PRIVACY POLICY

PRIVACY POLICY

1. Responsible Party for Data Processing

The party responsible for data processing in accordance with the data protection laws, particularly the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DPA), is:

ELHO AG
Executive Chairman: Donald Schneider
Email: customercare@elhofreestyle.com

 

2. Collection and Storage of Personal Data as well as the Purpose of Processing

When visiting our website, we collect the following data that is technically necessary to display our website and ensure stability and security:

  • IP address,
  • Date and time of the request,
  • Browser type and version,
  • Operating system used,
  • Referrer URL.

For Order Processing
We collect the following personal data necessary for processing your order:

  • Name,
  • Delivery address,
  • Email address,
  • Phone number.

Payment
Payment processing is handled by our service provider Shopify. ELHO AG does not receive any payment data (e.g., credit card numbers) as this is processed directly by Shopify.

For Marketing and Customer Service Purposes
With your consent, we also use your data to inform you about similar products or offers and to respond to customer inquiries. For newsletter distribution, we use the double opt-in method.

 

3. Legal Basis for Processing

  • Contract performance in accordance with Art. 6 para. 1 lit. b GDPR and Art. 31 DPA for processing your order.

  • Consent in accordance with Art. 6 para. 1 lit. a GDPR and Art. 31 DPA for marketing and newsletter purposes.

 

4. Data Sharing with Third Parties

Your data will only be shared with third parties to the extent necessary for the fulfillment of the contract or to meet legal obligations:

  • Payment service provider: Shopify
  • Shipping service providers: DHL, DHL International, Post CH
  • Warehousing service provider: Scherrer AG

  • Marketing service providers: META, Alphabet

 

5. Transfer to Third Countries

As a company based in Switzerland, we process your data in accordance with the requirements of the Swiss Data Protection Act (DPA). A transfer of personal data to countries outside the EU/Switzerland only occurs if necessary for contract performance or based on consent. In this case, it is ensured that an adequate level of data protection is maintained, either through the EU's adequacy decision for Switzerland or through standard contractual clauses.

 

6. Storage Duration

Personal data will be stored in accordance with the statutory retention periods in Switzerland and the EU. After these periods have expired, the data will be deleted unless they are no longer required for contract performance.

 

7. Rights of the Data Subjects

According to the GDPR and DPA, you have the following rights:

  • To request information about your processed personal data (Art. 15 GDPR and Art. 25 DPA),
  • To request the immediate correction of inaccurate or incomplete personal data (Art. 16 GDPR and Art. 32 DPA),
  • To request the deletion of your stored personal data (Art. 17 GDPR and Art. 32 DPA),
  • To request the restriction of processing your personal data (Art. 18 GDPR and Art. 32 DPA),
  • To receive your personal data in a structured, commonly used, and machine-readable format or to request the transfer to another controller (Art. 20 GDPR and Art. 28 DPA),

  • To lodge a complaint with a supervisory authority (Art. 77 GDPR and Art. 49 DPA).

 

8. Cookies & Tracking Tools

We use cookies and tracking tools such as Google Analytics, Meta Pixel, and Reaktion to analyze and improve the use of our website. You can consent to the use of cookies via our consent tool or refuse them. The processing is carried out in accordance with the GDPR and DPA.

 

9. Newsletter

To receive our newsletter, we require your consent, which is obtained through the double opt-in procedure in accordance with the GDPR and DPA. You can unsubscribe from the newsletter at any time.

 

10. Changes to the Privacy Policy

We reserve the right to adjust this privacy policy as necessary to comply with changed legal regulations in accordance with the GDPR and DPA or new services. The current version will be published on our website. In the event of significant changes, we will inform you via email or through a notice on our website.