Privacy Policy 2024

We appreciate your visit to our website kaufhaus-ackerlo.shop and your interest in our company. The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our site. Our data protection practices comply with the legal regulations of the Swiss Federal Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR).

1. General

The EU General Data Protection Regulation and Swiss data protection law protect the fundamental rights and freedoms of natural persons, and in particular their right to the protection of personal data. Personal data refers to all information relating to an identified or identifiable person. When we refer to the processing of your personal data in this privacy policy, we mean any handling of your personal data. This includes, for example:

• Collection
• Storage
• Management
• Use
• Transmission
• Disclosure
• Deletion of your personal data

We collect personal data required for specific purchases and to provide better services to our customers. This data is used exclusively within Snowflake Lifestyle AG and is not passed on to third parties.


2. Who is responsible?

With regard to our website, the owners or responsible parties are:
Snowflake Lifestyle AG
Allmendstrasse 153
8041 Zurich
Owners: Sara & Tom Hurler

Email: info@kaufhaus-ackerlo.shop
Tel: +41 (0)44 342 11 44

3. How do we protect your personal data?

How do we protect your personal data? We have technical and organisational security procedures to ensure the security of your personal data and to protect your session data and personal data against unauthorised or unlawful processing and/or against unintentional loss, alteration, disclosure or access. Our online shop is encrypted using SSL (Secure Socket Layer), which ensures that all data from the offer as well as your payment and customer data are transmitted securely. However, you should always be aware that the transmission of information via the Internet and other electronic means carries certain security risks and that we cannot guarantee the security of information transmitted in this way.

4. How long do we store data and where do we store it?

We process and store your personal data for as long as it is necessary to fulfil our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e., for example, for the duration of the entire business relationship (from initiation, execution to termination of a contract) and beyond, in accordance with legal retention and documentation obligations. It is possible that personal data may be retained for the period in which claims can be asserted against our company and to the extent that we are otherwise legally obliged to do so or legitimate business interests require it (e.g., for evidentiary and documentation purposes). As soon as your personal data is no longer required for the purposes mentioned above, it will generally be deleted or anonymised as far as possible. For operational data (e.g., system logs), generally shorter retention periods of twelve months or less apply. Inactive customer accounts are systematically deleted after one year of inactivity and no response to the 30-day reactivation period. The personal data we collect is stored exclusively on servers in Switzerland.

5. What rights do you have regarding your data?

Within the scope of the data protection law applicable to you and as provided therein (as in the case of the GDPR), you have the right to information, rectification, deletion, the right to restriction of data processing and otherwise to object to our data processing, in particular that for direct marketing purposes, profiling carried out for direct advertising and other legitimate interests in the processing, as well as to the release of certain personal data for the purpose of transfer to another body (so-called data portability). Please note, however, that we reserve the right to assert the statutory restrictions on our part, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we are allowed to invoke this) or require it for the assertion of claims. If costs are incurred by you, we will inform you in advance. You have the right to revoke your consent at any time. Please note that the exercise of these rights may conflict with contractual agreements and may have consequences such as premature contract termination or cost implications. In such cases, we will inform you in advance, if this is not already contractually regulated.
The exercise of such rights usually requires you to clearly prove your identity (e.g., by means of an ID copy, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address provided in section 17. Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

6. When do we collect personal data?

We primarily process personal data that we receive from our customers and other business partners and other persons involved in our business relationship, or that we collect from users when operating our websites, apps and other applications.
Where permitted, we also obtain certain data from publicly accessible sources (e.g., debt collection registers, land registers, commercial registers, press, internet), from authorities and other third parties (such as credit agencies).
In addition to the data you provide us directly, the categories of personal data we receive about you from third parties include, in particular:

