Privacy policy

Privacy Policy

This English version is provided for convenience. The German version is legally binding.

The controller within the meaning of data protection legislation, in particular the EU General Data Protection Regulation (GDPR, "DSGVO"), is:

Retro Shirts Sandro Feuillet
Sandro Feuillet
Samariterstrasse 28
8032 Zürich

Telephone: 0764223022
E-mail: sandro@feuillet.ch
Website: https://retroshirts.ch/

General notice

Based on Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Federal Act on Data Protection, DSG), every person has the right to protection of their privacy and to protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we endeavour to protect the databases as well as possible against unauthorised access, loss, misuse or falsification.

We point out that data transmission over the internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data as described below. This website can generally be visited without registration. In doing so, data such as the pages accessed or the names of the files retrieved, date and time are stored on the server for statistical purposes without this data being directly related to you personally. Personal data, in particular name, address or e-mail address, is collected on a voluntary basis wherever possible. No data is passed on to third parties without your consent.

Processing of personal data

Personal data means all information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, irrespective of the means and procedures applied, in particular the storage, disclosure, acquisition, deletion, saving, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. In addition, we process personal data - where and insofar as the EU GDPR is applicable - on the following legal bases in connection with Art. 6 para. 1 GDPR:

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) - The data subject has given consent to the processing of their personal data for one or more specific purposes.
Performance of a contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b GDPR) - Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
Protection of vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) - Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
Application procedure as a pre-contractual or contractual relationship (Art. 9 para. 2 lit. b GDPR) - Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data, such as severe disability status or ethnic origin) are requested from applicants in the course of the application procedure so that the controller or the data subject can exercise the rights arising from employment law and the law on social security and social protection and comply with the related obligations, they are processed in accordance with Art. 9 para. 2 lit. b GDPR; in the case of protecting the vital interests of applicants or other persons, in accordance with Art. 9 para. 2 lit. c GDPR; or for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services, in accordance with Art. 9 para. 2 lit. h GDPR. Where special categories of data are communicated on the basis of voluntary consent, they are processed on the basis of Art. 9 para. 2 lit. a GDPR.

We process personal data for as long as is necessary for the respective purpose or purposes. Where longer retention obligations apply due to statutory and other obligations to which we are subject, we restrict the processing accordingly.

Applicable legal bases

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. Unless the legal basis is stated in the privacy policy, the following applies: the legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR; the legal basis for processing for the performance of our services and the implementation of contractual measures as well as for responding to enquiries is Art. 6 para. 1 lit. b GDPR; the legal basis for processing for compliance with our legal obligations is Art. 6 para. 1 lit. c GDPR; and the legal basis for processing for the purposes of our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that the vital interests of the data subject or of another natural person make the processing of personal data necessary, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Security measures

In accordance with the statutory requirements, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access to, input, disclosure, availability and separation of the data. We have also set up procedures to ensure that data subjects' rights can be exercised, that data is deleted and that we respond to threats to the data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection by design and by default.

Transfer of personal data

In the course of our processing of personal data, it may happen that the data is transferred to, or disclosed to, other bodies, companies, legally independent organisational units or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are embedded in a website. In such cases, we comply with the statutory requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.

Data processing in third countries

Where we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or where processing takes place in the context of using third-party services or disclosing or transferring data to other persons, bodies or companies, this is done only in accordance with the statutory requirements.

Subject to express consent or transfer required by contract or law, we process the data only in third countries with a recognised level of data protection, on the basis of contractual obligations through so-called standard protection clauses of the EU Commission, or where certifications or binding internal data protection rules exist (Art. 44 to 49 GDPR, EU Commission information page: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

Privacy policy for cookies

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, the language settings on a website, the login status, a shopping basket or the point at which a video was watched. We also include under the term cookies other technologies that perform the same functions as cookies (e.g. when user information is stored using pseudonymous online identifiers, also referred to as "user IDs")

The following cookie types and functions are distinguished:

Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offering and closed their browser.
Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users that are used for reach measurement or marketing purposes can be stored in such a cookie.
First-party cookies: First-party cookies are set by us.
Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (also: essential or strictly necessary) cookies: Cookies may be strictly necessary for the operation of a website (e.g. to store logins or other user input, or for security reasons).
Statistics, marketing and personalisation cookies: Cookies are also generally used for reach measurement and when a user's interests or behaviour (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e. following the potential interests of users. Where we use cookies or "tracking" technologies, we inform you separately in our privacy policy or when obtaining consent.

Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the consent given. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g. in the commercial operation of our online offering and its improvement) or, where the use of cookies is necessary, to fulfil our contractual obligations.

Storage period: Unless we provide you with explicit information on the storage period of permanent cookies (e.g. as part of a so-called cookie opt-in), please assume that the storage period may be up to two years.

General information on withdrawal and objection (opt-out): Depending on whether the processing is based on consent or legal permission, you have the option at any time to withdraw consent you have given or to object to the processing of your data by cookie technologies (collectively referred to as "opt-out"). You can initially declare your objection by means of your browser settings, e.g. by deactivating the use of cookies (although this may also restrict the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be declared via a variety of services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you may receive further information on objecting as part of the information on the service providers and cookies used.

Processing of cookie data on the basis of consent: We use a cookie consent management procedure within which users' consent to the use of cookies, or to the processing operations and providers named in the cookie consent management procedure, is obtained and can be managed and withdrawn by users. The declaration of consent is stored so that it does not have to be requested again and so that consent can be proven in accordance with the legal obligation. Storage may take place server-side and/or in a cookie (a so-called opt-in cookie, or by means of comparable technologies) in order to be able to assign the consent to a user or their device. Subject to individual information on the providers of cookie management services, the following applies: consent may be stored for up to two years. A pseudonymous user identifier is created and stored together with the time of consent, information on the scope of the consent (e.g. which categories of cookies and/or service providers) as well as the browser, system and end device used.

Types of data processed: usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: users (e.g. website visitors, users of online services).
Legal bases: consent (Art. 6 para. 1 sentence 1 lit. a GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Privacy policy for SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the padlock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy policy for server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information is:

browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request

This data cannot be attributed to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

Privacy policy for the contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

Privacy policy for newsletter data

If you wish to receive the newsletter offered on this website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively to send the requested information and do not pass it on to third parties.

You can withdraw your consent to the storage of the data and the e-mail address as well as their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Privacy policy for objection to advertising e-mails

We hereby object to the use of contact details published as part of the legal notice obligation for the purpose of sending advertising and information materials that have not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.

Newsletter - Mailchimp

The newsletters are sent using the mailing service provider 'MailChimp', a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the mailing service provider's privacy policy here. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with the European level of data protection (PrivacyShield). The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and a data processing agreement pursuant to Art. 28 para. 3 sentence 1 GDPR.

The mailing service provider may use the recipients' data in pseudonymous form, i.e. without assignment to a user, to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and display of the newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to contact them itself or to pass the data on to third parties.

Note on data transfer to the USA

Our website includes, among other things, tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Copyright

The copyright and all other rights to content, images, photos or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. The written consent of the copyright holder must be obtained in advance for the reproduction of any files.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and possibly to damages.

General disclaimer

All information on our website has been carefully checked. We endeavour to keep our information offering up to date, correct and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, which means that we cannot guarantee the completeness, correctness and timeliness of information, including information of a journalistic or editorial nature. Liability claims for damage of a material or immaterial nature caused by the use of the information provided are excluded, unless there is demonstrably wilful or grossly negligent fault.

The publisher may change or delete texts at its own discretion and without notice and is not obliged to update the content of this website. Use of and access to this website is at the visitor's own risk. The publisher, its clients or partners are not responsible for damage, such as direct, indirect, incidental, specifically predeterminable or consequential damage, allegedly caused by visiting this website and consequently accept no liability for such damage.

The publisher likewise accepts no responsibility or liability for the content and availability of third-party websites that can be reached via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher thus expressly distances itself from all third-party content that may be relevant under criminal or liability law or that offends common decency.

Changes

We may amend this privacy policy at any time without prior notice. The current version published on our website applies. Insofar as the privacy policy is part of an agreement with you, we will inform you of the change by e-mail or in another suitable manner in the event of an update.

Questions for the data protection officer

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organisation, as listed at the beginning of this privacy policy.

This privacy policy was generated with: SwissAnwalt