Data protection

1 Introduction

In the following we will inform you, among other things, about who is responsible for processing your data, what data we collect in connection with visiting our website and using our services, for what purposes we process this data and to whom we may pass this data on. We will also inform you about the duration of the processing of your data, the legal basis for the processing (if such processing should be necessary) and what rights you have with regard to the processing of your data. This privacy policy applies to all your data that we already have or that we will have in the future. Please note that we may amend the privacy policy from time to time. The current version published on our website applies.

Personal data is all information that relates to a specific or identifiable person (hereinafter "personal data"). This includes in particular information such as name, address, telephone number, e-mail address, possibly also IP addresses and device IDs. In addition to personal data, the generic term data in this data protection declaration also includes non-personal and anonymous data. Processing means any handling of data, regardless of the means and procedures used, in particular the collection, storage, use, editing, disclosure, archiving or deletion of data (hereinafter "processing").

If you provide us with the personal data of other people, please ensure that these people are aware of this data protection declaration and only provide us with their personal data if you are entitled to do so under applicable data protection law.

2. Name and address of the person responsible

The person responsible for data processing in accordance with this data protection declaration is:

Valesca Hair

Hammerstrasse 12

8008 Zurich

043 444 17 17

info@valescahair.ch

3. Categories of processed data

When you visit our website, use our services and contact us, we collect certain data. In principle, we collect this data directly from you. The personal data that we process may include the following data:

• Data that is determined or disclosed when you visit our website or use our services. This includes, among other things, the IP and MAC address or device ID of the device used, cookies, pages you have accessed and search terms entered, entries in dialog boxes, ratings, time and duration of visits, clicks, speaker/exit URL, Information on the time of use, the browser and device type as well as the operating system and Internet service provider used, and the amount of data transferred. Data that is exchanged in or in relation to contact with us, e.g. communication by letter, telephone, e-mail, contact form, etc. (in particular name, contact details, gender, marital status, date of birth, job title, photo, employee, language, Payment information). Data provided when registering for a newsletter or for downloading files (e.g. software) (in particular email address and name). Data provided as part of creating a customer account for online shopping and in connection with communicated with the orders placed (in particular user name, password, selected payment method and delivery address). Data relating to offers and concluded contracts (e.g. contract date, type, content, product, parties, term, value, adjustments, details for payment, contact details, contact persons, billing and correspondence addresses, customer feedback, terminations, disputes, etc.). Data that is disclosed as part of the comment function (in particular e-mail address, the user name you have chosen, unless you are anonymous post, as well as your IP address). Data that you disclose when participating in sweepstakes, surveys and the like.

The above data does not always represent personal data. As a rule, we cannot assign data that arise when using our services without registration (e.g. to a newsletter or online shop) to an individualized person by name. In individual cases, however, this may be possible in combination with other data.

We draw your attention to the fact that the information provided in connection with the use of the contact form or the comment function may include data that is particularly worthy of protection (such as health data) and that you provided this to us voluntarily.

4. Processing Purposes

To the extent permitted by applicable law, we will process personal data, in particular for the following purposes:

• Initiation, conclusion, fulfillment and processing of contracts; offer, further development and improvement of our offers, new development of services, operation, maintenance, optimization and guaranteeing the security of our services and infrastructure; administration of the users of our services, identity checks, log-ins, and others authentications; maintaining, administering and developing our customer relationships, communicating with customers and third parties, promotions, advertising and marketing, offering tailored services and relevant content; quality control, compiling statistics; compliance with legal and regulatory obligations and internal rules, law enforcement, civil, Administrative and criminal proceedings, complaints, combating abuse, investigations and responding to inquiries from authorities and official bodies.

5. Legal Basis

We use the personal data for the above purposes on the basis of the following legal bases, insofar as this is required under the applicable data protection law:

• Fulfillment of a contract; Fulfillment of legal obligations; Consent granted to us or third parties; Legitimate interests of us and third parties, in particular: Offering and providing services; Advertising and marketing; Maintaining contact and communicating with users; User management, identity checks, log-ins; Compliance with legal and regulatory obligations, law enforcement, civil, administrative and criminal proceedings, complaints, investigations and responding to requests from public authorities.

