Privacy Policy

1 Purpose of This Privacy Policy

This Privacy Policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “Data”) on the website www.bijou.ch, in our online store, within the Bijou les Boutiques loyalty program “Bijou-Member,” and on the associated websites, features, and content, as well as on external online platforms such as social media channels (hereinafter collectively referred to as the “website”).

With regard to the terms used, such as “personal data” or “processing,” we refer to the definitions in Article 5 of the Swiss Data Protection Act (DSG).

 

2 Data Controller

The entity legally responsible for data processing on our website is

Gygax Retail AG
Hauptstrasse 33
2572 Sutz
Switzerland

VAT ID: CHE-105.790.539 

For further information regarding the data controller, please refer to the legal notice on the website www.bijou.ch.

 

3 Contact Information for Data Protection Inquiries

All data protection inquiries related to our website—in particular, requests for access, deletion, correction, and objection—should be sent to us via webshop@bijou.ch with the subject line “Data Protection.”

 

4 Legal Basis

The processing of personal data in connection with our website is subject to the Swiss Data Protection Act (DSG) of September 25, 2020, as amended on September 1, 2023. In the case of third-party services that process personal data from website users outside of Switzerland, foreign data protection laws may apply depending on the circumstances; specifically, within the EU/EEA, the European General Data Protection Regulation (EU GDPR) applies.

In accordance with Art. 19 of the DSG, we provide information regarding the legal bases for the data processing steps undertaken. Unless the legal basis is specified individually for each data processing step in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6(6) in conjunction with Article 31(1) of the DSG; the legal basis for processing to fulfill our services, carry out contractual measures, and respond to inquiries is Article 31(1), 2(a) of the DSG; the legal basis for processing to fulfill our legal obligations or to protect our legitimate interests is Article 31(1) of the DSG. In cases where the overriding interests of the data subject or another natural person necessitate the processing of personal data, Article 31(1) of the DSG also serves as the legal basis.

Our legitimate interests in data processing within the meaning of Art. 31(1) of the DSG include, among other things, our interest in analyzing, optimizing, and ensuring the economic operation and security of our online services, particularly with regard to measuring reach, creating profiles for advertising and marketing purposes, collecting access data, and using third-party services.

 

5 Purpose of Data Processing

Data processing in connection with our website is intended to provide data subjects (hereinafter collectively referred to as “users”) with information about us and our activities, and to exchange information between us and the users in connection with the processing of online transactions and the provision of services. In particular, the processing serves the following purposes:

  • Provision of the online service, content, and features on bijou.ch;
  • Provision of contractual services, support, and customer care;
  • Responding to contact requests and communicating with users;
  • Marketing, Advertising, and Market Research;
  • Safety measures.

 Unless expressly stated otherwise, data processing is not intended to collect users’ personal data in a targeted manner, analyze it for other purposes on an individual basis, or disclose it to third parties.

Against this backdrop, the processing of data through our website is intended to provide users with access to the relevant information and services that is as technically seamless as possible, to conduct online transactions in a reliable and transparent manner, and to offer an engaging user experience.

 

6 Principles of Data Processing

We process personal data in accordance with, among other things, the following legal principles:

  • Processing must be carried out in good faith and must be proportionate;
  • Data processing is carried out only for purposes that are apparent to users and only to the extent compatible with those purposes;
  • The data will be destroyed or anonymized as soon as processing is no longer necessary and provided there are no exceptions provided for by law;
  • Data that is clearly incomplete or incorrect will be corrected or deleted;
  • Users' consent to data processing is valid only if it is given voluntarily after they have been provided with adequate information;
  • The principles of “Privacy by Design” and “Privacy by Default” are observed.

7 Retention Period and Deletion

In general, user data is deleted or its processing is restricted as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is necessary due to an overriding interest or if required by laws or other regulations to which we are subject.

Data associated with a Bijou member or a Bijou account is deleted as follows:

  • If there is no activity on the Bijou account for five years, it will be automatically deleted after the account holder has been notified via email.
  • If a mailing is returned because the residential address is no longer valid and the corresponding Bijou account has shown no activity for 2 years, it will be deleted.
  • Upon request, we will delete a Bijou account. This will irrevocably delete all personal data as well as redeemed and outstanding member gift certificates.

