Privacy policy

Last version: 27 April 2026

Introduction

We are pleased that you are visiting our website. Louis Widmer SA operates this shop and this website, including all related information, content, functions, tools, products and services, in order to provide you as a customer with an individual shopping experience (the “Services”). The platform is based on Shopify, which enables us to offer you these Services in a reliable form.
The protection of your personal data and compliance with data protection regulations are of the highest priority for Louis Widmer SA (hereinafter “Louis Widmer”, “we” or “us”). In this Privacy Policy, we inform you about how we collect, use and disclose personal data when you visit our website, use our Services, make a purchase or other transaction, or otherwise communicate with us.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you confirm that you have read this Privacy Policy and agree to the collection, use and disclosure of your data as described in this Privacy Policy. In the event of a conflict between our general terms and conditions and this Privacy Policy, the latter shall take precedence with regard to the collection, processing and disclosure of your personal data.

Responsible Entity and Data Protection Officer

Responsible Entity:
Louis Widmer SA
Rietbachstrasse 5
8952 Schlieren
Tel.: +41 (0) 43 433 77 00
E-mail: info@louis-widmer.com

Data Protection Officer:
Louis Widmer GmbH
E-mail: datenschutz@louis-widmer.com

Definitions

The technical terms used in this Privacy Policy are to be understood as defined in Article 4 of the GDPR.

Information on data processing

Automated data processing (log files etc.)

Our site can be visited without actively providing personal information about the users. However, each time our website is accessed, we automatically store access data (server log files) such as the name of the internet service provider, the operating system used, the website from which the user visits us, the date and duration of the visit or the name of the requested file, as well as, for security reasons, e.g. to detect attacks on our website, the IP address of the end device used for a period of 7 days. This data is evaluated exclusively to improve our offer and does not allow any conclusions to be drawn about the person of the user. This data is not merged with other data sources.

We process and use the data for the following purposes: provision of the website, improvement of our websites, prevention and detection of errors/malfunctions and misuse of the website.

Legal basis: legitimate interest pursuant to Art. 6 (1) (f) GDPR

Legitimate interests: ensuring the functionality and the error-free and secure operation of the website and adapting this website to the needs of the users.

Consent Management Tool

We use a consent management procedure on our online offering in order to be able to store and manage the consent given by visitors to our online offering in a verifiable manner in accordance with the requirements of the GDPR. At the same time, visitors to our online offering can use the service we have integrated to manage the consent given and preferences or withdraw their consent.

The consent status is stored server-side and/or in a cookie (so-called opt-in cookie) or a comparable technology in order to be able to assign the consent to a user or their device. The time of the declaration of consent is also recorded.

Categories of data subjects: website visitors who use the consent management tool

Categories of data: usage data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses)

Purposes of processing: fulfilment of accountability obligations, consent management

Legal bases: legal obligation (Art. 6 (1) (c) GDPR in conjunction with Art. 7 GDPR)

Use of cookies (general, functionality, opt-out links etc.)

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on our website. The use of cookies serves our legitimate interest in making the visit to our website as pleasant as possible and is based on Art. 6 (1) (f) GDPR. Cookies are a standard internet technology for storing and retrieving login and other usage information for all users of the website. Cookies are small text files that are stored on the end device. They enable us, among other things, to store user settings so that our website can be displayed in a format tailored to the user’s device. Some of the cookies we use are deleted again after the browser session ends, i.e. after the browser is closed (so-called session cookies). Other cookies remain on the user’s end device and enable us or our partner companies to recognise the browser on the next visit (so-called persistent cookies).

The browser can be set so that the user is informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Furthermore, cookies can be deleted afterwards in order to remove data that the website has stored on the user’s computer. Deactivating cookies (so-called opt-out) may lead to some restrictions in the functionality of our website.

Categories of data subjects: website visitors, users of online services

Opt-out:

Internet Explorer:
https://support.microsoft.com/de-de/help/17442

Firefox:
https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen

Google Chrome:
https://support.google.com/chrome/answer/95647?hl=de

Safari
https://support.apple.com/de-ch/105082

Legal bases: consent (Art. 6 (1) (a) GDPR); legitimate interests (Art. 6 (1) (f) GDPR)
The respective applicable legal basis is specifically named for the corresponding tool.

