Data protection
Under Article 13 of the Swiss Federal Constitution and the federal data protection legislation (Data Protection Act, DSG), everyone has the right to protection of their privacy and to protection against the misuse of their personal data. We comply with these provisions. Personal data is treated in strict confidence and is neither sold nor passed on to third parties. In close cooperation with our hosting providers, we endeavour to protect the databases as well as possible against unauthorised access, loss, misuse or falsification. When our web pages are accessed, the following data is stored in log files: IP address, date, time, browser request and general transmitted information about the operating system or browser. This usage data forms the basis for statistical, anonymous analyses, so that trends become apparent from which we can improve our offering accordingly.
Contacting us
When the provider is contacted (for example via the contact form or by email), the user's details are stored in order to process the enquiry and in case follow-up questions arise.
Comments and reviews
If users leave comments on the blog or other posts, their IP addresses are stored. This is done for the provider's security, in case someone writes unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In such a case the provider itself can be held liable for the comment or post and therefore has an interest in the identity of the author.
Integration of third-party services and content
It may happen that third-party content is embedded within this online offering, such as videos from YouTube, map material from Google Maps, RSS feeds or graphics from other websites. This always requires that the providers of this content (hereinafter referred to as “third-party providers”) are aware of the users' IP address. Without the IP address they would not be able to send the content to the browser of the respective user. The IP address is therefore necessary for this content to be displayed. We endeavour to use only content whose respective providers use the IP address solely to deliver the content. However, we have no influence over whether third-party providers store the IP address, for example for statistical purposes. Where this is known to us, we inform users about it.
Access data/ server log files
The provider (or its web space provider) collects data about every access to the offering (so-called server log files). The access data includes:
Name of the web page accessed, file, date and time of access, volume of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. The provider uses the log data only for statistical analyses for the purposes of operating, securing and optimising the offering. However, the provider reserves the right to check the log data subsequently if specific indications give rise to a justified suspicion of unlawful use.
Cookies privacy policy
Our website uses so-called cookies. These are small text files that are stored on your device with the help of the browser. They do no harm. We use cookies to make our offering user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognise your browser on your next visit. If you do not want this, you can set up your browser so that it informs you when cookies are set and you allow this only in individual cases. If cookies are deactivated, the functionality of our website may be limited.
Participation in affiliate partner programmes
Within our online offering we use industry-standard tracking measures on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering) pursuant to Art. 6 para. 1 lit. f GDPR, insofar as these are necessary for the operation of the affiliate system. Below we inform users about the technical background.
The services offered by our contractual partners may also be advertised and linked on other websites (so-called affiliate links or after-buy systems, for example where links or services of third parties are offered after a contract has been concluded). The operators of the respective websites receive a commission if users follow the affiliate links and subsequently take up the offers.
In summary, it is necessary for our online offering that we are able to track whether users who are interested in affiliate links and/or the offers available from us subsequently take up those offers as a result of the affiliate links or our online platform. For this purpose, the affiliate links and our offers are supplemented with certain values, which can be part of the link or set in another way, for example in a cookie. These values include in particular the source website (referrer), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, as well as tracking-specific values such as advertising medium ID, partner ID and categorisations.
The online identifiers of users that we use are pseudonymous values. This means that the online identifiers themselves contain no personal data such as names or email addresses. They only help us to determine whether the same user who clicked on an affiliate link or became interested in an offer through our online offering has taken up that offer, i.e. has for example concluded a contract with the provider. However, the online identifier is personal data insofar as the partner company and we ourselves have the online identifier together with other user data. Only in this way can the partner company tell us whether that user has taken up the offer and can we, for example, pay out the bonus.
Amazon partner programme
On the basis of our legitimate interests (i.e. interest in the economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR) we are a participant in the Amazon EU partner programme, which was designed to provide a medium for websites by means of which advertising cost reimbursement can be earned through the placement of advertisements and links to Amazon.de (so-called affiliate system). Amazon uses cookies in order to be able to trace the origin of orders. Among other things, Amazon can recognise that you clicked the partner link on this website and subsequently purchased a product from Amazon.
