Privacy policy

Privacy policy of NIKIN AG

1. general information

In this privacy policy, NIKIN AG (hereinafter also referred to as "NIKIN", "we" or "us") explains how we process your personal data in connection with the provision of our websites https://nikin.ch/ and https://nikinclothing.com/ (the "Websites"). This is not an exhaustive description; other data protection declarations, general terms and conditions and similar documents may govern specific matters.

We use the term "data" here synonymously with "personal data".

If you transmit or disclose data to us about persons other than yourself, we assume that you are authorized to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this privacy policy.

2. responsible person

Unless otherwise communicated in individual cases, the data controller is responsible under data protection law for the data processing described in this privacy policy:

NIKIN AG

Sawmill Road 46

5600 Lenzburg

Switzerland

You can contact us for your data protection concerns and to exercise your rights as follows: team@nikin.ch.

3. collection and processing of data

We collect data when you visit our websites and use the functionalities or services available on the websites. The processing of your data is limited to data that is necessary for the operation of a functional website and the provision of our content available on it. Your data is processed on the basis of the agreed purposes or a legal basis. The specific data we process about you depends on the reason for and purpose of the processing. We only collect data that is necessary for the implementation and processing of our products and services or that you provide to us voluntarily. Insofar as this is not prohibited, we also obtain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, media or the Internet including social media) or receive data from authorities and other third parties (such as credit agencies, address dealers, associations, contractual partners, Internet analysis services, etc.).

The categories of data that you have provided to us directly and the categories of data that we receive about you from third parties include, but are not limited to

Technical dataIP address; information about the operating system of your terminal device; Cookies; name and URL of the requested websites; amount of data transferred; region, date and time of access; websites accessed via our websites; websites from which access is made; type of browser; name of the internet provider; protocols, etc.
Master dataName; salutation/title, address; email address; telephone number; gender; date of birth; nationality; details of the employer or company on whose behalf you are contacting us; role and function; details of your relationship with us; details of interactions with you; consent forms (e.g. newsletter or online contact form); social media profiles; photos and videos; copies of ID; payment information etc;
Communication dataData transmitted via a contact form, e-mail, telephone, letter or other means of communication; name; contact details; type, manner, place and time of communication and, as a rule, its content (i.e. the content of e-mails, letters, etc.); details of your request if you use an online contact form; order number; returned items, etc.;
Contract and service dataInformation when using our online offers and/or with regard to a possible conclusion of a contract; information about your contracts (e.g. type and date of conclusion), information about the products and the services provided or to be provided; information about feedback (e.g. complaints, feedback on satisfaction, etc.); information required for the execution and administration of the contracts (e.g. information in connection with billing, customer service, technical support and the enforcement of contractual claims), etc.;
Registration dataName; address; e-mail address; telephone number; date of birth; credit card information; bank account details etc.;
Behavioral and preference dataInformation about user behavior on our websites; information about the use of our products and services; information about your response to electronic communications; information about your location, e.g. if you search for a store at a desired location via websites using Google Maps; information from input fields (e.g. search function), etc;
Other dataWe may also collect data from you in other situations. For example, data may be collected in connection with official or legal proceedings (e.g. files, evidence, etc.). As part of the events we offer, we may collect data about who participates in events and when, and we may create photos, videos and sound recordings in which you can be recognized.

As part of our business relationship, it is necessary for you to provide us with data that is required for the establishment and fulfillment of the contractual relationship. In general, there is no legal obligation to provide us with this data. However, without this data, we may not be able to enter into or continue the contract with you or the entity/person you represent. In addition, certain information must be disclosed to enable data traffic on the websites, e.g. an IP address.

4. purposes of the processing

The data collected is mainly used for the conclusion and execution of contracts with you and business partners, in particular in connection with the products and services offered on our websites. We also process the data in order to fulfill our legal obligations, both domestically and internationally.

In addition, in accordance with applicable law and where appropriate, we may process data for the following purposes which are in our legitimate interests or the legitimate interests of third parties:

Product/service development and innovationWe process your data in order to further develop our products, services, websites and other platforms on which we operate and to expand our products and services.
CommunicationWe process your data for the purpose of communicating with you, in particular to respond to your inquiries and assert your rights and to contact you in the event of queries.
SecurityWe process your data to protect our operations, our IT and other infrastructure as well as our websites and other platforms.
MarketingWe process your data for market, media and opinion research, optimization of advertisements in order to show you advertisements and offers that are truly tailored to your interests and for sending newsletters if and to the extent that you give us your consent, provided that this is required by applicable law.
Relationship ManagementWe may use a Customer Relationship Management System ("CRM") to store and process your data as described.
Risk management, corporate governance and business developmentWe process your data as part of our risk management and governance to protect ourselves from criminal or abusive activities. As part of our business development, we may sell businesses, parts of businesses or companies to others or acquire them from others or enter into partnerships, which may result in the exchange and processing of data on the basis of your consent.
Legal disputesWe process your data for the enforcement of legal claims and for defense in legal disputes and official proceedings.
Compliance with the lawWe process your data in order to comply with legal requirements (e.g. prevention and investigation of criminal offenses and other misconduct; conducting internal investigations, data analysis to combat fraud).

5. legal basis for the processing

If we ask for your consent for certain processing (e.g. to receive newsletters), we will process your data on the basis of this consent. You can revoke your consent at any time with effect for the future by sending us a written notification (e-mail is sufficient). If you wish to withdraw your consent to online tracking, please refer to section 8. The withdrawal of your consent does not affect the lawfulness of the processing we carried out before your withdrawal, nor the processing of your data on the basis of other processing grounds.

If we have not asked for your consent, we process your data for other legal reasons, such as a contractual obligation, a legal obligation, a vital interest of the data subject or another natural person, for the performance of a public task or a legitimate interest which includes compliance with applicable law and the marketing of our products and services, the interest to better understand our markets and to manage and develop our business, including its activities, securely and efficiently.

6. profiling and automated decision-making

We may automatically evaluate certain of your personal characteristics for the above-mentioned purposes using your data ("profiling") if we want to determine preference data, but also to determine risks of misuse and security risks, to carry out statistical evaluations or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioral and preference data, but also master and contract data and technical data assigned to you in order to better understand you as a person with your different interests and other characteristics. We may also use profiling to assess your creditworthiness. We do not use profiling that may have legal effects on you or similarly significantly affect you without human review.

In certain situations, for reasons of efficiency and consistency of decision-making processes, it may be necessary for us to automate discretionary decisions concerning you with legal effects or potentially significant disadvantages ("automated individual decisions"). In this case, we will inform you accordingly and take the measures required under applicable law.

7. disclosure of data to third parties

In order to fulfill our contracts, to comply with our legal obligations, to protect our legitimate interests and to fulfill the other purposes and legal grounds mentioned above, we may disclose your data to third parties, in particular to the following categories of recipients:

Service providersWe work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us or who receive data about you from us under their own responsibility (e.g. IT providers, banks, insurance companies, telecommunications companies, credit reference agencies, providers of address checks, payment service providers, lawyers) or whom we instruct to process data for one of the above-mentioned purposes on our behalf and only in accordance with our instructions.
Contractual partnersIf the respective contract requires it, we will pass on your data to other contractual partners, dealers, subcontractors, etc. next.
AuthoritiesWe may pass on personal data to offices, courts and other authorities in Switzerland or abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. The authorities process data about you that they receive from us under their own responsibility.

8th Newsletter

If you subscribe to one of our offered newsletters, you can cancel the subscription at any time by using the unsubscribe option contained in the newsletter.

In connection with our newsletter and based on your consent, we use the tools listed in Section 12 to collect your data when you sign up for our newsletter or other updates and to ensure that you only receive newsletters and updates that match your actual or perceived interests.

9. Cookies

We use cookies on our websites Cookies, which allow us to identify your browser or device and which may allow certain third parties to do the same. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our websites.

Some Cookies are necessary for the functioning of our websites or for certain functions. These Cookies only exist temporarily ("sessionCookies") and are deleted after you have visited our websites. Other Cookies are necessary to store user configurations and other information beyond a session ("permanent Cookies"). Regardless of this, you have the option of setting your browser to reject Cookies , to save it only for a single session or to delete it before its usual expiration date.

Most of the Cookies we use are so-called sessionCookies. We only use permanent Cookies to store user preferences (e.g. language etc.) and to understand how you use our services and content. Some Cookies are sent to you by us, others by business partners we work with. If you choose to block Cookies , you may not be able to use certain features (e.g. language settings, etc.).

By using our websites and agreeing to other marketing emails, you consent to the use of such techniques. However, depending on the purpose of this Cookies , we may ask for your explicit consent beforehand. You can accept or decline consent via the cookie banner on our website.

10. social plug-ins

We sometimes use social plug-ins from YouTube and Instagram on our websites. This is recognizable for you in each case (usually by corresponding symbols). We have configured these elements so that they are deactivated by default. If you activate them (by clicking on them), the providers of the respective social networks can register that and where you are on our websites and use this information for their purposes. The processing of your data is then the responsibility of the respective provider in accordance with their data protection regulations. We do not receive any information about you.

11 Our presence on social networks

We have various presences on social media platforms. We operate these sites with the following providers: Facebook, LinkedIn, Instagram, Pinterest, TikTok, YouTube, Twitter/X and Snapchat.

We receive data from you and the platforms when you come into contact with us via our online presence. At the same time, the platforms evaluate your use of our online presence and link this data with other data about you known to the platforms. They also process this data for their own purposes under their own responsibility, in particular for marketing and market research purposes and to manage their platforms.

We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). For information on the collection and storage of your data as well as the type, scope and purpose of its use by the operator of the respective social media platform, please refer to the data protection declarations of the respective operator.

12. tools

YouTube

We use the YouTube service on this website. This allows us to play videos directly on the website and enables you to use the video function conveniently.

YouTube is part of Google; Google Ireland (based in Ireland) is the provider of the "YouTube" service and acts as our processor. Google Ireland relies on Google LLC (based in the USA) as its processor (both "Google").