Legitimate interests: storage of opt-in preferences, display of the website, ensuring the functionality of the website, maintaining user status across the entire web presence, recognition for subsequent website visits, user-friendly online offering, ensuring chat function

Which personal data do we collect or process?

When we use the term “personal data”, we refer to information that identifies you or another person or can be directly associated with you. Personal data does not include information that is collected anonymously or anonymised in such a way that identification or association with you is no longer possible. Depending on how you interact with the Services, where you live and what applicable law permits or requires, we may collect or process the following categories of personal data, including inferences drawn from such personal data:

• Contact details, including name, mailing address, billing address, shipping address, telephone number and e-mail address.

• Financial data, including credit, debit card and financial account numbers, payment card information, financial account information, transaction details, payment method, payment confirmation and other payment details.

• Account information including username, password, security questions, configurations and settings.

• Transaction information including items you view, place in your shopping cart, add to your wish list or purchase, return, exchange or cancel, as well as your past transactions.

• Communications with us, including the information you provide when communicating with us, for example when you submit a request to customer support.

• Device information including information about device, browser or network connection, IP address and other unique identifiers.

• Usage information including information about your interaction with the Services, including how and when you interact with or browse the Services.

Sources of personal data

We may collect personal data from the following sources:

• Directly from you.We collect the data, among other ways, when you create an account, access or use the Services, communicate with us or otherwise provide us with your personal data.

• Automatically via the Services. We collect the data, among other ways, from your device or when you use our products or Services or visit our website, as well as through the use of cookies and similar technologies.

• From our service providers. We collect the data, among other ways, when we engage service providers to enable certain technologies and when they collect or process your personal data on our behalf.

• From our partners and other third parties

How do we use your personal data?

Depending on how you interact with us or which of the Services you use, we may use personal data for the following purposes:

• Provision, customisation and improvement of the Services. We use your personal data to provide the Services to you. This includes, among other things, fulfilling our contract with you, processing your payments, fulfilling your orders, storing your configurations and the items you are interested in, sending notifications relating to your account, creating, maintaining and otherwise managing your account, organising shipping, facilitating returns and exchanges, enabling you to leave reviews and creating an individual shopping experience for you by, for example, recommending products based on your purchases. This may also include the use of your personal data to better tailor and improve the Services.

• Marketing and advertising. We use your personal data for marketing and advertising purposes, for example to send marketing and promotional communications by e-mail, SMS or post and to display online advertising to you for products or services relating to the Services or other websites, including based on items you have previously purchased or placed in your shopping cart and other activities relating to the Services.

• Security and fraud prevention. We use your personal data to authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action against potentially fraudulent, illegal, unsafe or malicious activity, protect public safety and ensure the security of our Services. If you choose to use the Services and register an account, you are responsible for protecting your account login information. We strongly recommend that you do not share your username, password or other access data with others.

• Communication with you. We use your personal data to provide you with customer support and efficient Services, to respond promptly to your enquiries and to maintain our business relationship with you.

• Legal reasons. We use your personal data to comply with applicable law or respond to lawful legal proceedings, including requests from law enforcement or supervisory authorities, to investigate or participate in civil investigations, potential or actual litigation or other adversarial proceedings, and to investigate potential violations of our terms or policies or to enforce such terms and policies.

How do we share personal data?