• Information from public registers
• Information we learn in connection with official and judicial proceedings
• Information relating to your professional functions and activities (so that we can, for example, conclude and process business with your employer with your help)
• Information about you in correspondence and meetings with third parties
• Creditworthiness information (insofar as we conduct business with you personally)
• Information about you provided to us by people in your environment (family, advisors, legal representatives, etc.) so that we can conclude or process contracts with you or involving you (e.g., references, your address for deliveries, powers of attorney, information on compliance with legal requirements such as anti-money laundering and export restrictions, information from banks, insurance companies, sales and other contractual partners of ours for the use or provision of services by you (e.g., payments made, purchases made))
• Information from media and the internet about you (insofar as this is indicated in the specific case, e.g., in the context of an application, press review, marketing/sales, etc.)
• Your addresses and, if applicable, interests and other socio-demographic data (for marketing) • Data related to the use of the website (e.g., IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of visit, pages and content accessed, functions used, referring website, location data)
• In particular, for the purpose of credit checks when purchasing on account, creditworthiness information based on mathematical-statistical procedures is obtained from MF Group, Postfach, 9001 St. Gallen, info@mfgroup.ch, +41 58 806 06 06.

7. What personal data do we collect?

 We require the collected personal data for processing the sales process. On the one hand, we collect personal data that you provide to us. On the other hand, we collect personal data that is automatically or manually recorded during your contact with us, such as:

7.1 Personal Data

• First and last name
• Delivery address
• Billing address
• Telephone number(s)
• Email address(es)
• Customer number
• Information about subscribed newsletters or other advertising
• Consent for receiving advertising
• Online customer account information (including opening date, usernames)

7.2 Customer Activity Data

• Contract data (including contract date, contract type, contract content;
• Contracting party; contract term; contract value; claims asserted from the contract);
• Purchase information (including purchase date, type, quantity and value of goods and services purchased; shopping cart; abandoned shopping cart; payment methods used; purchase history);
• Customer service information (including returns of goods, complaints, warranty cases, delivery information);
• Session data related to visits to our websites.
• Communications via telephone, email, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging

8. Why do we process personal data (purpose and legal basis)?

We process your personal data for various purposes. These purposes can be grouped into different categories. We primarily use the personal data we collect to conclude and execute our contracts with our customers and business partners, particularly in the context of our goods and service offerings with our customers and the purchase of products and services from our suppliers, and to comply with our legal obligations at home and abroad. If you work for such a customer or business partner, your personal data may also be affected in this capacity. In addition, we process your personal data and that of other persons, where permitted and deemed appropriate, also for the following purposes, for which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

• Offering and further developing our offers, services and websites, apps and other platforms on which we are present;
• Communication with third parties and processing their inquiries (e.g. applications, media inquiries);
• Review and optimisation of procedures for needs analysis for direct customer approach and collection of personal data from publicly accessible sources for customer acquisition;
• Advertising and marketing (including carrying out events), unless you have objected to the use of your data (if we send you advertising as an existing customer of ours, you can object at any time, we will then put you on a blacklist against further advertising mailings);
• Market and opinion research, media monitoring;
• Assertion of legal claims and defence in connection with legal disputes and official proceedings;
• Prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analyses for fraud prevention);
• Ensuring our operations, in particular IT, our websites, apps and other platforms;
• Purchase and sale of business divisions, companies or parts of companies and other corporate transactions and the associated transfer of personal data as well as measures for business management and insofar as necessary for compliance with legal and regulatory obligations and internal regulations.

In particular, we may process your personal data in whole or in part in the following areas for one or more of the purposes for which we have a legitimate interest corresponding to the purpose:

8.1 Processing purposes in connection with our goods and service offerings

8.2 Processing purposes in connection with customer communication

• Provision, administration and execution of customer communication by post and via electronic communication channels
• Business communication by post and via telephone, fax, email, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging

8.3 Processing purposes in connection with direct marketing

• Simplification of processes – such as purchases or bookings – and use of insights from the analysis of customer behaviour to continuously improve all goods and service offerings
• Avoidance of unnecessary advertising through insights from the analysis of customer behaviour for individualised and personalised direct marketing
• Sending individualised and personalised advertising by post or via telephone, email, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging

Individualised and personalised adaptation of offers and advertising on our websites, apps for mobile devices or on our channels on internet platforms, multimedia portals or social networks.
Insofar as you have given us consent to process your personal data for specific purposes (for example, when you register to receive newsletters), we process your data within and based on this consent, unless we have another legal basis and we need one. Consent given can be revoked at any time, but this does not affect data processing that has already taken place. Within the framework of our business relationship, you must provide the personal data that is necessary for the establishment and execution of a business relationship and the fulfilment of the associated contractual obligations (you generally do not have a legal obligation to provide us with data). Without this data, we will generally not be able to conclude or execute a contract with you (or the entity or person you represent). The website also cannot be used if certain information to ensure data traffic (such as the IP address) is not disclosed.

9. To whom do we disclose your personal data?
In the course of our business activities and for the purposes according to section 8, where permitted and deemed appropriate, we also disclose data to third parties, either because they process it for us or because they want to use it for their own purposes. This applies in particular to the following entities:

• Our service providers (e.g., banks, insurance companies), including processors (e.g., IT providers)
• Dealers, suppliers, subcontractors and other business partners
• Customers
• Domestic and foreign authorities, offices or courts
• Media
• Public, including visitors to websites and social media
• Competitors, industry organisations, associations, organisations and other bodies
• Acquirers or interested parties in the acquisition of business divisions, branches or other parts of Snowflake Lifestyle AG
• Other parties in potential or actual legal proceedings;
• all common recipients. These recipients may be located in Switzerland, but also anywhere else in the world.
  
  In particular, you must expect your data to be transferred to all countries where Snowflake Lifestyle AG is represented by group companies, branches or other offices (currently only Switzerland), as well as to other European countries and the USA, where the service providers we use are located (e.g. Microsoft, Meta, Dropbox, Google, Klaviyo).

If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection (for this purpose, we use the revised standard contractual clauses of the European Commission, which can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless they are already subject to a legally recognized framework for ensuring data protection and we cannot rely on an exception. An exception may apply, in particular, in legal proceedings abroad, but also in cases of overriding public interests or if a contract requires such disclosure, if you have consented or if the data are generally accessible by you and you have not objected to their processing.

10. How do we use cookies?

We typically use "cookies" and similar technologies on our website that can identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you are using when you visit our website. If you visit this website again, we can recognize you, even if we don't know who you are. By using our websites and consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not wish to do so, you must adjust your browser or email program accordingly.

11.1 Why do we use cookies?

Cookies are used, among other things, to record the frequency of use, the number of users and behavior on our website, and to increase the security of website usage.

11.2 Which cookies do we use?

Most of the cookies we use are automatically deleted from your computer or mobile device after the browser session ends (so-called session cookies). For example, we use session cookies to save your country and language preferences and your shopping cart across different pages of an internet session.
In addition, we also use temporary and permanent cookies. These remain stored on your computer or mobile device after the browser session ends. When you visit one of our websites again, it is automatically recognized which entries and settings you prefer. These temporary or permanent cookies remain stored on your computer or mobile device for between one month and ten years, depending on the type of cookie, and are automatically deactivated after the programmed time expires. They serve to make our websites more user-friendly, effective and secure.

11.3 What data is stored in the cookies?

No personal data is stored in the cookies we use. The cookies we use cannot be assigned to a specific person. When a cookie is activated, an identification number is assigned to it.

11.4 How can you prevent the storage of cookies?

Most internet browsers automatically accept cookies. However, you can instruct your browser not to accept cookies or to ask you each time before a cookie from a website you visit is accepted. You can also delete cookies on your computer or mobile device by using the corresponding function of your browser. If you decide not to accept our cookies or the cookies of our partner companies, you will not be able to see certain information on our websites and will not be able to use some functions that are intended to improve your visit.