Normally, when you access a page with embedded videos, your IP address is sent to YouTube and Cookies is installed on your computer. However, we have embedded our YouTube videos with the extended data protection mode (in this case, YouTube still contacts Google's Double Click service, but according to Google's privacy policy, personal data is not evaluated). As a result, YouTube no longer stores any information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information will also be assigned to your user account (you can prevent this by logging out of YouTube before watching the video).

We have no knowledge of and no influence on the possible collection and use of your data by YouTube. Further information can be found in YouTube's privacy policy.

Chatra

On our websites, we use functions of the live chat service Chatra, which is offered by Roger Wilco LCC based in the USA. We have concluded a contract with Roger Wilco LCC for commissioned data processing and fully implement the strict requirements of the GDPR when using Chatra. You can find more information on the handling of personal data at Chatra in Chatra's privacy policy: https://chatra.com/privacy-policy/.

Gorgias

On our websites, we use functions of the customer support service Gorgias, which is offered by Gorgias in the USA. We have concluded a contract with Gorgias for commissioned data processing and fully implement the strict requirements of the GDPR when using Gorgias. You can find more information on the handling of personal data at Gorgias in Gorgias' privacy policy: https://www.gorgias.com/legal/privacy.

Wallee

On our websites, we use functions of the payment processing service Wallee, which is offered by the Wallee Group AG based in Switzerland. We have concluded a contract with Wallee Group AG for commissioned data processing and fully implement the strict requirements of the GDPR when using Wallee. You can find more information on the handling of personal data at Wallee in Wallee's data protection information: https://wallee.com/legal/datenschutzhinweise.

Klaviyo

On our websites, we use functions of the email marketing service Klaviyo, which is offered by Klaviyo in the USA. We have concluded a contract with Klaviyo for commissioned data processing and fully implement the strict requirements of the GDPR when using Klaviyo. You can find more information on the handling of personal data at Klaviyo in Klaviyo's privacy policy: https://www.klaviyo.com/legal/data-processing-agreement.

Yotpo

On our websites, we use functions of the loyalty & review management service Yotpo, which is offered by Yotpo in the USA. We have concluded a contract with Yotpo for commissioned data processing and fully implement the strict requirements of the GDPR when using Yotpo. You can find more information on the handling of personal data at Yotpo in Yotpo's privacy policy: https://www.yotpo.com/privacy-policy/.

Pushowl

On our websites, we use functions of the Pushowl notification service, which offers browser notification marketing and is operated by Pushowl in India. We have concluded a contract with Pushowl for commissioned data processing and fully implement the strict requirements of the GDPR when using Pushowl. You can find more information on how Pushowl handles personal data in Yotpo's privacy policy: https://pushowl.com/privacy.

Microsoft Ads

On our websites, we use functions of the search engine advertising service Microsoft Ads, which is offered by Microsoft in the USA. We have concluded a contract with Microsoft for commissioned data processing and fully implement the strict requirements of the GDPR when using Microsoft Ads. You can find more information on the handling of personal data with Microsoft Ads in Microsoft's legal provisions on data protection and security: https://about.ads.microsoft.com/de-de/policies/legal-privacy-and-security.

Amazon Web Services

We use functions of the cloud infrastructure provider Amazon Web Services (AWS) on our websites, via which the Innkeepr tool runs. Amazon Web Services is based in the USA. We have concluded a contract with Amazon Web Services for commissioned data processing. Further information on the handling of personal data at Amazon Web Services can be found in the AWS privacy policy: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_German_2023-08-11.pdf.

Shopify

On our websites, we use functions of the e-commerce platform Shopify, which runs the webshop of NIKIN . Shopify Inc. is based in Canada. We have concluded a contract with Shopify Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Shopify. Further information on the handling of personal data at Shopify can be found in Shopify's privacy policy: https://www.shopify.com/de/legal/datenschutz.

Matrixify

We use functions of the data processing service Matrixify on our websites, which enables the import/export of data and the analysis of data from Shopify. Matrixify is operated by Matrixify, based in Lithuania. We have concluded a contract with Matrixify for commissioned data processing and fully implement the strict requirements of the GDPR when using Matrixify. Further information on the handling of personal data at Matrixify can be found in Matrixify's privacy policy: https://matrixify.app/privacy-notice/.

MF Group

We use the MF Group functions for purchase on account in Switzerland on our websites. MF Group AG is based in Switzerland. We have concluded a contract with MF Group AG for commissioned data processing and fully implement the strict requirements of the GDPR when using MF Group. Further information on the handling of personal data at MF Group can be found in MF Group's privacy policy: https://terms.mfgroup.ch/agbfiles/Datenschutz_de.pdf.

Analyzify

We use the functions of the data analysis app Analyzify on our websites, which takes care of all data collection and tracking requirements of our customers for the Shopify store. The Analyzify app is owned by Solverhood OÜ, which is based in Estonia. We have concluded a contract with Solverhood OÜ for commissioned data processing and fully implement the strict requirements of the GDPR when using Analyzify. Further information on the handling of personal data at Solverhood OÜ can be found in Analyzify's privacy policy: https://analyzify.com/privacy-policy.

Google

We use Google functions on our websites. Google Ireland (based in Ireland) is the provider of the "Google Analytics" service and acts as our processor. Google Ireland relies on Google LLC (based in the USA) as its processor (both "Google"). Google uses Performance Cookies to track the behavior of visitors to our websites (duration, frequency of pages accessed, geographical origin of access, etc.) and compiles reports for us on the use of our websites on this basis. We have concluded a contract with Google Ireland for commissioned data processing and fully implement the strict requirements of the GDPR when using Google. Further information on how Google handles personal data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245.

Weglot

We use the website translation solution Weglot on our websites. Weglot is based in France. We have concluded a contract with Weglot for commissioned data processing and fully implement the strict requirements of the GDPR when using Weglot. Further information on the handling of personal data at Weglot can be found in Weglot's privacy policy: https://www.weglot.com/privacy.

Clerk.io

We use Clerk.io on our websites to provide personalized experiences across the entire customer journey without using Cookies . The online marketing company is based in Denmark. We have entered into a contract data processing agreement with Clerk.io and fully implement the strict requirements of the GDPR when using Clerk.io. Further information on the handling of personal data at Clerk.io can be found in Clerk.io's privacy policy: https://de.clerk.io/privacy.

- Behamics

We use functions from Behamics on our websites to offer personalized experiences throughout the customer journey and to display messages that support customers in their purchasing decisions. The online marketing company is based in Switzerland. We have concluded a contract data processing agreement with Behamics and fully implement the strict requirements of the GDPR when using Behamics. You can find more information on the handling of personal data at Behamics in Behamics' privacy policy: https://behamics.com/files/erklarung-DSG-behamics.pdf

- Sizebay

We use Sizebay functions on our websites to display size charts and size recommendations on the product pages. The online marketing company is based in Portugal. We have concluded a contract with Sizebay for commissioned data processing and fully implement the strict requirements of the GDPR when using Sizebay. You can find more information on the handling of personal data at Sizebay in Sizebay's privacy policy: https://sizebay.com/en/legal/privacy-policy/

- ABlyft

We use functions from ABlyft on our websites to carry out A/B tests on our website and thus improve the customer experience. The online marketing company is based in Germany. We have concluded a contract with ABlyft for commissioned data processing and fully implement the strict requirements of the GDPR when using ABlyft. You can find more information on the handling of personal data at ABlyft in ABlyft's privacy policy: https://ablyft.com/en/privacy-notice

AfterSell

We use the product suggestion solution AfterSell on our websites. AfterSell is based in Canada. We have concluded a contract with AfterSell for commissioned data processing and fully implement the strict requirements of the GDPR when using AfterSell. Further information on the handling of personal data at AfterSell can be found in AfterSell's privacy policy: https://start.aftersell.app/privacy

Charles

We use the WhatsApp messaging solution Charles on our websites. Charles is based in Germany. We have concluded a contract with Charles for commissioned data processing and fully implement the strict requirements of the GDPR when using Charles. Further information on how Charles handles personal data can be found in Charles' privacy policy: https://www.hello-charles.com/privacy-policy/.

BC Business Central

We use functions of BC Business Central, an Enterprise Resource Planning (ERP) system offered by Microsoft in the USA, on our websites. Microsoft is operated by Microsoft LLC in the USA. We have concluded a contract with Microsoft LLC for commissioned data processing and fully implement the strict requirements of the GDPR when using Microsoft. Further information on the handling of personal data by Microsoft and BC Business Central can be found in their data protection addendum, which you can view here: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Adverity

We use Adverity functions on our websites for marketing data integration and analysis. Adverity is offered by Adverity GmbH, based in Austria. We have concluded a contract with Adverity GmbH for commissioned data processing and fully implement the strict requirements of the GDPR when using Adverity. Further information on the handling of personal data by Adverity can be found in their data protection agreement (MSA-DPA), which you can view here: https://www.adverity.com/msa-dpa.

Power BI

On our websites, we use functions of Power BI, a business intelligence platform offered by Microsoft in the USA. Microsoft is operated by Microsoft LLC in the USA. We have concluded a contract with Microsoft LLC for commissioned data processing and fully implement the strict requirements of the GDPR when using Power BI. Further information on the handling of personal data by Microsoft and Power BI can be found in their data protection addendum, which you can view here: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Twitter

We may use functions of Twitter and/or other services offered by X Corp. in the USA on our websites to optimize advertising and other social media activities. We have concluded a contract with X Corp. for commissioned data processing and fully implement the strict requirements of the GDPR when using these services. You can find more information on the handling of personal data by Twitter and X Corp. in their privacy policy, which you can view here: https://twitter.com/de/privacy.

On our websites, we use functions of the Linkedin business social media platform, which is offered by Linkedin Corporation in the USA. We have concluded a contract with Linkedin Corporation for commissioned data processing and fully implement the strict requirements of the GDPR when using Linkedin. You can find more information on how Linkedin handles personal data in Linkedin's privacy policy, which you can view here: https://www.linkedin.com/legal/l/dpa.