In certain circumstances, we may share your personal data with third parties for legitimate purposes in accordance with this Privacy Policy. Such circumstances may include the following: With Shopify, these are providers and other third parties that provide Services on our behalf (e.g. IT management, payment processing, data analysis, customer support, cloud storage, fulfilment and shipping). We share personal data with business and marketing partners who provide marketing services for you and show you advertising. For example, we use Shopify to support personalised advertising with services from third parties that are based on your online activities with various merchants and websites. Our business and marketing partners use your data in accordance with their own privacy policies. Depending on where you live, you may have the right to instruct us not to share information about you in order to show you targeted advertising and marketing based on your online activities with various merchants and websites. When you ask us to or otherwise consent to the sharing of certain information with third parties, for example to deliver products to you, or when you use social media widgets or login integrations. We share personal data with our affiliates or otherwise within our corporate group. In connection with a business transaction such as a merger or insolvency, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of service or policies and to protect or defend the Services, our rights and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, whereby Shopify collects and processes personal data about your access to and use of the Services in order to provide and improve the Services for you. Data that you submit to the Services is shared with Shopify and with third parties that may be located in countries other than your country of residence in order to provide and improve the Services for you. To protect, expand and improve our business, we also use certain advanced Shopify features that incorporate data and information from your interactions with our shop, with other merchants and with Shopify. To provide these advanced features, Shopify may use personal data collected from your interactions with our shop, other merchants and Shopify. In these circumstances, Shopify is responsible for processing your personal data, including responding to your requests to exercise your rights regarding the use of your personal data for these purposes. For more information about how Shopify uses your personal data and what rights you have, please refer to Shopify’s Consumer Privacy Policy. Depending on where you live, you can exercise certain rights regarding your personal data listed here via the Shopify privacy portal link.

Websites and links of third parties

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliate websites or not controlled by us, you should review their privacy and security policies as well as other terms and conditions. We make no warranty and are not responsible for the privacy or security of such websites, including the accuracy, completeness or reliability of the information found on such websites. Information that you provide in public or semi-public areas, including information you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of such third-party platforms without restriction as to their use by us or by a third party. The inclusion of such links by us does not mean that we endorse the content of those platforms or their owners or operators, unless explicitly stated in the Services.

Data relating to children

The Services are not intended for use by children, and we do not knowingly collect personal data from children who are not yet of legal age in your country. If you are the parent or guardian of a child who has provided us with their personal data, you may contact us using the contact details provided below to request deletion of that data. As of the effective date of this Privacy Policy, we are not aware of any “sharing” or “selling” (as those terms are defined under applicable law) of personal data for individuals under 16 years of age.

Social media presences

We maintain an online presence on social networks and career platforms in order to exchange information with the users registered there and to be able to make contact easily.

In some cases, data of users in social networks is used to conduct market research and thereby pursue advertising purposes. Based on user behaviour, for example the indication of interests, user profiles can be created and used in order to tailor advertising to the interests of target groups. For this purpose, cookies are regularly stored on the users’ end devices, sometimes regardless of whether they are registered users of the social network.

In connection with the use of social media, we also use the related messengers to communicate easily with users. We would like to point out that the security of individual services may depend on the user’s account settings. Even in the case of end-to-end encryption, the service provider may be able to draw conclusions about the fact that and when users communicate with us and may collect location data.

Depending on where the social network is operated, user data may be processed outside the European Union or outside the European Economic Area. This may involve risks for users, because enforcing their rights may be made more difficult, for example.

Categories of data subjects: registered users and non-registered users of the social network

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP address)

Purposes of processing: increasing reach, networking

Legal bases: legitimate interests (Art. 6 (1) (f) GDPR), consent (Art. 6 (1) (a) GDPR)

Legitimate interests: interaction and communication on social media presence, increasing profits, insights into target groups

Instagram

Recipient: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Privacy: https://help.instagram.com/519522125107875 and https://www.facebook.com/about/privacy

Opt-out link: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/

Safeguards used: https://de-de.facebook.com/help/566994660333381

Facebook

Recipient: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Privacy: https://www.facebook.com/privacy/explanation and
https://www.facebook.com/legal/terms/page_controller_addendum

Opt-out link: https://www.facebook.com/policies/cookies/

Safeguards used: https://de-de.facebook.com/help/566994660333381

LinkedIn

Recipient: LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA

Privacy: https://www.linkedin.com/legal/privacy-policy

Opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Safeguards used: https://de.linkedin.com/legal/l/dpa

