Privacy Policy

Privacy Policy


Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide your data. Failure to provide it has no consequences. This only applies if no other information is provided in the subsequent processing procedures.


“Personal data” means any information relating to an identified or identifiable natural person.


Server Log Files

You can visit our websites without providing any personal information.

Every time you access our website, usage data is transmitted to us or our web host/IT service provider via your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, date and time of the request, IP address, the amount of data transferred, and the requesting provider. Processing is based on Art. 6(1)(f) GDPR and is in our legitimate interest in ensuring the smooth operation of our website and improving our services.

Your data may be transmitted to Canada. An adequacy decision by the EU Commission exists for data transfers to Canada.


Contact

Controller

Contact us if you wish. The controller for data processing is:

Swiss Ecommerce Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong, info@theswivy.com


Customer-Initiated Contact by Email

If you initiate contact with us via email, we will collect your personal data (name, email address, message text) only to the extent provided by you. Data processing is for the purpose of handling and responding to your inquiry. If the contact is for the performance of pre-contractual measures (e.g. product inquiries, offers) or concerns an existing contract, processing is based on Art. 6(1)(b) GDPR.

In all other cases, processing is based on Art. 6(1)(f) GDPR, based on our legitimate interest in responding to your inquiry. You have the right to object to this processing at any time for reasons arising from your particular situation.

Your email address will only be used to process your request. Your data will be deleted in accordance with legal retention periods unless you have consented to further processing.


Use of Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of contacting you. If the contact is for pre-contractual measures or concerns an existing contract, it is based on Art. 6(1)(b) GDPR. Otherwise, it is based on Art. 6(1)(f) GDPR. You have the right to object at any time for reasons arising from your particular situation. Your email address will only be used to process your inquiry and will be deleted after legal retention periods unless you consent to further use.


Orders

Collection, Processing and Transfer of Personal Data in Orders

We collect and process your personal data only to the extent necessary for processing your order and handling your inquiries. The provision of data is necessary for contract conclusion. Failure to provide data will result in no contract.

Processing is based on Art. 6(1)(b) GDPR.

Your data may be transferred to shipping companies, dropshipping providers, payment service providers, order processing service providers, and IT service providers. In all cases, we comply with legal requirements and limit data transfer to a minimum.

Your data may be transmitted to Canada. An adequacy decision by the EU Commission exists for data transfers to Canada.


Reviews

Data Collection When Posting a Comment or Review

When you post a comment or review, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing enables publication of your comment or review.

By submitting the comment/review, you consent to the processing of your data (Art. 6(1)(a) GDPR). You can revoke this consent at any time. After revocation, your data will be deleted.

When publishing your comment, your provided name and email address will also be published.


Inventory Management

Use of an External Inventory System

We use an external inventory management system (sevDesk) as part of order fulfillment. Your personal data collected during the order process is transmitted to sevDesk accordingly.


Payment Service Providers

Use of PayPal

All PayPal transactions are subject to the PayPal privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full


Use of PayPal Express

We use PayPal Express by PayPal (Europe) S.à.r.l. et Cie, S.C.A. to enable payments. PayPal may collect data (IP address, device type, OS, browser type, location) including via cookies. This is based on Art. 6(1)(f) GDPR. You have the right to object at any time.

When selecting PayPal Express, necessary payment data is transferred to PayPal based on Art. 6(1)(b) GDPR.

Details: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS


Use of PayPal Check-Out

We use PayPal Check-Out on our site. Payment-related data will be transferred to PayPal and may be further transmitted to third-party providers depending on your selected payment method.

This includes:

 

  • Sofort (SOFORT GmbH)

  • giropay (Paydirekt GmbH)

 


Invoice Payment via PayPal

Payment via invoice is processed by PayPal and Ratepay GmbH. This includes credit checks (Art. 6(1)(f) GDPR) if Ratepay assumes liability. More info:

https://www.ratepay.com/legal-payment-dataprivacy/

https://www.ratepay.com/legal-payment-creditagencies/


Use of Stripe

All Stripe transactions are subject to Stripe’s privacy policy: https://stripe.com/de/privacy


Cookies

Our website uses cookies, which are small text files stored in your browser. Cookies allow us to recognize your browser and provide specific services. You can control cookies through your browser settings and delete them at any time.

More information on cookie settings for major browsers:

 

  • Chrome: https://support.google.com/accounts/answer/61416?hl=de

  • Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

  • Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

  • Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

 


Technically Necessary Cookies

Unless otherwise stated, we only use essential cookies necessary to make our site user-friendly, effective, and secure. These are used to maintain functionality, including recognizing your browser after switching pages.

The use of such cookies is based on §25(2) TTDSG and Art. 6(1)(f) GDPR. You may object at any time for reasons relating to your particular situation.


Data Subject Rights & Storage Duration

Storage Duration

After contract completion, data will be retained for the duration of warranty and legal retention periods, then deleted unless further use is consented to.


Rights of the Data Subject

Under the GDPR, you have the following rights: right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20).

You also have a right to object to data processing based on Art. 6(1)(f) GDPR (Art. 21(1) GDPR), and for purposes of direct marketing.


Right to Lodge a Complaint with the Supervisory Authority

According to Art. 77 GDPR, you have the right to file a complaint with the competent supervisory authority.


Right to Object

Where personal data processing is based on our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time for reasons arising from your particular situation.

If you object, processing of the data will be stopped unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.


Last updated: April 10, 2025