Facebook/Meta

We use Facebook Pixel on our websites to optimize advertising. Facebook is operated by Meta Inc. in the USA. We have concluded a contract with Meta Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Facebook/Meta. You can find more information on the handling of personal data by Facebook/Meta in their privacy policy, which you can view here: https://de-de.facebook.com/business/gdpr.

Youtube

We use YouTube on our websites for the integration of videos and probably also for the optimization of advertising by YouTube. YouTube is operated by Google LLC in the USA. We have concluded a contract with Google LLC for commissioned data processing and fully implement the strict requirements of the GDPR when using YouTube. You can find more information on the handling of personal data by YouTube in their privacy policy, which you can view here: https://youtube.com/t/terms_dataprocessing.

We use functions of Pinterest Inc. on our websites, an image sharing and social media platform. Pinterest Inc. is based in the USA. We have concluded a contract with Pinterest Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Pinterest. You can find more information on the handling of personal data by Pinterest in their privacy policy, which you can view here: https://policy.pinterest.com/de/privacy-policy.

Snapchat Ads / Snap Inc.

We probably use functions of Snap Inc. on our websites, the company behind the multimedia instant messaging app Snapchat. Snap Inc. is based in the USA. We have concluded a contract with Snap Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Snap Inc. You can find more information on the handling of personal data by Snap Inc. in their privacy policy, which you can view here: https://snap.com/en-US/terms/data-processing-agreement.

TikTok

We are likely to use features on our websites from ByteDance Ltd, the company behind the short-form video hosting service TikTok. ByteDance Ltd. is based in the UK, the Cayman Islands and China, which can be complex. However, we have entered into a contract data processing agreement with ByteDance Ltd. and fully implement the strict requirements of the GDPR when using ByteDance Ltd. More information on the handling of personal data by ByteDance Ltd. can be found in their official article on data processing, which you can view here: https://ads.tiktok.com/i18n/official/article?aid=893639991572679936

13. transfer of data abroad

As explained in the sections above, we also disclose data to other bodies. These are not only located in Switzerland. Your data may therefore be processed in Europe as well as in the USA, Hong Kong, Ireland, India, Canada, Lithuania, Denmark, Germany, Estonia, Israel, Great Britain, Latvia and France; in exceptional cases, however, in any country in the world.

We only transfer data to countries without adequate legal data protection if this is necessary for the performance of a contract or for the assertion or defense of legal claims, or if such transfer is based on your express consent or is subject to guarantees that ensure the protection of your data, such as the standard contractual clauses approved by the European Commission (adapted to Switzerland, if applicable).

14. retention periods for the data

We will only process your data for as long as necessary to fulfill the purposes for which we collected it, including compliance with legal retention obligations and, to the extent necessary to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled. After expiry of the respective retention period, we will securely destroy your data in accordance with the applicable laws and regulations.

15. data security

We take appropriate security measures to protect the confidentiality, integrity and availability of your data, to protect it against unauthorized or unlawful processing and to counter the risks of loss, unintentional alteration, unwanted disclosure or unauthorized access. However, we and your data may be subject to cyber-attacks, cybercrime, brute force methods, hacking and other fraudulent and malicious activities, including but not limited to viruses, forgeries, malfunctions and disruptions, which are beyond our control and responsibility. We have also put in place procedures to deal with any suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

16. your rights

In connection with the processing of your data by us, you have various rights depending on the applicable data protection law: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to withdraw consent, right to lodge complaints and right to object.

Please note that we reserve the right to assert legal restrictions if necessary, e.g. if we are obliged to store or process certain data, have an overriding interest (insofar as we can invoke such interests) or need the data to assert claims. Should the exercise of certain rights involve costs for you, we will inform you in advance. We have already referred to the possibility of withdrawing consent in section 8 above. It is important to note that the exercise of these rights may conflict with your contractual obligations and could have consequences such as premature termination of the contract or associated costs. Should this occur, we will inform you in advance, unless this has already been contractually agreed.

If you wish to exercise the above rights, please contact us using the contact details provided in section 2, unless otherwise stated or agreed. Please note that we must identify you in order to prevent misuse, e.g. by means of a copy of your identity card or passport, unless identification is otherwise possible.

In addition, every data subject has the option of asserting their rights in court or lodging a complaint with the competent data protection authority. In Switzerland, the competent data protection authority is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

17. updating and amending this privacy policy

Due to the continuous development of our website and its content, as well as changes in the law or regulatory requirements, we may need to amend this privacy policy from time to time. The version published on this website is the current version.

Last update: 30.5.2024.

---

Politique de Protection des Données Personnelles par NIKIN AG

1. general information

In the present personal data protection policy (ci-après également " Policy "), NIKIN AG (ci-après également " NIKIN ", " nous ", " nos " ou " notre ") décrit le traitement des données personnelles de l'utilisateur (ci-après " vous ", " vôtre ", " vos ") dans le cadre de la mise à disposition des sites Internet suivants https://nikin.ch/ and https://nikinclothing.com/ (les " Sites Internet "). This description is non-exhaustive. Indeed, other personal data protection policies, general terms and conditions of sale and similar documents may govern specific situations.

We use the term "data" as a synonym for "personal data".

If you transmit or communicate data to us about persons other than yourself, we accept the principle that you are authorized to do so and that this data is accurate. By transmitting data on third parties, you confirm that this is the case. You must also ensure that these third parties have been informed of this data protection policy.

2nd Responsable du Traitement des Données

Unless otherwise stated, the person responsible for the processing of the data mentioned in this policy is the person in charge of data protection:

NIKIN AG

Rue de la Scie 46

5600 Lenzbourg

Suisse

Vous pouvez nous contacter pour toute demande en matière de protection des données et pour exercer vos droits à l'adresse suivante : team@nikin.ch.

3. collection and processing of data

We collect data when you visit our Internet sites and when you use the functionalities or services available on the Internet sites. The processing of your data is limited to the data necessary for the operation of a functional Internet site and for the provision of our content available on that site. The processing of your data is based on the agreed objectives or on a legal basis. The data that we process in detail on your subject depends on the motive and the purpose of the processing. We only collect the data necessary for the execution and processing of our products and services or that you voluntarily make available to us. To the extent that this is not illegal, we also collect data from public sources (e.g. register of criminal proceedings, register of deeds, register of commerce, media or Internet, including social media) or receive data from authorities and third parties (such as credit information agencies, address brokers, associations, contractual partners, Internet analysis services, etc.).

Les catégories de données que vous nous avez directement fournies et les catégories de données que nous recevons de tiers à votre sujet comprennent, inter autres, les données suivantes :

Données techniques Address IP ; information on the operating system of your terminal ; cookies ; name and URL of the requested web page ; quantity of transmitted data ; region, date and time of access ; web pages accessed via our website ; web pages from which access is made ; type of navigator ; name of the Internet access provider ; protocols, etc.
Données de base : Nom ; civilité/titre ; adresse ; adresse électronique ; numéro de téléphone ; sexe ; date de naissance ; nationalité ; coordonnées de l'employeur ou de l'entreprise au nom de laquelle vous entrez en contact avec nous ; rôle et fonction ; détails de votre relation avec nous ; details of your interactions with us; declarations of consent (e.g. for the newsletter or the online contact form); social media profiles; photos and videos; copies of identity documents; payment information, etc ;
Données de communication : Données transmises par le biais d'un formulaire de contact, par e-mail, par téléphone, par lettre ou par tout autre moyen de communication ; nom ; coordonnées ; nature, mode, lieu et heure de la communication et, en règle générale, son contenu (c'est-à-dire le contenu des e-mails, des lettres, etc.) ; informations relatives à votre demande si vous utilisez un formulaire de contact en ligne ; numéro de commande ; articles retournés, etc.) ; informations relatives à votre demande si vous utilisez un formulaire de contact en ligne ; numéro de commande ; articles retournés, etc ;
Data relating to contracts and services : information during the use of our offers in line and/or in view of the possible conclusion of a contract; information on your contracts (e.g. type and date of conclusion), information on the products and services provided or to be provided; information on the information returns (e.g. plaintes, retours sur la satisfaction, etc.) ; informations nécessaires à l'exécution et à la gestion des contrats (par ex. informations liées à la facturation, au service clientèle, à l'assistance technique et à l'application des droits contractuels), etc ;
Données d'enregistrement Nom ; adresse ; adresse électronique ; numéro de téléphone ; date de naissance ; informations sur la carte de crédit ; informations sur les comptes bancaires, etc ;
Données relatives aux comportements et aux préférences : information on the behavior of users on our website ; information on the use of our products and services ; information on your response to electronic communications ; information on your localization, for example when you search for a boutique in the desired location via the website using Google Maps ; information from search engines (for example, the search function), etc ;
Other data Nous pouvons également collecter des données auprès de vous dans d'autres situations. For example, data may be generated in the course of administrative or judicial proceedings (e.g. dossiers, investigations, etc.). In the context of the events that we propose, we may collect data on the persons participating in the events and at what time, and we may take photos, videos and audio recordings on which you may be recorded.

Within the scope of our commercial relationship, it is necessary for you to provide us with the data required for the establishment and execution of the contractual relationship. In general, there is no legal obligation to provide us with this data. However, without this information, we may not be able to conclude or continue the contract with you or with the institution/person you represent. In addition, certain information must be disclosed to allow data traffic on the website, such as an IP address.

4. finalités des traitements

Les données collectées sont principalement utilisées pour la conclusion et l'exécution de contrats avec vous et nos partenaires commerciaux, notamment en relation avec les produits et services proposés sur nos Sites Internet. We also process the data in order to comply with our legal obligations, both at national and international level.

