Privacy policy

Privacy Policy

In this privacy policy, we aim to inform you about which personal data we process as part of our operations, especially via our online shop Maison Elbaz, for what purposes, how, and where we process this data. We also want to inform you about the rights of individuals whose data we process.

Additional privacy policies and legal documents such as Terms and Conditions (T&Cs), Terms of Use, or Participation Conditions may apply to specific activities.

We are subject to Swiss data protection law and, where applicable, foreign data protection law, particularly the EU General Data Protection Regulation (GDPR). The European Commission has confirmed that Swiss data protection law provides adequate protection.

1. Contact

Responsible for data processing:

Maison Elbaz
Wülflingerstrasse 307
8408 Winterthur
Switzerland
info@maisonelbaz.com

We will inform you if other entities are responsible for specific data processing activities.

2. Type, Scope, and Purpose

We process the personal data necessary to conduct our operations in a reliable, user-friendly, secure, and consistent manner. This may include the following categories: account and contact data, browser and device data, content data, metadata and usage data, location data, sales data, and contract and payment data.

We retain personal data only as long as necessary for the stated purposes or as legally required. Data that is no longer needed is deleted.

We may have personal data processed by third parties or jointly with third parties, or we may transfer data to them. These third parties are typically specialized service providers. We ensure that data protection is upheld in all such cases.

We only process personal data with the consent of the individual concerned.

This includes information voluntarily submitted by individuals when contacting us (e.g., via mail, email, instant messaging, contact forms, social media, or telephone) or when registering for a user account. This information may be stored in address books, CRM systems, or similar tools. If personal data about third parties is shared with us, the party providing it is responsible for ensuring data accuracy and compliance with privacy laws.

3. Definitions and Legal Basis

3.1 Definitions

  • Personal data: Any information relating to an identified or identifiable natural person.

  • Data subject: A person whose personal data is processed.

  • Processing: Any operation involving personal data, including but not limited to querying, adjusting, storing, retrieving, disclosing, deleting, linking, or using data.

  • Consent: Express and active agreement from the data subject to process their data. Consent must meet several requirements to be valid.

The European Economic Area (EEA) includes EU member states, Liechtenstein, Iceland, and Norway. Under the GDPR, personal data processing refers to handling any data related to a person.

3.2 Legal Basis

We process personal data in accordance with Swiss law, including the Swiss Data Protection Act (DSG) and the Data Protection Ordinance (DSV).

If the GDPR applies, we base our processing on the following legal grounds:

  • Art. 6 GDPR – Processing is necessary for the performance of a contract or pre-contractual measures.

  • Art. 6(1)(a) GDPR – Processing based on the data subject’s consent.

  • Art. 6(1)(c) GDPR – Processing to fulfill a legal obligation.

  • Art. 6(1)(d) GDPR – Processing to protect vital interests of the data subject or another person.

  • Art. 6(1)(e) GDPR – Processing in the public interest.

  • Art. 6(1)(f) GDPR – Processing based on legitimate interests, provided these are not overridden by the rights and freedoms of the data subject. Legitimate interests may include providing and communicating our services securely and reliably, safeguarding information security, preventing abuse, enforcing legal claims, and complying with Swiss law.

4. Processing Data on Social Media Platforms

We currently use the following platforms, whose privacy policies apply:

5. Data on Individuals Abroad

We primarily process personal data in Switzerland and the EEA. However, data may be transferred to or processed in other countries.

We may transfer data to any country or territory worldwide (or even in space), provided the destination country offers adequate data protection as determined by the Swiss Federal Council or, if applicable, by the European Commission under the GDPR.

6. Contacting Us

When you contact us (e.g., via contact form or email), we collect personal data. The data collected is visible in the respective form. It is used solely for responding to your inquiry and the associated technical processing. Once your request is completed, the data will be deleted unless legal retention requirements apply.

7. Data Processing When Opening a Customer Account or Fulfilling a Contract

We collect and process personal data when you provide it to us for contract performance or account creation. The data required is shown in the respective form. You may delete your account at any time by notifying us. We use the data solely for contract fulfillment.

Once the contract is fully processed or your account is deleted, your data will be blocked for further use and deleted after any required legal retention period (e.g., tax or commercial law) unless you consent to further use or legally permitted processing applies, which will be disclosed accordingly.

8. Rights of Data Subjects

8.1 Data Protection Rights

We provide all rights under applicable data protection law. In particular, individuals have the following rights:

  • Right of access: To know whether we process personal data about them, and if so, which data. This includes information required to exercise data protection rights and ensure transparency—such as the purpose of processing, retention periods, potential data transfers, and data origin.

  • Right to rectification and restriction: To correct inaccurate personal data or restrict its processing.

  • Right to erasure and objection:
    Data subjects have the right to request the deletion of their personal data (“right to be forgotten”) and to object to the processing of their data, particularly for direct marketing purposes.

    Right to data portability:
    Data subjects may request that personal data provided to us be delivered in a structured, commonly used, and machine-readable format, and that this data be transferred to another controller, if technically feasible.

    Right to withdraw consent:
    If data processing is based on the data subject’s consent, they have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.

    Right to lodge a complaint:
    Data subjects have the right to lodge a complaint with a competent supervisory authority if they believe that the processing of their personal data violates applicable data protection laws.

    9. Data Security

    We implement appropriate technical and organizational security measures to protect your personal data against manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

    10. Use of Cookies and Tracking Technologies

    Our website may use cookies and similar technologies to enhance user experience, analyze website usage, and offer personalized content or advertising. You can manage cookie preferences via your browser settings.

    More detailed information on the use of cookies can be found in our separate Cookie Policy, if applicable.

    11. Changes to This Privacy Policy

    We may update this privacy policy at any time without prior notice. The current version published on our website shall apply. Where appropriate, we will inform you of changes by email or through our website.

    12. Contact for Data Protection Inquiries

    For questions or concerns regarding this privacy policy or the processing of your personal data, please contact:

    Maison Elbaz
    Wülflingerstrasse 307
    8408 Winterthur
    Switzerland
    info@maisonelbaz.com