 Data processed in connection with the provision of contractual services is deleted after the statutory retention and statute of limitations periods have expired, typically after 10 years. Information in the customer account remains there until the account is deleted.

 Log file information is stored for security reasons (e.g., to investigate cases of misuse or fraud). Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.

 

8 Confidentiality / Disclosure to Third Parties

Unless expressly stated in this Privacy Policy—such as in the context of data processing by agents or the use of third-party services—or unless the disclosure is clearly necessary for a specific purpose, user data is treated confidentially, and no user data is disclosed to third parties or sold to third parties for their own purposes. Exceptions to this are disclosures to third parties required by law, e.g., pursuant to an official or court order. We transfer personal data to third parties, in particular, when this is necessary for the fulfillment of a contract—for example, to companies responsible for delivering the goods or to the financial institution entrusted with processing payments.

Users’ personal data may be shared within Gygax Retail AG. The company is required to use personal data exclusively for the purposes described in this Privacy Policy.

 

9 Disclosure Abroad

The data underlying our website, including user data, is stored and processed on secure servers in Switzerland or in EU/EEA countries. Unless expressly stated in this Privacy Policy—particularly with regard to third-party services—user data is not transferred to countries outside the EU or the EEA.

 

10 Data Processing by Agents

As the data controller, we are authorized to have user data processed by contractually bound external service providers or agents. However, these parties must be legally or contractually obligated to comply with data protection laws and maintain confidentiality to the same extent as we are. They may not process user data to a greater extent than we ourselves are permitted to do so. As the data controller, we are also obligated to regularly verify that the data processors we engage are capable of ensuring data security.

We will provide users, upon request and unless there are overriding interests to the contrary, with a current list of the data processors we engage for the purpose of operating our website, as well as the scope of the processing of personal data carried out by those processors.

 

11 Data Security (TOM)

To ensure data security, we and our agents implement technical and organizational measures (TOM) in accordance with the current state of the art. These measures are specifically designed to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Upon request, and provided that this does not jeopardize data security for other users, we will provide users with further details regarding the TOMs in place.

As part of our website, we use SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries that users send to us as the website operator. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

However, we cannot guarantee that information or personal data transmitted by users via unencrypted online forms, emails, or FTP uploads will not be viewed or altered by unauthorized parties. Such transmissions are generally made at the users’ own risk and without any warranty on our part.

 

12 Data Processing in Detail

12.1    What types of data do we process?

  • Master data such as name, address, etc.
  • Contact information such as email address, phone number, etc.
  • Order details such as items, order date, quantity, etc.
  • Usage data such as websites visited, interests in content, access times, newsletter views, etc.
  • Meta/communication data such as device information, browser, IP address, etc.

12.2 Do we process data requiring special protection (Art. 5(c) of the Data Protection Act)?

No, we do not process any data about our users that requires special protection. 

 

12.3 Which users/individuals are affected by the processing of this data?

  • Customers who are Bijou members or who apply for membership (both in-store and online)
  • Customers who place orders in the online store
  • Users who have subscribed to the newsletter
  • Visitors to the bijou.ch website
  • Visitors and followers of Bijou les Boutiques' social media profiles

12.4 Contact Us

When you contact us (via the contact form or by email), the user’s information is processed for the purpose of handling the contact request and its follow-up in accordance with Art. 31, paras. 1 and 2(a) of the DSG.

 

12.5 Collection of Access Data and Log Files

Based on our legitimate interests within the meaning of Article 31(1) of the DSG, we collect data regarding every access to the server on which this service is hosted (so-called server log files). The access data includes the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page within https://bijou.ch), the IP address, and the requesting provider.

 

12.6 Processing for the Purpose of Providing Contractual Services

We process master data, contact information, order data, usage data, and metadata/communication data for the purpose of fulfilling our contractual obligations and providing services in accordance with Art. 31, para. 1, 2(a) of the DSG.

Users can place orders in the online store without registering as Bijou members. The data required to fulfill our contractual obligations is processed solely for this order and is subsequently retained in accordance with the applicable retention periods.

Users can also choose to subscribe only to the newsletter, in which case the terms set forth in paragraph 14 of this Privacy Policy, “Newsletter,” apply.

Customers can register as “Bijou Members” before making a purchase. Purchases made after creating a Bijou account, as well as the Bijou points earned, will be credited by all Bijou les Boutiques locations, including the online store.  The General Terms and Conditions of the “Bijou Member” loyalty program apply; they can be viewed athttps://bijou.ch/pages/bijou-member-agb.