In addition, in accordance with the legislation in force and to the extent that this is appropriate, we may process the data for the following purposes, which are in our legitimate interest or in the legitimate interest of third parties:

Développement de produits/services et innovation : nous traitons vos données afin de développer nos produits, services, sites web et autres plateformes sur lesquelles nous opérons, et d'améliorer nos produits et services.
Communication We process your data for the purpose of communicating with you, in particular to respond to your requests and to exercise your rights, as well as to contact you if you have any questions.
Security : nous traitons vos données pour protéger nos opérations, notre infrastructure informatique et autre, ainsi que nos Sites Internet et autres plateformes.
Marketing : We process your data for the purposes of market research, media and opinion studies, and optimizing your advertising in order to present you, as far as possible, of advertisements and offers adapted to your interests, as well as for the sending of newsletters, if and insofar as you give us your consent, unless this is required by the legislation in force.
Management of relations : nous pouvons utiliser un système de gestion des relations avec la clientèle ("CRM") pour stocker et traiter vos données comme décrit.
Risk management, corporate governance and commercial development : nous traitons vos données dans le cadre de notre gestion des risques et de notre gouvernance d'entreprise afin de nous protéger contre les activités criminelles ou abusives. In the course of our commercial development, we may sell or acquire activities, parts of activities or companies on behalf of third parties or enter into partnerships, which may give rise to an exchange and processing of data on the basis of your consent.
Legal disputes Nous traitons vos données pour faire valoir des droits juridiques et pour nous défendre en cas de litige ou de procédure administrative.
Respect for the law Nous traitons vos données afin de nous conformer aux exigences légales (par exemple, prévenir et élucider les infractions pénales et autres comportements répréhensibles ; mener des enquêtes internes, analyser les données pour lutter contre la fraude).

5. base juridique des traitements

To the extent that we request your consent for certain processing (e.g. for the receipt of newsletters), we will process your data on the basis of this consent. You can withdraw your consent at any time with effect for the future by sending us a written message (an e-mail is sufficient). If you wish to withdraw your consent toonline tracking, please refer to the article. 8. the retraction of your consent does not affect the legality of the processing that we have carried out before your revocation, nor the processing of your data on the basis of other motives for processing.

Si nous ne vous avons pas demandé votre consentement, nous traitons vos données pour d'autres raisons légales, telles qu'une obligation contractuelle, une obligation légale, un intérêt vital de la person concernée ou d'une autre person physique, l'exécution d'une mission publique ou un intérêt légitime qui comprend le respect du droit applicable et la commercialization de nos produits et services, l'intérêt de mieux comprendre nos marchés et de gérer et de développer notre entreprise, y compris ses activités, de manière sûre et efficace.

6. profiling and automated decision making

We can automatically evaluate certain of your personal characteristics with the help of your data ("profiling") for the purposes specified, for example when we want to determine the data of preference, but also to determine the risks of fraud and security, to carry out statistical evaluations or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine data on behavior and data on preferences, but also basic and contractual data, as well as the technical data that are assigned to you, in order to better understand you as a person with different interests and characteristics. We can also use the profile to assess your solvency. Nous n'utilisons pas de profilage susceptible d'avoir des effets juridiques sur vous ou de vous affecter de manière significative de façon similaire sans vérification humaine.

In certain situations, it may be necessary, for reasons of efficiency and consistency of the decision-making process, for us to automate the discretionary decisions that concern you and have legal consequences or may entail significant inconveniences ("automated individual decisions"). In this case, we will inform you accordingly and provide for the measures required by the applicable law.

7. transfer of the Données à des Tiers

Dans le cadre de l'exécution de nos contrats, le respect de nos obligations légales, la défense de nos intérêts légitimes et la réalisation des autres objectifs et motifs juridiques susmentionnés, nous pouvons transmettre vos données à des tiers, notamment aux catégories de destinataires suivantes :

Prestataires de services : nous travaillons avec des prestataires de services en Suisse et à l'étranger qui traitent des données vous concernant en notre nom ou en responsabilité commune avec nous, ou qui reçoivent de notre part des données vous concernant sous leur propre responsabilité (par ex. providers of IT services, banks, insurance companies, telecommunications companies, credit rating agencies, providers of address verification services, payment service providers, lawyers) or that we are responsible for processing the data for one of the purposes specified in our name and only in accordance with our instructions.
Contractual partners If the contract in question requires it, we will transfer your data to other contractual partners, subcontractors, etc.
Authorities Nous pouvons transmettre des données personnelles à des administrations, des tribunaux et d'autres autorités en Suisse ou à l'étranger si nous y sommes légalement tenus, autorisés ou si cela semble nécessaire pour la sauvegarde de nos intérêts. The authorities will process the data concerning you that they receive from us under their own responsibility.

8th Newsletter

If you subscribe to one of our newsletters, you can cancel your subscription at any time by using the unsubscribe option contained in the newsletter.

In relation to our newsletter and on the basis of your consent, we use the tools mentioned in article 12 "Conditions of use" to collect your data when you subscribe to our newsletter or other newsletters, and to ensure that you only receive newsletters and newsletters that correspond to your real or perceived interests.

9. Cookies

We use cookies on our Internet sites, which allow us to identify your browser or device, and which may allow certain third-party suppliers to do the same. Les cookies are small files that your browser automatically creates and that are stored on your device (portable device, tablet, smartphone, etc.) when you visit our Internet sites.

Certains cookies sont nécessaires au fonctionnement de nos Sites Internet ou à certaines fonctions. Ces cookies n'existent que temporairement (" cookies de session ") et sont supprimés une fois que vous avez visité notre site web. D'autres cookies sont nécessaires pour stocker les configurations des utilisateurs et d'autres informations au-delà d'une session ("cookies permanents"). Regardless of the above, you have the option of configuring your browser to refuse cookies, to register them only for a single session or to delete them before their normal expiry date.

Most of the cookies that we use are cookies de session. Nous utilisons des cookies permanents uniquement pour enregistrer les préférences des utilisateurs (par exemple, la langue, etc.) et pour comprendre comment vous utilisez nos services et notre contenu. Certains cookies vous sont envoyés par nous, d'autres par des partenaires commerciaux avec lesquels nous travaillons. Si vous choisissez de bloquer les cookies, il se peut que vous ne puissiez pas utiliser certaines fonctionnalités (par exemple, les paramètres de langue, etc.).

By using our Internet sites and accepting other marketing e-mails, you consent to the use of these techniques. However, depending on the final nature of these cookies, we may ask you for your explicit consent in advance. Vous pouvez accepter ou refuser ce consentement sur notre site web en cliquant sur la bannière des cookies.

10. plug-ins sociaux

On our Internet sites, we partly use social plug-ins from YouTube and Instagram. You can recognize them at any time (generally by the corresponding icons). We have configured these elements in such a way that they are deactivated by default. If you activate them (by clicking below), the providers of the social networks concerned can register that you are on our Internet sites and where you are on Internet sites, and use this information for their own purposes. The processing of your data is then carried out under the responsibility of the supplier concerned, in accordance with its policy of confidentiality. Nous ne recevons aucune information vous concernant.

11 Notre Présences sur les Réseaux Sociaux

Nous sommes présents sur différentes plateformes de réseaux sociaux. Nous exploitons ces pages chez les fournisseurs suivants : Facebook, LinkedIn, Instagram, Pinterest, TikTok, YouTube, Twitter/X and Snapchat.

Nous recevons des données de votre part et de la part des plateformes lorsque vous entrez en contact avec nous via notre présence en ligne. In addition, the platform forms evaluate your use of our online presence and associate this data with other data concerning you of which the platform forms have knowledge. They also process this data for their own purposes and under their own responsibility, in particular for marketing and market research purposes and for piloting their platform forms.

We draw your attention to the fact that you use our presences on the social network platforms and their functionalities under your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, evaluating). You will find information on the collection and registration of your data as well as on the nature, scope and final use of your data by the operator of the social media platform in question in the data protection declarations of the operator in question.

12. outils

YouTube

On this site web, we use the offer of YouTube. This allows us to watch videos directly on the site and allows you to use the video function comfortably.

YouTube fait partie de Google ; Google Ireland (dont le siège est en Irlande) est le fournisseur du service " YouTube " et agit en tant que notre sous-traitant. Google Ireland calls on Google LLC (based in the United States) as our sub-contractor (both "Google").

Normally, when you view a page with integrated videos, your IP address has already been sent to YouTube and cookies has been installed on your device. However, we have integrated our YouTube videos using the "hidden data protection" mode (in this case, YouTube is always in contact with Google's Double Click service, but according to Google's declaration of confidentiality, personal data is not evaluated). As a result, YouTube does not record any more information about the viewers, unless they view the video. If you click on the video, your IP address will be transmitted to YouTube and YouTube will recognize that you have watched the video. If you are connected to YouTube, this information is also assigned to your user account (you can avoid this by disconnecting from YouTube before watching the video).

Nous n'avons aucune connaissance ni aucune influence sur la collecte et l'utilisation éventuelles de vos données par YouTube. For more information, please consult YouTube's declaration of confidentiality.

Chatra

On our Internet sites, we use the functions of the live chat service Chatra, provided by Roger Wilco LCC, which is based in the United States. Nous avons conclu un contrat avec Roger Wilco LCC pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Chatra. You will find more information on the processing of personal data by Chatra in the Chatra data protection declaration: https://chatra.com/privacy-policy/.

Gorgias

We use on our Internet sites the functionalities of the Gorgias customer assistance service, which is offered by Gorgias in the United States. Nous avons conclu un contrat avec Gorgias pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Gorgias. You will find more information on the processing of personal data by Gorgias in the Gorgias data protection declaration: https://www.gorgias.com/legal/privacy.

Wallee

On our Internet sites, we use the functions of the Wallee payment processing service, provided by Wallee Group AG, whose registered office is in Switzerland. Nous avons conclu un contrat avec Wallee Group AG pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Wallee. You will find more information on the processing of personal data at Wallee in the information on data protection at Wallee: https://wallee.com/legal/datenschutzhinweise.