TikTok

Recipient: TikTok Inc., 10100 Venice Blvd., Culver City, CA 90232, USA

Privacy: https://www.tiktok.com/legal/privacy-policy?lang=de

YouTube

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy: https://policies.google.com/privacy?hl=de&gl=de

Opt-out link: https://tools.google.com/dlpage/gaoptout?hl=de or
https://myaccount.google.com/

Safeguards used: https://policies.google.com/privacy/frameworks?hl=de

Pinterest

Service used: Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA

Privacy: https://policy.pinterest.com/en/privacy-policy

Opt-out link: https://help.pinterest.com/en/article/your-privacy-and-data-settings

Plug-ins and third-party embedded content

We have integrated functions and content into our online offering that are obtained from third-party providers. For example, videos, images, buttons or posts (hereinafter referred to as “content”) may be embedded.

To enable visitors to our online offering to see content, the respective third-party provider processes, among other things, the IP address of the user so that the content can be transmitted to the browser and displayed. Without this processing, the display of third-party content is not possible.

In some cases, additional information is collected via so-called pixel tags or web beacons, whereby the third-party provider receives information about the use of the content or visitor traffic on our online offering, technical information about the user’s browser or operating system, the time of the visit or referring websites. The data collected in this way is stored in cookies on the user’s end device.

In order to protect the personal data of visitors to our online offering, we have implemented certain security measures to prevent the automatic transmission of this data. Such data is only transmitted when users click on the buttons or third-party content.

Categories of data subjects: users of the plug-in or embedded third-party content

Categories of data: usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address), contact data (e.g. e-mail address, telephone number), master data (e.g. name, address)

Purposes of processing: design of our online offering, increasing the reach of advertisements on social media, sharing posts and content, interest-based and behaviour-based marketing, cross-device tracking

Legal bases: consent (Art. 6 (1) (a) GDPR)

Google Maps

Recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy: https://policies.google.com/privacy?hl=de&gl=de

Opt-out link: https://tools.google.com/dlpage/gaoptout?hl=de or
https://myaccount.google.com/

Legal basis: consent (Art. 6 (1) (a) GDPR)

Safeguards used: https://policies.google.com/privacy/frameworks?hl=de

Google Fonts

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy: https://policies.google.com/privacy?hl=en-US

Opt-out link: https://tools.google.com/dlpage/gaoptout?hl=de

Legal basis: consent (Art. 6 (1) (a) GDPR)

Safeguards used: https://policies.google.com/privacy/frameworks?hl=de

MyFonts

Recipient: Monotype Imaging Holdings Inc., Delaware and 600 Unicorn Park Drive, Woburn, MA 01801, USA

Privacy: https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie

Legal basis: consent (Art. 6 (1) (a) GDPR)

Safeguards used:
https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/datenschutzrichtlinie-fuer-die-website-nutzung

YouTube

Recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy: https://policies.google.com/privacy?hl=de&gl=de

Opt-out link: https://tools.google.com/dlpage/gaoptout?hl=de or
https://myaccount.google.com/

Legal basis: consent (Art. 6 (1) (a) GDPR)

Safeguards used: https://policies.google.com/privacy/frameworks?hl=de

Plyr

Recipient: Plyr via GitHub

Privacy: https://sampotts.me/

Legal basis: consent (Art. 6 (1) (a) GDPR)

Opt-out: https://docs.github.com/de/site-policy/privacy-policies/github-privacy-statement

Online conferences, meetings and webinars

We use the opportunity to hold online conferences, meetings and/or webinars. For this purpose, we use the services of other providers that we have carefully selected.

When such services are actively used, data of the communication participants is processed and stored on the servers of the third-party providers used, insofar as this is data required for the communication process. Usage and metadata may also be processed.

