With this privacy policy, we inform you about the personal data we process in connection with our activities, including our yce-fashion.com website. In particular, we inform you about what personal data we process, for what purpose, how, and where. We also provide information about the rights of individuals whose data we process.
Additional privacy policies and other legal documents such as general terms and conditions (GTC), terms of use, or conditions of participation may apply to individual or additional activities.
We are subject to Swiss data protection law and any applicable foreign data protection law, such as that of the European Union (EU) with the General Data Protection Regulation (GDPR). The European Commission recognizes that Swiss data protection law ensures adequate data protection.
1 CONTACT
Responsible
y.c.e FASHION
info@yce-fashion.com
We will indicate if there are other controllers for the processing of personal data in individual cases.
2 TERMS AND LEGAL BASES
2.1 Terms
Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed.
Processing includes any handling of personal data, regardless of the means and procedures used, in particular the retention, disclosure, procurement, collection, storage, alteration, destruction, and use of personal data.
The European Economic Area (EEA) comprises the member states of the European Union (EU) as well as the Principality of Liechtenstein, Iceland, and Norway. The General Data Protection Regulation (GDPR) refers to the processing of personal data as the processing of personal data.
2.2 Legal bases
We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (OFADP).
We process personal data – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – in accordance with at least one of the following legal bases:
- Art. 6 para. 1 lit. b GDPR for the necessary processing of personal data for the performance of a contract with the data subject and for the implementation of pre-contractual measures.
- Art. 6 para. 1 lit. f GDPR for the necessary processing of personal data to protect our or third parties’ legitimate interests, unless the fundamental freedoms and rights and interests of the data subject override them. Legitimate interests include, in particular, our interest in being able to carry out our activities and operations permanently, user-friendly, securely, and reliably, and to communicate about them, ensuring information security, protection against misuse, the enforcement of our own legal claims, and compliance with Swiss law.
- Art. 6 para. 1 lit. c GDPR for the necessary processing of personal data to fulfill a legal obligation to which we are subject under applicable law of Member States in the European Economic Area (EEA).
- Art. 6 para. 1 lit. e GDPR for the necessary processing of personal data for the performance of a task carried out in the public interest.
- Art. 6 para. 1 lit. a GDPR for the processing of personal data with the consent of the data subject.
- Art. 6 para. 1 lit. d GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another natural person.
3 TYPE, SCOPE, AND PURPOSE
We process the personal data that is necessary to be able to exercise our activities in a permanent, user-friendly, secure, and reliable manner. Such personal data may fall in particular into the categories of inventory and contact data, browser and device data, content data, meta or marginal data and usage data, location data, sales data, and contract and payment data.
We process personal data for the duration necessary for the respective purpose(s) or required by law. Personal data that is no longer required to be processed will be anonymized or deleted.
We may have personal data processed by third parties. We may process personal data jointly with third parties or transfer it to third parties. Such third parties are, in particular, specialized providers whose services we use. We also ensure data protection with such third parties.
We only process personal data after the data subject has given consent, unless processing is permitted for other legal reasons. Processing without consent may be permitted, for example, to fulfill a contract with the data subject and for corresponding pre-contractual measures, to protect our overriding legitimate interests, because the processing is evident from the circumstances or after prior information.
In this context, we process in particular information that a data subject voluntarily transmits to us when contacting us – for example, by postal mail, e-mail, instant messaging, contact form, social media, or telephone – or when registering for a user account. We may store such information, for example, in an address book, in a customer relationship management system (CRM system), or with comparable tools. If we receive data transmitted about other persons, the transmitting persons are obliged to ensure data protection vis-à -vis these persons and to ensure the accuracy of this personal data.
We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect in the course of our activities, provided and to the extent that such processing is permitted for legal reasons.
4 APPLICATIONS
We process personal data about applicants to the extent that it is necessary for assessing their suitability for an employment relationship or for the subsequent execution of an employment contract. The required personal data results in particular from the information requested, for example in the context of a job advertisement. We also process the personal data that applicants voluntarily provide or publish, in particular as part of cover letters, resumes and other application documents, as well as online profiles.
We process – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – personal data about applicants in particular in accordance with Art. 9 para. 2 lit. b GDPR.
5 PERSONAL DATA ABROAD
We process personal data primarily in Switzerland and in the European Economic Area (EEA). However, we may also export or transfer personal data to other countries, in particular in order to process it there or have it processed.
We may export personal data worldwide, provided that the local law, as assessed by the Federal Data Protection and Information Commissioner (FDPIC) or in accordance with a decision of the Swiss Federal Council , ensures adequate data protection and – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – in accordance with a decision of the European Commission ensures adequate data protection.
