Privacy policy

This Privacy Policy is provided pursuant to Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and the Swiss Federal Act on Data Protection (“FADP”), governing the processing and protection of personal data.

This Privacy Policy describes the privacy practices adopted by DOT LIFE SA in connection with the collection and processing of personal data:

  • when you browse any website operated by us through which this Privacy Policy is made available (the “Website”);
  • when you interact with social media pages controlled by us through which this Privacy Policy is made available (collectively, our “Social Media Pages”);
  • when you communicate with us by email, including emails containing a link to this Privacy Policy, or through other online or in-person communications;
  • when you visit the e-commerce website www.dotcosmetics.ch, which is connected to the Website.

The Website, our Social Media Pages and the above-mentioned e-commerce website are collectively referred to as the “Online Services”.

1. Data Controller

For the processing purposes described in Section 3 below, the Data Controller is:

DOT LIFE SA
Via Generale Guisan 12
6900 Paradiso
Switzerland

2. Personal Data We Process

Browsing Data

The IT systems and software procedures used to operate the Website automatically collect certain personal data during their normal operation. The transmission of such data is inherent in the use of Internet communication protocols.

This information may include IP addresses or domain names of the devices used by users accessing the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

Such data are necessary for the proper operation and use of the Website.

They may also be used solely to obtain anonymous statistical information regarding the use of the Website and to monitor and verify its proper functioning.

Personal Data Voluntarily Provided by Users

a. Email communications

Where you voluntarily, explicitly and freely send an email to any address published on this Website, we will collect your email address in order to respond to your enquiry, together with any other personal data included in your message.

b. “Contact” section of the e-commerce website www.dotcosmetics.ch

When you complete the contact form, we may process the following personal data:

  • email address;
  • name, where provided;
  • telephone number, where provided.

c. “Checkout” section of the e-commerce website www.dotcosmetics.ch

When you complete the checkout process, we may process the following personal data:

  • first name;
  • last name;
  • shipping address;
  • billing address;
  • telephone number.

d. Job applications

We may process information and personal data contained in job applications submitted to the email address indicated in the “Contact” section of the Website.

e. “Subscribe to our emails” form

When you subscribe to our emails through the form available on www.dotcosmetics.ch, we will process your email address.

f. “Log in or create an Account” section

We may process the personal data provided by you when creating or accessing your account.

3. Purposes of Processing

We process your personal data for the following purposes:

I. Compliance with legal obligations

To comply with legal, regulatory, administrative, accounting and tax obligations applicable to the Data Controller.

II. Provision of products and services

To provide the products and services requested by you, including:

  • processing payments;
  • processing and fulfilling orders;
  • sending notifications relating to your account;
  • managing purchases, returns and exchanges;
  • arranging shipping and delivery.

We may also enhance your shopping experience by allowing Shopify to associate your account with other Shopify services that you choose to use.

In such circumstances, Shopify will process your personal data in accordance with its own Privacy Policy. Please refer to Section 4, “Links to Third-Party Websites and Services”.

III. Direct marketing

To send advertising and promotional materials, conduct direct sales activities, market research and commercial communications through:

  • traditional communication channels, including postal mail and telephone calls made by an operator; and
  • automated communication channels, including SMS, MMS, automated telephone calls and newsletters.

IV. Marketing of similar products and services

In accordance with applicable law, including Article 3(1)(o) of the Swiss Federal Act against Unfair Competition (“UCA”), the Data Controller may use the email address provided by you in connection with the purchase of our products and/or services to inform you about products or services similar to those previously purchased.

You may opt out of receiving such communications at any time by using the unsubscribe link included in the relevant email communications.

Upon receipt of your request, the Data Controller will discontinue such marketing activities without undue delay.

V. Recruitment

To review, manage and respond to applications submitted by prospective candidates.

4. Links to Third-Party Websites and Services

Our Website may contain links to websites, platforms or services operated by third parties.

DOT LIFE SA is not responsible for the processing of personal data or other information carried out by such third parties.

Where you provide personal data through a third-party website or service, the privacy policies, data protection terms and terms of use of the relevant third party will apply. We encourage you to review those policies carefully before providing your personal data.

Accordingly, this Privacy Policy does not apply to the privacy, data processing or other practices of organisations or entities other than DOT LIFE SA, and we accept no responsibility or liability in respect of such practices.

We also accept no responsibility or liability for the collection, use, disclosure, security practices or data protection policies of third parties such as Meta, Google or any other:

  • application developer;
  • application provider;
  • social media platform provider;
  • operating system provider;
  • technology provider; or
  • service provider.

