Note: Swissgadget.ch is a brand of Cmerce GmbH. This privacy policy applies to all data processing activities of Cmerce GmbH.

We appreciate your interest in our company. Data protection is of particular importance to Cmerce GmbH. Using our website is generally possible without providing personal data. However, if a data subject wishes to take advantage of special services offered by our company through our website, processing of personal data may be necessary. If there is no legal basis for this, we will obtain your prior consent.

The processing of personal data (e.g., name, address, email address, telephone number) is carried out in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to Cmerce GmbH, in particular the Swiss Federal Data Protection Act (FADP). With this notice, we inform you about the type, scope, and purpose of the personal data we collect, use, and process, as well as your rights.

CMerce GmbH has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for personal data processed through this website. However, internet-based data transmissions may be subject to security vulnerabilities, meaning absolute protection cannot be guaranteed. Every data subject is free to provide us with their personal data by alternative means (e.g., by telephone).

Personal data (hereinafter generally referred to as “data”) is processed by us only to the extent necessary to provide a functional and user-friendly website (including its content and services).

In accordance with Article 13 of the Swiss Federal Constitution and the Federal Data Protection Act (FADP), every individual has the right to privacy and protection against misuse of their personal data. We comply with these provisions. Personal data is processed with strict confidentiality and will not be sold or disclosed to unauthorized third parties. In close cooperation with our hosting providers, we protect data storage to the best of our ability against unauthorized access, loss, misuse, or alteration.

I. Information About Us as Data Controller
Data Controller (within the scope of the GDPR):
Cmerce GmbH
Bösch 21
6331 Hünenberg (Switzerland)
Email: info@cmerce.ch
Data Protection Officer:
Cemil Baysal
Bösch 21, 6331 Hünenberg
WhatsApp (Message): +78 899 79 29
Phone: +41 41 910 41 14
Email: info@cmerce.ch

II. Rights of Users and Data Subjects
In particular, you have the following rights, subject to legal requirements:

Access to processed data (GDPR Article 15), confirmation as to whether data is being processed;
Correction of inaccurate data or completion of incomplete data (GDPR Article 16);
Deletion (“right to be forgotten”, GDPR Article 17) or restriction of processing (GDPR Article 18);
Data portability (GDPR Article 20);

Objection to processing pursuant to Article 6, paragraph 1, point f, GDPR, in particular to direct marketing (GDPR Article 21);

Location of a complaint to the supervisory authority (GDPR Article 77).

We are obliged to inform all recipients of the disclosed data of any correction, erasure, or restriction of processing, unless this proves impossible or requires a disproportionate effort. However, you have the right to obtain information about these recipients.

III. Information on Data Processing
Your data processed in connection with the use of our website will be deleted or blocked when the storage purpose ceases, there are no statutory retention obligations, and unless otherwise provided below.

1) General Collection of Access Data (Server Log Files)
When you access our website, the following data is collected, among others: The following data is recorded: IP address (anonymized where possible), domain name/referrer URL, files/pages accessed, date and time, name of the Internet service provider, and, if applicable, the operating system and browser version.

Legal basis: Article 6, paragraph 1, point f, GDPR (legitimate interest in stability, security, and functionality).

Storage period: generally up to 7 days; longer storage is for evidentiary purposes only.

2) Definition of “Processing”

“Processing” means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means (collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction; see Article 4, no. 2, GDPR).

3) Cookies

a) Session cookies
These are used, for example, for language display, shopping cart functionality, etc.
Legal basis: GDPR Article 6, paragraph 1, point b (contract initiation/processing) or GDPR Article 6, paragraph 1, point f (legitimate interest in usability).

Deleted when the session ends.

b) Third-party cookies
Varies depending on their use (advertising, analytics, functional development). See below for details about specific third-party providers.

c) Control
You can restrict/delete cookies in your browser. For Flash cookies, you may need to do this in Flash Player. Some functions may not be available without cookies.

4) Customer account / Registration
When you register, we process the data you provide (e.g., name, address, email) for the provision of the account, pre-contractual measures, contract fulfillment, and customer support. We also store your IP address and registration time.

Legal basis: GDPR Article 6, paragraph 1, point a (consent) and point b (contract).

You can withdraw your consent at any time, with effect for the future. The data will be deleted when the processing purpose no longer applies (subject to statutory retention periods).

5) Newsletter
When you subscribe, we process your email address (optionally your name/address), IP address, date/time of registration, and documentation of your consent.

Legal basis: GDPR Article 6, paragraph 1, point a (consent); you can withdraw your consent at any time via the unsubscribe link or by contacting us.

6) Contact requests
When you contact us via form or email, we process your information to process your request.

Legal basis: GDPR Article 6, paragraph 1, point b (contractual/pre-contractual).
Unless statutory retention obligations apply, the data will be deleted after processing is completed.

7) User Contributions/Reviews

When you post a comment, we process the contribution, date/time, nickname (if applicable), and IP and email address (for legal defense purposes).

Legal basis: GDPR Article 6, paragraph 1, point a (consent; revocable) and point f (legal defense).