6 RIGHTS OF DATA SUBJECTS
Data subjects about whom we process personal data have the rights under Swiss data protection law. These include the right to information and the right to rectification, erasure, or blocking of the processed personal data.
Data subjects whose personal data we process may – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – request free confirmation as to whether we are processing personal data relating to them. If this is the case, data subjects may request information about the processing of their personal data, restrict the processing of their personal data, exercise their right to data portability, and have their personal data rectified, erased («right to be forgotten»), blocked, or completed.
Data subjects whose personal data we process may – if and to the extent that the GDPR is applicable – withdraw their consent at any time with effect for the future and object to the processing of their personal data at any time.
Data subjects about whom we process personal data have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
7 DATA SECURITY
We take appropriate technical and organizational measures to ensure data security appropriate to the respective risk. However, we cannot guarantee absolute data security.
Access to our website is via transport encryption (SSL / TLS, in particular with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers indicate transport encryption with a padlock in the address bar.
Our digital communication is subject – like any digital communication – to mass surveillance without cause or suspicion, as well as other surveillance by security authorities in Switzerland, the rest of Europe, the United States of America (USA), and other countries. We cannot directly influence the corresponding processing of personal data by intelligence agencies, police departments, and other security authorities.
8 USE OF THE WEBSITE
8.1 Cookies
Details
We use cookies to enable and improve the use of our online store.
– Necessary cookies: e.g. for shopping cart and login (WooCommerce) or payment processing (Stripe, PayPal). Without these cookies, the website does not work.
– Preference cookies: store settings such as language or region.
– Statistics cookies: e.g. Google Analytics. These help us to better understand the use of the website. They are only set with your consent.
– Marketing cookies: e.g. Google Ads, Facebook Pixel or social media platforms. These are used to show you relevant advertising.
You can manage and revoke your cookie settings at any time via our consent tool or in your browser settings.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
Microsoft Clarity
We improve our products and advertising by using Microsoft Clarity to see how our website is used. By using our website, you agree that we and Microsoft may collect and use this data.
Performance
Performance cookies are used to understand and analyze the key performance indicators of the website, which helps to provide visitors with a better user experience.
Advertising
Advertising cookies are used to show visitors personalized ads based on the pages you have previously visited and to analyze the effectiveness of advertising campaigns.
For cookies that are used for success and reach measurement or for advertising, a general objection («opt-out») is possible for numerous services via AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
8.2 Server log files
We may collect the following information for each access to our website, provided that it is transmitted by your browser to our server infrastructure or can be determined by our web server: date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, accessed individual sub-page of our website including transmitted data volume, last accessed website in the same browser window (referer or referrer).
We store such information, which may also constitute personal data, in server log files. The information is necessary to be able to provide our website permanently, user-friendly and reliably, as well as to ensure data security and thus in particular the protection of personal data – also by third parties or with the help of third parties.
8.3 Tracking pixels
We may use tracking pixels on our website. Tracking pixels are also known as web beacons. Tracking pixels – also from third parties whose services we use – are small, usually invisible images that are automatically retrieved when you visit our website. Tracking pixels can be used to collect the same information as in server log files.
9 NOTIFICATIONS AND COMMUNICATIONS
We send notifications and communications by e-mail and via other communication channels such as instant messaging or SMS.
9.1 Success and reach measurement
Notifications and communications may contain web links or tracking pixels that record whether an individual message has been opened and which web links have been clicked on. Such web links and tracking pixels can also record the use of notifications and communications on a personal basis. We need this statistical collection of usage for success and reach measurement in order to be able to send notifications and communications effectively and user-friendly as well as permanently, securely, and reliably based on the needs and reading habits of the recipients.
9.2 Consent and objection
You must generally expressly consent to the use of your e-mail address and your other contact addresses, unless the use is permitted for other legal reasons. If possible, we use the «double opt-in» procedure for any consent, i.e. you will receive an e-mail with a web link that you must click to confirm that no misuse by unauthorized third parties can occur. We may log such consents, including Internet Protocol (IP) address, date, and time, for evidentiary and security reasons.
You can generally object to receiving notifications and communications such as newsletters at any time. With such an objection, you can simultaneously object to the statistical collection of usage for success and reach measurement. Required notifications and communications in connection with our activities remain reserved.
10 SOCIAL MEDIA
We are present on the following platforms:
– Facebook (Meta Platforms Ireland Ltd.)
– Instagram (Meta Platforms Ireland Ltd.)
– TikTok (TikTok Technology Limited, Ireland / TikTok Inc., USA)
– Pinterest (Pinterest Europe Ltd.)
We are present on social media platforms and other online platforms in order to communicate with interested parties and to provide information about our activities. In connection with such platforms, personal data may also be processed outside of Switzerland and the European Economic Area (EEA).
