Privacy policy

Privacy Policy

The controller responsible for data processing is:
mimodo AG
Am Falter 9
8966 Oberwil-Lieli

E-mail: info@tuki.ch

Thank you for your interest in our online shop. Protecting your privacy is very important to us. We inform you below in detail about how we handle your data.

1. Access data and hosting

You can visit our web pages without providing any personal information. Each time a page is accessed, the web server automatically saves a so-called server log file that contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data), and documents the request. These access data are used exclusively to ensure smooth operation of the site and to improve our offering. This serves our legitimate interests, which prevail within the framework of a balancing of interests, in a correct presentation of our offering pursuant to Art. 6(1)(1)(f) GDPR. All access data are deleted at the latest seven days after the end of your visit.

Hosting

The services for hosting and presenting the website are partly provided by our service providers as processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected in the forms provided on this website are processed on their servers. For questions about our service providers and the basis of our collaboration with them, please use the contact options described in this privacy policy.
Our service providers are located and/or use servers in the following countries for which the European Commission has determined by decision an adequate level of data protection: Switzerland.

2. Data processing for contract performance and contact

2.1 Data processing for contract performance

We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g. via the contact form or by e-mail). Mandatory fields are marked as such, as in these cases we require the data for contract performance or to process your inquiry, and without providing them you cannot complete the order or send the inquiry. Which data are collected can be seen from the respective input forms. We use the data you provide to perform the contract and process your inquiries (including inquiries about and processing of any existing warranty and performance claims, as well as any statutory update obligations) pursuant to Art. 6(1)(1)(b) GDPR. You will find further information on the processing of your data, in particular on the transmission to our service providers for order, payment and shipping processing, in the following sections of this privacy policy. After complete performance of the contract, your data are restricted for further processing and deleted after any tax and commercial retention periods have expired pursuant to Art. 6(1)(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR, or we reserve a further data use that is legally permitted and about which we inform you in this statement.

2.2 Contact

As part of customer communication, we collect personal data pursuant to Art. 6(1)(1)(b) GDPR to process your inquiries when you voluntarily provide it to us when contacting us (e.g. contact form, e-mail). Mandatory fields are marked as such, as in these cases we require the data to process your inquiry. Which data are collected can be seen from the respective input forms. After complete processing of your inquiry, your data are deleted, unless you have expressly consented to further use pursuant to Art. 6(1)(1)(a) GDPR, or we reserve a further data use that is legally permitted and about which we inform you in this statement.

3. Data processing for shipping

To perform the contract pursuant to Art. 6(1)(1)(b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is required to deliver the ordered goods.

Transmission of data to the shipping service provider for shipment notification

Insofar as you have given us your express consent for this during or after your order, we pass on your e-mail address and telephone number to the selected shipping service provider pursuant to Art. 6(1)(1)(a) GDPR, so that they can contact you before delivery to announce or coordinate the delivery.
Consent can be withdrawn at any time by a message to the contact options described in this privacy policy, or directly with the shipping service provider at the address listed below. After withdrawal, we delete your data provided for this purpose, unless you have expressly consented to further use or we reserve a further legally permitted use about which we inform you in this statement.

Swiss Post Ltd.
Wankdorfallee 4
3030 Bern
Switzerland

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

The service provider is located in the following country for which the European Commission has determined by decision an adequate level of data protection: Switzerland.

4. Data processing for payment

For payment processing in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary to process the payment transaction to our technical service providers acting as processors for us, to the commissioned credit institutions, or to the selected payment service provider, insofar as this is required to process the payment. This serves the performance of the contract pursuant to Art. 6(1)(1)(b) GDPR. In some cases, payment service providers collect the required data themselves, e.g. on their own website or via a technical integration in the order process. In such cases, the privacy policy of the respective payment service provider applies. For questions about our payment partners and the basis of our collaboration with them, please use the contact options described in this privacy policy.

4.2 Data processing for fraud prevention and optimisation of our payment processes

Where applicable, we provide our service providers with additional data which they use, together with the data necessary for payment processing and as our processors, for fraud prevention and to optimise our payment processes (e.g. invoicing, processing contested payments, accounting support). This serves our prevailing legitimate interests in protecting against fraud and in efficient payment management pursuant to Art. 6(1)(1)(f) GDPR.

5. Advertising by e-mail

5.1 E-mail newsletter with registration and newsletter tracking

When you register for our newsletter, we use the data required for this or separately provided by you to regularly send you our e-mail newsletter on the basis of your consent pursuant to Art. 6(1)(1)(a) GDPR. You can unsubscribe from the newsletter at any time by a message to the contact options described below or via a link provided in the newsletter. After unsubscribing, we delete your e-mail address from the recipient list, unless you have expressly consented to further use or we reserve a further legally permitted use about which we inform you in this statement.