When you use our online services, we store the IP address and the time of each user action. This data is stored based on our legitimate interests, as well as the users’ interest in protection against misuse and other unauthorized use. This data is generally not disclosed to third parties, unless such disclosure is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 31(1) of the DSG.

We process usage data (e.g., the web pages visited on bijou.ch, interest in our products) and content data (e.g., contact information provided when placing an order or entries made in the contact form) for advertising purposes in a user profile in order to display users, for example, product recommendations based on the services they have used to date.

 

12.7 Payment Transactions

Payments made through the website are processed via the third-party service Wallee and are encrypted using SSL technology. Please refer to the information about this third-party service listed under “Third-Party Services.”

User data is used solely to process users' payment instructions and is not disclosed to any third party other than the financial institutions responsible for the respective payment method.

 

12.8 Newsletter 

The following information explains the content of our newsletter, as well as the procedures for subscription, distribution, and statistical analysis, and your rights to object. By subscribing to our newsletter, you agree to receive it and to the procedures described above. 

Newsletter Content: We send newsletters, emails, and other electronic notifications containing promotional information (hereinafter “newsletters”) only with the recipients’ consent or when permitted by law. If the newsletter’s content is specifically described during the sign-up process, that description is decisive for the users’ consent. In addition, our newsletters contain information about our products, offers, promotions, events, and our company in general.

Double Opt-In and Logging: Signing up for our newsletter is done through a so-called double opt-in process. This means that after signing up, you will receive an email asking you to confirm your subscription. This confirmation is necessary to ensure that no one can sign up using someone else’s email address. Newsletter subscriptions are logged in order to provide proof of the subscription process in accordance with legal requirements. This includes storing the time of subscription and confirmation, as well as the IP address. Changes to your data stored with the email service provider are also logged.

Email Service Provider: Newsletters are sent via “MailChimp,” a newsletter distribution platform operated by the U.S.-based provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the email service provider’s privacy policy here:https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC, doing business as MailChimp, is certified under the Privacy Shield Framework and thereby guarantees compliance with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).

Furthermore, according to the shipping service provider’s own information, it may use this data in pseudonymous form—that is, without linking it to specific users—to optimize or improve its own services, such as for the technical optimization of newsletter delivery and layout, or for statistical purposes to determine which countries the recipients are from. However, the mailing service provider does not use the data of our newsletter recipients to contact them directly or to disclose it to third parties. 

Subscription Information: To subscribe to the newsletter, simply provide your email address, first and last name, preferred language for correspondence, and gender. You can subscribe to our newsletter online or at any Bijou les Boutiques store.

Statistical Collection and Analysis: The newsletters contain a so-called “web beacon,” that is, a pixel-sized file that is retrieved from the mailing service provider’s server when the newsletter is opened. As part of this retrieval, technical information—such as details about your browser and system—as well as your IP address and the time of retrieval are initially collected. This information is used to improve our services technically based on the technical data, or to better understand our target audiences and your reading behavior based on your location (which can be determined using your IP address) or the times you access the newsletters. The statistical analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. While this information can technically be traced back to individual newsletter recipients, However, it is neither our intention nor that of the mailing service provider to monitor individual users. Rather, the analyses help us identify our users’ reading habits and tailor our content accordingly, or send different content based on our users’ interests. 

The use of the mailing service provider, the conduct of statistical surveys and analyses, and the logging of the registration process are based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR. Our interest is focused on using a user-friendly and secure newsletter system that both serves our business interests and meets users’ expectations.

Cancellation/Withdrawal: You can cancel your subscription to our newsletter at any time, i.e., withdraw your consent. This simultaneously revokes your consent to the newsletter’s distribution by the mailing service provider and to statistical analysis. Unfortunately, it is not possible to separately revoke consent for the newsletter’s distribution by the mailing service provider or for statistical analysis. You will find a link to unsubscribe from the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and have canceled that subscription, their personal data will be deleted.

 

13 Cookies & Audience Measurement

Cookies are pieces of information that are transmitted from our web server or third-party web servers to users' web browsers, where they are stored for later retrieval.