The general terms and conditions (GTC) and terms of use as well as data protection declarations and other provisions of the individual operators of such platforms also apply. These provisions provide information in particular about the rights of data subjects directly vis-Ã -vis the respective platform, which includes, for example, the right to information.
For our social media presence on Facebook, including the so-called Page Insights, we are – insofar as the General Data Protection Regulation (GDPR) is applicable – jointly responsible with Meta Platforms Ireland Limited (Ireland). Meta Platforms Ireland Limited is part of the Meta companies (including in the USA). The Page Insights provide information about how visitors interact with our Facebook presence. We use Page Insights to effectively and user-friendly provide our social media presence on Facebook.
Further information about the type, scope and purpose of data processing, information on the rights of data subjects and the contact details of Facebook as well as Facebook’s data protection officer can be found in the Facebook Privacy Policy. We have concluded the so-called «Addendum for Controllers» with Facebook and have thus agreed, in particular, that Facebook is responsible for ensuring the rights of data subjects. For the so-called Page Insights, the corresponding information can be found on the page «Information about Page Insights» including «Information about Page Insights data».
11 THIRD-PARTY SERVICES
We use services from specialized third parties to be able to perform our activities and operations permanently, user-friendly, securely and reliably. With such services, we can, among other things, embed functions and content into our website. With such embedding, the services used collect, for technically compelling reasons, at least temporarily the Internet Protocol (IP) addresses of the users.
For necessary security-related, statistical and technical purposes, third parties whose services we use may process data in connection with our activities and operations in aggregated, anonymized or pseudonymized form. This includes, for example, performance or usage data in order to be able to offer the respective service.
We use in particular:
- Google services: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) for users in the European Economic Area (EEA) and in Switzerland; General information on data protection: «Principles on data protection and security», Privacy Policy, «Google is committed to complying with applicable data protection laws», «Guide to data protection in Google products», «How we use data from websites or apps on which our services are used» (information from Google), «Types of cookies and other technologies used by Google», «Personalized advertising» (activation / deactivation / settings).
- Chatway chatbox feature: Privacy Policy
11.1 Digital Infrastructure
We use services from specialized third parties to be able to use required digital infrastructure in connection with our activities and operations. These include, for example, hosting and storage services from selected providers.
We use in particular: raidboxes / Information on data protection: Privacy Policy.
11.2 Fonts
We use services from third parties to be able to embed selected fonts as well as icons, logos and symbols into our website.
We use in particular:
- Google Fonts: Fonts; Provider: Google; Google Fonts-specific information: «Privacy and Google Fonts», «Data protection and data collection».
11.3 Payment processing
We use the following payment providers:
– Stripe Payments Europe Ltd. (Ireland / USA)
– PayPal (Europe) S.Ã r.l. et Cie, S.C.A. (Luxembourg)
When a payment is made, the data required for payment processing is transmitted directly to the respective provider.
11.4 Other services
– Google Analytics (statistics, reach measurement)
– Meta/Facebook Pixel (marketing, advertising)
12 SUCCESS AND REACH MEASUREMENT
We use services and programs to determine how our online offer is used. In this context, we can, for example, measure the success and reach of our activities and operations as well as the effect of third-party links on our website. However, we can also try out and compare how different versions of our online offer or parts of our online offer are used («A/B test» method). Based on the results of the success and reach measurement, we can in particular fix errors, strengthen popular content or make improvements to our online offer.
When using services and programs for success and reach measurement, the Internet Protocol (IP) addresses of individual users must be stored. IP addresses are generally shortened («IP masking») in order to follow the principle of data minimization through the corresponding pseudonymization and thus improve the data protection of the users.
When using services and programs for success and reach measurement, cookies can be used and user profiles can be created. User profiles include, for example, the pages visited or content viewed on our website, information on the size of the screen or browser window and the – at least approximate – location. Generally, user profiles are created exclusively pseudonymized. We do not use user profiles for the identification of individual users. Individual services from third parties in which users are registered may assign the use of our online offer to the user account or user profile at the respective service.
We use in particular:
- Google Analytics: Success and reach measurement; Provider: Google; Google Analytics-specific information: Measurement also across different browsers and devices (cross-device tracking) as well as with pseudonymized Internet Protocol (IP) addresses, which are only exceptionally transmitted in full to Google in the USA, «Data protection», «Browser Add-on to deactivate Google Analytics».
13 FINAL PROVISIONS
We can adapt and supplement this privacy policy at any time. We will inform about such adaptations and supplements in a suitable form, in particular by publishing the respectively current privacy policy on our website.
Created on 2024-01-01, supplemented on 2025-09-16