6. Disclosure and Sharing of Data

We may publish and share information as follows:

order data processor

We can commission third parties to provide certain services (e.g. in the area of IT, operation of applications, administration, shipping, etc.) and to process and store data (so-called "order data processors"). Order data processors may have access to personal data and process it on our behalf. We oblige the processors to comply with data protection law and only process data in the way we do it ourselves. Order data processors who can receive personal data can be located in any country, in particular in Switzerland, Germany, Israel and the USA.

contractor

We can pass on data to contractual partners (e.g. sales partners, service providers, financial companies, etc.). This happens, for example, to fulfill contractual obligations, to offer certain services, for collection and marketing purposes, to analyze the use and operation of our services, systems and infrastructure and for payment processing. Possible recipients can also be buyers or those interested in acquiring business areas, companies or parts thereof. Contractual partners can access personal data and process it for their own purposes (e.g. for the fulfillment of a contract or the fulfillment of their own legal obligations). You yourself are obliged to comply with applicable data protection laws. Contractual partners who can receive personal data can be located in any country, in particular in Switzerland, in countries of the EU and the EEA as well as in the USA.

Disclosures to authorities

In certain situations, we may disclose data to authorities, official bodies and other third parties. We do this in cases where we are required to do so by the authorities or where we believe we are obliged to do so.

7. Retention Period

We store personal data as long as it is necessary for the purpose for which we collected it. Certain personal data are also subject to legally binding retention requirements of ten or more years, which we take into account. We may also retain personal information for at least the applicable statute of limitations, which in many cases is five or ten years. We generally delete personal data that arise in connection with the use of our services (e.g. protocols, logs, analyses, etc.) and that are not subject to such retention or limitation periods earlier as soon as we are no longer interested in processing them. Data can also be kept longer in anonymized form. Subject to an express contractual agreement, we are not obliged to keep data for a specific period of time.

8. Data Security

We apply appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

9. Your rights (rights of data subjects)

Every data subject has a right to information about personal data concerning them. In addition, you have the right to request us to correct, delete and restrict personal data concerning you and to object to such processing of personal data. The exercise of such rights usually presupposes that the person concerned can clearly prove their identity. If the processing of personal data is based on consent, the consent can be revoked by the data subject at any time. In certain cases, the data subject has the right to receive the data generated when using online services in a structured, common and machine-readable format, which enables further use and transmission. Inquiries related to these rights should be sent to the above address. We reserve the right to restrict the rights of the person concerned within the framework of the applicable law and, for example, not to provide complete information or not to delete data. We would also like to draw your attention to the fact that if your personal data is deleted, services will no longer be available or can no longer be used in whole or in part.

[Insert a paragraph here if you make automated individual decisions (decisions based exclusively on automated processing).]

Every data subject has the right to lodge a complaint with the competent data protection authority. In the case of a person responsible in Switzerland, this is the Federal Data Protection and Information Commissioner. In the case of a person responsible in the Principality of Liechtenstein, it is the Liechtenstein Data Protection Office.

10. Cookies, web analysis and tracking tools

We use various common technologies to collect, store and evaluate data when you visit our website and use our services.

This includes in particular cookies with which your browser or your device can be identified. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you use. When you call up a service again, it can recognize your browser or device using the cookie. Cookies can store user preferences and other information. We use session cookies. These are necessary in order to be able to perform the basic functionalities of the services and will be automatically deleted after using our services. In addition, we also use temporary and permanent cookies, which remain stored on your computer or mobile device for a longer period of time. The information collected using cookies enables us to improve our website and services in accordance with customer requirements and to provide you with offers tailored to you.

You can block the use of cookies in your browser settings or delete them there. Please note that if cookies are not allowed, not all functions of a service can be used to their full extent, and that if the cookies are deleted, any opt-out cookies you have set will also be deleted. Such opt-out cookies would then have to be reactivated when you visit the corresponding service again. Otherwise you will be recognized as a new user and your data will be recorded again.

In addition to cookies, we use web analysis and tracking tools to measure and evaluate the use of our website and services, to personalize the services and to display offers and advertising tailored to you. For data processing by such tools, which are usually provided by third parties, the terms of use and data protection of these third parties apply.

[If you use Google Analytics, you can indicate this here.]

11. Integration of offers from third parties

We embed services and content from third parties on our websites that can enable you to interact with third parties (e.g. YouTube video or online payment via a payment service provider). For this purpose, any data provided will be forwarded to these third parties for processing and execution of the corresponding service or processed directly by them.

Please note that data processing by these third parties is subject to their terms of use and data protection.

04.08.2023