We use “session cookies,” which are stored only for the duration of your current visit to our website (e.g., to enable the shopping cart function and thus make it possible to use our online services at all). A session cookie stores a randomly generated unique identification number, known as a session ID. In addition, a cookie contains information about its origin and storage period. These cookies cannot store any other data. Session cookies are deleted when you finish using our online service and close your browser.

Users are informed about the use of cookies for pseudonymous audience measurement in this Privacy Policy.

If users do not want cookies to be stored on their computers, they are asked to disable the corresponding option in their browser's settings. Stored cookies can be deleted in the browser's settings. Disabling cookies may result in limited functionality of this website.

You can opt out of cookies used for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/) as well as the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) to opt out of the use of cookies used for audience measurement and advertising purposes. 

 

14 Third-Party Services

We use content or services provided by third parties on our website in order to integrate their content and services—such as analytics services or fonts—into the website. This always requires that the third-party providers of this content collect users’ IP addresses, since they would not be able to send the content to users’ browsers without the IP address. The IP address is therefore necessary for displaying the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. “Pixel tags” allow information—such as visitor traffic on the pages of this website—to be analyzed. Such information may also be stored in cookies on users’ devices and may include, among other things, technical information about the browser and operating system, referring websites, time of visit, and other details regarding the use of our online services; it may also be linked to similar information from other sources. Depending on the third-party service, other information about users may also be collected, used for the third-party provider’s own purposes, and, if applicable, processed abroad.

To the extent that we use the third-party services listed in this Privacy Policy on our website, by using the website, users consent to the use of these services and the associated data processing by third parties, the use of such data by third parties for their own purposes, any associated transfer of data abroad, and the third parties’ terms of use and privacy policies.

Users acknowledge, in particular, that we cannot assume any responsibility for the processing of personal data in connection with such third-party services, as we have no control over them. Such third-party services—and, consequently, the scope of user data processing—are subject to constant change as a result of updates, bug fixes, new releases, or other program modifications. The descriptions of third-party services in this Privacy Policy are therefore intended only to provide users with a general overview of the content and scope of data processing by such services, as well as options to opt out. The data controller endeavors to update these descriptions regularly but cannot guarantee that the information will always be up to date. The data controller recommends that users regularly check directly with the relevant third-party service provider for information regarding the content of such services and the scope of the associated data processing.

 

14.1 Shopify

Our online store is hosted on Shopify Inc. Personal data is therefore transmitted to the United States to be stored on Shopify’s servers. Shopify provides the online e-commerce platform for a fee, which enables us to sell products to customers. Shopify stores customer data in its database as well as in its general applications. Shopify stores customer data on a secure server behind a firewall. By accepting the Terms and Conditions, customers confirm that they have read and agree to Shopify’s Privacy Policy and Terms of Service. For complete transparency, please refer to Shopify’s “Privacy Policy”:https://www.shopify.com/legal/privacy

 

14.2 Wallee

We partner with Wallee to provide payment options in our online store. By accepting the Terms and Conditions, users confirm that they have read and agree to the Privacy Policy and the Terms and Conditions for Wallee payment methods. For more information, visit:
Privacy Policy:https://wallee.com/de/privacy_policy.html
Terms and Conditions:https://app-wallee.com/s/1/resource/general-terms-and-conditions.pdf?_ga=2.108358594.1300347444.1542188779-1220148405.1538462966 

 

14.3 Google Analytics

Based on our legitimate interests (i.e., our interest in analyzing, optimizing, and ensuring the economic operation of our online service within the meaning of Article 6(1)(f) of the GDPR), we use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie regarding users’ use of the online service is generally transmitted to a Google server in the United States and stored there.

Google is certified under the Privacy Shield Framework and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to analyze how users interact with our online service, to compile reports on activity within this online service, and to provide us with other services related to the use of this online service and Internet usage. In doing so, pseudonymous user profiles may be created from the processed data. Cookies may be small files or other forms of information storage.

We use Google Analytics to ensure that ads displayed through Google’s advertising services and those of its partners are shown only to users who have demonstrated an interest in our online offerings or who exhibit certain characteristics (e.g., interests in specific topics or products, as determined by the websites they have visited) that we transmit to Google (so-called “remarketing” or “Google Analytics Audiences”). We also use Remarketing Audiences to ensure that our ads align with users’ potential interests and do not come across as intrusive.

We use Google Analytics only with IP anonymization enabled. This means that Google truncates users’ IP addresses within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. 