Categories of data subjects: participants in the respective online service (conference, meeting, webinar)

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), meta and communication data (e.g. device information, IP addresses)

Purposes of processing: handling enquiries, increasing efficiency, promoting cooperation across companies and locations

Legal bases: consent (Art. 6 (1) (a) GDPR)

Cisco WebEx

Recipient: Cisco Systems, Inc., 170 West Tasman Dr., San Jose, CA 95134, USA

Privacy: https://www.cisco.com/c/de_de/about/legal/privacy-full.html

Legal basis: consent (Art. 6 (1) (a) GDPR)

Safeguards used:
https://trustportal.cisco.com/c/dam/r/ctp/docs/dataprotection/cisco-master-data-protection-agreement.pdf

Microsoft Teams

Recipient: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Privacy: https://privacy.microsoft.com/de-de/privacystatement

Opt-out link:
https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings

Legal basis: consent (Art. 6 (1) (a) GDPR)

Safeguards used:
https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?year=2021

Chatbots

We offer our customers the option of contacting us via a chat function when visiting our online offering. For this purpose, we use a so-called chatbot. Personal data is processed when the tool we provide is actively used.

In some cases, it is possible to communicate via chat within the internal area of an online platform. In this case, the identifier of the chat user is processed.

Our chatbot offers the possibility for visitors to our online offering to receive information on a regular basis. This is only the case if the respective visitor has actively chosen this option. It is possible to unsubscribe from receiving information for the future at any time.

Categories of data subjects: users of the chatbot

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP addresses), location data

Purposes of processing: handling enquiries, increasing efficiency

Legal bases: consent (Art. 6 (1) (a) GDPR)

trbo GmbH

Recipient: trbo GmbH, Leopoldstr. 41, 80802 Munich, Germany

Privacy: https://www.trbo.com/de/datenschutz/

Legal basis: consent (Art. 6 (1) (a) GDPR)

Newsletter and broad communication (possibly with tracking)

On our online offering, users have the option of subscribing to our newsletter or any notifications via various channels (hereinafter “newsletter”). We send newsletters in accordance with legal provisions only to recipients who have consented to receive the newsletter. We use a selected service provider to send our newsletter.

To subscribe to a newsletter from us, it is necessary to provide an e-mail address. Where applicable, we collect additional data such as name so that we can personalise our newsletters.

Our newsletter is only sent after the so-called double opt-in procedure has been fully completed. If visitors to our online offering decide to subscribe to our newsletter, they receive a confirmation e-mail which is intended to prevent the misuse of incorrect e-mail addresses and to ensure that the sending of the newsletter is not triggered by a simple, potentially accidental click. Subscription to our newsletter can be cancelled at any time for the future. An unsubscribe link (opt-out link) is included at the end of each newsletter.

We are also obliged to provide proof that our subscribers actually wished to receive the newsletter. For this purpose, we collect and store the IP address and the time of subscription and unsubscription.

Our newsletters are designed in such a way that it is possible for us to gain insights into improvements, target groups or the reading behaviour of our subscribers. This is made possible by a so-called web beacon or tracking pixel, which responds to interactions with the newsletter, for example whether links are clicked, whether the newsletter is opened at all or at what time the newsletter is read. For technical reasons, we may associate this information with individual subscribers.

Categories of data subjects: newsletter subscribers

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times)

Purposes of processing: marketing, customer retention and acquisition of new customers, analysis and evaluation of campaign success

Legal basis: consent (Art. 6 (1) (a) GDPR)

rapidmail GmbH

Recipient: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany

Privacy: https://www.rapidmail.de/datenschutz

Safeguards used: https://www.rapidmail.de/datensicherheit

Marketing communications

We also use data provided to us for marketing purposes, in particular to inform you across various channels about news from us or from our product portfolio. Our marketing communications are carried out in compliance with legal requirements and – where necessary – after obtaining consent.

If recipients do not wish to receive our marketing communications, they can inform us of this at any time. We will be happy to comply with this request.

Categories of data subjects: communication partners

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number)

Purposes of processing: direct marketing

Legal basis: consent (Art. 6 (1) (a) GDPR), legitimate interests (Art. 6 (1) (f) GDPR)

Legitimate interests: retaining existing and acquiring new contacts or contractual partners

Competitions and contests

We use our online presences to conduct competitions and/or contests. In doing so, we process the data of the participants that is necessary for carrying out the respective activity. This also includes such data that we need to inform the winner and to distribute the prize.