This also applies to Personal Data that you provide to such third parties through or in connection with our Social Media Pages.

5. Disclosure and Transfer of Personal Data

Your personal data may be disclosed to third parties that provide outsourced services to the Data Controller.

Such service providers may include, for example, companies providing:

  • web hosting services;
  • data analytics services;
  • email distribution services;
  • marketing services;
  • technical and IT services.

Where required by applicable law, such third parties will act as Data Processors on behalf of the Data Controller pursuant to an appropriate data processing agreement or formal appointment.

You may request an up-to-date list of our Data Processors at any time.

Your personal data will be processed solely for the purposes described in Section 3 above by personnel who have been formally authorised to process personal data and who are subject to appropriate confidentiality obligations.

6. Legal Basis for Processing

Each processing activity involving your personal data is based on one or more of the following legal grounds:

Performance of a Contract or Pre-Contractual Measures

Processing is necessary for the performance of a contract entered into with you or in order to take steps at your request before entering into a contract.

Compliance with a Legal Obligation

Processing is necessary to comply with a legal obligation to which the Data Controller is subject.

Legitimate Interests

Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller, provided that such interests are not overridden by your interests, fundamental rights or freedoms requiring the protection of personal data.

Consent

Where required, processing will be carried out on the basis of your consent for one or more specific purposes.

Where processing is based on consent, you may withdraw your consent at any time by contacting the Data Controller using the contact details set out in Section 8 below.

Withdrawal of consent will not affect the lawfulness of any processing carried out on the basis of consent before its withdrawal.

7. Processing Methods, Data Security and Retention

We process your personal data using appropriate technical and organisational security measures designed to protect such data against accidental or unlawful loss, misuse, unauthorised access, alteration or disclosure.

These security measures are implemented and regularly reviewed and updated as appropriate.

Your personal data will be retained only for as long as necessary to fulfil the purposes for which they were collected and to comply with any applicable legal, accounting, regulatory or reporting requirements.

Unless specific legal obligations require a different retention period, your personal data will be retained for a maximum period of 24 months.

CVs and other personal data relating to job applicants will be retained for no longer than 24 months from the date on which the application is received.

When determining the appropriate retention period for personal data, we take into account:

  • the amount, nature and sensitivity of the personal data;
  • the potential risk of harm arising from unauthorised use or disclosure;
  • the purposes for which the personal data are processed;
  • whether those purposes can reasonably be achieved by other means; and
  • applicable legal and regulatory requirements.

All personal data are stored electronically on servers located in Switzerland and within the European Union.

Where necessary, the Data Controller may transfer personal data outside Switzerland and/or outside the European Union.

In such circumstances, the Data Controller will ensure that the transfer is carried out in accordance with applicable data protection legislation and that appropriate safeguards are implemented where required.

8. Your Rights

With regard to the processing activities described in this Privacy Policy, you may at any time request confirmation as to whether we process personal data relating to you.

Subject to the conditions and limitations provided by applicable law, you have the right to:

  • request access to your personal data, including information regarding the purposes of processing, the recipients or categories of recipients to whom the data may be disclosed, the applicable retention period where possible, and any consequences of processing based on profiling;
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal;
  • request rectification of inaccurate or incomplete personal data;
  • request erasure of your personal data where such data are no longer necessary for the purposes for which they were collected or processed, where you have withdrawn your consent, where the data have been unlawfully processed, or where another applicable legal basis for erasure exists;
  • request restriction of processing in the circumstances provided for by applicable law;
  • request data portability, including the transfer of your personal data to another Data Controller in a structured, commonly used and machine-readable format, where applicable and without hindrance from the current Data Controller;
  • object to the processing of your personal data, including, where applicable, decisions concerning you that are based solely on automated processing, including profiling;
  • lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data infringes applicable data protection legislation.

To request further information regarding the processing of your personal data or to exercise any of your rights, you may contact us:

By post:

DOT LIFE SA
Via Generale Guisan 12
6900 Paradiso
Switzerland

By email:

privacy@dotlife.swiss

9. Cookies

For information regarding the use of cookies through this Website, please refer to our Cookie Policy.

10. Changes to this Privacy Policy

The Data Controller reserves the right to amend, supplement or update this Privacy Policy, in whole or in part, including as a result of changes to applicable legislation or regulatory requirements.

Any amendments will become effective upon publication on the Website.

If you continue to access or use our services following publication of the amended Privacy Policy, you will be deemed to have accepted the updated version to the extent permitted by applicable law.

We therefore encourage you to review this Privacy Policy periodically in order to remain informed about the personal data we collect, how we process such data and any changes to our privacy practices.