Further information on the use of data by Amazon and on options for objecting can be found in the company's privacy policy: http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
Privacy policy for the use of Facebook plugins (Like button)
Plugins of the Facebook social network, 1601 South California Avenue, Palo Alto, CA 94304, USA, are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the “Like button” on our page. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our page with your IP address. If you click the Facebook “Like button” while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We point out that, as the provider of the pages, we receive no knowledge of the content of the transmitted data or of its use by Facebook. Further information on this can be found in the privacy policy of facebook at https://www.facebook.com/about/privacy/
If you do not want Facebook to be able to associate the visit to our pages with your Facebook user account, please log out of your Facebook user account.
Privacy policy for the use of the Facebook pixel
On our website we use a so-called tracking pixel from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA. We use the Facebook pixel in order to track the success of our own Facebook advertising campaigns and to optimise the delivery of Facebook advertising campaigns to interested target groups.
After a click on a Facebook advertisement, or when you visit our website, a cookie is stored on your device by means of the pixel on our website. The cookie processes data about whether you reached our website via a Facebook advertisement and makes it possible to analyse the user's behaviour through to the completion of a purchase. This allows us to track the success rate of our Facebook advertising campaigns. In addition, the pixel processes data about the fact that you have visited our website and makes it possible to tailor the advertising shown on Facebook to your interests.
The Facebook pixel integrated on our website establishes a direct connection to Facebook's servers when our website is visited. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook in the USA. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection by means of the EU standard contractual clauses. You can obtain a copy of the contractual clauses here: https://www.facebook.com/legal/EU_data_transfer_addendum
The data collected is anonymous for us and does not allow us to draw any conclusions about the user. If you are registered with Facebook, Facebook can associate the recorded information with your account. Even if you do not have a Facebook account, or are not logged in when visiting our website, it is possible for Facebook to process and store your IP address and further identifying data.
The legal basis for the data processing is your consent pursuant to Art. 6 para. 1 a) GDPR.
You can withdraw your consent to data processing by the Facebook pixel for our web domain at any time with effect for the future by adjusting your preferences in our cookie settings. You can also prevent cookies from being set by adjusting the corresponding settings in your Facebook account at https://www.facebook.com/settings?tab=ads.
Privacy policy for the use of Twitter
Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. By using Twitter and the “Re-Tweet” function, the web pages you visit are linked to your Twitter account and made known to other users. In doing so, data such as IP address, browser type, domains accessed, pages visited, mobile network operator, device and application IDs and search terms is transmitted to Twitter, among other things.
We point out that, as the provider of the pages, we receive no knowledge of the content of the transmitted data or of its use by Twitter. Because Twitter's privacy policy is updated on an ongoing basis, we refer to the most recent version at (http://twitter.com/privacy).
You can change your privacy settings on Twitter in the account settings at http://twitter.com/account/settings. If you have any questions, please contact privacy@twitter.com.
Privacy policy for the use of Google Adsense
This website uses Google AdSense, a service for integrating advertisements from Google Inc. (“Google”). Google AdSense uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons make it possible to evaluate information such as visitor traffic on these pages.
The information generated by cookies and web beacons about the use of this website (including your IP address) and about the delivery of advertising formats is transferred to a Google server in the USA and stored there. This information may be passed on by Google to Google's contractual partners. However, Google will not combine your IP address with other data stored by you.
You can prevent the installation of cookies by adjusting your browser software accordingly; we point out, however, that in this case you may not be able to use all functions of this website to their full extent. By using this website you consent to the processing of the data collected about you by Google in the manner described above and for the purpose stated above.
Privacy policy for the use of Klaviyo
Our email newsletters are sent via the technical service provider “Klaviyo”, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to which we pass on the data you provide when registering for the newsletter. This transfer takes place pursuant to Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the USA and stored there.
Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them itself or to pass it on to third parties.
To protect your data in the USA, we have concluded a data processing agreement (“Data Processing Agreement”) with Klaviyo, in which Klaviyo undertakes to protect our users' data, to process it on our behalf in accordance with its data protection provisions and in particular not to pass it on to third parties.