Klaviyo

On our Internet sites, we use the functions of the Klaviyo e-mail marketing service, provided by Klaviyo in the United States. Nous avons conclu un contrat avec Klaviyo pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Klaviyo. Vous trouverez plus d'informations sur le traitement des données personnelles par Klaviyo dans la déclaration de protection des données de Klaviyo : https://www.klaviyo.com/legal/data-processing-agreement

Yotpo

We use the functions of the Yotpo fidelity management and evaluation service, which is provided by Yotpo in the United States, on our Internet sites. Nous avons conclu un contrat avec Yotpo pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Yotpo. You will find more information on the processing of personal data by Yotpo in the Yotpo data protection declaration: https://www.yotpo.com/privacy-policy/.

Pushowl

On our Internet sites, we use the functions of the Pushowl notification service, which offers notification marketing by browser and is operated by Pushowl in India. Nous avons conclu un contrat avec Pushowl pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Pushowl. You will find more information on the processing of personal data by Pushowl in the Yotpo data protection declaration: https://pushowl.com/privacy.

Microsoft Ads

We use on our Internet sites the functionalities of the publicity service on the Microsoft Ads research engines, provided by Microsoft in the United States. Nous avons conclu un contrat avec Microsoft pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Microsoft Ads. You can find more information on the processing of personal data with Microsoft Ads in the legal provisions on the protection and security of data by Microsoft: https://about.ads.microsoft.com/de-de/policies/legal-privacy-and-security.

Amazon Web Services

We use the functionalities of the cloud infrastructure provider Amazon Web Services (AWS) on our Internet sites, through which the Innkeepr tool operates. Amazon Web Services has its headquarters in the United States. Nous avons conclu un contrat avec Amazon Web Services pour le traitement des données de commande. Pour plus d'informations sur le traitement des données personnelles par Amazon Web Services, veuillez consulter la déclaration de confidentialité d'AWS : https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_German_2023-08-11.pdf.

Shopify

Nous utilisons sur nos Sites Internet des fonctionnalités de la plateforme de commerce électronique Shopify, par laquelle passe la boutique en ligne de NIKIN. Shopify Inc. has its headquarters in Canada. Nous avons conclu un contrat de traitement des données de commande avec Shopify Inc. et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Shopify. For more information on the processing of personal data by Shopify, please consult Shopify's declaration of confidentiality: https://www.shopify.com/de/legal/datenschutz.

Matrixify

Nous utilisons sur nos Sites Internet des fonctionnalités du service de traitement des données de Matrixify, qui permet l'importation et exportation de données ainsi que l'analyse des données de Shopify. Matrixify is exploité par Matrixify, dont le siège est en Lituanie. Nous avons conclu un contrat de traitement des données de commande avec Matrixify et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Matrixify. For more information on the processing of personal data by Matrixify, please consult Matrixify's declaration of confidentiality : https://matrixify.app/privacy-notice/.

Groupe MF

On our sites Internet, we utilize the functionalities of MF Group for chat sur facture en Suisse. Le siège de MF Group AG se trouve en Suisse. Nous avons conclu un contrat de traitement des données de commande avec MF Group AG et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de MF Group. For more information on the processing of personal data by MF Group, please consult MF Group's declaration of confidentiality: https://terms.mfgroup.ch/agbfiles/Datenschutz_de.pdf.

Analyzify

We use the functions of the Analyzify data analysis application on our Internet sites, which takes care of all the data collection and monitoring requests from our clients for the Shopify boutique. L'application Analyzify appartient à Solverhood OÜ, qui est basée en Estonie. Nous avons conclu un contrat de traitement des données de commande avec Solverhood OÜ et appliquons intégralement les directives strictes du RGPD lors de l'utilisation d'Analyzify. For more information on the processing of personal data by Solverhood OÜ, please consult the declaration of confidentiality of Analyzify: https://analyzify.com/privacy-policy.

Google

We use the functionalities of Google on our Internet sites. Google Ireland (whose registered office is in Ireland) is the provider of the Google Analytics service and acts as our subcontractor. Google Ireland relies for this on Google LLC (whose registered office is in the United States) as its sub-contractor (both "Google"). Google analyzes the behavior of visitors to our Internet sites on the basis of cookies performance (duration, frequency of pages viewed, geographical origin of access, etc.) and compiles reports on the use of our Internet sites for us on this basis. We have entered into a contract with Google Ireland for the processing of the data collected and we apply the strict guidelines of the RGPD to the use of Google. You will find more detailed information on the processing of personal data by Google in Google's data protection declaration: https://support.google.com/analytics/answer/6004245.F

Weglot

Nous utilisons sur nos Sites Internet la solution de traduction de sites web Weglot. Weglot has its headquarters in France. Nous avons conclu un contrat de traitement des données de commande avec Weglot et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Weglot. You will find more detailed information on the processing of personal data by Weglot in Weglot's data protection declaration: https://www.weglot.com/privacy.

Clerk.io

Nous utilisons Clerk.io sur nos Sites Internet pour fournir des expériences personalisées tout au long du parcours client, sans utiliser de cookies. La société de marketing en ligne est basée au Danemark. Nous avons conclu un contrat avec Clerk.io pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Clerk.io. Pour plus d'informations sur le traitement des données personnelles par Clerk.io, veuillez consulter la déclaration de confidentialité de Clerk.io : https://de.clerk.io/privacy.

- Behamics

We use the features of Behamics on our website to offer personalized experiences throughout the customer journey and display messages to help our clients make a decision about their purchases. The company is based in Switzerland. Nous avons conclu un contrat de traitement des données de commande avec Behamics et appliquons dans leur intégralité les directives strictes du RGPD (réglement général de protection des données) lors de l'utilisation de Behamics. You will find more detailed information on the processing of personal data by Behamics in the Behamics data protection declaration: https://behamics.com/files/erklarung-DSG-behamics.pdf

- Sizebay

Nous utilisons les fonctionnalités de Sizebay sur notre site internet pour afficher des tableaux de tailles et des recommandations de tailles sur les pages produits. Our online marketing company is based in Portugal. Nous avons conclu un contrat de traitement des données de commande avec Sizebay et appliquons dans leur intégralité les directives strictes du RGPD (réglement général de protection des données) lors de l'utilisation de Sizebay. You will find more information on the processing of personal data by Sizebay in the Sizebay data protection declaration: https://sizebay.com/en/legal/privacy-policy/

- ABlyft

Nous utilisons les fonctionnalités de ABlyft sur notre site internet afin d'effectuer des tests A/B sur notre site web, ce qui permet d'offrir une meilleure expérience client. La société de marketing en ligne est basée en Allemagne. Nous avons conclu un contrat de traitement des données de commande avec ABlyft et appliquons dans leur intégralité les directives strictes du RGPD (réglement général de protection des données) lors de l'utilisation de ABlyft. You will find more detailed information on the processing of personal data by ABlyft in the ABlyft data protection declaration: https://ablyft.com/en/privacy-notice

AfterSell

Nous utilisons la solution de recommandation de produits AfterSell sur nos sites internet. Le siège de AfterSell se trouve au Canada. Nous avons conclu un accord avec AfterSell quant à la sous-traitance des données et nous appliquons pleinement les exigences strictes du GDPR lors de l'utilisation d'AfterSell. More information on the processing of personal data by AfterSell is available in the confidentiality policy of the same company: https://start.aftersell.app/privacy

Charles

Nous utilisons la solution de messagerie WhatsApp Charles sur nos sites web. Le siège de WhatsApp Charles se trouve en Allemagne. Nous avons conclu un accord avec Charles quant à la sous-traitance des données et nous appliquons pleinement les exigences strictes du GDPR lors de l'utilisation de WhatsApp Charles. More information on the processing of personal data by Charles is available in the confidentiality policy of the same company: https://www.hello-charles.com/privacy-policy/

BC Business Central

On our Internet sites, we utilize the functionalities of BC Business Central, an enterprise resource planning (ERP) system provided by Microsoft in the United States. Microsoft est exploité par Microsoft LLC aux États-Unis. Nous avons conclu un contrat avec Microsoft LLC pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Microsoft. You will find more detailed information on the processing of personal data by Microsoft and BC Business Central in their addendum on data protection, which you can consult here : https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Adverity

Nous utilisons sur nos Sites Internet les fonctionnalités d'Adverity pour l'intégration et l'analyse des données marketing. Adverity is proposed by the company Adverity GmbH dont le siège est en Autriche. Nous avons conclu un contrat avec Adverity GmbH pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation d'Adverity. You will find more information on the processing of personal data by Adverity in its data protection agreement (MSA-DPA), which you can consult here : https://www.adverity.com/msa-dpa.

Power BI

On our sites Internet, we utilize the functionalities of Power BI, a business intelligence platform provided by Microsoft in the United States. Microsoft est exploité par Microsoft LLC aux États-Unis. Nous avons conclu un contrat de traitement des données de commande avec Microsoft LLC et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Power BI. You will find more information on the processing of personal data by Microsoft and Power BI in the addendum on data protection, which you can consult here : https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Twitter

On our Sites Internet, we may use the functionalities of Twitter and/or other services offered by X Corp. in the United States to optimize publicity and other actions on social networks. Nous avons conclu un contrat de traitement des données de commande avec X Corp. et appliquons dans leur intégralité les dispositions strictes du RGPD lors de l'utilisation de ces services. You will find more information on the processing of personal data by Twitter and X Corp. in their confidentiality policy, which you can consult here: https://twitter.com/de/privacy.

We use on our Internet sites the functionalities of the LinkedIn professional social network platform, which is provided by LinkedIn Corporation in the United States. Nous avons conclu un contrat avec LinkedIn Corporation pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de LinkedIn. You will find more information on the processing of personal data by LinkedIn in the LinkedIn data protection declaration, which you can consult here: https://www.linkedin.com/legal/l/dpa

Facebook / Meta

Nous utilisons sur nos Sites Internet le Pixel Facebook pour optimiser la publicité. Facebook is exploited by Meta Inc. in the United States. Nous avons conclu un contrat avec Meta Inc. pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Facebook/Meta. You will find more information on the processing of personal data by Facebook/Meta under their confidentiality policy, which you can consult here : https://de-de.facebook.com/business/gdpr

Youtube

We use the integration of videos on our Internet sites and probably also for the optimization of publicity via YouTube. Youtube is exploited by Google LLC in the United States. Nous avons conclu un contrat avec Google LLC pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Youtube. You will find more information on the processing of personal data by YouTube and its confidentiality policy, which you can consult here : https://youtube.com/t/terms_dataprocessing.