Depending on the type of activity, contributions from participants or about them may be published, for example when reporting on the respective activity or when voting on a contribution submitted by a participant is part of the activity. In this context, the name of the participant is also published. What data we process in individual cases depends on the specific activity and the data we receive from the participant.

The implementation of the respective activity on our presence in a social network is also subject to the usage and privacy terms of the respective network.

Categories of data subjects: participants in the competition

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photos, videos)

Purposes of processing: implementation of competitions including distribution of prizes and announcement of the winner in various media

Legal bases: consent (Art. 6 (1) (a) GDPR)

Contact

We offer the option on our online offering to contact us directly or to obtain information about various contact options. To always have an overview of contact requests, we use a management tool for processing such enquiries.

In the event of contact being made, we process the data of the person making the enquiry to the extent necessary to answer or process the enquiry. Depending on the means used to contact us, the data processed may vary.

Categories of data subjects: persons making enquiries

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address).

Purposes of processing: handling enquiries

Legal bases: consent (Art. 6 (1) (a) GDPR), performance or initiation of a contract (Art. 6 (1) (b) GDPR)

rapidmail GmbH

Recipient: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany

Privacy: https://www.rapidmail.de/datenschutz

Safeguards used: https://www.rapidmail.de/datensicherheit

Events and functions

On our online offering, visitors have the option of registering for events and functions. The information collected by us and required for the initiation and performance of the contract is marked as mandatory fields. The provision of additional data is voluntary.

Categories of data subjects: participants, interested parties

Categories of data: master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), transaction data (bank details, invoices, payment history), contract data (e.g. subject matter of contract, term)

Purposes of processing: initiation and performance of contracts

Legal bases: initiation and performance of contracts (Art. 6 (1) (b) GDPR), consent (Art. 6 (1) (a) GDPR)

Online marketing

To continuously increase the reach and brand awareness of our online offering, we process personal data in the context of online marketing, in particular with regard to potential interests and the measurement of the effectiveness of our marketing measures.

For the purpose of measuring the effectiveness of our marketing measures and identifying potential interests, relevant information is stored in cookies or similar procedures are used. The data stored in cookies can include content viewed, online offerings visited, settings and functions and systems used. As a rule, no clear-text data of users is processed for the purposes described. The data is then altered in such a way that the actual identity of the users is not known either to us or to the provider of the tool used. The altered data is often stored in user profiles.

If user profiles are stored, the data may be read out, supplemented and added to the server of the online marketing provider when visiting other online offerings that use the same online marketing procedure.

We can determine the success of our advertisements based on aggregated data that is made available to us by the provider of the online marketing procedure (so-called conversion measurement). As part of these conversion measurements, we can track whether a marketing measure has led to a purchase decision by a visitor to our online offering. This evaluation serves to analyse the success of our online marketing.

Categories of data subjects: website visitors, users of online services, interested parties, communication partners, business and contractual partners

Categories of data: usage data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data, contact data, content data (e.g. text entries, photographs, videos)

Purposes of processing: marketing (partly also interest-based and behaviour-based), conversion measurement, audience building, click tracking, development of marketing strategies and increased efficiency of campaigns

Legal bases: consent (Art. 6 (1) (a) GDPR); legitimate interests (Art. 6 (1) (f) GDPR)

Legitimate interests: optimisation and further development of the website, increasing profits, customer retention and acquisition of new customers

Data transfer

We transfer the personal data of visitors to our online offering for internal purposes (e.g. for internal administration or to the HR department in order to comply with legal or contractual obligations). Internal data transfers or disclosures of data are made only to the extent necessary and in compliance with applicable data protection regulations.

To perform contracts or fulfil a legal obligation, it may be necessary for us to disclose personal data. If the necessary data is not provided to us, it may not be possible to conclude the contract with the data subject.

We transfer data to countries outside Switzerland and the EEA (so-called third countries). This is done for the purposes mentioned above (transfer to other recipients). The transfer takes place only to fulfil our contractual and legal obligations or on the basis of prior consent of the data subject.