The IP address transmitted by the user’s browser is not combined with other data held by Google. Users can prevent cookies from being stored by adjusting their browser settings accordingly; in addition, users can prevent Google from collecting the data generated by the cookie and related to their use of the online service, as well as from processing this data, by downloading and installing the browser plugin available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google's use of data, as well as options for adjusting settings and opting out, please visit Google's websites:https://www.google.com/intl/de/policies/privacy/partners(“How Google uses data when you use our partners’ websites or apps”),http://www.google.com/policies/technologies/ads (“Use of Data for Advertising Purposes”),http://www.google.de/settings/ads(“Manage the information Google uses to show you ads”).

 

14.4 Facebook Social Plugins

Based on our legitimate interests (i.e., our interest in analyzing, optimizing, and operating our online offering in a commercially viable manner within the meaning of Article 6(1)(f) of the GDPR), we use social plugins (“plugins”) from the social network facebook.com, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may display interactive elements or content (e.g., videos, graphics, or text posts) and are recognizable by one of the Facebook logos (a white “f” on a blue tile, the terms “Like,” “Gefällt mir,” or a “thumbs-up” icon) or are labeled with the phrase “Facebook Social Plugin.” The list and appearance of the Facebook Social Plugins can be viewed here:https://developers.facebook.com/docs/plugins/.

Meta Platforms, Inc. is certified under the Privacy Shield Framework and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When users access a feature of this website that contains such a plugin, their device establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to the user’s device and integrated into the website. In the process, user profiles may be created based on the processed data. We therefore have no influence over the scope of the data that Facebook collects using this plugin and are therefore informing users based on the information available to us.

By integrating the plugins, Facebook receives information that a user has accessed the corresponding page of the website. If the user is logged into Facebook, Facebook can associate the visit with the user’s Facebook account. When users interact with the plugins—for example, by clicking the “Like” button or posting a comment—the corresponding information is transmitted directly from their devices to Facebook and stored there. Even if a user is not a Facebook member, there is still a possibility that Facebook may obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

Users can find information about the purpose and scope of data collection, as well as the further processing and use of data by Facebook, and the related rights and settings options for protecting users' privacy, in Facebook's Privacy Policy:https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about them through this website and link it to their member data stored on Facebook, they must log out of Facebook and delete their cookies before using our website. Additional settings and the ability to opt out of the use of data for advertising purposes are available in the Facebook profile settings:https://www.facebook.com/settings?tab=adsor via the U.S. sitehttp://www.aboutads.info/choices/or the EU sitehttp://www.youronlinechoices.com/.
These settings apply across all platforms, meaning they are applied to all devices, such as desktop computers or mobile devices.

 

14.5 Facebook, Custom Audiences, and Facebook Marketing Services

Within our online platform, based on our legitimate interests in analyzing, optimizing, and ensuring the efficient operation of our online platform, and for these purposes, we use the so-called “Facebook Pixel” from the social network Facebook, which is operated by Facebook HQ, 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used within our online offering. 

Meta Platforms, Inc. is certified under the Privacy Shield Framework and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook Pixel, Facebook is able, on the one hand, to identify visitors to our website as a target audience for displaying ads (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to display the Facebook Ads we place only to those Facebook users who have shown an interest in our online offerings or who exhibit certain characteristics (e.g., interests in specific topics or products, as determined by the websites they have visited), which we transmit to Facebook (so-called “Custom Audiences”). We also use the Facebook Pixel to ensure that our Facebook ads align with users’ potential interests and do not come across as intrusive. Furthermore, using the Facebook Pixel, we can track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The Facebook Pixel is integrated directly by Facebook when you visit our websites and may store a so-called cookie—that is, a small file—on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous to us, meaning it does not allow us to identify individual users. However, the data is stored and processed by Facebook, enabling a link to the respective user profile and allowing Facebook to use it for its own market research and advertising purposes. If we transmit data to Facebook for matching purposes, this data is encrypted locally in the browser and only then sent to Facebook via a secure HTTPS connection. This is done solely for the purpose of matching the data with data that has been similarly encrypted by Facebook.