You can view Klaviyo's data protection provisions here: https://www.klaviyo.com/privacy
Privacy policy for the use of Hotjar
We use Hotjar in order to better understand our users' needs and to optimise this service and their experience. Hotjar is a technology service that helps us to better understand our users' experience (e.g. how much time they spend on which pages, which links they click, what users like and dislike, etc.), and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data about our users' behaviour and their devices. This includes a device's IP address (processed during your session and stored in anonymised form), the device's screen size, the device type (unique device identifiers), browser information, geographic location (country only) and the preferred language for displaying our website. Hotjar stores this information in a pseudonymised user profile on our behalf. Hotjar is contractually obliged not to sell any of the data collected on our behalf. Further information can be found in the “About Hotjar” section on Hotjar's support page. https://help.hotjar.com/hc/en-us/sections/115003204947
Privacy policy for the use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide further services connected with the use of the website and of the internet. Google may also transfer this information to third parties where this is required by law or insofar as third parties process this data on Google's behalf. The IP address transmitted by your browser within the scope of Google Analytics will not be combined with other Google data.
You can prevent the installation of cookies by adjusting your browser software accordingly; we point out, however, that in this case you may not be able to use all functions of this website to their full extent. By using this website you consent to the processing of the data collected about you by Google in the manner described above and for the purpose stated above.
Privacy policy for the use of Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any analyses of its own. It merely serves to manage and deliver the tools integrated through it. However, Google Tag Manager does record your IP address, which can also be transferred to Google's parent company in the United States.
Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. Where corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be withdrawn at any time.
Privacy policy for the use of Google +1
With the help of the Google +1 button you can publish information worldwide. Via the Google +1 button, you and other users receive personalised content from Google and its partners. Google stores both the information that you gave +1 to a piece of content and information about the page you were viewing when you clicked +1. Your +1s can be displayed as notices together with your profile name and your photo in Google services, such as in search results or in your Google profile, or in other places on websites and advertisements on the internet.
Google records information about your +1 activities in order to improve the Google services for you and for others.
In order to use the Google +1 button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used in all Google services. In some cases this name may also replace another name that you have used when sharing content via your Google account. The identity of your Google profile may be shown to users who know your email address or who have other identifying information about you.
In addition to the purposes explained above, the information you provide is used in accordance with the applicable Google data protection provisions (http://www.google.com/intl/de/policies/privacy/). Google may publish aggregated statistics about users' +1 activities or pass these statistics on to our users and partners, such as publishers, advertisers or affiliated websites.
Privacy policy for the use of Microsoft Clarity
On our website we use Microsoft Clarity, an analytics service provided by Microsoft Corporation, USA, and affiliated companies. We use it to examine how visitors use our website, in order to improve usability, our offering and our advertising and to detect technical problems.
Among other things, Clarity records pages visited, clicks, scrolling and mouse movements, the duration of the visit as well as technical details about the browser and device. The IP address is used to determine the approximate location. From this data Clarity creates aggregated representations of usage behaviour, so-called heatmaps, and replays of individual website visits, so-called session recordings. Content displayed on the website may form part of these recordings. According to Microsoft, the contents of input fields and selection lists are masked. Complete masking of all page text does not take place.
In addition, we transmit certain shop actions, for example searches, basket actions and completed purchases, as well as the order value and the currency in the case of purchases. Pseudonymous user and session identifiers may be used to match this with our Google Analytics analyses. The connections with Google Analytics and Google Ads support the analysis of our website and advertising activities.
Clarity uses cookies and similar technologies. These include in particular “_clck” for recognising a browser and “_clsk” for grouping several page views into one session. Microsoft may use further cookies for analytics, advertising and operational purposes. The data is not necessarily anonymous, as identifiers make it possible to recognise and link activities.
The data collected is transmitted to Microsoft and may also be processed outside Switzerland, in particular in the USA. Microsoft also processes data for its own purposes, in particular to provide and improve its services and for Microsoft Advertising. Microsoft may also use non-personal data for research and development. Further information is contained in the Microsoft privacy statement.