We would like to point out that when sending the newsletter, we analyse your user behaviour. To this end, we also analyse your interaction with our newsletter by measuring, storing and evaluating opening rates and click rates for the purpose of designing future newsletter campaigns ("newsletter tracking").

For this evaluation, the e-mails sent contain single-pixel technologies (e.g. web beacons, tracking pixels) stored on our website. For the evaluations, we associate in particular the following "newsletter data":

the page from which the page was requested (so-called referrer URL),
the date and time of access,
the description of the type of web browser used,
the IP address of the requesting computer,
the e-mail address,
the date and time of registration and confirmation
and the single-pixel technologies with your e-mail address or IP address and, if applicable, an individual ID. Links contained in the newsletter can also contain this ID. If you do not wish any newsletter tracking, it is possible at any time to unsubscribe from the newsletter as described above. The information is stored for as long as you are subscribed to the newsletter.

5.2 Newsletter dispatch

The newsletter and the newsletter tracking described above are, where applicable, also dispatched by our service providers as processing on our behalf. For questions about our service providers and the basis of our collaboration with them, please use the contact options described in this privacy policy. Our service providers are located and/or use servers in the following countries for which the European Commission has determined by decision an adequate level of data protection: Canada. Our service providers are located and/or use servers in the following countries: United States, India. For these countries there is no adequacy decision of the European Commission. Our collaboration with them is based on the European Commission's standard data protection clauses.

5.3 Sending review requests by e-mail

Insofar as you have given us your express consent pursuant to Art. 6(1)(1)(a) GDPR during or after your order, we use your e-mail address to ask you to submit a review of your order via the review system used by us. This consent can be withdrawn at any time by a message to the contact options described in this privacy policy or via a link provided in the review request. Review requests are also dispatched by our service provider Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne (Trusted Shops), where applicable. In the context of dispatching review requests, we receive information on the respective status from Trusted Shops (e.g. whether the review request was sent and received). This takes place pursuant to Art. 6(1)(1)(f) GDPR to fulfil our legitimate interest in obtaining information on review invitations in order, where appropriate, to make optimisations, and to fulfil Trusted Shops' legitimate interest in being able to offer this service. For the dispatch of review requests and for the collection and display of review and status information, we are jointly responsible with Trusted Shops. In the context of this joint responsibility, for data protection questions and to assert your rights, please preferably contact Trusted Shops GmbH, whose contact options you will find here. More information on data protection is available at the link provided here. You can also contact us via the contact options described in this privacy policy; your request will, if necessary, be forwarded to the other controller for response.

6. Cookies and other technologies

6.1 General information

In order to make the visit to our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted at the end of the browser session, i.e. after closing your browser (session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies).

Privacy protection on end devices

When using our online offering, we use strictly necessary technologies to provide the expressly requested telemedia service. The storage of information on your end device or the access to information already stored on your end device does not require any consent in this respect. For non-strictly necessary functions, the storage of information on your end device or the access to information already stored requires your consent. We point out that if consent is not given, parts of the website may not be usable without restriction. Any consents given remain in effect until you adjust or reset the corresponding settings on your end device.

Any subsequent data processing by cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions of our website (e.g. shopping cart). Through these technologies, IP address, time of the visit, device and browser information, and information on your use of our website (e.g. information on shopping cart content) are collected and processed. This serves, within the framework of a balancing of interests, our prevailing legitimate interests in an optimised presentation of our offering pursuant to Art. 6(1)(1)(f) GDPR. In addition, we use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analytics and online marketing. Further information, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy. You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™. Insofar as you have consented to the use of the technologies pursuant to Art. 6(1)(1)(a) GDPR, you can withdraw your consent at any time by a message to the contact options described in this privacy policy. Alternatively, you can also use the following link: https://tuki.ch/datenschutz-cookies/. If cookies are not accepted, the functionality of our website may be restricted.

6.2 Cookiebot Consent Management Platform

On our website, we use Cookiebot to inform you about the cookies and other technologies we use, and to obtain, manage and document your consent, where required, to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1)(1)(c) GDPR to fulfil our legal obligation pursuant to Art. 7(1) GDPR to be able to prove your consent to the processing. Cookiebot is a service of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf. After submitting your cookie declaration on our website, the Cookiebot web server stores your anonymised IP address, the date and time of your declaration, browser information, the URL from which the declaration was sent, information on your consent behaviour, as well as an anonymous random key. In addition, a cookie is set that contains the information on your consent behaviour and the key. Your data will be deleted after twelve months, unless you have expressly consented to further use pursuant to Art. 6(1)(1)(a) GDPR or we reserve a further legally permitted use about which we inform you in this statement.

