, message about successful retrieval, information about the operating system, and information about the last visited website.

We only store and process further data about you if you provide it to us in the course of using services and tools (e.g., contact form). Further data protection-relevant information for specific tools can be found below in this privacy policy.

Purpose We process your data exclusively for the purposes that we have informed you about when collecting your data, as well as for other purposes compatible with these objectives. Further information about the basis of our data processing can be found below in this privacy policy.

Data Processing We process your data for various purposes related to communication with you. This includes, in particular, responding to inquiries, asserting your rights, and contacting you for follow-up questions. For this purpose, we primarily use communication data and master data, as well as registration data regarding offers and services used by you. This data may be stored for documentation purposes, training, quality assurance, and inquiries.

Furthermore, we process data for marketing purposes and for maintaining customer relationships. We may send general or personalized information about our offer to our users, for example, in the form of irregular contacts via email, post, or telephone, as well as through other channels for which we have contact information from you. You have the opportunity at any time to reject such contacts or to refuse or revoke your consent to be contacted for advertising purposes. With your consent, we can tailor our online offer more precisely to the needs of our users.

Furthermore, we may use your data for market research, to improve our online offer, our services, and possibly for product development.

Finally, we may also store and process your data for security reasons and for access control on our website.

Log Files We mainly use data to create server log files to perform statistical analyses for operating the website, ensuring the security of IT systems, and optimizing the website. We primarily use log data for this purpose. The legal basis for this data processing is our legitimate interest in providing you with a secure and smooth user experience at all times. We also reserve the right to subsequently review the log data if there are specific indications of unlawful use.

Contact Form When you contact us via the contact form, we collect your contact details to process your request and respond to any inquiries. The transmission of this data takes place in encrypted form.

If you have provided us with your email address or contacted us directly by email, we may also send you information by email related to the processing of your concerns and questions.

The legal basis for processing your data is based on our legitimate interest in being able to process your online request efficiently and effectively. If the purpose of email contact is to conclude a contract, data processing is based on the initiation of this contractual relationship.

reCAPTCHA To ensure that the form(s) on our website are filled out by a human and not by a bot, we use reCAPTCHA. reCAPTCHA is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google's privacy policy can be accessed at the following URL: policies.google.com/privacy

Chat Function If you use the live chat, we process your inputs to answer your request. The content and purpose of the communication are determined by the message content or your request provided by you.

The legal basis for processing your data is based on our legitimate interest in providing you with an attractive online consultation service on our website.

Newsletter On our websites, you have the opportunity to subscribe to our newsletter to receive regular information about us, our offers, and services. When you subscribe to the newsletter, your contact details from the input form are transmitted to us. By ordering the newsletter, you give us your consent and acknowledge our privacy policy at the same time.

The legal basis for processing your data is based on our legitimate interest in actively informing you about us based on your expressed interest in signing up. You have the opportunity to revoke your consent to receive the newsletter for the future at any time. To do this, you can simply click on the corresponding link at the end of each newsletter sent.

Bexio Customer data can be integrated from our website into Bexio (Bexio AG, Alte Jonastrasse 24, 8640 Rapperswil, Switzerland). This is particularly the case if a contractual relationship arises between us. The data can be stored in Bexio to increase efficiency.

The legal basis for processing your data is based on our legitimate interest in optimizing processes. Further information on data protection regulations in Bexio can be found at the following link: www.bexio.com/de-CH/richtlinien/datenschutz

Shopify We use the Shopify service provided by Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, to operate our online shop. When you place an order in our online shop, your order data (such as your name, billing address, email address, payment information) will be processed by Shopify to fulfill the contract. Further information on data protection in connection with Shopify can be found at www.shopify.com/legal/privacy.

The legal basis for processing your data is based on the performance of a contract, as well as our legitimate interest in the efficient operation of our online shop.

Data Transfer and Recipient We treat your data with strict confidentiality and do not disclose it to unauthorized third parties. Your data will only be transmitted to third parties if there is a legal obligation to do so or if you have consented to the transfer.

Data Processing Outside the EU/EEA If your data is processed outside the European Union (EU) or the European Economic Area (EEA), we will inform you about this separately. In such cases, we ensure before the data transfer that an appropriate level of data protection is guaranteed in the recipient country (e.g., by concluding standard contractual clauses or relying on certifications such as the Privacy Shield).

Data Security We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with the requirements of data protection law. In doing so, we protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

Duration of Data Storage We store your data only as long as it is necessary to achieve the processing purposes or as required by law. After the respective purpose has ceased to apply or after expiration of the retention periods prescribed by law, the corresponding data will be routinely blocked or deleted in accordance with legal regulations.

Rights of Data Subjects As a data subject, you have various rights concerning your personal data. These include, among others, the right to access, rectification, erasure, restriction of processing, data portability, and objection.

Right to Access You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain additional information. The additional information includes details of the purposes of the processing, the categories of personal data concerned, and the recipients of the personal data.

Right to Rectification You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to Erasure In certain circumstances, you have the right to obtain from us the erasure of personal data concerning you, and we may be obliged to erase such personal data.

Right to Restriction of Processing In certain circumstances, you have the right to obtain from us restriction of processing your personal data. In such cases, the respective data will be marked and may only be processed by us for certain purposes.

Right to Data Portability Under certain circumstances, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from us.

Right to Object In certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

Right to Withdraw Consent Where we rely on consent for processing your personal data, you have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please contact us using the contact details provided above.

Right to Lodge a Complaint You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes applicable data protection law.

Changes to this Privacy Policy We reserve the right to amend this privacy policy to adapt it to changes in the legal situation or to changes in the service and data processing. However, this only applies with regard to data processing declarations. If users' consent is required or parts of the privacy policy contain provisions of the contractual relationship with users, the changes will only be made with the consent of the users.

Users are requested to inform themselves regularly about the content of the privacy policy.

Stand: January 2024

This privacy policy was created with the help of activeMind AG, the experts for privacy policies. For more information, visit www.activemind.de/datenschutz.