According to current Microsoft documentation, session recordings are generally retained for 30 days. Flagged sessions or sessions saved as favourites, as well as heatmap and click data, are retained for up to nine months. Information on retention
You can block or delete cookies via your browser settings. However, this does not necessarily prevent every collection of usage data. As a means of objecting to Clarity telemetry, Microsoft names the selection of Microsoft via the Digital Advertising Alliance and supports the browser signal Global Privacy Control. Further information can be found in the Clarity privacy information.
Privacy policy for the use of TikTok
On our website we use the TikTok pixel. The TikTok pixel is a TikTok advertiser tool from the two providers TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (together “TikTok”). The TikTok pixel is a snippet of JavaScript code that enables us to understand and track the activities of visitors on our website. For this purpose, the TikTok pixel collects and processes information about the visitors to our website or about the devices they use. The data collected via the TikTok pixel is used for the targeting of our advertisements, for improving ad delivery and for personalised advertising. For this purpose, the data collected on our website by means of the TikTok pixel is transmitted to TikTok. Some of this data is information that is stored on the device you use. In addition, cookies are also used via the TikTok pixel, by means of which information is stored on the device you use. Such storage of information by the TikTok pixel, or access to information that is already stored on your device, only takes place with your consent. Further information on how TikTok processes personal data, including the legal basis on which TikTok relies and the options for exercising your rights vis-à-vis TikTok, can be found in TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE.
Privacy policy for the use of ManyChat
On our website we use ManyChat Pixel, a mobile marketing platform.
The service provider is the American company ManyChat Inc. 535 Everett Avenue, Apartment 312, Palo Alto, CA 94301, USA.
ManyChat also processes data about you in the USA, among other places. We point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the lawfulness and security of the data processing.
As the basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for a transfer of data to such countries, ManyChat uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard contractual clauses (Standard Contractual Clauses - SCC) are model templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when it is transferred to third countries (such as the USA) and stored there. Through these clauses ManyChat undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
You can find more information about the standard contractual clauses and about the data processed through the use of ManyChat in the Privacy Policy at https://manychat.com/privacy.html.
Privacy policy for the Mobile Services of Amazing Enterprise AG
The Amazing Enterprise AG mobile messaging services (hereinafter the “Service”) are operated by Amazing Enterprise AG (“Amazing Enterprise AG”, “we” or “us”). Use of the Service requires acceptance of these general terms and conditions (“Mobile Terms”).
We reserve the right to change or discontinue the Service or individual functions at any time without prior notice. To the extent permitted by law, we may also amend these Mobile Terms at any time. Continued use of the Service after such changes take effect is deemed to be acceptance of the amended terms.
By agreeing to the SMS/text message services of Amazing Enterprise AG, you consent to receiving recurring SMS/text messages from and on behalf of Amazing Enterprise AG at the mobile number you have provided, even if your number is registered on a state or national “do not call” list. Text messages may be sent using an automatic dialling system or other technologies. Messages may contain information such as updates, notifications and other service-related content (e.g. order or account notifications) as well as promotional content such as promotions and marketing offers (e.g. basket reminders).
Voluntary participation and costs You understand that participation in this programme is voluntary and is not a condition for making a purchase from Amazing Enterprise AG. There are no direct costs for the Service; however, you are responsible for all fees and charges that your mobile provider levies in connection with text messages. Message frequency may vary. SMS and data rates from your mobile provider may apply. For further information, please refer to your mobile phone contract or contact your provider.
Unsubscribing You can cancel the Service at any time by sending the keyword “STOP” to AMAZINGTOYS® or by clicking the unsubscribe link (if available) in a text message. After unsubscribing you will receive a confirmation message and no further messages will be sent to your mobile device unless they are initiated by you. If you participate in several mobile programmes of Amazing Enterprise AG, you must, unless otherwise provided by law, unsubscribe from each programme separately by following the instructions in the respective Mobile Terms.
Customer support For support or questions, send the keyword “HELP” to AMAZINGTOYS® or write an email to service@amazingtoys.ch.
Changes and liability We reserve the right to change the short codes or telephone numbers used for the Service at any time and to inform you of such changes. Messages sent to a changed number or short code may under certain circumstances not be received, and we accept no responsibility for such cases. The mobile providers that support the Service are not liable for delayed or undelivered messages. You undertake to provide us with a valid mobile number. If you obtain a new mobile number, you must register for the Service again with the new number.