Nous utilisons sur nos Sites Internet des fonctionnalités de Pinterest Inc, une plateforme de partage d'images et de réseau social. Pinterest Inc. has its headquarters in the United States. Nous avons conclu un contrat avec Pinterest Inc. pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Pinterest. You will find more information on the processing of personal data by Pinterest in their confidentiality policy, which you can consult here : https://policy.pinterest.com/de/privacy-policy.

Snapchat Ads / Snap Inc.

Nous utilisons probablement sur nos Sites Internet des fonctionnalités de Snap Inc, l'entreprise derrière l'application de messagerie instantanée multimédia Snapchat. Snap Inc. has its headquarters in the United States. Nous avons conclu un contrat avec Snap Inc. pour le traitement des données de commande et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de Snap Inc. Vous trouverez plus d'informations sur le traitement des données personnelles par Snap Inc. dans leur politique de confidentialité, que vous pouvez consulter ici : https://snap.com/en-US/terms/data-processing-agreement.

TikTok

Nous utilizers probablement sur nos Sites Internet des fonctionnalités de ByteDance Ltd, la société derrière le service d'hébergement vidéo de courte durée TikTok. ByteDance Ltd. has offices in the United Kingdom, on the islands of China and in China, which can be complex. Nous avons toutefois conclu un contrat de traitement des données de commande avec ByteDance Ltd. et appliquons dans leur intégralité les directives strictes du RGPD lors de l'utilisation de ByteDance Ltd. You will find more information on the processing of personal data by ByteDance Ltd. in their official article on the processing of data, which you can consult here: https://ads.tiktok.com/i18n/official/article?aid=893639991572679936

13. transfer de Données vers un Pays Tiers

As we have explained in the previous paragraphs, we also communicate data to other organizations. These are not only found in Switzerland. Your data can therefore be processed in Europe as well as in the United States, Hong Kong, Ireland, India, Canada, Lithuania, Denmark, England, Estonia, Israel, Great Britain, Latvia and France; and in exceptional cases, in any other country in the world.

Nous ne transférons des données en des pays ne disposant pas d'une protection légale adéquate des données que si cela est nécessaire à l'exécution d'un contrat ou à l'exercice ou à la défense d'un droit en justice, or if such a transfer is based on your explicit consent or is subject to guarantees ensuring the protection of your data, such as contractual clauses approved by the European Commission (adapted to Switzerland, as the case may be).

14 Délais de Conservation des Données

Nous ne traitons vos données que pendant la durée nécessaire à la réalisation des objectifs pour lesquels nous les avons collectées, y compris pour le respect des obligations légales de conservation et, dans la mesure où cela est nécessaire pour faire valoir ou défendre des droits juridiques, jusqu'à la fin de la période de conservation respective ou jusqu'au règlement des droits concernés. After the expiry of the respective conservation period, we will destroy your data in full security in accordance with the laws and regulations in force.

15 Sécurité des Données

We take appropriate security measures to protect the confidentiality, integrity and availability of your data, to protect it against unauthorized or illegal processing and to counter the risks of loss, accidental modification, disclosure or unauthorized access. However, we and your data may be victims of cyberattacks, cybercrime, methods of brute force, piracy and other fraudulent and malicious activities, including, but not limited to, viruses, counterfeits, malfunctions and interruptions, which are subject to our control and our liability. We have also put in place procedures to deal with the data protection violations in question and we will inform you, as well as any competent supervisory authority, of a violation if we are legally obliged to do so.

16 Exercer vos Droits

En ce qui concerne le traitement de vos données par nos soins, vous disposez de différents droits en fonction de la législation applicable en matière de protection des données : droit d'accès, droit de rectification, droit d'effacement, droit de limitation du traitement, droit à la portabilité des données, droit de retrait du consentement, plaintes et droit d'opposition.

Please note that we reserve the right to enforce legal restrictions where necessary, for example if we are obliged to store or process certain data, if we have a legitimate interest (where we can enforce such interests) or if we need the data to enforce our rights. If the exercise of certain rights entails costs for you, we will inform you in advance. We have already mentioned the possibility of revoking your consent under Article 8 "Revocation of consent", we have paid attention to this point. It is important to note that the exercise of these rights could potentially come into conflict with your contractual obligations and entail consequences such as the early termination of the contract or related costs. If this were to happen, we will inform you in advance, unless this has already been contractually agreed.

If you wish to exercise the rights mentioned, you must contact the persons mentioned in article 2 at the addresses indicated, unless otherwise indicated or agreed. Please note that we must identify you in order to prevent any fraud, for example by asking you for a copy of your identity card or passport, unless identification is otherwise possible.

In addition, any person concerned has the possibility to assert their rights in court or to lodge a complaint with the competent data protection authority. In Switzerland, the competent data protection authority is the Préposé fédéral à la protection des données et à la transparence (PFPDT) (http://www.edoeb.admin.ch).

17th Mise à Jour et Modification de la Politique de Confidentialité

Due to the continuous development of our website and its content, as well as changes in legislation or the requirements of the authorities, we may be obliged to modify this declaration of confidentiality from time to time. The version published on this website is the current version.

Dernière mise à jour : 30.5.204.

---

Privacy Notice of NIKIN AG

1. general information

In this Privacy Notice, NIKIN AG (hereinafter also referred to as "NIKIN", "we" or "us") explains how we process your personal data in connection with the provision of our websites https://nikin.ch/ and https://nikinclothing.com/ (the "websites"). This is not an exhaustive description; other privacy policies, general terms and conditions and similar documents may govern specific matters.

We use the term "data" here interchangeably with "personal data".

2nd controller

Unless we tell you otherwise in an individual case, the person responsible for processing your data under this Privacy Notice ("Controller") for the purposes of data protection law is:

NIKIN AG

Sawmill Road 46

5600 Lenzburg

Switzerland

You can contact us regarding data protection matters and to exercise your rights at: team@nikin.ch.

3. collection and processing of data

We collect data when you visit our websites and use the functionalities or services available on the websites. The processing of your data is limited to data that is necessary for the operation of a functional website and the provision of our content available on it. The processing of your data is based on the purposes agreed or on a legal basis. The specific data we process about you depends on the reason for and purpose of the processing. We only collect data that is necessary for the implementation and processing of our products and services or that you provide to us voluntarily. As far as it is not unlawful, we also collect data from public sources (e.g. debt collection registers, land registers, commercial registers, the media, or the Internet including social media) or receive data from public authorities and from other third parties (such as credit agencies, address brokers, associations, contractual partners, Internet analysis services, etc.).

The categories of data that you have provided to us directly and the categories of data that we receive about you from third parties include, but are not limited to:

Technical DataIP address; information about the operating system of your terminal device; cookies; name and URL of any websites visited; amount of data transferred; region, date and time of access; websites accessed via our websites; websites from which any access takes place; type of browser; name of the internet provider; protocols; etc.;
Master DataName; salutation/title, address; email address; telephone number; gender; date of birth; nationality; details of the employer or company on whose behalf you are contacting us; role and function; details of your relationship with us; details of interactions with you; consent forms (e.g. newsletter or online contact form); social media profiles; photos and videos; copies of ID; payment information etc.;
Communication DataData transmitted via contact form, email, telephone, letter or other means of communication; name; contact details; type, manner, place and time of communication and, as a rule, its content (i.e. the content of e-mails, letters etc.); details of your request if you use an online contact form; order number; returned items etc.;
Contract and Service DataInformation when using our online services and/or with regard to a possible conclusion of a contract; information about your contracts (e.g. type and date of conclusion); information about the products and the services provided or to be provided; information about feedback (e.g. complaints, feedback on satisfaction, etc.); information required for the execution and administration of the contracts (e.g. information in connection with billing, customer service, technical support and the enforcement of contractual claims), etc.;
Registration DataName; address; email address; telephone number; date of birth; credit card information; bank account details, etc.;
Behavioral and Preference DataInformation about user behavior on our websites; information about the use of our products and services; information about your response to electronic communications; information about your location, e.g. if you search for a store at a desired location via the websites using Google Maps; information from input fields (e.g. search function), etc.;
Other DataWe may also collect data from you in other situations. For example, data may be collected in connection with official or legal proceedings (e.g. files, evidence, etc.). As part of the events we offer, we may collect data about who participates in events and when, and we may create photos, videos and sound recordings in which you can be recognized.

As part of our business relationship, it is necessary for you to provide us with data that is required for the establishment and fulfillment of the contractual relationship. In general, there is no legal obligation to provide us with this data. However, without this data, we may not be able to enter into or continue the contract with you or the organization/person you represent. In addition, certain information must be disclosed to enable data traffic on the websites, e.g. an IP address.

4 Purposes of the Processing

The data collected is mainly used for the conclusion and processing of contracts with you and business partners, in particular in connection with the products and services offered on our websites. We also process the data in order to fulfill our legal obligations, both domestically and internationally.

In addition, in accordance with applicable law and where appropriate, we may process data for the following purposes, which are in our legitimate interest or in the legitimate interest of third parties:

Product/Service Development and InnovationWe process your data in order to further develop our products, services, websites and other platforms on which we operate and to expand our products and services.
CommunicationWe process your data for the purpose of communicating with you, in particular to respond to your enquiries, when you exercise your rights and to contact you in the event of queries.
SecurityWe process your data to protect our operations, our IT and other infrastructure as well as our websites and other platforms.
MarketingWe process your data for market, media and opinion research, optimization of advertisements in order to show you advertisements and offers that are genuinely tailored to your interests and for sending newsletters if and insofar as you give us your consent, provided this is required by applicable law.
Relationship ManagementWe may use a Customer Relationship Management System ("CRM") to store and process your data as described.
Risk Management, Corporate Governance and Business DevelopmentWe process your data as part of our risk management and corporate governance in order to protect us from criminal or abusive activities. As part of our business development, we might sell businesses, parts of businesses or companies to others or acquire them from others or enter into partnerships, which might result in the exchange and processing of data based on your consent.
LitigationWe process your data for the enforcement of legal claims and for defense in legal disputes and official proceedings.
Compliance with LawWe process your data to comply with legal requirements (e.g. prevention and investigation of criminal offenses and other misconduct; conducting internal investigations, data analysis to combat fraud).