7. Use of cookies and other technologies for web analytics and advertising purposes

Insofar as you have given your consent pursuant to Art. 6(1)(1)(a) GDPR, we use on our website the following cookies and other technologies from third-party providers. After the purpose has ceased and our use of the respective technology ends, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future. More information on your withdrawal options can be found in the section "Cookies and other technologies". Further information, including the basis of our collaboration with the individual providers, can be found with the individual technologies. For questions about the providers and the basis of our collaboration with them, please use the contact options described in this privacy policy.

7.1 Use of Google services for web analytics and advertising purposes

We use the technologies described below of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by the Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision of the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. If your IP address is collected via the Google technologies, it is shortened by the activation of IP anonymisation before being stored on Google servers. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there. Unless otherwise stated for individual technologies, data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. For further information on data processing by Google, please refer to Google's privacy policy.

Google Analytics

For the purpose of website analysis, data (IP address, time of visit, device and browser information, and information on your use of our website) are automatically collected and stored by Google Analytics, from which pseudonymous user profiles are created. Cookies may be used for this. Your IP address is in principle not combined with other Google data. Data processing takes place on the basis of a data processing agreement with Google. For the purpose of optimised marketing of our website, we have activated the data sharing settings for "Google products and services". This enables Google to access the data collected and processed by Google Analytics and to subsequently use it to improve Google services. Data sharing with Google in the context of these data sharing settings takes place on the basis of an additional agreement between controllers. We have no influence on Google's subsequent data processing.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie is set when visiting our website, which enables interest-based advertising automatically through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website) and by means of a pseudonymous cookie ID based on the pages you have visited. Any further data processing only takes place if you have activated the "personalised advertising" setting in your Google account. If you are then logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For website analysis and event tracking, we measure via Google Ads Conversion Tracking your subsequent user behaviour if you have arrived at our website via a Google Ads ad. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, and information about your use of our website based on events we specify, such as visiting a web page or signing up for a newsletter) collected, from which pseudonymous profiles are created.

Google Maps

For the visual presentation of geographic information, data about your use of the Maps functions, in particular the IP address and location data, are collected by Google Maps, transmitted to Google and subsequently processed by Google. We have no influence on this subsequent data processing.

YouTube Video Plugin

For the integration of third-party content, the YouTube video plugin, used in the extended privacy mode, collects data (IP address, time of visit, device and browser information), transmits them to Google and lets Google process them only when you play a video.

7.2 Use of Facebook services for web analytics and advertising purposes

7.2 Use of Facebook Pixel

We use the Facebook Pixel in the context of the technologies described below of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). With the Facebook Pixel, data (IP address, time of visit, device and browser information, and information about your use of our website based on events we specify, such as visiting a web page or signing up for a newsletter) are automatically collected and stored, from which pseudonymous user profiles are created. A cookie is automatically set when visiting our website by the Facebook Pixel, which automatically allows your browser to be recognised when visiting other websites via a pseudonymous cookie ID. Facebook (by Meta) will combine this information with further data from your Facebook account and use it to compile reports on website activity and provide further services related to the use of the website, in particular personalised and group-based advertising.
The information collected automatically by the Facebook (by Meta) technologies about your use of our website is generally transmitted to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision of the European Commission for the USA. Insofar as the data transfer to the USA falls within our responsibility, our cooperation is based on standard data protection clauses of the European Commission. For further information on data processing by Facebook, please refer to Facebook's (by Meta) privacy policy.

Facebook Ads (ad manager)

Via Facebook Ads we advertise for this website on Facebook (by Meta) as well as on other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the precise implementation, in particular the decision on ad placement with individual users. Unless otherwise stated for individual technologies, data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. The joint responsibility is limited to the collection of the data and their transmission to Meta Platforms Ireland. The subsequent processing by Meta Platforms Ireland is not covered. Based on statistics created via Facebook Pixel on visitor activities on our website, we operate group-based advertising on Facebook (by Meta) via Facebook Custom Audience by defining the characteristics of the respective target audience. Based on the pseudonymous cookie ID set by the Facebook Pixel and data collected on your user behaviour on our website, we operate personalised advertising via Facebook Pixel Remarketing. Via Facebook Pixel Conversions we measure, for web analytics and event tracking, your subsequent user behaviour if you have arrived at our website via a Facebook Ads ad. Data processing takes place on the basis of a data processing agreement with Facebook (by Meta).

