Privacy policy of vmbshop.ch
To obtain information about the personal data, the purpose and the parties to whom this data is disclosed, contact the owner.
Provider and person responsible
VanMa Beauty GmbH
Stockenstrasse 47
8802 Kilchberg Switzerland
E-mail address of the provider: info@vmbcosmetics.com
Types of data collected
The owner does not provide a list of the personal data collected.
Full details of each type of personal data processed are provided in the dedicated sections of this Privacy Policy or selectively through explanatory texts displayed prior to data collection.
Personal data may be provided voluntarily by the user or, in the case of usage data, collected automatically when this application is used.
Unless otherwise specified, the provision of all data requested by this application is mandatory. If the User refuses to provide the Data, this Application may not be able to provide its services to the User. In cases where this Application expressly states that the provision of Personal Data is optional, Users may choose not to provide such Data without this having any consequences for the availability or functionality of the Service.
Users who are unclear about which personal data is mandatory can contact the provider.
Any use of Cookies - or other tracking tools - by this Application or third-party service providers used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.
Users are responsible for any third party personal data obtained, published or shared through this Application and confirm that they have obtained consent to the transfer of any third party personal data to this Application.
Type and place of data processing
Processing methods
The provider processes the user data in a proper manner and takes appropriate security measures to prevent unauthorized access and the unauthorized forwarding, modification or destruction of data.
Data processing is carried out using computers or IT-based systems in accordance with organizational procedures and practices that are specifically aimed at the stated purposes. In addition to the Data Controller, other parties may operate this Application and have access to the Data, either internally (human resources, sales, marketing, legal department, system administrators) or externally (such as providers of technical services, delivery companies, hosting providers, IT companies or communication agencies), appointed by the Data Controller as Data Processors where necessary. An up-to-date list of these parties can be requested from the provider at any time.
Legal basis of the processing
The provider may only process users' personal data if one of the following points applies:
Users have given their consent for one or more specific purposes. Note: In some jurisdictions, the provider may be permitted to process personal data until the user objects to such processing ("opt-out"), without having to rely on consent or any other of the following legal bases. However, this does not apply if the processing of personal data is subject to European data protection law;
the data collection is necessary for the fulfillment of a contract with the user and/or for pre-contractual measures;
the processing is necessary for compliance with a legal obligation to which the provider is subject;
the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider;
processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party.
In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.
Location
The data is processed at the provider's branch office and at all other locations where the offices involved in the data processing are located.
Depending on the user's location, data transfers may involve transferring the user's data to a country other than their own. To find out more about the place of processing of the transferred data, users can consult the section with detailed information on the processing of personal data.
Users also have the right to obtain information about the legal basis for the transfer of data to a country outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the UN, and about the security measures taken by the provider to protect their data.
If such a transfer takes place, the User can find out more by checking the relevant sections of this document or by contacting the Owner using the information provided in the contact section.
Storage duration
Personal data is processed and stored for as long as required for the purpose for which it was collected.
Therefore:
Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been completely fulfilled.
Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfill these purposes. Users can obtain more information about the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.
Furthermore, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.
After the retention period has expired, personal data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be asserted after the retention period has expired
The rights of users
Users may exercise certain rights in relation to their data processed by the provider.
In particular, users have the right to do the following:
Revoke your consent at any time. If the user has previously consented to the processing of personal data, they can withdraw their consent at any time.
object to the processing of their data. The user has the right to object to the processing of their data if the processing is carried out on a legal basis other than consent. Further information on this is provided below.
receive information about their data. The user has the right to know whether the data is being processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.
Have it checked and corrected. The user has the right to check the accuracy of his/her data and to request that it be updated or corrected.
Request restriction of the processing of your data. Users have the right to restrict the processing of their data under certain circumstances. In this case, the provider will not process the data for any purpose other than storage.
Request erasure or other removal of the personal data. Under certain circumstances, users have the right to demand that the provider delete their data.
Receive your data and have it transferred to another controller. The user has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision is applicable if the data is processed by automated means and the processing is based on the user's consent, on a contract to which the user is a party or on pre-contractual obligations.
Lodge a complaint. Users have the right to lodge a complaint with the competent supervisory authority.
Details on the right to object to processing
If personal data are processed in the public interest, in the exercise of an official authority vested in the provider or to protect the legitimate interests of the provider, the user may object to this processing by providing a justification relating to his or her particular situation.
Users are informed that they can object to the processing of their personal data for direct marketing purposes at any time without giving reasons. Users can find out whether the provider processes personal data for direct marketing purposes in the relevant sections of this document.
How the rights can be exercised
All requests to exercise user rights can be addressed to the provider using the contact details provided in this document. Requests can be exercised free of charge and will be processed by the provider as soon as possible, at the latest within one month.
Further information on the collection and processing of data
Legal measures
In addition to the information contained in this privacy policy, this Application may provide the User with additional contextual information concerning particular Services or the collection and processing of Personal Data upon request.
System logs and maintenance
This Application and third-party services may collect files for operation and maintenance purposes that record interaction with this Application (System logs) or use other Personal Data (e.g. IP Address) for this purpose.
Information not contained in this privacy policy
Further information on the collection or processing of personal data can be requested from the provider at any time using the contact details provided.
How "Do Not Track" requests are handled
This application does not support "Do Not Track" requests through web browsers.
Users can find information on whether integrated third-party services support the non-tracking protocol in the privacy policy of the respective service.
Changes to this privacy policy
The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. Users are therefore advised to visit this page regularly and in particular to check the date of the last change indicated at the bottom of the page.
If changes affect the use of data based on the user's consent, the provider will - if necessary - obtain new consent.
Last update: May 1, 2021