Third-party providers and services used
Note on data transfers to third countries (in particular, the USA):

Some providers may process data outside the EU/Switzerland. This involves increased risks (e.g., limited applicability of data subject rights). Wherever possible, we ensure that appropriate security measures (e.g., standard contractual clauses) are implemented.

Pinterest
Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA.

Purposes: Online presence, communication, access.

Privacy policy: policy.pinterest.com/de/privacy-policy

YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google LLC, USA).

Used in privacy-enhanced mode (data transfer occurs only when the video is started).

For more information: policies.google.com/privacy

Facebook (Meta) – Company Page and Pixel/Custom Audiences

Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland / Meta Platforms, Inc., USA. Joint responsibility of Insights; Addendum: facebook.com/legal/terms/page_controller_addendum
Purposes: Access, analytics, marketing.

Objection/Opt-out and information: facebook.com/privacy/explanation
Instagram
Meta Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Purposes: Online presence, communication, access.

Information/Exit: help.instagram.com/519522125107875
Social media links
Plain links (graphic/text); no automatic data transfer until clicked.

Facebook: facebook.com/policy.php

Pinterest: policy.pinterest.com/de/privacy-policy

YouTube: policies.google.com/privacy

Instagram: help.instagram.com/519522125107875
Facebook Plugins
When integrated, the browser loads content from the Facebook servers (including IP address, date/time).

Legal basis: Article 6, Paragraph 1, Point F of the GDPR (quality improvement).

Information: developers.facebook.com/docs/plugins/ | facebook.com/policy.php
Google Analytics
Analysis of user behavior; used with IP anonymization within the EU/EEA.

Legal basis: GDPR Article 6, Paragraph 1, Point F (analysis/optimization/efficiency).

Partner information and opt-out add-on: google.com/intl/de/policies/privacy/partners | tools.google.com/dlpage/gaoptout
Further opt-out options may be available via browser settings/add-ons.

Google Maps
Display of locations/directions; when accessed, a connection to Google servers (possibly in the USA) is established.

Legal basis: GDPR Article 6, paragraph 1, point f (functionality).

Terms of Service/Privacy Policy: policies.google.com/terms | google.com/intl/de_de/help/terms_maps.html | policies.google.com/privacy
Google reCAPTCHA
Protection against automated access (bots); collection of technical user data, including IP address.

Legal basis: GDPR Article 6, paragraph 1, point f (security).

Information: policies.google.com/privacy
Google Fonts
External fonts; when accessed, a connection to Google servers (possibly in the USA) is established.

Legal basis: GDPR Article 6, paragraph 1, point f, GDPR (presentation/efficiency).

Information/Exit: adssettings.google.com/authenticated | policies.google.com/privacy

YouTube (embedded)

See “Enhanced Privacy Mode” above.

For more information: policies.google.com/privacy

Vimeo
Vimeo LLC, 555 West 18th Street, New York, NY 10011, USA.

Purpose: Video display; Vimeo may use Google Analytics.

Information: vimeo.com/privacy

Google Ads (Conversion Tracking)

Cookie-based measurement method for measuring advertising success (30-day cookie).

Legal basis: GDPR Article 6, paragraph 1, point f (analysis/optimization).

Information/Opt-Out: services.google.com/sitestats/de.html | google.com/policies/technologies/ads | google.de/policies/privacy/
Google Remarketing / “Similar Audiences”
Interest-based advertising (cookie, possibly cross-device) on third-party websites within the Google network.

Legal basis: Article 6(1)(f) GDPR.

Opt-Out/Plugins: google.com/settings/ads/plugin | youronlinechoices.com/uk/your-ad-choices | networkadvertising.org/choices | google.com/privacy/ads/
Sendinblue (Newsletter)
Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

Purposes: Newsletter sending and analysis (opening/click-through).

Legal basis: GDPR Article 6, paragraph 1, point a (consent; revocable).

Information: de.sendinblue.com/legal/privacypolicy/
Shopify (Shop software and analytics)
Shop hosting, display of offers, contract processing; processing may take place in Canada/the USA.

Data processed includes: name, billing/shipping address, email address, payment data, IP address, order and device data.

Legal basis: GDPR Article 6, paragraph 1, point b (contract) and point f (analysis/optimization).

Information: shopify.de/legal/datenschutz
Klarna “Checkout”
Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

Payment processing; identity/credit checks and processing of entered data by Klarna, depending on the payment method.

Legal basis: GDPR Article 6, Paragraph 1, Point B (Contract) and Article f (Secure Payment Processing).

Information: cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

Security Notice

We protect our website and IT systems with appropriate technical and organizational measures. However, complete protection is not always possible. Since email communication is not completely secure, we recommend that you communicate by post, especially for confidential information.

Changes to this Privacy Policy

We reserve the right to make changes if the legal situation, our online services, or the method of data collection changes. We will obtain your prior consent for any changes or amendments to the contractual relationship that require your consent. Please review this privacy policy if necessary.

Cmerce GmbH
Bösch 21, 6331 Hünenberg
Tel: +41 41 914 41 14