8. Integration of the Trusted Shops Trustbadge / other widgets

To display the Trusted Shops services (e.g. quality seal, collected reviews) and to offer the Trusted Shops products to buyers after an order, Trusted Shops widgets (e.g. Trusted Shops Trustbadge) are integrated on this website. This serves, within the framework of a balancing of interests, our prevailing legitimate interests in optimal marketing by enabling a secure purchase pursuant to Art. 6(1)(1)(f) GDPR. The Trustbadge and the services advertised with it are a product of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne (Trusted Shops), with whom we are jointly responsible in terms of data protection pursuant to Art. 26 GDPR. We inform you below about the essential contract contents pursuant to Art. 26(2) GDPR. In the context of the joint responsibility between us and Trusted Shops GmbH, for data protection questions and to assert your rights, please preferably contact Trusted Shops GmbH, whose contact options you will find here. More information on data protection can be found at the link provided here. You may also always contact us via the contact options described in this privacy policy; your inquiry will, if necessary, be forwarded to the other controller for response.

8.1 Data processing when integrating the Trustbadge / other widgets

The Trustbadge is made available in the context of a joint responsibility by a US CDN provider (Content Delivery Network). An adequate level of data protection is ensured by standard data protection clauses and further contractual measures. More information on Trusted Shops GmbH's data protection is available here. When the Trustbadge is called up, the web server automatically stores a so-called server log file containing your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data), and documents the request. The IP address is anonymised immediately after collection, so that the stored data cannot be attributed to your person. The anonymised data are used in particular for statistical purposes and error analysis.

8.2 Data processing after order completion

After order completion, your e-mail address, hashed via a cryptographic one-way function, is transmitted to Trusted Shops GmbH. The legal basis is Art. 6(1)(1)(f) GDPR. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore required to fulfil our and Trusted Shops' prevailing legitimate interests in providing the buyer protection and transactional review services linked to the specific order pursuant to Art. 6(1)(1)(f) GDPR. If this is the case, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered for the services, you subsequently have the opportunity to do so for the first time. Further processing after registration is likewise governed by the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data are automatically deleted by Trusted Shops GmbH and attribution to a person is no longer possible. Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6(1)(f) GDPR for the purpose of ensuring smooth operation. Processing in third countries (USA and Israel) may take place. An adequate level of data protection is ensured for the USA by standard data protection clauses and further contractual measures, and for Israel by an adequacy decision.

9. Social media

9.1 Social plugins from Facebook (by Meta), Twitter, Instagram (by Meta), Pinterest, WhatsApp

On our website, social buttons from social networks are used. They are only integrated as HTML links in the page, so that no connection is established with the servers of the respective provider when our website is called up. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can, for example, click the Like or Share button.

9.2 Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest, LinkedIn

Insofar as you have given your consent pursuant to Art. 6(1)(1)(a) GDPR to the respective social media operator, when visiting our online presences on the social media mentioned above, your data are collected and stored automatically for market research and advertising purposes, from which pseudonymous user profiles are created. These can be used, for example, to display ads inside and outside the platforms that presumably correspond to your interests. Cookies are generally used for this. Detailed information on the processing and use of the data by the respective social media operator, as well as contact options and your rights and setting options to protect your privacy, can be found in the providers' privacy policies linked below. If you need help, please contact us. Facebook (by Meta) is a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information collected automatically by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transmitted to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision of the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of visiting a Facebook (by Meta) fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. More information (Insights data) is available here. Instagram (by Meta) is a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information collected automatically by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision of the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of visiting an Instagram (by Meta) fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. YouTube is a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google about your use of our online presence on YouTube is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision of the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Pinterest is a service of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The information collected automatically by Pinterest about your use of our online presence on Pinterest is generally transmitted to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there. There is no adequacy decision of the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information collected automatically by LinkedIn about your use of our online presence on LinkedIn is generally transmitted to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there. There is no adequacy decision of the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

10. Contact options and your rights

10.1 Your rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request, within the scope defined therein, information about your personal data processed by us;
pursuant to Art. 16 GDPR, the right to demand without delay the rectification of inaccurate personal data or the completion of your personal data stored with us;
pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored with us, unless further processing is necessary
for the exercise of the right to freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest; or
to establish, exercise or defend legal claims;
pursuant to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
you contest the accuracy of the data;
the processing is unlawful but you object to the erasure of the data;
we no longer need the data, but you need them to establish, exercise or defend legal claims; or
you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to demand transmission to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual place of residence, place of work or our company's registered office.

Right to object

Insofar as we process personal data as explained above to safeguard our prevailing legitimate interests within the framework of a balancing of interests, you may object to this processing with effect for the future. If processing takes place for direct marketing purposes, you may exercise this right at any time as described above. If processing takes place for other purposes, a right to object is only available to you if there are grounds resulting from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling grounds for the processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves to establish, exercise or defend legal claims. This does not apply if the processing takes place for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

10.2 Contact options

For questions about the collection, processing or use of your personal data, for information, rectification, restriction or deletion of data, as well as to withdraw any consent given or to object to a specific data use, please contact our internal data protection officer.