5 Legal Basis for the Processing

Where we have asked for your consent for certain processing (e.g. for receiving newsletters), we process your data based on such consent. You may withdraw your consent at any time with effect for the future by providing us written notice (email sufficient). If you like to withdraw your consent to online tracking, please refer to para. 8. Withdrawal of your consent does not affect the lawfulness of the processing that we have carried out prior to your withdrawal, nor does it affect the processing of your data based on other processing grounds.

Where we have not asked for your consent, we process your data for other legal reasons, such as a contractual obligation, a legal obligation, a vital interest of the data subject or of another natural person, to perform a public task or a legitimate interest, which includes compliance with applicable law and the marketing of our products and services, the interest to better understand our markets and in managing and further developing our company, including its operations, safely and efficiently.

6 Profiling and Automated Decision Taking

We might automatically evaluate certain of your personal characteristics for the above-mentioned purposes using your data ("profiling") if we want to determine preference data, but also to identify risks of misuse and security, to carry out statistical analyses or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioral and preference data, but also master and contract data and technical data assigned to you in order to better understand you as a person with your different interests and other characteristics. We may also use profiling to assess your creditworthiness. We do not use profiling that can produce legal effects concerning you or similarly significantly affect you without human review.

In certain situations, for reasons of efficiency and consistency of decision-making processes, it may be necessary for us to automate discretionary decisions with legal effects or potentially significant disadvantages for you ("automated individual decisions"). In this case, we will inform you accordingly and take the measures required by applicable law.

7 Disclosure of Data to Third Parties

In order to perform our contracts, fulfill our legal obligations, protect our legitimate interest and fulfill the other purposes and legal grounds mentioned above, we may disclose your data to third parties, in particular to the following categories of recipients:

Service providersWe work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us or who receive data about you from us under their own responsibility (e.g. IT providers, banks, insurance companies, telecommunications companies, credit information agencies, address verification providers, payment service providers, lawyers) or who we engage to process data for any of the purposes listed above on our behalf and in accordance with our instructions only.
Contractual partnersIf it is required under the respective contract, we share your data to other contractual partners, merchants, subcontractors, etc.
Legal AuthoritiesWe may disclose personal data to government offices, courts and other authorities in Switzerland or abroad if we are legally obliged or authorized to do so or if this appears necessary to protect our interests. The legal authorities process data about you that they receive from us under their own responsibility.

8th Newsletter

If you subscribe to one of our newsletters, you can cancel the subscription at any time by using the unsubscribe option contained in the newsletter.

In connection with our newsletter and on the basis of your consent, we use the data specified in Section 12 mentioned tools to collect your data when you sign up for our newsletter or other updates and to ensure that you only receive newsletters and updates that match your actual or perceived interests.

9. Cookies

We use cookies on our websites that allow us to identify your browser or device and that may allow certain third parties to do so as well. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our websites.

Some cookies are necessary for the functioning of our websites or for certain features. These cookies are only temporary ("session cookies") and are deleted after you have visited our websites. Other cookies are necessary to store user configurations and other information beyond a session ("persistent cookies"). Irrespective of this, you have the option of setting your browser to reject cookies, to save them for a single session only or to delete them before their usual expiry date.

Most of the cookies we use are so-called session cookies. We only use pesistent cookies to save user settings (e.g. language etc.) and to understand how you use our services and content. Some cookies are sent to you by us, others by business partners we work with. If you choose to block cookies, you may not be able to use certain features (e.g. language settings, etc.).

By using our websites and agreeing to other marketing emails, you consent to the use of such techniques. However, depending on the purpose of these cookies, we may ask for your explicit consent beforehand. You can accept or decline consent via the cookie banner on our websites.

10. social plug-ins

We partly use social plug-ins from YouTube and Instagram on our websites. This is recognizable to you in each case (usually by corresponding symbols). We have configured these elements so that they are deactivated by default. If you activate them (by clicking on them), the providers of the respective social networks can register that and where you are on our websites and use this information for their purposes. The processing of your data is then the responsibility of the respective provider in accordance with their data protection regulations. We do not receive any information about you.

11 Our Appearance on Social Networks

We have various appearances on social media platforms. We operate these pages with the following providers: Facebook, LinkedIn, Instagram, Pinterest, TikTok, YouTube, Twitter/X and Snapchat.

We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). For details about the collection and storage of your data and about the type, scope and purpose of its use by the social media provider, please refer to the privacy policy of the respective social media provider.

12. tools

YouTube

We use services form YouTube on our websites. This allows us to play videos directly on the websites and enables you to conveniently use the video feature.

YouTube is part of Google; Google Ireland (based in Ireland) is the provider of the service YouTube and acts as our processor. Google Ireland relies on Google LLC (based in the USA) as its processor (both "Google").

Normally, when you access a page with embedded videos, your IP address is sent to YouTube and cookies are installed on your computer. However, we have embedded our YouTube videos with the extended data protection mode (in this case, YouTube still contacts Google's Double Click service, but according to Google's privacy policy, personal data is not analyzed). This means that YouTube no longer stores any information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube knows that you have watched the video. If you are logged in to YouTube, this information will also be assigned to your user account (you can prevent this by logging out of YouTube before watching the video).

We have no knowledge of and no influence on the possible collection and use of your data by YouTube. Further information can be found in YouTube's privacy policy.

Chatra

We use functions of the live chat service Chatra on our websites, which is offered by Roger Wilco LCC based in the USA. We have concluded an agreement with Roger Wilco LCC for commissioned data processing and fully implement the strict requirements of the GDPR when using Chatra. You can find more information on the handling of personal data at Chatra in Chatra's privacy policy: https://chatra.com/privacy-policy/.

Gorgias

We use functions of the customer support service Gorgias on our websites, which is offered by Gorgias in the USA. We have concluded an agreement with Gorgias for commissioned data processing and fully implement the strict requirements of the GDPR when using Gorgias. You can find more information on the handling of personal data at Gorgias in Gorgias' privacy policy: https://www.gorgias.com/legal/privacy.

Wallee

On our websites, we use functions of the payment processing service Wallee, which is offered by the Wallee Group AG based in Switzerland. We have concluded an agreement with Wallee Group AG for commissioned data processing and fully implement the strict requirements of the GDPR when using Wallee. You can find more information on the handling of personal data at Wallee in Wallee's data protection information: https://wallee.com/legal/datenschutzhinweise.

Klaviyo

On our websites, we use functions of the email marketing service Klaviyo, which is offered by Klaviyo in the USA. We have concluded an agreement with Klaviyo for commissioned data processing and fully implement the strict requirements of the GDPR when using Klaviyo. You can find more information on the handling of personal data at Klaviyo in Klaviyo's privacy policy: https://www.klaviyo.com/legal/data-processing-agreement.

Yotpo

On our websites, we use functions of the loyalty and review management service Yotpo, which is offered by Yotpo in the USA. We have concluded an agreement with Yotpo for commissioned data processing and fully implement the strict requirements of the GDPR when using Yotpo. You can find more information on the handling of personal data at Yotpo in Yotpo's privacy policy: https://www.yotpo.com/privacy-policy/.

Pushowl

On our websites, we use functions of the notification service Pushowl, which offers browser notification marketing and is operated by Pushowl in India. We have concluded an agreement with Pushowl for commissioned data processing and fully implement the strict requirements of the GDPR when using Pushowl. You can find more information on how Pushowl handles personal data in Yotpo's privacy policy: https://pushowl.com/privacy.

Microsoft Ads

On our websites, we use functions of the search engine advertising service Microsoft Ads, which is offered by Microsoft in the USA. We have concluded an agreement with Microsoft for commissioned data processing and fully implement the strict requirements of the GDPR when using Microsoft Ads. You can find more information on the handling of personal data with Microsoft Ads in Microsoft's legal provisions on data protection and security: https://about.ads.microsoft.com/de-de/policies/legal-privacy-and-security.

Amazon Web Services

We use functions of the cloud infrastructure provider Amazon Web Services (AWS) on our websites, via which the tool Innkeepr runs. Amazon Web Services is based in the USA. We have concluded an agreement with Amazon Web Services for commissioned data processing. Further information on the handling of personal data at Amazon Web Services can be found in AWS's privacy policy: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_German_2023-08-11.pdf.

Shopify

We use functions of the e-commerce platform Shopify on our websites, which is used by the NIKIN web store. Shopify Inc. is based in Canada. We have concluded an agreement with Shopify Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Shopify. Further information on the handling of personal data at Shopify can be found in Shopify's privacy policy: https://www.shopify.com/de/legal/datenschutz.

Matrixify

We use functions of the data processing service Matrixify on our websites, which enables the import/export of data and the analysis of data collected by Shopify. Matrixify is operated by Matrixify, based in Lithuania. We have concluded an agreement with Matrixify for commissioned data processing and fully implement the strict requirements of the GDPR when using Matrixify. Further information on the handling of personal data at Matrixify can be found in Matrixify's privacy policy: https://matrixify.app/privacy-notice/.

MF Group

On our websites, we use the MF Group functions for purchase on account in Switzerland. MF Group AG is based in Switzerland. We have concluded an agreement with MF Group AG for commissioned data processing and fully implement the strict requirements of the GDPR when using MF Group. Further information on the handling of personal data at MF Group can be found in MF Group's privacy policy: https://terms.mfgroup.ch/agbfiles/Datenschutz_de.pdf.