To the extent permitted by law, we are not liable for failed, delayed or misdirected deliveries of information, for any errors in the information sent, or for actions that you take or refrain from taking on the basis of the information provided or of the Service.
Payments
We use specialised service providers in order to be able to process our customers' payments securely and reliably. The legal texts of the individual service providers, such as general terms and conditions (GTC) or privacy policies, apply in addition to the processing of payments.
We use in particular:
- PayPal: Processing of payments; providers: PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) / PayPal Pte. Ltd. (Singapore); data protection information: privacy policy https://www.paypal.com/ch/webapps/mpp/ua/privacy-full?locale.x=de_CH, “Statement on cookies and tracking technologies” https://www.paypal.com/ch/webapps/mpp/ua/cookie-full?locale.x=de_CH.
- Payrexx: Processing of payments; provider: Payrexx AG (Switzerland); data protection information: “Policies” including privacy policy https://www.payrexx.com/de/rechtliches/.
- Stripe: Processing of payments; providers: Stripe Inc. (USA) / Stripe Payments Europe Limited (SPEL, Ireland) for users in the European Economic Area (EEA) and in Switzerland as well as partly in the United Kingdom / Stripe Payments UK Limited (United Kingdom) and Stripe Capital Europe Limited (Ireland) partly for users in the United Kingdom; data protection information: “Stripe Privacy Center” https://stripe.com/de-ch/legal/privacy-center, privacy policy https://stripe.com/de-ch/privacy, cookie policy https://stripe.com/de-ch/legal/cookies-policy.
- TWINT: Processing of payments in Switzerland; provider: TWINT AG (Switzerland); data protection information: privacy policy https://www.twint.ch/datenschutz/, “Security to Swiss standards” https://www.twint.ch/privatkunden/support/sicherheit/.
- Invoice: Processing of payments in Switzerland; provider: CembraPay AG (Switzerland); data protection information: privacy policy https://cembrapay.ch/de/privacy, “Data protection information on the credit check” https://cembrapay.ch/de/creditcheck.
Extensions for the website
We use extensions for our website in order to be able to use additional functions.
We use in particular:
Google reCAPTCHA: Spam protection (distinguishing between desired comments from humans and unwanted comments from bots as well as spam); provider: Google; Google reCAPTCHA-specific information: “What is reCAPTCHA?” https://developers.google.com/recaptcha?hl=de.
Data security
We take appropriate technical and organisational measures in order to achieve a level of security appropriate to the risk. However, it is not possible for us to guarantee complete security of the data.
Access to our website is secured by transport encryption implemented by SSL/TLS protocols, in particular HTTPS. In most web browsers this is indicated by a padlock symbol in the address bar.
As with any digital communication, our digital communication is also subject to mass surveillance by security authorities, without any specific occasion or suspicion, both in Switzerland, in the rest of Europe, in the USA and in other countries. We have no direct influence on how intelligence services, police authorities and other security bodies process personal data.
Video surveillance
We use video surveillance to prevent criminal offences and to secure evidence in the case of criminal offences, as well as to exercise our domiciliary rights. Insofar as and to the extent that the General Data Protection Regulation (GDPR) is applicable, these are overriding legitimate interests pursuant to [Art. 6 para. 1 lit. f GDPR](https://steigerlegal.ch/dsgvo/dsgvo-6/).
We store recordings from our video surveillance for as long as they are required for securing evidence.
We may secure recordings on the basis of legal obligations, in order to enforce our own legal claims and where criminal offences are suspected, and transmit them to the competent bodies, in particular to judicial or law enforcement authorities.
Your rights
In principle you have the rights to information, rectification, erasure, restriction, data portability, withdrawal and objection. If you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been violated in some way, you can lodge a complaint with the supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).
Withdrawal, changes, corrections and updates
Users have the right to receive information free of charge upon request about the personal data that has been stored about them. In addition, users have the right to rectification of incorrect data and to blocking and erasure of their personal data, provided that no statutory retention obligation precludes this.