PRIVACY POLICY

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide your data. Failure to provide it has no consequences. This only applies as long as no different indication is given in the following processing activities. “Personal data” means any information relating to an identified or identifiable natural person.


Server Log Files

You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web hosting provider / IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the accessed page, date and time of the access, IP address, the amount of data transferred, and the requesting provider. Processing is carried out pursuant to Art. 6 (1) lit. f GDPR based on our predominant legitimate interest in ensuring the smooth operation of our website and improving our offer. Your data will also be transferred to Canada, among other countries. For data transfers to Canada, an adequacy decision by the European Commission exists.


Contact – Data Controller

Contact us if you wish. The controller responsible for data processing is:

Swiss Ecommerce Limited

Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong

info@the-swivy.com


Proactive Contact Initiated by Email

If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing is carried out for the purpose of handling and responding to your contact request.

If the contact is aimed at carrying out pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or concerns an existing contract with us, this processing is based on Art. 6 (1) lit. b GDPR.

If the contact is made for other reasons, data processing is based on Art. 6 (1) lit. f GDPR from our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.

We use your email address only to process your request. Your data will be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.


Data Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of establishing contact.

If the contact is aimed at carrying out pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or concerns an existing contract with us, this processing is based on Art. 6 (1) lit. b GDPR.

If the contact is made for other reasons, data processing is based on Art. 6 (1) lit. f GDPR from our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.

We use your email address only to process your request. Your data will be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.


Orders – Collection, Processing and Disclosure of Personal Data When Placing Orders

When ordering, we collect and process your personal data only to the extent necessary to fulfill and process your order as well as to handle your inquiries.

Providing the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.

Processing is carried out based on Art. 6 (1) lit. b GDPR and is necessary to fulfill a contract with you.

Your data will be shared, for example, with the shipping companies and dropshipping providers you have selected, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum.

Your data will also be transferred to Canada, among other countries. For data transfers to Canada, an adequacy decision by the European Commission exists.


Reviews – Data Collection When Writing a Comment or Review

When commenting/reviewing an item or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. Processing serves the purpose of enabling and displaying comments/reviews.

By submitting the comment/review, you consent to the processing of the transmitted data. Processing is carried out based on Art. 6 (1) lit. a GDPR with your consent.

You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out based on the consent until revocation.

Your personal data will then be deleted. When publishing your comment, the name and email address you provided will be displayed.


Inventory Management – Use of an External Inventory Management System

We use an inventory management system as part of order processing. For this purpose, your personal data collected during the order is transmitted to sevDesk.


Payment Service Providers – Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full


Use of PayPal Express

We use the PayPal Express payment service on our website, operated by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”).

To integrate this payment service, PayPal collects, stores, and analyzes data (e.g., IP address, device type, operating system, browser type, device location) when accessing the website. Cookies may also be used.

Processing of your personal data is based on Art. 6 (1) lit. f GDPR from our legitimate interest in offering user-friendly and diverse payment options.

You have the right to object to this processing at any time for reasons arising from your particular situation.

By selecting and using PayPal Express, the required data for payment processing will be transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) lit. b GDPR.


Use of PayPal Check-Out

We use the PayPal Check-Out payment service on our website, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. The data processing is carried out to offer you payment via this service.

When using payment methods such as PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, your necessary payment data will be transmitted to PayPal to fulfill the contract with you.

This processing is based on Art. 6 (1) lit. b GDPR.


Credit Card, Direct Debit & “Pay Later” via PayPal

PayPal may conduct a credit check based on statistical methods using credit agencies. For this, PayPal may transmit personal data to a credit agency and use the results for a decision regarding contract execution or termination.

This data processing is based on Art. 6 (1) lit. f GDPR, from our legitimate interest in protecting against payment defaults when PayPal makes advance payments.

You can object to this processing at any time for reasons arising from your particular situation.


Third-Party Payment Methods

If you choose a third-party payment method, PayPal will forward your data to that provider to process the payment. Examples of such providers include:

 

  • Sofort (SOFORT GmbH, Germany)

  • Giropay (Paydirekt GmbH, Germany)

 


Invoice Purchase via PayPal

In case of payment by invoice, PayPal forwards the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”).

Ratepay may conduct a credit check based on statistical probability values and using credit agencies. The data processing serves the purpose of creditworthiness assessment for initiating a contract and is based on Art. 6 (1) lit. f GDPR.

For more details: https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/


Use of Stripe

All Stripe transactions are subject to the Stripe Privacy Policy: https://stripe.com/de/privacy


Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and recognized upon future visits to enhance user experience.

You can manage or disable cookies in your browser settings. Instructions can be found here:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac


Technically Necessary Cookies

We only use essential cookies to ensure the functionality, security, and usability of our website. This is based on § 25 (2) TTDSG and Art. 6 (1) lit. f GDPR.

You have the right to object to this processing at any time for reasons arising from your specific situation.


Rights of the Data Subject & Retention Period

After contract completion, we retain your data for the statutory warranty period, followed by legal retention periods, before deleting it—unless you consented to extended use.

You have the right to:

 

  • Access

  • Rectification

  • Erasure

  • Restriction of processing

  • Data portability (Art. 15–20 GDPR)

    You also have the right to object (Art. 21 GDPR) and to lodge a complaint with a supervisory authority (Art. 77 GDPR).

 


Right to Object

Where processing is based on our legitimate interests (Art. 6 (1) lit. f GDPR), you may object at any time, effective for the future, unless we demonstrate compelling legitimate grounds.


Last Updated: 10 April 2025