Analyzify

We use the functions of the data analysis app Analyzify on our websites, which takes care of all data collection and tracking requirements of our customers for the Shopify store. The Analyzify app is owned by Solverhood OÜ, which is based in Estonia. We have concluded an agreement with Solverhood OÜ for commissioned data processing and fully implement the strict requirements of the GDPR when using Analyzify. Further information on the handling of personal data at Solverhood OÜ can be found in Analyzify's privacy policy: https://analyzify.com/privacy-policy.

Google

We use functions from Google on our websites. Google Ireland (based in Ireland) is the provider of the service "Google Analytics" and acts as our processor. Google Ireland relies on Google LLC (based in the USA) as its processor (both "Google"). Google uses performance cookies to track the behavior of visitors to our websites (duration, frequency of pages accessed, geographical origin of access, etc.) and compiles reports for us on the use of our websites on this basis. We have concluded an agreement with Google Ireland for commissioned data processing and fully implement the strict requirements of the GDPR when using Google. Further information on the handling of personal data at Google can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245.F

Weglot

We use the website translation solution Weglot on our websites. Weglot is based in France. We have concluded an agreement with Weglot for commissioned data processing and fully implement the strict requirements of the GDPR when using Weglot. Further information on the handling of personal data at Weglot can be found in Weglot's privacy policy: https://www.weglot.com/privacy.

Clerk.io

We use Clerk.io on our websites to provide personalized experiences across the entire customer journey without using cookies. The online marketing company is based in Denmark. We have concluded an agreement with Clerk.io for commissioned data processing and fully implement the strict requirements of the GDPR when using Clerk.io. Further information on the handling of personal data at Behamics can be found in Clerk.io's privacy policy: https://de.clerk.io/privacy.

Behamics

We use Behamics on our websites to provide personalized experiences across the entire customer journey to show messages that help customers decide about their purchase. The online marketing company is based in Switzerland. We have concluded an agreement with Behamics for commissioned data processing and fully implement the strict requirements of the GDPR when using Behamics. Further information on the handling of personal data at Behamics can be found in Behamics' privacy policy: https://behamics.com/files/erklarung-DSG-behamics.pdf

Sizebay

We use Sizebay on our websites to show size charts and size recommendations on the product pages. The online marketing company is based in Portugal. We have concluded an agreement with Sizebay for commissioned data processing and fully implement the strict requirements of the GDPR when using Sizebay. Further information on the handling of personal data at Sizebay can be found in Sizebay's privacy policy: https://sizebay.com/en/legal/privacy-policy/

ABlyft

We use ABlyft on our websites to perform A/B tests on our website to offer improved customer experience. The online marketing company is based in Germany. We have concluded an agreement with ABlyft for commissioned data processing and fully implement the strict requirements of the GDPR when using ABlyft. Further information on the handling of personal data at ABlyft can be found in ABlyft's privacy policy: https://ablyft.com/en/privacy-notice

AfterSell

We use the product recommendation solution AfterSell on our websites. AfterSell is based in Canada. We have concluded an agreement with AfterSell for commissioned data processing and fully implement the strict requirements of the GDPR when using AfterSell. Further information on the handling of personal data at AfterSell can be found in AfterSell's privacy policy: https://start.aftersell.app/privacy

Charles

We use the WhatsApp messaging solution Charles on our websites. Charles is based in Germany. We have concluded an agreement with Charles for commissioned data processing and fully implement the strict requirements of the GDPR when using Charles. Further information on the handling of personal data at Charles can be found in Charles's privacy policy: https://www.hello-charles.com/privacy-policy/

BC Business Central

On our websites, we use functions of BC Business Central, an Enterprise Resource Planning (ERP) system offered by Microsoft in the USA. Microsoft is operated by Microsoft LLC in the USA. We have concluded an agreement with Microsoft LLC for commissioned data processing and fully implement the strict requirements of the GDPR when using Microsoft. Further information on the handling of personal data by Microsoft and BC Business Central can be found in their data protection addendum, which you can view here: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Adverity

We use functions from Adverity on our websites for marketing data integration and analysis. Adverity is offered by Adverity GmbH, based in Austria. We have concluded an agreement with Adverity GmbH for commissioned data processing and fully implement the strict requirements of the GDPR when using Adverity. Further information on the handling of personal data by Adverity can be found in their data protection agreement (MSA-DPA), which you can view here: https://www.adverity.com/msa-dpa.

Power BI

On our websites, we use functions of Power BI, a business intelligence platform offered by Microsoft in the USA. Microsoft is operated by Microsoft LLC in the USA. We have concluded an agreement with Microsoft LLC for commissioned data processing and fully implement the strict requirements of the GDPR when using Power BI. Further information on the handling of personal data by Microsoft and Power BI can be found in their data protection addendum, which you can view here: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Twitter

We may use functions of Twitter and/or other services offered by X Corp. in the USA on our websites to optimize advertising and other social media activities. We have concluded an agreement with X Corp. for commissioned data processing and fully implement the strict requirements of the GDPR when using these services. You can find more information on the handling of personal data by Twitter and X Corp. in their privacy policy, which you can view here: https://twitter.com/de/privacy.

We use functions of the business social media platform Linkedin on our websites, which is offered by Linkedin Corporation in the USA. We have concluded an agreement with Linkedin Corporation for commissioned data processing and fully implement the strict requirements of the GDPR when using Linkedin. You can find more information on the handling of personal data on Linkedin in Linkedin's privacy policy, which you can view here: https://www.linkedin.com/legal/l/dpa.

Facebook/Meta

We use Facebook Pixel on our websites to optimize advertising. Facebook is operated by Meta Inc. in the USA. We have concluded an agreement with Meta Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Facebook/Meta. You can find more information on the handling of personal data by Facebook/Meta in their privacy policy, which you can view here: https://de-de.facebook.com/business/gdpr.

Youtube

We use YouTube to integrate videos on our websites and probably also to optimize advertising through YouTube. YouTube is operated by Google LLC in the USA. We have concluded an agreement with Google LLC for commissioned data processing and fully implement the strict requirements of the GDPR when using YouTube. You can find more information on the handling of personal data by YouTube in their privacy policy, which you can view here: https://youtube.com/t/terms_dataprocessing.

We use functions of Pinterest Inc. on our websites, an image sharing and social media platform. Pinterest Inc. is based in the USA. We have concluded an agreement with Pinterest Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Pinterest. You can find more information on the handling of personal data by Pinterest in their privacy policy, which you can view here: https://policy.pinterest.com/en/privacy-policy.

Snapchat Ads / Snap Inc.

We probably use functions from Snap Inc. on our websites, the company behind the multimedia instant messaging app Snapchat. Snap Inc. is based in the USA. We have concluded an agreement with Snap Inc. for commissioned data processing and fully implement the strict requirements of the GDPR when using Snap Inc. You can find more information on the handling of personal data by Snap Inc. in their privacy policy, which you can view here: https://snap.com/en-US/terms/data-processing-agreement.

TikTok

We are likely to use functions on our websites provided by ByteDance Ltd, the company behind the short-form video hosting service TikTok. ByteDance Ltd. is based in the UK, the Cayman Islands and China, which can be complex. However, we have concluded an agreement with ByteDance Ltd. for commissioned data processing and fully implement the strict requirements of the GDPR when using ByteDance Ltd. More information on the handling of personal data by ByteDance Ltd. can be found in their official article on data processing, which you can view here: https://ads.tiktok.com/i18n/official/article?aid=893639991572679936

13. transfer of data abroad

As we have explained in the Sections above, we also disclose data to other parties. Not all of them are located in Switzerland. Your data may therefore be processed in Europe as well as in the USA, Hong Kong, Ireland, India, Canada, Lithuania, Denmark, Germany, Estonia, Israel, the UK, Latvia and France; in exceptional cases, however, in any other country in the world.

We only transfer data to countries without an adequate level of data protection if this is necessary for the performance of a contract or for the exercise or defense of legal claims, or if such a transfer is based on your explicit consent or is subject to safeguards that assure the protection of your data, such as the standard contractual clauses approved by the European Commission (adapted to Switzerland, if applicable).

14 Retention Periods for the Data

We will only process your data for as long as it is necessary to fulfill the purposes we collected it for, including for the purposes of complying with legal retention requirements and where required to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled. Upon expiry of the applicable retention period, we will securely destroy your data in accordance with applicable laws and regulations.

15 Data Security

We take appropriate security measures to protect the confidentiality, integrity and availability of your data, to protect it against unauthorized or unlawful processing and to counter the risks of loss, unintentional alteration, unwanted disclosure or unauthorized access. However, we and your data can still become victims of cyber-attacks, cybercrime, brute force, hacking and further fraudulent and malicious activities, including but not limited to viruses, forgeries, malfunctions and interruptions, which are out of our control and responsibility. We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

16. your rights

You have various rights in relation with our processing of your personal data, depending on the applicable data protection law: right of access, right to rectification, right to erasure, right to restriction, right to data portability, right to withdraw consent, right to lodge complaints and right to object.

Please note that we reserve the right to assert legal restrictions if necessary, e.g. if we are obliged to store or process certain data, have an overriding interest (insofar as we can invoke such interests) or need the data to assert claims. If the exercise of certain rights involves costs for you, we will inform you in advance. We have already referred to the possibility of withdrawing consent in Section 8 above. It is important to note that exercising these rights may conflict with your contractual obligations and could have consequences such as premature termination of the contract or associated costs. Should this occur, we will inform you in advance, unless this has already been contractually agreed.

If you like to exercise the above-mentioned rights, please contact the persons listed in Section 2 unless otherwise stated or agreed. Please note that we need to identify you to prevent misuse, e.g. by means of a copy of your ID card or passport, unless identification is possible otherwise.

17 Updating and Amending this Privacy Notice

Due to the continuous development of our websites and their content, as well as changes in law or regulatory requirements, we may need to amend this Privacy Notice from time to time. The version published on the websites is the current version.

Last updated: 30.5.2024.