12. How do we use log files?

Every time you access our website, certain usage data is transmitted to us by your internet browser for technical reasons and stored in log files. These are the following usage data:

• IP address of the contacting device
• Date and time
• URL of the accessed page
• Referrer URL
• Browser and other device information The evaluation of the log files helps us to further improve our internet offerings and make them more user-friendly, to find and fix errors more quickly and to control server capacities. Based on the log files, we can, for example, determine at what time the use of our internet offerings is particularly popular and provide appropriate data volume to ensure you the best possible use.

13. How do we use web analysis tools?

In order to constantly improve and optimize our internet offering, we use so-called tracking technologies (Google Analytics). Web analysis tools provide us with statistics and graphics that give us information about the use of our internet pages. The data about the use of a website is transmitted to the server used for this purpose. This is a service provided by third parties who may be located anywhere in the world (in the case of Google Analytics, it is Google Ireland (based in Ireland), Google Ireland relies on Google LLC (based in the USA) as a data processor (both "Google"), www.google.com), with which we can measure and evaluate the use of the website (non-personal). Permanent cookies, which are set by the service provider, are also used for this purpose. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google may draw conclusions about the identity of visitors from this data for its own purposes, create personal profiles and link this data to the Google accounts of these persons. If you have registered with the service provider yourself, the service provider also knows you. The processing of your personal data by the service provider is then the responsibility of the service provider according to their data protection regulations. The service provider only informs us how our respective website is used (no information about you personally). You can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link ("http://tools.google.com/dlpage/gaoptout"). Further information on Google Analytics and data protection can be found at "http://tools.google.com/dlpage/gaoptout" or "http://www.google.com/intl/de/analytics/privacyoverview.html"

14. How do we use social plugins?

On our websites, we use so-called plug-ins from social networks such as Instagram, Facebook, Twitter, Youtube, Google+ or Pinterest. This is always visible to you (typically via corresponding icons). We process your personal data partially automatically with the aim of evaluating certain personal aspects (profiling). We use profiling in particular to be able to inform and advise you specifically about products. We use evaluation tools that enable us to communicate and advertise according to your needs, including market and opinion research.
For the establishment and execution of the business relationship and otherwise, we generally do not use fully automated decision-making (as regulated, for example, in Art. 22 GDPR). Should we use such procedures in individual cases, we will inform you separately about this if legally required and inform you about the associated rights.


15. Payment security

The data exchanged between you and us is encrypted with a 256-bit SSL certificate. This corresponds to the standard used by banks for their online transactions. You can recognize this by our URL address which starts with https://, where 's' means secured. An icon in the form of a closed padlock will also appear.

16. Communication via email

You have the option to contact us by email. Your email address, the date, the content of your email and subject as well as the contact details you provide will be stored by us for the purpose of processing the inquiry and for the event of follow-up questions, as long as this is necessary to deal with your inquiry or we are legally obliged to do so. The use of emails is not technically secure; it may happen that emails are not delivered. When sending emails, they can leave national borders, even if the sender and recipient are in Switzerland. The confidentiality of emails cannot be guaranteed in the event of missing or insufficient encryption. Unencrypted emails are therefore not suitable for sending confidential information. By sending an email, you agree to communication via email, aware of the risks described.

17. Contact address for questions

Responsible party:
Snowflake Lifestyle AG
Allmendstrasse 153
8041 Zurich
Email: info@kaufhaus-ackerlo.shop
Tel.: +41 (0)44 342 11 44
Swiss supervisory authority:
Federal Data Protection and Information Commissioner, FDPIC Feldeggweg 1 3003 Bern Switzerland https://www.edoeb.admin.ch/edoeb/de/home.html

18. Topicality and amendment of this privacy policy

We may amend or adapt this privacy policy at any time. The current version published on our website applies. Insofar as the privacy policy is part of an agreement with you, we will inform you of any update by email or other suitable means.

Last updated: January 2024