Furthermore, when using the Facebook Pixel, we utilize the additional feature “Look ” (which involves transmitting data such as users’ phone numbers, email addresses, or Facebook IDs—in encrypted form—to Facebook) to create target audiences (“Custom Audiences” or “ Alike Audiences”). Further information on “ ”:https://www.facebook.com/business/help/611774685654668

Facebook processes the data in accordance with Facebook's Data Use Policy. Accordingly, general information on the display of Facebook ads can be found in Facebook’s Data Use Policy: https://www.facebook.com/policy.php
Specific information and details about the Facebook Pixel and how it works are available in Facebook’s Help Center:https://www.facebook.com/business/help/651294705016616

You can opt out of data collection by the Facebook Pixel and the use of your data to display Facebook ads. To control the types of ads you see on Facebook, visit the page set up by Facebook and follow the instructions there regarding usage-based advertising settings:https://www.facebook.com/settings?tab=ads.
These settings apply across all platforms, meaning they are applied to all devices, such as desktop computers or mobile devices.

You can also opt out of cookies used for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/), as well as the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) to opt out of the use of cookies for audience measurement and advertising purposes.

 

14.6 Additional Third-Party Services and Content

We also use the following third-party services and content, along with links to their privacy policies, which contain further information on data processing and on how to prevent or restrict such processing (known as “opt-out”):

  • External fonts from Google, Inc., https://www.google.com/fonts ("Google Fonts"). Google Fonts are integrated via a server request to Google (usually in the U.S.). Privacy Policy:https://www.google.com/policies/privacy/, Opt-Out:https://www.google.com/settings/ads/.
  • Maps provided by the "Google Maps" service from the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy:https://www.google.com/policies/privacy/, Opt-out:https://www.google.com/settings/ads/.
  • Features of the Instagram service are integrated into our website. These features are provided by Instagram HQ, 1 Hacker Way, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content on our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it. Privacy Policy:http://instagram.com/about/legal/privacy/.
  • External code from the "jQuery" JavaScript framework, provided by the third-party provider jQuery Foundation,https://jquery.org. 

 

15 Changes and Updates to the Privacy Policy

We ask that you review the content of our Privacy Policy regularly. We will update the Privacy Policy as soon as changes to our data processing practices make it necessary to do so. We will notify you as soon as the changes require action on your part (e.g., consent) or any other individual notification.

 

16 User Rights

If your personal data is processed, you are a data subject within the meaning of Article 5(b) of the DSG, and, subject to any exceptions provided for by law or agreed upon in a contract, you have the following rights with respect to your data:

  • The Right to Information Regarding Data Processing (Art. 19 DSG)
  • The Right of Access (Art. 25 DSG)
  • The Right to Rectification of Data (Art. 6(5) DSG; Art. 32(1) DSG)
  • The Right to Erasure of Data (“Right to Be Forgotten”; Art. 6(4) DSG; Art. 32(2)(c) DSG)
  • The right to object, as well as to restrict (“block”) or suspend the processing of data (Art. 30(2)(b); 32(2)(a), (b) of the DSG)
  • The Right to Withdraw Consent to Data Processing (Art. 30, para. 2, subpar. b of the DSG)
  • The Right to Data Disclosure and Portability (Art. 28 DSG)
  • The Right to Information Regarding Automated Individual Decision-Making (Art. 21 DSG)

To exercise these rights, please contact us using the contact information provided at the beginning of this document.

Without prejudice to any other administrative or judicial remedy, you also have the right to receive advice and assistance from the competent supervisory authority if you believe that the processing of personal data concerning you violates the DSG. The competent authority for matters concerning data protection in the processing of personal data by private entities—insofar as individuals in Switzerland are affected or the data is processed from Switzerland—is the Federal Data Protection and Information Commissioner (FDPIC). The FDPIC may investigate violations of data protection regulations either ex officio or upon complaint and may order that the processing be adjusted, suspended, or terminated in whole or in part. Furthermore, the Commissioner advises private individuals on data protection issues, provides data subjects with information upon request regarding how they can exercise their rights, and may file a complaint with the competent law enforcement authority.

The EDÖB's contact information is available at https://www.edoeb.admin.ch.

 

17 Jurisdiction / Governing Law

Unless otherwise required by mandatory statutory provisions, this Privacy Policy is governed solely by Swiss law, to the exclusion of international conflict-of-laws rules. The exclusive venue for disputes arising in connection with this Privacy Policy—except where mandatory statutory venues apply—is the registered office of the data controller in Sutz, Canton of Bern, Switzerland.

 

Sutz, August 2023
Gygax Retail AG