Privacy Policy

We, Skin Euphoria GmbH, Blümlisalpstrasse 6, 8006 Zürich, operate the website skin-euphoria.com and are the provider of the goods and services offered on the website. We are therefore the controller responsible for the collection, use and processing of your data.

Below, we explain whether and how we process your data.

Data Processing, Storage and Deletion
We process only personal data that we collect directly through our website, the associated applications, external platforms, so-called “landing pages”, or in the context of our business relationships with our customers and other business partners. Data is processed only where express consent or a legal basis exists, for example for the performance of a contract, compliance with legal obligations or on the basis of our legitimate interests.

Where you have given your consent, we process your data only within the scope of that consent, unless one of the legal bases set out below applies. We expressly draw your attention to the fact that you may withdraw your consent at any time. Any processing already carried out lawfully before the withdrawal of consent will remain unaffected.

The following legal bases may apply:

Consent of the data subject;
Performance of a contract with the data subject as a contracting party or implementation of necessary pre-contractual measures at the request of the data subject;
Compliance with legal obligations applicable to our company;
Performance or exercise of a task carried out in the public interest;
Legitimate interests of our company, provided that the interests or fundamental rights of the data subject do not override those interests.

We delete personal data as soon as the purpose for which it was collected has been fulfilled and there is no longer any need to retain it. However, there are cases in which we are legally required to retain data for a longer period. This applies, in particular, to requirements imposed by Swiss or European legislation in areas such as contract and tax law and commercial accounting. For example, business documents, contracts and accounting records must be retained for a period of 10 years. Personal data that is retained solely for legal reasons and is no longer required for the provision of our services is restricted and used only for accounting and tax purposes.

Disclosure to Third Parties
The use of third-party services may be necessary in connection with the performance of a contract. It may therefore be necessary to disclose data to external service providers in order to provide the contractually agreed services. The legal bases for such disclosure correspond to those applicable to lawful processing and are explained in greater detail in the preceding section. We use contractual arrangements to ensure that third parties entrusted with data processing comply with applicable data protection requirements. In certain cases, we may also be required by administrative or court orders to disclose data to public authorities or third parties.

Provision of Our Services and Creation of Log Files
As soon as you access our website, our system automatically collects and stores information in so-called log files. This includes the following information:

Browser type and version;
Operating system;
IP address;
Internet service provider;
Date and time.

The aforementioned data cannot be attributed directly to a specific person and is not combined with other personal data, but remains stored in our system. The collection and storage of this data in log files is based on our company’s legitimate interests, in particular ensuring the functionality and security of our services and optimising them. The log files are automatically deleted at the end of each session.

The collection and storage of your data in log files is essential for the operation of our website. It is therefore not possible to object to this processing.

Cookies, Tracking and Other Technologies
We use cookies and comparable technologies on our website. Cookies are small text files stored by your browser that enable your browser to be uniquely identified when you visit our website again. They store and transmit display settings and login information in order to make our website user-friendly and secure. The use of cookies is based on our company’s legitimate interests in optimising our website.

You have control over the use of cookies. By adjusting your browser settings, you can disable or restrict the transmission of cookies and delete cookies that have already been stored at any time. Please note, however, that disabling cookies may restrict the functionality of our services.

When you visit our website, you will be informed by means of a cookie banner through which you can consent to the use of cookies. This consent constitutes the legal basis for the use of those cookies that are required for the full use of our services.

Tools, Applications and Other Technologies Used
Shopify
We use Shopify to host and operate our online shop. The provider is Shopify International Limited, 2nd Floor, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify processes personal data required to operate the online shop, manage customer accounts and process orders, including names, contact and delivery details, order information, IP addresses and device data. Shopify may process data outside Switzerland or the EU on the basis of appropriate safeguards.

Further information is available at: https://www.shopify.com/legal/privacy.

Shopify Payments, including TWINT
We use Shopify Payments to process payments. Where available, customers may also pay using TWINT. Depending on the selected payment method, additional payment service providers or financial institutions may be involved.

Personal data processed may include names, billing details, payment and transaction information, order details and information used to prevent fraud. The payment providers involved may process data partly on our behalf and partly under their own responsibility. Data may be processed outside Switzerland or the EU on the basis of appropriate safeguards.

Further information is available at: https://www.shopify.com/legal/privacy and https://www.twint.ch/en/data-privacy.

Shopify Email
We use Shopify Email to manage and send newsletters and other marketing communications.

Personal data processed may include email addresses, names, subscription status and information concerning the delivery and use of our emails. Processing is based on your consent, which you may withdraw at any time using the unsubscribe link included in each newsletter.

Shopify may process data outside Switzerland or the EU on the basis of appropriate safeguards.

Further information is available at: https://www.shopify.com/legal/privacy.

Shopify Analytics
We use Shopify Analytics to analyse visitor behaviour, sales, orders, conversions and traffic sources.

For this purpose, Shopify may process IP addresses, device and browser information, pages and products viewed, website interactions and order information. Where cookies or comparable technologies requiring consent are used, processing is based on your consent. Otherwise, processing is based on our legitimate interest in analysing and optimising our online shop.

Shopify may process data outside Switzerland or the EU on the basis of appropriate safeguards.

Further information is available at: https://www.shopify.com/legal/privacy.

Meta Pixel, Facebook and Instagram
We use the Meta Pixel and related advertising functions for Facebook and Instagram. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

These services enable us to measure conversions, analyse the effectiveness of our advertising and display targeted advertisements. Meta may process IP addresses, device information, pages and products viewed, purchases and other interactions with our online shop. If you are logged in to Facebook or Instagram, Meta may associate this information with your account.