In the event that we transfer data for processing to a country outside Switzerland and the EEA, we ensure that the processing is legally permissible in the manner we envisage. For this purpose, we have concluded, among other things, standard contractual clauses including a separate regulation of appropriate technical and organisational measures to best protect the data of data subjects. You can find a copy of the safeguards used under the respective services.

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Security and retention of your data

Please note that no security measures are perfect or impenetrable, and therefore we cannot guarantee “perfect security”. In addition, information you send to us may be exposed to risks during transmission. We recommend that you do not use insecure channels to transmit sensitive or confidential information to us.

How long we retain your personal data depends on various factors. These include, for example, whether we need the data to manage your account, provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

We generally store the data of visitors to our online offering for as long as is necessary to provide our service or as long as this is provided for by the European legislator or another legislator in laws or regulations to which we are subject. In all other cases, we delete the personal data after the purpose has been fulfilled, except for data that we must continue to store to fulfil legal obligations (e.g. we are obliged under tax and commercial retention periods to keep documents such as contracts and invoices for a certain period).

Your rights and options

Depending on where you live, you may have some or all of the rights listed below in relation to your personal data. However, these rights are not absolute, may apply only in certain circumstances, and in certain cases we may refuse your request to the extent permitted by law.
 

• Right of access. You may have the right to request access to the personal data we hold about you.

• Right to erasure. You may have the right to request that we delete the personal data we hold about you.

• Right to rectification. You may have the right to request that we correct inaccurate personal data we hold about you.

• Right to data portability. You may have the right to receive a copy of the personal data we hold about you and to request that we transmit it to a third party under certain circumstances and subject to certain exceptions.

• Management of communication preferences. We may send you marketing e-mails. You can opt out of receiving these e-mails at any time by using the unsubscribe option included in our e-mails to you. If you opt out, we may still send you non-marketing e-mails, e.g. about your account or orders you have placed.

If your place of residence is in the United Kingdom or the European Economic Area, you may, subject to the exemptions and restrictions under local law, exercise the following additional rights in addition to the rights mentioned above:

• Right to object and right to restriction of processing. You may have the right to request that we stop or restrict the processing of personal data for certain purposes.

• Withdrawal of consent. Where we rely on consent to process your personal data, you have the right to withdraw that consent. 

• If you withdraw your consent, this does not affect the lawfulness of the processing based on your consent before its withdrawal.

You can exercise these rights where indicated in the Services or by contacting us using the contact details provided below. For more information about how Shopify uses your personal data and what rights you have, including rights in relation to data processed by Shopify, please see https://privacy.shopify.com/en.
Exercising these rights will not result in any disadvantages for you. Where permitted or required by applicable law, we may need to verify your identity before processing your requests. In accordance with applicable laws, you may appoint an authorised agent to submit requests to exercise your rights on your behalf. Before we accept such a request from an agent, we require proof from the agent that you have authorised them to act on your behalf. It may also be necessary for you to verify your identity directly with us. We will respond to your request promptly in accordance with applicable law.

Complaints

If you have complaints about how we process your personal data, please contact us using the contact details provided below. Depending on where you live, you have the right to appeal our decision by contacting us at the contact details provided below or by lodging a complaint with the competent data protection authority. For the European Economic Area, there is a list of the competent data protection supervisory authorities. If you wish to access it, you have the opportunity to do so here.

International transfers

Please note that we may transfer, store and process your personal data outside the country in which you reside.
If we transfer your personal data outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission’s standard contractual clauses or equivalent contracts issued by the competent authority in the United Kingdom, unless the data transfer is made to a country that demonstrably provides an adequate level of protection.

Withdrawal

Some data processing operations are only possible with the express consent of the data subjects. You have the option of revoking any consent you have already given at any time. An informal notice or e-mail to revocation.chatlouis-widmer.com is sufficient for this purpose. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices, or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, adjust the date of the “Last version” accordingly and make any notifications required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us by telephone at , by e-mail at datenschutz@louis-widmer.com or by post at Rietbachstrasse 5, Schlieren, 8952, Switzerland. For the purposes of applicable data protection laws, we are the controller of your personal data.