1. Data Controller
The controller responsible for the processing of personal data collected through this website is:
Dealhair SA Route des Ilettes 13B 1869 Massongex, Switzerland Email: info@dealhair.ch Telephone: +41 21 960 17 38 UID/CHE: CHE-480.024.423
2. Data Collected and Purposes
We process the following categories of data for the purposes described below:
- Customer account: first name, last name, email address, password (encrypted) — creation and management of your account, authentication.
- Orders: purchase history, shopping cart, products viewed — processing and tracking of your orders, after-sales service.
- Payment: payment data transmitted directly to our payment service provider (we do not store any bank card data) — payment processing and fraud prevention.
- Delivery: name, delivery address, telephone number — organisation and tracking of the delivery of your orders.
- Customer support: correspondence, requests, complaints — responding to your requests and improving our service.
3. Legal Bases
Depending on the circumstances, the processing of your data is based on:
- The performance of the sales contract between you and us (order processing, delivery, invoicing);
- Your consent (for example, for non-essential cookies; see the Cookie Policy);
- Our legitimate interests (website security, fraud prevention, improvement of our services);
- Compliance with legal obligations (accounting, VAT).
For individuals located in the European Economic Area (EEA), such processing is also subject to the General Data Protection Regulation (GDPR) where applicable. For all other individuals, the Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) applies primarily.
4. Recipients and Data Transfers
Your data may be disclosed to the following categories of recipients, strictly to the extent necessary to fulfil the purposes described above:
- Hosting: hosting and infrastructure providers located in Switzerland, the European Union or the United States.
- Payment: payment service provider located in the United States.
- Logistics: carriers and logistics providers located in Switzerland or the European Union.
- Business management (ERP): business management service provider located in the European Union.
- Email services: transactional and marketing email service provider.
Where data is transferred outside Switzerland or the EEA to a country that does not guarantee an adequate level of protection (in particular the United States), such transfer is subject to appropriate safeguards, such as recognised standard contractual clauses, or is based on an adequacy decision, in accordance with Articles 16 and 17 FADP.
5. Retention Period
Your data is retained as follows:
- Customer account: for the entire duration of the contractual relationship, after which it is archived for the applicable statutory limitation period.
- Orders and invoices: ten years, in accordance with statutory accounting record retention obligations (Art. 958f CO).
- Payment data: only for the time necessary to process the transaction; no bank card data is stored by us.
- Customer support correspondence: three years from the closure of the request.
6. Your Rights
In accordance with the FADP and, where applicable, the GDPR, you have the following rights regarding your data:
- Right of access to your data;
- Right to rectification of inaccurate data;
- Right to erasure of your data, within the limits provided by law;
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to its withdrawal;
- Right to data portability;
- Right to object to the processing of your data on legitimate grounds.
To exercise these rights, please contact us using the details provided in Section 1.
7. Supervisory Authority
You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), the competent Swiss supervisory authority. If you reside in the EEA, you may also lodge a complaint with the competent data protection authority in your country of residence.
8. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure.
9. Changes to This Policy
We may amend this Privacy Policy at any time. The version currently in force is the version published on this website, together with the date of its most recent update.
10. Contact
For any questions regarding this Policy or the processing of your data, please contact us:
Dealhair SA Route des Ilettes 13B 1869 Massongex, Switzerland Email: info@dealhair.ch Telephone: +41 21 960 17 38
Only the French version of this document is legally binding. Translated versions are provided for informational purposes only.