Processing is based on your consent, which may be withdrawn at any time through the cookie settings. Meta may process data outside Switzerland or the EU on the basis of appropriate safeguards.

Further information is available at: https://www.facebook.com/privacy/policy.

Shopify Translate & Adapt
We use Shopify Translate & Adapt to provide and manage translated content in our online shop.

The application primarily processes shop content and translations. Personal data is generally not processed unless it is contained in content submitted for translation. Shopify may also process technical and usage data and may process data outside Switzerland or the EU on the basis of appropriate safeguards.

Further information is available at: https://www.shopify.com/legal/privacy.

Shopify Cookies
Our website contains contact forms that enable you to contact us. In this context, the information you provide, including the following data, is transmitted to us and stored: first and last name, telephone number, email address, subject and message.

The information you provide to us is used solely to process your enquiry or message. By submitting the enquiry or message, you consent to the data processing described above. The legal basis is your consent. You may withdraw your consent at any time. Any processing already carried out before the withdrawal will remain unaffected.

Contact Form
Our online shop uses Shopify cookies and comparable technologies. These are used to provide functions such as the shopping cart, customer login, checkout, language settings and user preferences, and to ensure the security and functionality of the online shop.

Strictly necessary cookies may be used without consent. Analytics and marketing cookies are used only with your consent. You may change your cookie settings or withdraw your consent at any time. Disabling cookies may restrict the functionality of the online shop.

Further information is available at: https://www.shopify.com/legal/cookies.

Contact Form
Our website contains contact forms that enable you to contact us. In this context, the information you provide, including the following data, is transmitted to us and stored: first and last name, telephone number, email address, subject and message.

Third-Party Links
Where we provide links to websites operated by other organisations, the privacy policies applicable to those websites apply.

Right of Access
As a data subject, you may request confirmation from us as to whether we process personal data concerning you. Where this is the case, you have the right to obtain information concerning the following:

The purposes for which the personal data is processed;
The categories of personal data processed;
The recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
The envisaged period for which the personal data concerning you will be stored or, where this is not possible, the criteria used to determine that period;
The existence of a right to request rectification or erasure of personal data concerning you, restriction of processing by us or the right to object to such processing;
The existence of a right to lodge a complaint with a supervisory authority;
Any available information concerning the source of personal data that was not collected from you;
The existence of automated decision-making, including profiling, and meaningful information concerning the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

You also have the right to request information as to whether personal data concerning you is transferred to a third country or an international organisation. In such a case, you have the right to be informed of the appropriate safeguards relating to the transfer.

Right to Rectification and Erasure
You have the right to request that we rectify and/or complete inaccurate and/or incomplete personal data concerning you without undue delay.

You also have the right to request that we erase personal data concerning you without undue delay where one of the following grounds applies:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
You withdraw your consent and there is no other legal basis for the processing;
You object to the processing on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing, or you object to processing for direct marketing purposes;
The personal data concerning you has been processed unlawfully;
The personal data concerning you must be erased in order to comply with a legal obligation;
The personal data concerning you was collected in relation to the offer of information society services pursuant to Article 8(1) GDPR.

Right to Restriction of Processing
As a data subject, you have the right to request restriction of processing where one of the following conditions applies:

The accuracy of the personal data is contested. Restriction may be requested for the period required to enable us to verify the accuracy of the personal data;
The processing is unlawful and you request restriction instead of erasure;
We no longer require the personal data for processing purposes, but you require it for the establishment, exercise or defence of legal claims;
You object to the processing.

Where the processing of personal data concerning you has been restricted, such data may, with the exception of storage, be processed only with your consent or for the establishment, exercise or defence of legal claims, the protection of the rights of another natural or legal person, or for reasons of public interest.

Where you have obtained restriction of processing in accordance with the aforementioned conditions, we will inform you before the restriction is lifted.

Duty to Inform and Notify Third Parties
Where we have made your personal data public and are legally required to erase it, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers and processors processing the data that you have requested the erasure of all links to, copies of or replications of that personal data.

We will inform all recipients to whom your personal data has been disclosed of any rectification or erasure of that data or restriction of its processing, unless this proves impossible or involves disproportionate effort. In such cases, we will endeavour to communicate the reasons for not providing notification clearly and to ensure that your rights nevertheless remain protected.

Exceptions to the Right to Erasure
The right to erasure does not apply where processing is necessary for exercising the right to freedom of expression and information and/or for the establishment, exercise and/or defence of legal claims.

Right to Data Portability
As a data subject, you have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from us, where the processing is based on consent or a contract and is carried out by automated means.

You also have the right to have personal data concerning you transmitted directly by us to another controller, where technically feasible. The rights and freedoms of other persons must not be adversely affected as a result.

Right to Object
As a data subject, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Article 6(1)(e) or (f) GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms. An additional exception applies where the processing is required for the establishment, exercise or defence of legal claims.

Where we process personal data concerning you for direct marketing purposes, you have the right to object at any time to processing for such marketing purposes. Where you object to processing for the aforementioned purpose, we will no longer use personal data concerning you for that purpose.

You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out lawfully before the withdrawal.

Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular at your place of residence in the EU or Switzerland, your place of work or the place of the alleged infringement, where you consider that the processing of personal data concerning you infringes the GDPR or the Swiss Federal Act on Data Protection.

The competent authority for Switzerland is:

Federal Data Protection and Information Commissioner
Feldeggweg 1
3003 Bern
Switzerland

The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy.